Djam/arm-trusted-firmware
1
0
Fork 0
mirror of https://github.com/ARM-software/arm-trusted-firmware.git synced 2025-04-13 16:14:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

build(hooks): update Commitizen to ^4.2.4

Browse source 
An indirect dependency of Commitizen (`merge`) is currently failing the
NPM.js auditor due to vulnerability CVE-2020-28499. This commit moves
the minimum version of Commitizen to 4.2.4, which has resolved this
vulnerability.

Change-Id: Ia9455bdbe02f7406c1a106f173c4095943a201ed
Signed-off-by: Chris Kay <chris.kay@arm.com>
This commit is contained in:
Chris Kay 2021-05-12 15:22:42 +01:00
parent 57dde21207
commit 7fff6c70ed
2 changed files with 764 additions and 3563 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4325
package-lock.json generated
View file

File diff suppressed because it is too large Load diff

2
package.json
View file

@ -6,7 +6,7 @@
"devDependencies": {
"@commitlint/cli": "^11.0.0",
"@commitlint/config-conventional": "^11.0.0",
"commitizen": "^4.2.2",
"commitizen": "^4.2.4",
"cz-conventional-changelog": "^3.3.0",
"husky": "^5.0.4"
}