Skip to content

Conversation

@akaustav
Copy link
Contributor

@akaustav akaustav commented Jan 1, 2026

Change Summary

This pull request updates the version of the tmp dependency in the package.json file from version ^0.0.27 to ^0.2.5. Among other things, this update includes the fix for the following security problems - as mentioned in issue #255:

Commands Used

The following commands were used to create the changes in this PR:

npm i
npm r tmp
npm i tmp

Additional Notes

  • One of the previous commits on the master branch updated package.json to version 0.16.6 but didn't update package-lock.json. Running npm i syncs package-lock.json with the new version. This PR includes that update.
  • The caret (^) prefix in semantic versioning only matches patch versions for 0.0.x releases (unlike versions >= 1 which match both minor and patch versions). So ^0.0.27 will not automatically pick up version 0.2.5.
  • The security fix for GHSA-52f5-9888-hmc6 exists in tmp version 0.2.4, but this PR uses the latest 0.2.5 (published August 8, 2025).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant