Changeset 46403 for trunk/package.json

Timestamp:

10/05/2019 01:47:52 PM (5 years ago)

Author:

jorbin

Message:

Build/Test Tools: Fork and Update grunt-replace

The version of grunt replace that is bundled in core is using an outdated version of lodash that is bringing 2 low, 3 high, and 1 critical issue. This package is currently abandoned. There is a community forked version, but that is also harboring some similar security issues.

This switches to a fork by @whyisjake and causes no change to the build.

See #48203.
Fixes #48217.
Props whyisjake, netweb for testing.

File:

• trunk/package.json (modified) (1 diff)

trunk/package.json

@@ -42 +42 @@
         "grunt-patch-wordpress": "~2.0.0",
         "grunt-postcss": "~0.9.0",
-        "grunt-replace": "~1.0.1",
+        "grunt-replace-lts": "~1.1.0",
         "grunt-rtlcss": "~2.0.1",
         "grunt-sass": "~3.0.2",