From ab622d5cd2c2a970e88c01dd22337bc727775761 Mon Sep 17 00:00:00 2001 From: Lars Jung Date: Fri, 11 Dec 2015 23:13:00 +0100 Subject: [PATCH] Update deps. --- README.md | 9 +++++++-- ghu.js | 10 +++++----- package.json | 12 ++++++------ 3 files changed, 18 insertions(+), 13 deletions(-) diff --git a/README.md b/README.md index 02d6c6d1..564ed6d3 100644 --- a/README.md +++ b/README.md @@ -5,6 +5,9 @@ A modern HTTP web server index for Apache httpd, lighttpd, nginx and Cherokee. For bug reports and feature requests please use [issues][github-issues]. +There was a [security flaw][cve] in versions 0.22.0 - 0.24.1 that was fixed in +0.25.0. If you are still using one of these versions you are advised to +upgrade. ## Install @@ -21,8 +24,8 @@ In short you have to take the following two steps: ## Build There are installation ready packages for the latest [releases][release] and -[dev builds][develop]. But to build **h5ai** yourself either *git-clone* or -*download* the repository. From within the root folder run the following +[dev builds][develop]. But to build **h5ai** yourself either `git clone` or +download the repository. From within the root folder run the following commands to find a fresh zipball in folder `build` (tested on linux only, requires [`node 4.0+`][node] to be installed). @@ -74,3 +77,5 @@ too. Exceptions are some [Material Design icons][material-design-icons] (CC BY 4 [license-img]: https://img.shields.io/badge/license-MIT-a0a060.svg?style=flat-square [web-img]: https://img.shields.io/badge/web-larsjung.de/h5ai-a0a060.svg?style=flat-square [github-img]: https://img.shields.io/badge/github-lrsjng/h5ai-a0a060.svg?style=flat-square + +[cve]: https://larsjung.de/h5ai/cve-2015-3203.txt diff --git a/ghu.js b/ghu.js index 9d3a7268..742f9ee4 100644 --- a/ghu.js +++ b/ghu.js @@ -1,10 +1,10 @@ -import {resolve, join} from 'path'; -import dateformat from 'dateformat'; -import ghu from 'ghu'; -import { +const {resolve, join} = require('path'); +const dateformat = require('dateformat'); +const { + default: ghu, autoprefixer, cssmin, ife, includeit, jade, jszip, less, mapfn, newerThan, read, remove, run, uglify, watch, wrap, write -} from 'ghu'; +} = require('ghu'); const ROOT = resolve(__dirname); const SRC = join(ROOT, 'src'); diff --git a/package.json b/package.json index e0849d51..189755d0 100644 --- a/package.json +++ b/package.json @@ -16,12 +16,12 @@ "build": "npm run -s ghu release" }, "devDependencies": { - "babel-core": "6.1.2", - "babel-eslint": "4.1.3", - "babel-preset-es2015": "6.1.2", - "dateformat": "1.0.11", - "eslint": "1.7.3", - "ghu": "0.1.1" + "babel-core": "6.3.17", + "babel-eslint": "5.0.0-beta6", + "babel-preset-es2015": "6.3.13", + "dateformat": "1.0.12", + "eslint": "1.10.3", + "ghu": "0.2.2" }, "engines": { "node": ">=5.0.0"