request-promise-native
Advanced tools
Comparing version 1.0.5 to 1.0.6
{ | ||
"name": "request-promise-native", | ||
"version": "1.0.5", | ||
"version": "1.0.6", | ||
"description": "The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.", | ||
@@ -36,5 +36,5 @@ "keywords": [ | ||
"dependencies": { | ||
"request-promise-core": "1.1.1", | ||
"stealthy-require": "^1.1.0", | ||
"tough-cookie": ">=2.3.3" | ||
"request-promise-core": "1.1.2", | ||
"stealthy-require": "^1.1.1", | ||
"tough-cookie": "~2.3.3" | ||
}, | ||
@@ -41,0 +41,0 @@ "peerDependencies": { |
@@ -52,2 +52,6 @@ <a href="http://promisesaplus.com/"> | ||
- v1.0.6 (2019-02-14) | ||
- Using stricter `tough-cookie@~2.3.3` to avoid installing `tough-cookie@3` which introduces breaking changes | ||
*(Thanks to @jasonmit for pull request [#33](https://github.com/request/request-promise-native/pull/33/))* | ||
- Security fix: bumped `lodash` to `^4.17.11`, see [vulnerabilty reports](https://snyk.io/vuln/search?q=lodash&type=npm) | ||
- v1.0.5 (2017-09-22) | ||
@@ -54,0 +58,0 @@ - Upgraded `tough-cookie` to a version without regex DoS vulnerability |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
7455
75
+ Addedpunycode@1.4.1(transitive)
+ Addedrequest-promise-core@1.1.2(transitive)
+ Addedtough-cookie@2.3.4(transitive)
- Removedrequest-promise-core@1.1.1(transitive)
- Removedtldts@6.1.58(transitive)
- Removedtldts-core@6.1.58(transitive)
- Removedtough-cookie@5.0.0(transitive)
Updatedrequest-promise-core@1.1.2
Updatedstealthy-require@^1.1.1
Updatedtough-cookie@~2.3.3