Skip to content

Ugrade rushstack to v5#716

Open
claabs wants to merge 1 commit intosequelize:mainfrom
claabs:rushstack-v5
Open

Ugrade rushstack to v5#716
claabs wants to merge 1 commit intosequelize:mainfrom
claabs:rushstack-v5

Conversation

@claabs
Copy link

@claabs claabs commented Mar 5, 2026

Upgrade @rushstack/ts-command-line to v5 to resolve security vulnerability (CVE-2025-69873) in transitive dependency of v4. Resolves #715.

  • Rename deprecated functions removed in @rushstack/ts-command-line v5 (changelog).
  • Replace onDefineParameters with definition in constructor as suggested in the commit it was deprecated.

@WikiRik WikiRik requested a review from mmkal March 5, 2026 19:21
@pkg-pr-new
Copy link

pkg-pr-new bot commented Mar 5, 2026

Open in StackBlitz

pnpm add https://pkg.pr.new/sequelize/umzug@716

commit: 1a959cd

@claabs
Copy link
Author

claabs commented Mar 5, 2026

Looks like the Node 12 test failed because @rushstack/node-core-library started adding the node: protocol to imports in v5.16.0 (PR).

Not sure what the official minimum supported Node version is for this project. Does that mean this is a breaking change?

@aletcetera
Copy link

Node12 hasn't been supported for 3 years now, maybe it is legitimate to set/bump the minimal Node version accordingly ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Security Vulnerability: ajv (JSON Schema Validator)

2 participants