<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><meta http-equiv="content-type" content="text/html; charset=utf-8" />
<title>[43956] branches/5.0/src/wp-content/themes/twentynineteen: Updating Twenty Nineteen, our new default theme for 2019, set for 5.0.</title>
</head>
<body>

<style type="text/css"><!--
#msg dl.meta { border: 1px #006 solid; background: #369; padding: 6px; color: #fff; }
#msg dl.meta dt { float: left; width: 6em; font-weight: bold; }
#msg dt:after { content:':';}
#msg dl, #msg dt, #msg ul, #msg li, #header, #footer, #logmsg { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt;  }
#msg dl a { font-weight: bold}
#msg dl a:link    { color:#fc3; }
#msg dl a:active  { color:#ff0; }
#msg dl a:visited { color:#cc6; }
h3 { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt; font-weight: bold; }
#msg pre { white-space: pre-line; overflow: auto; background: #ffc; border: 1px #fa0 solid; padding: 6px; }
#logmsg { background: #ffc; border: 1px #fa0 solid; padding: 1em 1em 0 1em; }
#logmsg p, #logmsg pre, #logmsg blockquote { margin: 0 0 1em 0; }
#logmsg p, #logmsg li, #logmsg dt, #logmsg dd { line-height: 14pt; }
#logmsg h1, #logmsg h2, #logmsg h3, #logmsg h4, #logmsg h5, #logmsg h6 { margin: .5em 0; }
#logmsg h1:first-child, #logmsg h2:first-child, #logmsg h3:first-child, #logmsg h4:first-child, #logmsg h5:first-child, #logmsg h6:first-child { margin-top: 0; }
#logmsg ul, #logmsg ol { padding: 0; list-style-position: inside; margin: 0 0 0 1em; }
#logmsg ul { text-indent: -1em; padding-left: 1em; }#logmsg ol { text-indent: -1.5em; padding-left: 1.5em; }
#logmsg > ul, #logmsg > ol { margin: 0 0 1em 0; }
#logmsg pre { background: #eee; padding: 1em; }
#logmsg blockquote { border: 1px solid #fa0; border-left-width: 10px; padding: 1em 1em 0 1em; background: white;}
#logmsg dl { margin: 0; }
#logmsg dt { font-weight: bold; }
#logmsg dd { margin: 0; padding: 0 0 0.5em 0; }
#logmsg dd:before { content:'\00bb';}
#logmsg table { border-spacing: 0px; border-collapse: collapse; border-top: 4px solid #fa0; border-bottom: 1px solid #fa0; background: #fff; }
#logmsg table th { text-align: left; font-weight: normal; padding: 0.2em 0.5em; border-top: 1px dotted #fa0; }
#logmsg table td { text-align: right; border-top: 1px dotted #fa0; padding: 0.2em 0.5em; }
#logmsg table thead th { text-align: center; border-bottom: 1px solid #fa0; }
#logmsg table th.Corner { text-align: left; }
#logmsg hr { border: none 0; border-top: 2px dashed #fa0; height: 1px; }
#header, #footer { color: #fff; background: #636; border: 1px #300 solid; padding: 6px; }
#patch { width: 100%; }
#patch h4 {font-family: verdana,arial,helvetica,sans-serif;font-size:10pt;padding:8px;background:#369;color:#fff;margin:0;}
#patch .propset h4, #patch .binary h4 {margin:0;}
#patch pre {padding:0;line-height:1.2em;margin:0;}
#patch .diff {width:100%;background:#eee;padding: 0 0 10px 0;overflow:auto;}
#patch .propset .diff, #patch .binary .diff  {padding:10px 0;}
#patch span {display:block;padding:0 10px;}
#patch .modfile, #patch .addfile, #patch .delfile, #patch .propset, #patch .binary, #patch .copfile {border:1px solid #ccc;margin:10px 0;}
#patch ins {background:#dfd;text-decoration:none;display:block;padding:0 10px;}
#patch del {background:#fdd;text-decoration:none;display:block;padding:0 10px;}
#patch .lines, .info {color:#888;background:#fff;}
--></style>
<div id="msg">
<dl class="meta" style="font-size: 105%">
<dt style="float: left; width: 6em; font-weight: bold">Revision</dt> <dd><a style="font-weight: bold" href="https://core.trac.wordpress.org/changeset/43956">43956</a><script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","description":"Review this Commit","action":{"@type":"ViewAction","url":"https://core.trac.wordpress.org/changeset/43956","name":"Review Commit"}}</script></dd>
<dt style="float: left; width: 6em; font-weight: bold">Author</dt> <dd>allancole</dd>
<dt style="float: left; width: 6em; font-weight: bold">Date</dt> <dd>2018-11-30 22:35:02 +0000 (Fri, 30 Nov 2018)</dd>
</dl>

<pre style='padding-left: 1em; margin: 2em 0; border-left: 2px solid #ccc; line-height: 1.25; font-size: 105%; font-family: sans-serif'>Updating Twenty Nineteen, our new default theme for 2019, set for 5.0.

This changes fixes a security issue found in a dependency script used in our build tool. 

- The malicious dependency is now removed and no longer called when running `npm install` or `npm run build`. 
- More info here: https://github.com/WordPress/twentynineteen/pull/675

Props allancole, kjellr, netweb, twoabove.</pre>

<h3>Modified Paths</h3>
<ul>
<li><a href="#branches50srcwpcontentthemestwentynineteenpackagelockjson">branches/5.0/src/wp-content/themes/twentynineteen/package-lock.json</a></li>
<li><a href="#branches50srcwpcontentthemestwentynineteenpackagejson">branches/5.0/src/wp-content/themes/twentynineteen/package.json</a></li>
</ul>

</div>
<div id="patch">
<h3>Diff</h3>
<a id="branches50srcwpcontentthemestwentynineteenpackagelockjson"></a>
<div class="modfile"><h4 style="background-color: #eee; color: inherit; margin: 1em 0; padding: 1.3em; font-size: 115%">Modified: branches/5.0/src/wp-content/themes/twentynineteen/package-lock.json</h4>
<pre class="diff"><span>
<span class="info" style="display: block; padding: 0 10px; color: #888">--- branches/5.0/src/wp-content/themes/twentynineteen/package-lock.json       2018-11-30 20:57:02 UTC (rev 43955)
+++ branches/5.0/src/wp-content/themes/twentynineteen/package-lock.json 2018-11-30 22:35:02 UTC (rev 43956)
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -928,12 +928,6 @@
</span><span class="cx" style="display: block; padding: 0 10px">         }
</span><span class="cx" style="display: block; padding: 0 10px">       }
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "duplexer": {
-      "version": "0.1.1",
-      "resolved": "http://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz",
-      "integrity": "sha1-rOb/gIwc5mtX0ev5eXessCM0z8E=",
-      "dev": true
-    },
</del><span class="cx" style="display: block; padding: 0 10px">     "ecc-jsbn": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "0.1.2",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz",
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -996,22 +990,6 @@
</span><span class="cx" style="display: block; padding: 0 10px">       "integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==",
</span><span class="cx" style="display: block; padding: 0 10px">       "dev": true
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "event-stream": {
-      "version": "3.3.6",
-      "resolved": "https://registry.npmjs.org/event-stream/-/event-stream-3.3.6.tgz",
-      "integrity": "sha512-dGXNg4F/FgVzlApjzItL+7naHutA3fDqbV/zAZqDDlXTjiMnQmZKu+prImWKszeBM5UQeGvAl3u1wBiKeDh61g==",
-      "dev": true,
-      "requires": {
-        "duplexer": "^0.1.1",
-        "flatmap-stream": "^0.1.0",
-        "from": "^0.1.7",
-        "map-stream": "0.0.7",
-        "pause-stream": "^0.0.11",
-        "split": "^1.0.1",
-        "stream-combiner": "^0.2.2",
-        "through": "^2.3.8"
-      }
-    },
</del><span class="cx" style="display: block; padding: 0 10px">     "execa": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "0.10.0",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/execa/-/execa-0.10.0.tgz",
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -1244,12 +1222,6 @@
</span><span class="cx" style="display: block; padding: 0 10px">         "commander": "~2.1.0"
</span><span class="cx" style="display: block; padding: 0 10px">       }
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "flatmap-stream": {
-      "version": "0.1.1",
-      "resolved": "https://registry.npmjs.org/flatmap-stream/-/flatmap-stream-0.1.1.tgz",
-      "integrity": "sha512-lAq4tLbm3sidmdCN8G3ExaxH7cUCtP5mgDvrYowsx84dcYkJJ4I28N7gkxA6+YlSXzaGLJYIDEi9WGfXzMiXdw==",
-      "dev": true
-    },
</del><span class="cx" style="display: block; padding: 0 10px">     "for-in": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "1.0.2",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz",
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -1293,12 +1265,6 @@
</span><span class="cx" style="display: block; padding: 0 10px">         "map-cache": "^0.2.2"
</span><span class="cx" style="display: block; padding: 0 10px">       }
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "from": {
-      "version": "0.1.7",
-      "resolved": "https://registry.npmjs.org/from/-/from-0.1.7.tgz",
-      "integrity": "sha1-g8YK/Fi5xWmXAH7Rp2izqzA6RP4=",
-      "dev": true
-    },
</del><span class="cx" style="display: block; padding: 0 10px">     "fs-extra": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "7.0.0",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-7.0.0.tgz",
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -2605,12 +2571,6 @@
</span><span class="cx" style="display: block; padding: 0 10px">       "integrity": "sha1-2TPOuSBdgr3PSIb2dCvcK03qFG0=",
</span><span class="cx" style="display: block; padding: 0 10px">       "dev": true
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "map-stream": {
-      "version": "0.0.7",
-      "resolved": "https://registry.npmjs.org/map-stream/-/map-stream-0.0.7.tgz",
-      "integrity": "sha1-ih8HiW2CsQkmvTdEokIACfiJdKg=",
-      "dev": true
-    },
</del><span class="cx" style="display: block; padding: 0 10px">     "map-visit": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "1.0.0",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz",
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -2921,17 +2881,17 @@
</span><span class="cx" style="display: block; padding: 0 10px">       "dev": true
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><span class="cx" style="display: block; padding: 0 10px">     "npm-run-all": {
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-      "version": "4.1.3",
-      "resolved": "https://registry.npmjs.org/npm-run-all/-/npm-run-all-4.1.3.tgz",
-      "integrity": "sha512-aOG0N3Eo/WW+q6sUIdzcV2COS8VnTZCmdji0VQIAZF3b+a3YWb0AD0vFIyjKec18A7beLGbaQ5jFTNI2bPt9Cg==",
</del><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+      "version": "4.1.5",
+      "resolved": "https://registry.npmjs.org/npm-run-all/-/npm-run-all-4.1.5.tgz",
+      "integrity": "sha512-Oo82gJDAVcaMdi3nuoKFavkIHBRVqQ1qvMb+9LHk/cF4P6B2m8aP04hGf7oL6wZ9BuGwX1onlLhpuoofSyoQDQ==",
</ins><span class="cx" style="display: block; padding: 0 10px">       "dev": true,
</span><span class="cx" style="display: block; padding: 0 10px">       "requires": {
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-        "ansi-styles": "^3.2.0",
-        "chalk": "^2.1.0",
-        "cross-spawn": "^6.0.4",
</del><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+        "ansi-styles": "^3.2.1",
+        "chalk": "^2.4.1",
+        "cross-spawn": "^6.0.5",
</ins><span class="cx" style="display: block; padding: 0 10px">         "memorystream": "^0.3.1",
</span><span class="cx" style="display: block; padding: 0 10px">         "minimatch": "^3.0.4",
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-        "ps-tree": "^1.1.0",
</del><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+        "pidtree": "^0.3.0",
</ins><span class="cx" style="display: block; padding: 0 10px">         "read-pkg": "^3.0.0",
</span><span class="cx" style="display: block; padding: 0 10px">         "shell-quote": "^1.6.1",
</span><span class="cx" style="display: block; padding: 0 10px">         "string.prototype.padend": "^3.0.0"
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -3241,15 +3201,6 @@
</span><span class="cx" style="display: block; padding: 0 10px">         "pinkie-promise": "^2.0.0"
</span><span class="cx" style="display: block; padding: 0 10px">       }
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "pause-stream": {
-      "version": "0.0.11",
-      "resolved": "http://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz",
-      "integrity": "sha1-/lo0sMvOErWqaitAPuLnO2AvFEU=",
-      "dev": true,
-      "requires": {
-        "through": "~2.3"
-      }
-    },
</del><span class="cx" style="display: block; padding: 0 10px">     "performance-now": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "2.1.0",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz",
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -3256,6 +3207,12 @@
</span><span class="cx" style="display: block; padding: 0 10px">       "integrity": "sha1-Ywn04OX6kT7BxpMHrjZLSzd8nns=",
</span><span class="cx" style="display: block; padding: 0 10px">       "dev": true
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+    "pidtree": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/pidtree/-/pidtree-0.3.0.tgz",
+      "integrity": "sha512-9CT4NFlDcosssyg8KVFltgokyKZIFjoBxw8CTGy+5F38Y1eQWrt8tRayiUOXE+zVKQnYu5BR8JjCtvK3BcnBhg==",
+      "dev": true
+    },
</ins><span class="cx" style="display: block; padding: 0 10px">     "pify": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "2.3.0",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz",
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -3498,15 +3455,6 @@
</span><span class="cx" style="display: block; padding: 0 10px">       "integrity": "sha512-MtEC1TqN0EU5nephaJ4rAtThHtC86dNN9qCuEhtshvpVBkAW5ZO7BASN9REnF9eoXGcRub+pFuKEpOHE+HbEMw==",
</span><span class="cx" style="display: block; padding: 0 10px">       "dev": true
