joscha
An in-range update of bower is breaking the build 🚨
Version 1.8.1 of bower just got published.
| Branch | Build failing 🚨 |
|---|---|
| Dependency | bower |
| Current Version | 1.8.0 |
| Type | devDependency |
This version is covered by your current version range and after updating it in your project the build failed.
As bower is “only” a devDependency of this project it might not break production or downstream projects, but “only” your build or test tools – preventing new deploys or publishes.
I recommend you give this issue a high priority. I’m sure you can resolve this :muscle:
Status Details
- ❌ continuous-integration/travis-ci/push The Travis CI build could not complete due to an error Details
Not sure how things should work exactly?
There is a collection of frequently asked questions and of course you may always ask my humans.
Your Greenkeeper Bot :palm_tree:
![greenkeeper[bot] avatar](https://avatars.githubusercontent.com/in/505?v=4 "Published by a pub.dev verified publisher"){kind=small}
After pinning to 1.8.0 your tests are passing again. Downgrade this dependency 📌.
Version 1.8.2 just got published.
Your tests are passing again with this version. Explicitly upgrade to this version 🚀
Version 1.8.3 just got published.
Your tests are passing again with this version. Explicitly upgrade to this version 🚀
Version 1.8.4 just got published.
Your tests are passing again with this version. Explicitly upgrade to this version 🚀
- The
devDependencybower was updated from1.8.4to1.8.6.
Your tests are still failing with this version. Compare changes
- The
devDependencybower was updated from1.8.6to1.8.7.
Your tests are still failing with this version. Compare changes
Release Notes for v1.8.7
Fixes side effect of fix from v1.8.6 that caused improper permissions for extracted folders
- The
devDependencybower was updated from1.8.7to1.8.8.
Your tests are still failing with this version. Compare changes
Release Notes for v1.8.8
Fix vulnerability related to extracting .tar.gz files that has similar effect to Zip Slip
Vulnerability is similar to Zip Slip allows for overriding and creating arbitrary files on filesystem
Needlessly to say, please upgrade this this version of Bower