Commit 8080504

and

committed

Feb 25, 2023

Bump moment dependency to 2.29.4 (#1004)

Moment Timezone still works with core Moment 2.9.0 and above. But security auditing tools are continually complaining about old versions being brought in via package managers. Bumping the dependency to the latest version should at least silence the warnings, even if it's not semantically correct. Co-authored-by: Igor Omelchenko <a@megapixel23.com>

·

1 parent 61b14d6 commit 8080504Copy full SHA for 8080504

2 files changed

+8

-8

lines changed

package-lock.json
package.json

2 files changed

+8

-8

lines changed

`‎package-lock.json`

+7-7

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

`‎package.json`

+1-1

-Original file line number
+Diff line change
 	},
 	"license": "MIT",
 	"dependencies": {
 -		"moment": ">= 2.9.0"
 +		"moment": "^2.29.4"
 	},
 	"devDependencies": {
 		"grunt": "^1.5.3",

Comments

(0)

Please sign in to comment.