Update debug to the latest version 🚀

[greenkeeper]

Version 2.6.1 of debug just got published.

Dependency	debug
Current Version	2.6.0
Type	dependency

The version 2.6.1 is not covered by your current version range.

Without accepting this pull request your project will work just like it did before. There might be a bunch of new features, fixes and perf improvements that the maintainers worked on for you though.

I recommend you look into these changes and try to get onto the latest version of debug.
Given that you have a decent test suite, a passing build is a strong indicator that you can take advantage of these changes by merging the proposed change into your project. Otherwise this branch is a great starting point for you to work on the update.

---

Not sure how things should work exactly?

There is a collection of frequently asked questions and of course you may always ask my humans.

---

Your Greenkeeper Bot 🌴

[jsf-clabot]

Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.

[coveralls]

Coverage remained the same at 88.188% when pulling 7cbd31b on greenkeeper/debug-2.6.1 into a2fc76c on master.

[greenkeeper]

Version 2.6.2 just got published.

Update to this version instead 🚀

Commits

The new version differs by 62 commits .

• 017a9d6 release 2.6.2
• 23bc780 fix DEBUG_MAX_ARRAY_LENGTH
• 065cbfb Add backers and sponsors from Open Collective (#422)
• 918d686 Revert "add Slackin invite badge"
• f46d671 add Slackin invite badge
• 580a7a1 changed slackin url
• 9f33c9a added slackin
• 941653e release 2.6.1
• 37e14d6 Whitelist DEBUG_FD for values 1 and 2 only Fixes #410 (#415)
• 705a9fe Merge pull request #414 from vgoma/export-default-fix
• 78ae6c9 Fixed IE8 "Expected identifier" error
• 1c163a4 added names and skips arrays erasing on enable call (#409)
• ac5ccae release 2.6.0
• 5895595 better null pointer checks for browser useColors
• 6646130 remove explicit window.debug export (#404)

There are 62 commits in total. See the full diff.

[greenkeeper]

Version 2.6.3 just got published.

Update to this version instead 🚀

Commits

The new version differs by 3 commits .

• 9dc30f8 release 2.6.3
• 0fb8ea4 LocalStorage returns undefined for any key not present (#431)
• ce4d93e changelog fix

See the full diff.

[greenkeeper]

Version 2.6.4 just got published.

Update to this version instead 🚀

Commits

The new version differs by 6 commits .

• f311b10 release 2.6.4
• 1f01b70 Fix bug that would occure if process.env.DEBUG is a non-string value. (#444)
• 2f3ebf4 Update CHANGELOG.md
• f5ae332 Update CHANGELOG.md
• 9742c5f chore(): ignore bower.json in npm installations. (#437)
• 27d93a3 update "debug" to v0.7.3

See the full diff.

[greenkeeper]

Version 2.6.5 just got published.

Update to this version instead 🚀

Commits

The new version differs by 0 commits0.

false

See the full diff

[greenkeeper]

Version 2.6.6 just got published.

Update to this version instead 🚀

[greenkeeper]

Version 2.6.7 just got published.

Update to this version instead 🚀

[greenkeeper]

Version 2.6.8 just got published.

Update to this version instead 🚀

Commits

The new version differs by 2 commits.

• 52e1f21 Release 2.6.8
• 2482e08 Check for undefined on browser globals (#462)

See the full diff

[popomore]

Hope this can be merged for fixing security issue.

[popomore]

debug-js/debug@15850cb

cc @ScottFreeCode

[ScottFreeCode]

Well... As I always say, I am not a security expert, but:

The reported vulnerability is in using ms's string-to-number conversion.

debug, as far as I have managed to find in its source on GitHub, only uses ms's number-to-string conversion.

It would appear, therefore, that the reported vulnerability does not in fact affect debug in the first place.

Absent any other or more specific concerns, I would expect this update to be prioritized about the same as most dependency updates, for what it's worth.

[popomore]

As you said, it's not a real vulnerability affected mocha, but it will be reported by snyk when some repo use mocha.

If upgrading debug will not break mocha's functional, I suggest merging this PR.

[boneskull]

ugh these PRs