iplweb / bpp / 24735255274
65%

DEFAULT BRANCH: dev
Ran
Jobs 0
Files 0
Run time –
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
24735255274

push

github

mpasternak 
deps(npm): wymien select2-foundation_theme na modernized fork + bump minimatch

Stary fork (egemensarica/select2-foundation#v6) ciagnal ancient
grunt-contrib-watch@0.6.1 jako RUNTIME dependency (bug packagera),
co sciagalo CVE-vulnerable lodash 1.0.2 i 2.4.2 (lodash Prototype
Pollution, GHSA-jf85-cpcp-j695 — Dependabot CRITICAL #6).

Nowy fork (mpasternak/select2-foundation#modernize-foundation-6.9):
- grunt + cale jego drzewo usuniete (sass bezposrednio, no toolchain bloat)
- foundation-sites i select2 jako peerDependencies (nie runtime)
- package name zmieniony: select2-foundation_theme -> select2-foundation-theme
  (stad rename klucza w package.json, YARN_INSTALLED_APPS, template path)
- ships prebuilt dist/*.css

Efekt na drzewie NPM:
  lodash:    [4.18.1, 2.4.2, 1.0.2] -> [4.18.1]           1 CRITICAL +3 HIGH
  qs:        [6.15.1, 6.13.1, ...]  -> [6.15.1]           4 HIGH
  cross-spawn: [6.0.5]              -> gone               1 HIGH
  debug:     mix ze starym 2.6.9    -> all safe           1 HIGH
  minimatch: [3.1.5, 3.0.8]         -> [3.1.5]            3 HIGH

minimatch@3.0.8 byl transitive z naszego top-level grunt-contrib-watch
-> gaze -> globule (pinned ~3.0.2). Dodane do resolutions w package.json,
forsuje ^3.1.2 — 3.0.x do 3.1.x backward-compatible dla uzywanego API.

Uwaga: src/bpp/static/500.html jest gitignorowany (regenerowany
przez `python src/manage.py generate_500_page`). Po tym commicie,
przy nastepnej regeneracji uzyje juz nowej sciezki static.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Source Files on build 24735255274
Detailed source file information is not available for this build.