Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security patch 1 #46

Closed
wants to merge 34 commits into from
Closed

Conversation

wasertech
Copy link
Collaborator

No description provided.

snyk-bot and others added 26 commits June 11, 2021 23:39
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ wasertech
❌ snyk-bot
You have signed the CLA already but the status is still pending? Let us recheck it.

@wasertech
Copy link
Collaborator Author

At least the lint passed 😅

@wasertech
Copy link
Collaborator Author

@wasertech
Copy link
Collaborator Author

wasertech commented Jul 13, 2022

There is always something wrong! Grrrr...

It doesn't even tell me where it's using tapPromise 🙄

Is it related to compiler.hooks[...].tap? 🤔

@wasertech
Copy link
Collaborator Author

❯ make node_deps
yarn install
yarn install v1.22.19
info No lockfile found.
[1/4] Resolving packages...
warning @svgr/webpack > @svgr/plugin-svgo > svgo > stable@0.1.8: Modern JS already guarantees Array#sort() is a stable sort, so this library is deprecated. See the compatibility table on MDN: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/sort#browser_compatibility
warning @testing-library/jest-dom > css > source-map-resolve@0.6.0: See https://github.com/lydell/source-map-resolve#deprecated
warning chai-http > superagent@3.8.3: Please upgrade to v7.0.2+ of superagent.  We have fixed numerous issues with streams, form-data, attach(), filesystem errors not bubbling up (ENOENT on attach()), and all tests are now passing.  See the releases tab for more information at <https://github.com/visionmedia/superagent/releases>.
warning chai-http > superagent > formidable@1.2.6: Please upgrade to latest, formidable@v2 or formidable@v3! Check these notes: https://bit.ly/2ZEqIau
warning create-react-app > tar-pack > tar@2.2.2: This version of tar is no longer supported, and will not receive security updates. Please upgrade asap.
warning jest-environment-jsdom-fourteen > @jest/environment > @jest/transform > jest-haste-map > fsevents@1.2.13: fsevents 1 will break on node v14+ and could be using insecure binaries. Upgrade to fsevents 2.
warning jest-environment-jsdom-fourteen > @jest/environment > @jest/transform > micromatch > snapdragon > source-map-resolve@0.5.3: See https://github.com/lydell/source-map-resolve#deprecated
warning jest-environment-jsdom-fourteen > @jest/environment > @jest/transform > jest-haste-map > sane@4.1.0: some dependency vulnerabilities fixed, support for node < 10 dropped, and newer ECMAScript syntax/features added
warning jest-environment-jsdom-fourteen > @jest/environment > @jest/transform > micromatch > snapdragon > source-map-resolve > resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated
warning jest-environment-jsdom-fourteen > @jest/environment > @jest/transform > micromatch > snapdragon > source-map-resolve > urix@0.1.0: Please see https://github.com/lydell/urix#deprecated
warning jest-environment-jsdom-fourteen > @jest/environment > @jest/transform > micromatch > snapdragon > source-map-resolve > source-map-url@0.4.1: See https://github.com/lydell/source-map-url#deprecated
warning jest-environment-jsdom-fourteen > jsdom > request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
warning jest-environment-jsdom-fourteen > jsdom > request-promise-native@1.0.9: request-promise-native has been deprecated because it extends the now deprecated request package, see https://github.com/request/request/issues/3142
warning jest-environment-jsdom-fourteen > jsdom > request > har-validator@5.1.5: this library is no longer supported
warning jest-environment-jsdom-fourteen > jsdom > request > uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
[2/4] Fetching packages...
[3/4] Linking dependencies...
warning " > @testing-library/user-event@14.2.3" has unmet peer dependency "@testing-library/dom@>=7.21.4".
warning "@typescript-eslint/eslint-plugin > tsutils@3.21.0" has unmet peer dependency "typescript@>=2.8.0 || >= 3.2.0-dev || >= 3.3.0-dev || >= 3.4.0-dev || >= 3.5.0-dev || >= 3.6.0-dev || >= 3.6.0-beta || >= 3.7.0-dev || >= 3.7.0-beta".
warning " > eslint-plugin-flowtype@8.0.3" has unmet peer dependency "@babel/plugin-syntax-flow@^7.14.5".
warning " > eslint-plugin-flowtype@8.0.3" has unmet peer dependency "@babel/plugin-transform-react-jsx@^7.14.9".
warning " > postcss-flexbugs-fixes@5.0.2" has unmet peer dependency "postcss@^8.1.4".
warning " > postcss-loader@7.0.1" has unmet peer dependency "postcss@^7.0.0 || ^8.0.1".
warning " > postcss-normalize@10.0.1" has unmet peer dependency "browserslist@>= 4".
warning " > postcss-normalize@10.0.1" has unmet peer dependency "postcss@>= 8".
warning "postcss-normalize > postcss-browser-comments@4.0.0" has unmet peer dependency "browserslist@>=4".
warning "postcss-normalize > postcss-browser-comments@4.0.0" has unmet peer dependency "postcss@>=8".
warning " > postcss-preset-env@7.7.2" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > @csstools/postcss-cascade-layers@1.0.5" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > @csstools/postcss-progressive-custom-properties@1.3.0" has unmet peer dependency "postcss@^8.3".
warning "postcss-preset-env > @csstools/postcss-color-function@1.1.1" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > @csstools/postcss-ic-unit@1.0.1" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > @csstools/postcss-trigonometric-functions@1.0.2" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > @csstools/postcss-stepped-value-functions@1.0.1" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > css-blank-pseudo@3.0.3" has unmet peer dependency "postcss@^8.4".
warning "postcss-preset-env > autoprefixer@10.4.7" has unmet peer dependency "postcss@^8.1.0".
warning "postcss-preset-env > css-has-pseudo@3.0.4" has unmet peer dependency "postcss@^8.4".
warning "postcss-preset-env > css-prefers-color-scheme@6.0.3" has unmet peer dependency "postcss@^8.4".
warning "postcss-preset-env > postcss-attribute-case-insensitive@5.0.2" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-color-functional-notation@4.2.4" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > @csstools/postcss-unset-value@1.0.2" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-color-hex-alpha@8.0.4" has unmet peer dependency "postcss@^8.4".
warning "postcss-preset-env > @csstools/postcss-font-format-keywords@1.0.1" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-color-rebeccapurple@7.1.1" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > @csstools/postcss-hwb-function@1.0.2" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-custom-media@8.0.2" has unmet peer dependency "postcss@^8.3".
warning "postcss-preset-env > @csstools/postcss-is-pseudo-class@2.0.7" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > @csstools/postcss-normalize-display-values@1.0.1" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-custom-properties@12.1.8" has unmet peer dependency "postcss@^8.4".
warning "postcss-preset-env > postcss-custom-selectors@6.0.3" has unmet peer dependency "postcss@^8.3".
warning "postcss-preset-env > postcss-dir-pseudo-class@6.0.5" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-double-position-gradients@3.1.2" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-focus-visible@6.0.4" has unmet peer dependency "postcss@^8.4".
warning "postcss-preset-env > postcss-focus-within@5.0.4" has unmet peer dependency "postcss@^8.4".
warning "postcss-preset-env > postcss-font-variant@5.0.0" has unmet peer dependency "postcss@^8.1.0".
warning "postcss-preset-env > postcss-env-function@4.0.6" has unmet peer dependency "postcss@^8.4".
warning "postcss-preset-env > postcss-gap-properties@3.0.5" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-image-set-function@4.0.7" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-initial@4.0.1" has unmet peer dependency "postcss@^8.0.0".
warning "postcss-preset-env > postcss-lab-function@4.2.1" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-media-minmax@5.0.0" has unmet peer dependency "postcss@^8.1.0".
warning "postcss-preset-env > postcss-logical@5.0.4" has unmet peer dependency "postcss@^8.4".
warning "postcss-preset-env > postcss-overflow-shorthand@3.0.4" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-page-break@3.0.4" has unmet peer dependency "postcss@^8".
warning "postcss-preset-env > postcss-nesting@10.1.10" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-replace-overflow-wrap@4.0.0" has unmet peer dependency "postcss@^8.0.3".
warning "postcss-preset-env > postcss-place@7.0.5" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-pseudo-class-any-link@7.1.6" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-selector-not@6.0.1" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > @csstools/postcss-cascade-layers > @csstools/selector-specificity@2.0.2" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > @csstools/postcss-oklab-function@1.1.1" has unmet peer dependency "postcss@^8.2".
warning "postcss-preset-env > postcss-clamp@4.1.0" has unmet peer dependency "postcss@^8.4.6".
warning " > postcss-safe-parser@6.0.0" has unmet peer dependency "postcss@^8.3.3".
warning "react-dev-utils > fork-ts-checker-webpack-plugin@6.5.2" has unmet peer dependency "typescript@>= 2.7".
[4/4] Building fresh packages...
success Saved lockfile.
Done in 64.57s.
❯ make package
yarn install
yarn install v1.22.19
[1/4] Resolving packages...
success Already up-to-date.
Done in 0.49s.
yarn build
yarn run v1.22.19
$ node scripts/build.js
Creating an optimized production build...
Failed to compile.

Cannot read properties of undefined (reading 'tapPromise')


error Command failed with exit code 1.
info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command.
make: *** [Makefile:11 : react_build] Erreur 1

@wasertech
Copy link
Collaborator Author

wasertech commented Jul 14, 2022

Closed to #47

@wasertech wasertech closed this Jul 14, 2022
@wasertech wasertech deleted the security-patch-1 branch July 15, 2022 16:07
@wasertech wasertech mentioned this pull request Jul 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants