[Security] remove update-token-changelog and fix other securities (#541)

* [Security] remove update-token-changelog and fix other securities Issue Resolved: #539 #302 Signed-off-by: Anan Zhuang <[email protected]> * Update package.json --------- Signed-off-by: Anan Zhuang <[email protected]> Co-authored-by: Sean Neumann <[email protected]>
opensearch-project · Mar 8, 2023 · e7dc71d · e7dc71d
1 parent fac9770
commit e7dc71d
Show file tree

Hide file tree

Showing 4 changed files with 114 additions and 573 deletions.
diff --git a/package.json b/package.json
@@ -32,7 +32,6 @@
     "test-staged": "yarn lint && node scripts/test-staged.js",
     "start-test-server": "BABEL_MODULES=false NODE_ENV=puppeteer NODE_OPTIONS=--max-old-space-size=4096 webpack-dev-server --config src-docs/webpack.config.js --port 9999",
     "yo-component": "yo ./generator-oui/app/component.js",
-    "update-token-changelog": "node ./scripts/update-token-changelog.js",
     "start-test-server-and-a11y-test": "cross-env WAIT_ON_TIMEOUT=600000 start-server-and-test start-test-server http-get://localhost:9999 test-a11y",
     "yo-doc": "yo ./generator-oui/app/documentation.js",
     "release": "node ./scripts/release.js",
@@ -74,6 +73,7 @@
     "**/d3-color": "^3.1.0",
     "**/@miksu/prettier/minimatch": "^3.0.8",
     "**/request/qs": "^6.11.0",
+    "**/make-fetch-happen": "^11.0.3",
     "nodegit/ramda": "^0.27.1",
     "sass-lint/front-matter": "^4.0.2"
   },
@@ -204,7 +204,6 @@
     "moment": "^2.27.0",
     "moment-timezone": "^0.5.31",
     "node-sass": "^7.0.1",
-    "nodegit": "^0.27.0",
     "pegjs": "^0.10.0",
     "postcss-cli": "^7.1.2",
     "postcss-inline-svg": "^4.1.0",

diff --git a/scripts/update-token-changelog.js b/scripts/update-token-changelog.js
diff --git a/wiki/releasing-versions.md b/wiki/releasing-versions.md
@@ -59,7 +59,6 @@ This provides a walkthrough of the patching & backport release process; examples
 * Once everything looks correct, it's time to release; the `yarn release` script only works when releasing from `master`, so we'll run [a subset of those steps](https://github.com/elastic/eui/blob/06fc9a6880766168aec1a622873e7f6fe1b3d42b/scripts/release.js#L34-L57) manually
   * Run the unit tests again - `npm test`
   * Create the release builds - `npm run build`
-  * Update the I18n tokens - `npm run update-token-changelog -- patch`
   * Use npm to update package.json & package-lock.json version, git commit, and git tag - `npm version patch`
   * Push the version commit & tag to upstream - `git push upstream --tags`
   * Publish the new version to npm