Merge pull request #18 from idealista/bugs/14

v1.0.7, add cached-path-relative dependency, add before_deploy step

.travis.yml

@@ -1,6 +1,7 @@
 language: node_js
 node_js:
 - '8'
+before_deploy: "npm install --ignore-scripts"
 deploy:
   provider: npm
   email: [email protected]

CHANGELOG.md

@@ -6,7 +6,8 @@ This project adheres to [Semantic Versioning](http://semver.org/) and [Keep a ch
 
 ## [1.0.7](https://github.com/idealista/tlsh-js/tree/1.0.7)
 ### Fixed
-- *[#16](https://github.com/idealista/tlsh-js/pull/16)fixed build: users of your library should not need to install grunt* @dpoetzsch
+- *[#14](https://github.com/idealista/tlsh-js/issues/14) Update browserify due to CVE-2018-16472 in transitive dependency (cached-path-relative)* @jnogol
+- *[#16](https://github.com/idealista/tlsh-js/pull/16) fixed build: users of your library should not need to install grunt* @dpoetzsch
 
 ## [1.0.6](https://github.com/idealista/tlsh-js/tree/1.0.6)
 ### Changed

package.json

@@ -1,6 +1,6 @@
 {
   "name": "tlsh",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "JavaScript port of TLSH (Trend Locality Sensitive Hash)",
   "main": "lib/tlsh.js",
   "author": "idealista <[email protected]> (http://www.idealista.com/labs/blog/)",
@@ -22,6 +22,7 @@
     "grunt-contrib-jshint": "2.0.0",
     "grunt-mocha-test": "^0.12.7",
     "grunt-browserify": "^5.3.0",
+    "cached-path-relative": ">=1.0.2",
     "mocha": "5.2.0",
     "expect.js": "^0.3.1"
   },