fix: upgrade dompurify from 2.2.2 to 2.2.6 by sy-records · Pull Request #1483 · docsifyjs/docsify
This pull request is automatically built and testable in CodeSandbox.
To see build info of the built libraries, click here or the icon next to each commit SHA.
Latest deployment of this branch, based on commit ed7fa16:
| Sandbox | Source |
|---|---|
| docsify-template | Configuration |
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
it seems there has the security/snyk issue on CI.
@anikethsaha could u plz check and fix it intead of manual upgrade？
Not sure whether I get this correctly but you are asking for a PR from snyk ? @Koooooo-7
Not sure whether I get this correctly but you are asking for a PR from snyk ? @Koooooo-7
yup, the PR of snyk always deletes the dependencies about vue in package-lock.json. f.e see #1470 .
I guess we need move the vue from devDependencies to dependencies .
The reason I closed #1470 was because it was out of date, 4 versions behind
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters