Request for Release that bumps http-proxy to >=1.18.1

[andrew-pyle]

I'm getting dependabot PRs on my application repositories because of this package's dependency on [email protected] (as of [email protected]).

I see that the master branch already includes the bump from [email protected] to [email protected], as suggested in Denial of Service Advisory for http-proxy.

Can we get a quick patch release which includes the http-poxy bump to 1.18.1?

[pptang]

I'm facing the same issue as above, anything I can help to move this forward?

[NickGeek]

It's already been fixed here, the maintainer just will need to npm publish.

[NickGeek]

@pptang In the mean time, you can change the line in your package.json to "elm-live": "https://github.com/wking-io/elm-live#07f422fbf05f01a9b30b1a078a44bd63cb56ce1c" to refer to the git repo instead of the repository.

[wking-io]

Sorry! Been taking a break and need to bundle up a number of fixes. I will get this pulled in and publish a release.

[jawnyawns]

FYI - as of writing, elm-live also needs to upgrade its ws dependency: GHSA-3h5v-q93c-6h6q