@selvajs/cli 4.20.0-beta.27 → 4.20.0-beta.29

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +2 -2
  2. package/src/deployment-package.js +3 -1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@selvajs/cli",
3
- "version": "4.20.0-beta.27",
3
+ "version": "4.20.0-beta.29",
4
4
  "description": "Scaffold and operate a Selva white-label deployment. `npx @selvajs/cli <dir>` to bootstrap, `selva <cmd>` to manage.",
5
5
  "license": "MIT",
6
6
  "author": "VektorNode",
@@ -41,7 +41,7 @@
41
41
  "picocolors": "^1.1.1"
42
42
  },
43
43
  "devDependencies": {
44
- "pm2": "7.0.3"
44
+ "pm2": "7.1.2"
45
45
  },
46
46
  "scripts": {
47
47
  "start": "node ./bin/cli.js",
package/src/deployment-package.js CHANGED
@@ -129,7 +129,9 @@ export function isPrereleasePin(pin) {
129
129
  *
130
130
  * js-yaml: pm2 <= 7.0.3 pins 4.3.0, which carries the quadratic-complexity
131
131
  * DoS advisories (GHSA-5p4m-2wfm-xmqj and friends); the fix landed in 4.3.1.
132
- * Drop when pm2's own js-yaml dependency reaches >= 4.3.1.
132
+ * pm2 7.1.2 pins 4.3.2, so this is now redundant. Dropping it rewrites every
133
+ * deployment's package.json and `doctor` reports the change as drift, so it
134
+ * goes with the next release that migrates the layout anyway.
133
135
  */
134
136
  export const OVERRIDES = {
135
137
  'js-yaml': '^4.3.1'