Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

26 upgrade dependencies #27

Merged
merged 9 commits into from
Oct 20, 2023
Merged

26 upgrade dependencies #27

merged 9 commits into from
Oct 20, 2023

Conversation

lemke-ethan
Copy link
Contributor

  • upgrade docker base image
  • upgrade node.js to LTS
  • upgrade npm
  • upgrade npm package deps
  • fix eslint config and expand rules
  • fix lint errors
  • add vscode config to prompt the user to use the workspace's ts version

@lemke-ethan lemke-ethan linked an issue Oct 6, 2023 that may be closed by this pull request
upgrade dependencies #26
Closed
2 tasks
@lemke-ethan lemke-ethan self-assigned this Oct 20, 2023
@lemke-ethan
Merge branch 'main' into 26-upgrade-dependencies
820b98d 
conflicts
- package-lock.json: accept all incoming
- package.json: accept current change that replaces minor and patch version numbers with 0 because of the semver pattern of ^
@lemke-ethan
npm install
8b77348
@lemke-ethan
install @babel/traverse critical vulnerability patch
80fa1f2
@lemke-ethan
Copy link
Contributor Author

added fix for recent outstanding vulnerability:

@babel/traverse  <7.23.2
Severity: critical
Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code - https://github.com/advisories/GHSA-67hx-6x53-jw92
fix available via `npm audit fix`
node_modules/@babel/traverse

1 critical severity vulnerability

@lemke-ethan lemke-ethan merged commit 9836abd into main Oct 20, 2023
@lemke-ethan lemke-ethan deleted the 26-upgrade-dependencies branch December 1, 2023 21:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@TCaprioli TCaprioli TCaprioli approved these changes

@sam-mfb sam-mfb Awaiting requested review from sam-mfb

@mfbzn mfbzn Awaiting requested review from mfbzn

Assignees

@lemke-ethan lemke-ethan

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

upgrade dependencies
2 participants
@lemke-ethan @TCaprioli