Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: dependencies security vulnerability fix #4532

Merged
merged 6 commits into from Oct 16, 2023
Merged

Conversation

scopsy
Copy link
Contributor

@scopsy scopsy commented Oct 15, 2023

No description provided.

@@ -112,11 +112,6 @@
"optionalDependencies": {
"@novu/ee-auth": "^0.19.0"
},
"nx": {
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Upgrading nx, throws an error here due to non existing package

@@ -105,7 +105,6 @@
"react-is": "^18.2.0",
"react-password-strength-bar": "^0.4.1",
"react-router-dom": "^6.2.2",
"react-scripts": "^5.0.1",
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Duplicate with devDeps

Comment on lines +194 to +205
"nth-check": "^2.1.1",
"braces@<2.3.1": "^2.3.1",
"nanoid@>=3.0.0 <3.1.31": "^3.1.31",
"file-type@>=13.0.0 <16.5.4": "^16.5.4",
"glob-parent@<5.1.2": "^5.1.2",
"xml2js@<0.5.0": "^0.5.0",
"tough-cookie@<4.1.3": "^4.1.3",
"semver@>=7.0.0 <7.5.2": "^7.5.2",
"trim-newlines@<3.0.1": "^3.0.1",
"minimatch@>=3.0.0 <3.0.5": "^3.0.5",
"get-func-name@<2.0.1": "^2.0.1",
"postcss@<8.4.31": "^8.4.31"
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm audit fix, targets only the broken versions and patches them on the minor available

@scopsy scopsy changed the title chore: upgrade minimatch chore: dependencies security vulnerability fix Oct 15, 2023
@scopsy scopsy merged commit 493b058 into next Oct 16, 2023
27 of 28 checks passed
@scopsy scopsy deleted the upgrade-minimatch branch October 16, 2023 08:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants