From 5abb8a850f4fdd4c0a39d14114172f1bf6f91793 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" Date: Fri, 22 Feb 2019 04:13:18 +0000 Subject: [PATCH] [Security] Bump slug from 0.9.1 to 1.0.0 Bumps [slug](https://github.com/Trott/node-slug) from 0.9.1 to 1.0.0. **This update includes security fixes.** - [Release notes](https://github.com/Trott/node-slug/releases) - [Commits](https://github.com/Trott/node-slug/compare/0.9.1...v1.0.0) Signed-off-by: dependabot[bot] --- package.json | 2 +- yarn.lock | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 78273cd..81a35db 100644 --- a/package.json +++ b/package.json @@ -93,7 +93,7 @@ "sanitize-html": "^1.18.4", "serve-favicon": "~2.5.0", "shortid": "~2.2.12", - "slug": "~0.9.1", + "slug": "~1.0.0", "trunc-html": "^1.1.2", "uuid": "^3.3.2", "valid-url": "^1.0.9", diff --git a/yarn.lock b/yarn.lock index 9bb6e71..7490219 100644 --- a/yarn.lock +++ b/yarn.lock @@ -6482,9 +6482,9 @@ slide@^1.1.5: version "1.1.6" resolved "https://registry.yarnpkg.com/slide/-/slide-1.1.6.tgz#56eb027d65b4d2dce6cb2e2d32c4d4afc9e1d707" -slug@~0.9.1: - version "0.9.1" - resolved "https://registry.yarnpkg.com/slug/-/slug-0.9.1.tgz#af08f608a7c11516b61778aa800dce84c518cfda" +slug@~1.0.0: + version "1.0.0" + resolved "https://registry.yarnpkg.com/slug/-/slug-1.0.0.tgz#503be07b150226a42abf7a9c52d345e6b163fea8" dependencies: unicode ">= 0.3.1"