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "ps-tree": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/ps-tree/-/ps-tree-1.1.0.tgz",
-      "integrity": "sha1-tCGyQUDWID8e08dplrRCewjowBQ=",
-      "dev": true,
-      "requires": {
-        "event-stream": "~3.3.0"
-      }
-    },
</del><span class="cx" style="display: block; padding: 0 10px">     "pseudomap": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "1.0.2",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz",
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -4025,15 +3973,6 @@
</span><span class="cx" style="display: block; padding: 0 10px">       "integrity": "sha512-TfOfPcYGBB5sDuPn3deByxPhmfegAhpDYKSOXZQN81Oyrrif8ZCodOLzK3AesELnCx03kikhyDwh0pfvvQvF8w==",
</span><span class="cx" style="display: block; padding: 0 10px">       "dev": true
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "split": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/split/-/split-1.0.1.tgz",
-      "integrity": "sha512-mTyOoPbrivtXnwnIxZRFYRrPNtEFKlpB2fvjSnCQUiAA6qAZzqwna5envK4uk6OIeP17CsdF3rSBGYVBsU0Tkg==",
-      "dev": true,
-      "requires": {
-        "through": "2"
-      }
-    },
</del><span class="cx" style="display: block; padding: 0 10px">     "split-string": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "3.1.0",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz",
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -4096,16 +4035,6 @@
</span><span class="cx" style="display: block; padding: 0 10px">         "readable-stream": "^2.0.1"
</span><span class="cx" style="display: block; padding: 0 10px">       }
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "stream-combiner": {
-      "version": "0.2.2",
-      "resolved": "http://registry.npmjs.org/stream-combiner/-/stream-combiner-0.2.2.tgz",
-      "integrity": "sha1-rsjLrBd7Vrb0+kec7YwZEs7lKFg=",
-      "dev": true,
-      "requires": {
-        "duplexer": "~0.1.1",
-        "through": "~2.3.4"
-      }
-    },
</del><span class="cx" style="display: block; padding: 0 10px">     "string-width": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "1.0.2",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz",
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -4196,12 +4125,6 @@
</span><span class="cx" style="display: block; padding: 0 10px">         "inherits": "2"
</span><span class="cx" style="display: block; padding: 0 10px">       }
</span><span class="cx" style="display: block; padding: 0 10px">     },
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "through": {
-      "version": "2.3.8",
-      "resolved": "http://registry.npmjs.org/through/-/through-2.3.8.tgz",
-      "integrity": "sha1-DdTJ/6q8NXlgsbckEV1+Doai4fU=",
-      "dev": true
-    },
</del><span class="cx" style="display: block; padding: 0 10px">     "to-object-path": {
</span><span class="cx" style="display: block; padding: 0 10px">       "version": "0.3.0",
</span><span class="cx" style="display: block; padding: 0 10px">       "resolved": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz",
</span></span></pre></div>
<a id="branches50srcwpcontentthemestwentynineteenpackagejson"></a>
<div class="modfile"><h4 style="background-color: #eee; color: inherit; margin: 1em 0; padding: 1.3em; font-size: 115%">Modified: branches/5.0/src/wp-content/themes/twentynineteen/package.json</h4>
<pre class="diff"><span>
<span class="info" style="display: block; padding: 0 10px; color: #888">--- branches/5.0/src/wp-content/themes/twentynineteen/package.json    2018-11-30 20:57:02 UTC (rev 43955)
+++ branches/5.0/src/wp-content/themes/twentynineteen/package.json      2018-11-30 22:35:02 UTC (rev 43956)
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -11,7 +11,7 @@
</span><span class="cx" style="display: block; padding: 0 10px">     "autoprefixer": "^9.1.5",
</span><span class="cx" style="display: block; padding: 0 10px">     "chokidar-cli": "^1.2.1",
</span><span class="cx" style="display: block; padding: 0 10px">     "node-sass": "^4.9.3",
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-    "npm-run-all": "^4.1.3",
</del><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+    "npm-run-all": "^4.1.5",
</ins><span class="cx" style="display: block; padding: 0 10px">     "postcss-cli": "^6.0.1",
</span><span class="cx" style="display: block; padding: 0 10px">     "postcss-focus-within": "^3.0.0",
</span><span class="cx" style="display: block; padding: 0 10px">     "rtlcss": "^2.4.0"
</span></span></pre>
</div>
</div>

</body>
</html>