Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade @rails/webpacker for serialize-javascript dependency issue #338

Merged
merged 1 commit into from
Mar 10, 2020
Merged

Upgrade @rails/webpacker for serialize-javascript dependency issue #338

merged 1 commit into from
Mar 10, 2020

Conversation

bunnymatic
Copy link
Contributor

@bunnymatic bunnymatic commented Mar 10, 2020 •
edited

Problem

@rails/webpacker had security issues in dependencies of dependencies.

Read more here
GHSA-h9rv-jmmf-4pgx

and here
rails/webpacker#2387

Solution

Upgrade @rails/webpacker

Upgrade @rails/webpacker for serialize-javascript dependency issue
b139b01 
Problem
----------

`@rails/webpacker` had security issues in dependencies of dependencies.

Read more here
![GHSA-h9rv-jmmf-4pgx
](GHSA-h9rv-jmmf-4pgx)
 and here
rails/webpacker#2387

Solution
--------

Upgrade `@rails/webpacker`
@bunnymatic
Copy link
Contributor Author

Ran across this while looking at the other PR's and noticing the security alert from github.

@bunnymatic bunnymatic merged commit 4b4a6ea into master Mar 10, 2020
@bunnymatic bunnymatic deleted the chores/bump-serialize-javascript branch March 10, 2020 18:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mattbrictson mattbrictson mattbrictson approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@bunnymatic @mattbrictson