Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Files: update dependencies using resolutions #661

Merged
merged 1 commit into from Sep 3, 2020

Conversation

ericfranz
Copy link
Contributor

Use resolutions for minimist, node-uuid, and tar-stream to enforce later versions than older ones that are dependended on by cloud commander dependencies.

This is pulling back into production changes we made to 1.6 and 1.7 to address some dependencies with security issues.

use resolutions for minimist, node-uuid, and tar-stream to enforce
later versions than older ones that are dependended on by cloud commander
dependencies
Copy link
Contributor

@johrstrom johrstrom left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I suppose this is OK assuming you've tested it, but it seems dangerous; Some underlying API may break. As an example readable-stream went from 2.x to 3.x so we'll have to take extra care when updating.

(all the more reason to prioritize a new files app)

@ericfranz
Copy link
Contributor Author

The others were confirmed to work. The only questionable one is tar-stream, but our Files app does not make use of it. It was for the original cloud commander server route to tar up a directory and stream that to the user, but we provide our own using zip instead.

@ericfranz ericfranz merged commit af40983 into master Sep 3, 2020
@ericfranz ericfranz deleted the update_files_app_dependencies branch September 3, 2020 15:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants