Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies that have critical vulnerabilities #1059

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

neilmispelaar
Copy link

Attempts to address the critical vulnerabilities that were identified by yarn audit --level critical

More information can be found here:

#1058

This PR attempts to update the following dependencies

  • jest-image-snapshot: ^6.4.0
  • lerna: ^5.5.4
  • mysql2: ^3.10.2
  • pg-hstore: ^2.3.4

There is also a separate PR within the @patrickhulce/scripts package patrickhulce/hulk#12 to address those outdated dependencies. It made more sense to try to address upstream as opposed to using a bunch of overrides.

Thanks for your consideration.

Happy to help with additional testing or other information. Just let me know.

Copy link

google-cla bot commented Jul 12, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@sdavids
Copy link

sdavids commented Sep 19, 2024

patrickhulce/hulk#12 has been merged so I think this one can be updated…

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants