Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependencies to resolve security issues #291

Merged
merged 4 commits into from
Dec 8, 2022
Merged

Update dependencies to resolve security issues #291

merged 4 commits into from
Dec 8, 2022

Conversation

stepankuzmin
Copy link
Contributor

@stepankuzmin stepankuzmin commented Dec 7, 2022 •
edited
Loading

We got 112 security alerts from the Dependabot. This PR drops Yarn support and upgrades all available dependencies to resolve the security issues.

  • Switch to NPM
  • Drop yarn.lock
  • Update babel and build tooling
  • Update CircleCI config

@stepankuzmin stepankuzmin marked this pull request as ready for review December 7, 2022 11:05
@ansis ansis self-requested a review December 7, 2022 18:30
@stepankuzmin stepankuzmin merged commit 3e9d8a8 into master Dec 8, 2022
@stepankuzmin stepankuzmin deleted the bump-deps branch December 8, 2022 10:55
@stepankuzmin stepankuzmin mentioned this pull request Dec 8, 2022
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ansis ansis ansis approved these changes

@avpeery avpeery Awaiting requested review from avpeery

@tristen tristen Awaiting requested review from tristen

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@stepankuzmin @ansis