Skip to content

Update dependency grunt to ^1.6.2 - #19

Open
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/grunt-1.x
Open

Update dependency grunt to ^1.6.2#19
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/grunt-1.x

Conversation

@dev-mend-for-github-com

@dev-mend-for-github-com dev-mend-for-github-com Bot commented May 27, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change
grunt (source) dependencies minor ^1.2.1^1.6.2

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability
High High 7.5 CVE-2026-27904
Medium Medium 5.3 CVE-2024-4067

Release Notes

gruntjs/grunt (grunt)

v1.6.2

Compare Source

  • date: 2026-04-14
  • changes:
    • Update minimatch to 3.1.5.
      (PR: #​1796)
    • Update nopt to 5.0.0.
      (PR: #​1778)

v1.6.1

Compare Source

  • date: 2023-01-31
  • changes:
    • Downgrades to glob 7 for Windows compatability
    • Removes mkdirp and rimraf in favour of node.js APIs.

v1.6.0

Compare Source

  • date: 2023-01-28
  • changes:
    • Requires node.js 16+.
    • template.date now uses dateformat ~4.6.2.
    • other dependency updates such as glob, rimraf, etc.

v1.5.3

Compare Source

  • date: 2022-04-23
  • changes:
    • Patch up race condition in symlink copying.

v1.5.2

Compare Source

  • date: 2022-04-12
  • changes:
    • Unlink symlinks when copy destination is a symlink.

v1.5.1

Compare Source

  • date: 2022-04-11
  • changes:
    • Fixed symlink destination handling.

v1.5.0

Compare Source

  • date: 2022-04-10
  • changes:
    • Updated dependencies.
    • Add symlink handling for copying files.

v1.4.1

Compare Source

  • date: 2021-05-24
  • changes:
    • Fix --preload option to be a known option
    • Switch to GitHub Actions

v1.4.0

Compare Source

  • date: 2021-04-21
  • changes:
    • Security fixes in production and dev dependencies
    • Liftup/Liftoff upgrade breaking change. Update your scripts to use --preload instead of --require. Ref: js-cli/js-liftoff@e7a969d.

v1.3.0

Compare Source

  • date: 2020-08-18
  • changes:
    • Switch to use safeLoad for loading YML files via file.readYAML.
    • Upgrade legacy-log to ~3.0.0.
    • Upgrade legacy-util to ~2.0.0.

  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github-com dev-mend-for-github-com Bot added the security fix Security fix generated by Mend label May 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants