Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[chore] update dependencies #143

Merged
merged 13 commits into from May 18, 2021
Merged

[chore] update dependencies #143

merged 13 commits into from May 18, 2021

Conversation

bdruth
Copy link
Contributor

@bdruth bdruth commented May 18, 2021 •
edited

  • Convert things over to using yarn in lieu of npm or npx
  • updated stylelint* to latest
  • updated prettier|postcss-cli|node-sass|jest|eslint|bulma|xray|autoprefixer to latest
    ** and re-ran lint:fix
  • updated ajv JSON validator
  • updated file-type to latest
  • updated serverless
    ** Added noConfirm to fullstack options, since the cli option is deprecated
    ** Applied updates related to other deprecation warnings.
  • updated react* deps
  • force update sugarcs and qs via resolutions: property in package.json to address vulns

Result: all high and above vulns addressed. Most other vulns addressed, as well, postcss related deps used by stylelint* are still outstanding and require work from the stylelint team: stylelint/stylelint#5298

Aside:

  • disabled email sending since creds aren't hooked up, to make submit-location work again

bdruth added 12 commits May 18, 2021 10:25
@bdruth
Update yarn.lock
17ad769
@bdruth
Update GitHub Action to use yarn instead of npm cmds.
808011d
@bdruth
Update AWS CodeBuild cmds to use yarn.
27f9c42
@bdruth
Re-run eslint after updating some packages.
58209c3 
* updated `stylelint*` to latest
* updated `prettier|postcss-cli|node-sass|jest|eslint|bulma|xray|autoprefixer` to latest
@bdruth
Upgrade ajv (JSON validator) and uuid.
0932945 
* Also disabled email sending since credentials aren't hooked up.
@bdruth
Use yarn for sls clientCommand (used by fullstack to build react cl…
626d9a9 
…ient app).
@bdruth
Update file-type to latest.
0355148
@bdruth
Update serverless and related deps.
5f3cf18 
* Added `noConfirm` to fullstack options, since the cli option is deprecated
* Applied updates related to other deprecation warnings.
@bdruth
Update references to npx with yarn.
0c126aa
@bdruth
Updated react* dependencies.
93bf2fc
@bdruth
Update sugarss and qs to resolve audit vulns. Can't update postcs…
0e9dd63 
…s yet 😢
@bdruth
Enable lint check on GitHub Action.
1fe2f21
@bdruth bdruth merged commit 27e18b3 into main May 18, 2021
@bdruth bdruth deleted the chore/update_dependencies branch May 18, 2021 20:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jalba-flexion jalba-flexion jalba-flexion approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@bdruth @jalba-flexion