Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependency updates for security advisories #1097

Merged
merged 5 commits into from
Apr 8, 2020
Merged

Dependency updates for security advisories #1097

merged 5 commits into from
Apr 8, 2020

Conversation

stevehobbsdev
Copy link
Contributor

Changes

Updates some dependencies that were reported through the advisories channel.

  • These are all development time dependencies
  • Dependabot was unable to patch these automatically. To patch them, I have added the patched versions to the "resolutions" node in package.json so that they are picked up by yarn install.

Testing

Tested by building and running tests, which is the area where the dependency upgrades affected the most.

  • This change adds unit test coverage
  • This change adds integration test coverage

Checklist

@stevehobbsdev stevehobbsdev added CH: Security tiny dependencies One or more dependencies are being bumped labels Apr 8, 2020
@stevehobbsdev stevehobbsdev requested a review from a team April 8, 2020 14:56
@stevehobbsdev stevehobbsdev added this to the v9.13.2 milestone Apr 8, 2020
@stevehobbsdev stevehobbsdev merged commit da8a17f into master Apr 8, 2020
@stevehobbsdev stevehobbsdev deleted the deps/security branch April 8, 2020 15:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@lbalmaceda lbalmaceda lbalmaceda approved these changes

Assignees
No one assigned
Labels
CH: Security dependencies One or more dependencies are being bumped
Projects
None yet
Milestone
v9.13.2
Development

Successfully merging this pull request may close these issues.
2 participants
@stevehobbsdev @lbalmaceda