Generator-jhipster: The newly generated project has a GitHub insights security alert about bootstrap.

[slgxmh]

as this screenshot

And in my newly generated project, the version of bootstrap is 4.2.1.

[jdubois]

I'm moving this to the correct repo.

[wmarques]

@slgxmh Thanks for the report. Indeed we need to bump our bootstrap version. Are you willing to do a PR to fix this issue ?

[slgxmh]

@slgxmh Thanks for the report. Indeed we need to bump our bootstrap version. Are you willing to do a PR to fix this issue ?

I checked /master/generators/client/templates/angular/package.json.ejs , the version of bootstrap is right (4.3.1).
My project is generated by JHipster Online, maybe this problem caused by web site using the previous version。

[wmarques]

@slgxmh oh yes probably, i think this will be fixed once v6 is released I think.

[pascalgrimaud]

Yes, just wait the next release.
Already fixed in master branch here: https://github.com/jhipster/generator-jhipster/commit/5197f7428047ec39687afe1c93aaa6632d6f03b1