-
-
Notifications
You must be signed in to change notification settings - Fork 197
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Address code vulnerabilities #1688
Conversation
Optimize pipelines Fix npm audit problems Reshuffle devDeps in prod deps Update some modules according to snyk
Note that the two remaining high priority vulnerabilities are minimatch and set-value There is a major version 4 of set-value that could fix the vulnerability detected, however this is a major change. Naive installation of the new major version causes regression |
…gma-plugin into fix/vulnerability-audit
Note this will cause a failure in the CI
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🙏
Optimize pipelines
Fix npm audit problems
Reshuffle devDeps in prod deps
Update some modules according to snyk