Skip to content
This repository has been archived by the owner on May 15, 2024. It is now read-only.

one-app-dev-bundler has an old version of postcss dependency #590

Closed
AP7557 opened this issue Nov 28, 2023 · 1 comment
Closed

one-app-dev-bundler has an old version of postcss dependency #590

AP7557 opened this issue Nov 28, 2023 · 1 comment

Comments

@AP7557
Copy link

AP7557 commented Nov 28, 2023

馃悶 Bug Report

Describe the bug

@americanexpress/one-app-dev-bundler is dependent on an older version of postcss with vulnerability, (PostCC line return parsing error, affecs linters to parse external CSS)

To Reproduce

Run npm ls postcss in one-app-dev-bundler

|__@americanexpress/one-app-bundler@6.21.4
   |__@americanexpress/one-app-dev-bundler@1.5.4
      |__postcss-modules@3.2.2
      |  |__postcss@7.0.39
      |__postcss@7.0.39

Expected behavior

Upgrade postcss to 8.4.31

Copy link

This issue is stale because it has been open 30 days with no activity.

@10xLaCroixDrinker 10xLaCroixDrinker closed this as not planned Won't fix, can't repro, duplicate, stale May 15, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants