gofer - npm Package Compare versions

Comparing version 3.5.2 to 3.5.3

CHANGELOG.md

@@ -0,1 +1,10 @@
+### 3.5.3
+
+* Fix header option leak - **[@jkrems](https://github.com/jkrems)** [#78](https://github.com/groupon/gofer/pull/78)
+  - [`4168096`](https://github.com/groupon/gofer/commit/4168096af97360da470393854e884233f90f5226) **test:** Remove fixed certificates
+  - [`35a22df`](https://github.com/groupon/gofer/commit/35a22df316ee0f149d3d4aa3be0535ab3e841644) **test:** Use smaller reddit endpoint
+  - [`c6a2397`](https://github.com/groupon/gofer/commit/c6a239763d3251591223d90b84e2d7e27d8f16c2) **fix:** Prevent mutation of defaults
+  - [`485414a`](https://github.com/groupon/gofer/commit/485414a75ad0883589f0ed7de51908d08f0b9b28) **test:** Verify that headers do not leak into defaults
+
+
 ### 3.5.2
@@ -2,0 +11,0 @@

lib/gofer.js

@@ -99,3 +99,3 @@ /*
 
-  return mergeWith(objValue, srcValue, preventComplexMerge);
+  return mergeWith({}, objValue, srcValue, preventComplexMerge);
 }
@@ -102,0 +102,0 @@

package.json

 {
   "name": "gofer",
-  "version": "3.5.2",
+  "version": "3.5.3",
   "description": "A general purpose service client library",
@@ -48,2 +48,3 @@ "license": "BSD-3-Clause",
     "promise": "^7.1.1",
+    "self-signed": "^1.3.1",
     "whatwg-fetch": "^0.11.0"
@@ -50,0 +51,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

61585

increased by1.19%

Worsened metrics

Dev dependency count

10

increased by11.11%

No dependency changes