Skip to content

Upgrade dependencies - #13

Merged
UlisesGascon merged 2 commits into
masterfrom
upgrade-dependencies
Jan 9, 2020
Merged

Upgrade dependencies#13
UlisesGascon merged 2 commits into
masterfrom
upgrade-dependencies

Conversation

@UlisesGascon

@UlisesGascon UlisesGascon commented Jan 9, 2020

Copy link
Copy Markdown
Contributor

Main changes

  • Current situation: 0 package vulnerable or outdated 🎉
  • NSP dependency has been removed (deprecated notice)

Detailed changes

  • npm run vuln now executes npm audit (6a772b7)
  • Husky hooks where relocated inside the package.json (d5137f8)
  • Dependencies upgraded as follow (d5137f8):
 bluebird               ^3.5.0  →   ^3.7.2
 debug                  ^2.6.8  →   ^4.1.1
 marv                   ^2.0.0  →   ^3.1.0
 marv-pg-driver         ^2.0.0  →   ^3.0.0
 pg                    ^7.12.1  →  ^7.17.0
 pg-copy-streams        ^1.2.0  →   ^2.2.2
 pg-query-stream        ^1.1.1  →   ^2.1.2
 ramda                 ^0.24.1  →  ^0.26.1
 eslint                ^4.18.2  →   ^6.8.0
 eslint-config-airbnb   ^6.2.0  →  ^18.0.1
 eslint-plugin-mocha    ^4.8.0  →   ^6.2.2
 eslint-plugin-react    ^4.3.0  →  ^7.17.0
 husky                 ^0.13.2  →   ^4.0.3
 mocha                  ^3.2.0  →   ^7.0.0
 nsp                    ^2.8.1  →   ^3.2.1

Context

Backlog

- Related #9
- Moved husky hooks to separate place in the `package.json`
- Upgraded dependencies, details
```
 bluebird               ^3.5.0  →   ^3.7.2
 debug                  ^2.6.8  →   ^4.1.1
 marv                   ^2.0.0  →   ^3.1.0
 marv-pg-driver         ^2.0.0  →   ^3.0.0
 pg                    ^7.12.1  →  ^7.17.0
 pg-copy-streams        ^1.2.0  →   ^2.2.2
 pg-query-stream        ^1.1.1  →   ^2.1.2
 ramda                 ^0.24.1  →  ^0.26.1
 eslint                ^4.18.2  →   ^6.8.0
 eslint-config-airbnb   ^6.2.0  →  ^18.0.1
 eslint-plugin-mocha    ^4.8.0  →   ^6.2.2
 eslint-plugin-react    ^4.3.0  →  ^7.17.0
 husky                 ^0.13.2  →   ^4.0.3
 mocha                  ^3.2.0  →   ^7.0.0
 nsp                    ^2.8.1  →   ^3.2.1
```
- Related #
- Removed dependency `NSP`
- Replaced command in task for audit `npm run vuln` with `npm audit`
- See: https://blog.npmjs.org/post/175511531085/the-node-security-platform-service-is-shutting
@UlisesGascon UlisesGascon added the enhancement New feature or request label Jan 9, 2020
@UlisesGascon UlisesGascon added this to the v1.2.2 milestone Jan 9, 2020
@UlisesGascon UlisesGascon self-assigned this Jan 9, 2020

@inigomarquinez inigomarquinez left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@UlisesGascon
UlisesGascon merged commit b2673a0 into master Jan 9, 2020
@UlisesGascon
UlisesGascon deleted the upgrade-dependencies branch January 9, 2020 11:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade dependencies

2 participants