Re: [VOTE] cordova-plugin-file 8.0.1 Release

2023-11-05 Thread Bryan Ellis
The vote has now closed. The results are: Positive Binding Votes: 3 Bryan Ellis Niklas Merz Norman Breau Negative Binding Votes: 0 Other Votes: 0 The vote has passed. > On Oct 27, 2023, at 6:06, Norman Breau wrote: > > I vote +1 > > - Verified Archive > - Verified Tags > - Ran NPM Audit >

Re: [VOTE] cordova-plugin-file 8.0.1 Release

2023-10-27 Thread Norman Breau
I vote +1 - Verified Archive - Verified Tags - Ran NPM Audit * Severity: moderate semver vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw - Ran NPM test - Ran Android paramedic tests The found moderate vulnerability is a devDependency and I

Re: [VOTE] cordova-plugin-file 8.0.1 Release

2023-10-27 Thread Niklas Merz
I vote +1 * signature & hash ok * tag ok * test ok * release notes look good * license & headers ok One small note: Minor npm audit issue with "semver" should not affect users. We could patch that for the next release. On October 27, 2023, Erisu wrote: > Please review and vote on this cordova-