Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Dependencies #394

Merged
merged 1 commit into from
Jan 20, 2025
Merged

Conversation

armando-rodriguez-cko
Copy link
Contributor

Update Dependencies

Description:

This PR updates multiple dependencies in the checkout-sdk-node project to enhance security, compatibility, and maintainability. It primarily focuses on upgrading library versions in package.json and synchronizing these changes in package-lock.json.


Key Changes:

  1. Dependency Updates in package.json:

    • axios: Updated from ^0.27.2 to ^0.29.0.
    • Introduced proxy-from-env: Added version ^1.1.0.
  2. Lockfile (package-lock.json) Synchronization:

    • Updated corresponding resolved URLs, integrity hashes, and dependency trees for the updated versions.
    • Examples of updated dependencies:
      • axios: Updated from 0.27.2 to 0.29.0.
      • follow-redirects: Updated from 1.15.4 to 1.15.9.
      • braces: Updated from 3.0.2 to 3.0.3.
      • fill-range: Updated from 7.0.1 to 7.1.1.
      • cross-spawn: Updated from 7.0.3 to 7.0.6.
  3. Improvements:

    • Enhanced security and resolved vulnerabilities in previous dependency versions.
    • Improved performance and compatibility for Node.js environments.

Impact:

  • Security: Addresses potential vulnerabilities by using the latest versions of dependencies.
  • Stability: Updates ensure compatibility with the latest Node.js features and best practices.
  • Maintainability: Keeps the project dependencies up-to-date to prevent deprecations or unsupported versions in the future.

Testing:

  • Verified all unit and integration tests pass successfully with the updated dependencies.
  • Conducted manual testing to confirm no regressions in key functionalities.

@armando-rodriguez-cko armando-rodriguez-cko requested a review from a team January 20, 2025 09:58
@armando-rodriguez-cko armando-rodriguez-cko merged commit 52c1f1c into master Jan 20, 2025
3 checks passed
@armando-rodriguez-cko armando-rodriguez-cko deleted the feature/update-dependencies branch January 20, 2025 13:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

Upgrade version of Axios dependency to fix high vulnerability
2 participants