Skip to content

chore(deps): cve fixes #72

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jun 3, 2023
Merged

chore(deps): cve fixes #72

merged 2 commits into from
Jun 3, 2023

Conversation

joshua-goldstein
Copy link
Contributor

@joshua-goldstein joshua-goldstein commented Jun 2, 2023

This PR does the following:

  • regenerate the package-lock.json file using modern version of npm
  • remove yarn.lock file (we should have one source of truth and installations should be reproducible)
  • run npm audit fix --legacy-peer-deps to update lockfile and resolve vulnerabilities
  • update types/jest, types/node, jest, ts-jest, and typescript deps

Many thanks to @MichelDiz for working on updating these dependencies (and more) in another PR here. We deferred merging these until we had security scanning in place and could identify exactly what vulnerabilities existed & the dependency bumps needed to resolve them.

Resolves CVE's:

@joshua-goldstein joshua-goldstein force-pushed the joshua/cd branch 2 times, most recently from 60d685f to 70988b2 Compare June 2, 2023 08:06
@joshua-goldstein joshua-goldstein merged commit e010818 into master Jun 3, 2023
@joshua-goldstein joshua-goldstein deleted the joshua/cd branch June 3, 2023 06:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants