-
Notifications
You must be signed in to change notification settings - Fork 168
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update dependencies #10251
Update dependencies #10251
Conversation
Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes. |
c877ed4
to
2d26980
Compare
packages/extension-sdk/package.json
Outdated
@@ -19,7 +19,7 @@ | |||
"rollup-plugin-serve": "^2.0.2" | |||
}, | |||
"peerDependencies": { | |||
"vite": "^5.0.0", | |||
"vite": "5.0.5", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is actually one of the few places where we should use version ranges imho.
The extension sdk is meant to be used in external projects and we should not pin vite for this
2d26980
to
064db25
Compare
|
* fix: update oidc-client-ts to 2.4.0 (includes crypto-js security patch) * chore: update (and remove unused) babel related dependencies * chore: bump luxon to v3.2.1 * chore: bump vite to v5.0.5 * chore: bump postcss-url to v10.1.3 * chore: bump postcss to v8.4.32 --------- Co-authored-by: Jannik Stehle <[email protected]>
Updating dependencies to mitigate security issues (collaborative effort of @JammingBen and myself)
We discovered following followups:
easygettext
and usevue3-gettext
instead #10249@LukasHirt is already working on bringing dependencies up to date in the
packages/design-system
package, see #10243