Skip to content

Conversation

@priscilawebdev
Copy link
Member

@priscilawebdev priscilawebdev commented Oct 25, 2021

the library ua-parser-js has been hijacked (faisalman/ua-parser-js#536) and we indirectly use it through react-router@3.2.0 (ua-parser-js@^0.7.18). This resolution is being added as a precaution

@priscilawebdev priscilawebdev requested a review from a team as a code owner October 25, 2021 11:44
@priscilawebdev priscilawebdev requested a review from a team October 25, 2021 11:44
@github-actions
Copy link
Contributor

size-limit report

Path Base Size (49676c7) Current Size Change
src/sentry/static/sentry/dist/entrypoints/app.js 52.74 KB 52.73 KB -0.01% 🔽
src/sentry/static/sentry/dist/entrypoints/sentry.css 70.89 KB 70.89 KB 0%

@priscilawebdev priscilawebdev merged commit 6b4efc3 into master Oct 25, 2021
@priscilawebdev priscilawebdev deleted the ref/package-json-add-new-resolution branch October 25, 2021 14:08
@evanpurkhiser
Copy link
Member

Good call 👍

"fsevents": "^2.3.2"
},
"resolutions": {
"**/ua-parser-js": "<=0.7.28",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is one of those scenarios where it would be really nice if we could have a comment in here as to why it's locked.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes but unfortunately comments are not permitted in json :/

@github-actions github-actions bot locked and limited conversation to collaborators Nov 12, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants