Skip to content

Commit

Permalink
Delete yarn.lock
Browse files Browse the repository at this point in the history
  • Loading branch information
@kornelski
kornelski authored Oct 9, 2019
1 parent db35cdc commit 95acfc7
Showing 1 changed file with 0 additions and 11,040 deletions.
Loading

5 comments on commit 95acfc7

@niftylettuce
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@kornelski what was the reason for this?

@kornelski
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

GitHub sends me scary emails about all the security vulnerabilities in locked versions of the deps, and the lockfile hasn't been updated in months.

@niftylettuce
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah I need to get dependabot hooked in and this all automated, thanks @kornelski for heads up. I'm updating and version bumping now.

@niftylettuce
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The problem seems to be zuul, since it is unmaintained. There will be audit warnings until we replace it with something like Puppeteer.

@niftylettuce
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ref #1521

Please sign in to comment.