Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: update deps #269

Merged
merged 9 commits into from
Nov 21, 2018
Merged

chore: update deps #269

merged 9 commits into from
Nov 21, 2018

Conversation

daern91
Copy link
Contributor

@daern91 daern91 commented Nov 20, 2018

npm audit returns 43 vulnerabilities (16 low, 6 moderate, 20 high, 1 critical)

PR updates them all so we have 0, please see more in comments below

resolves #270
resolves #266

@coveralls
Copy link

coveralls commented Nov 20, 2018

Coverage Status

Coverage remained the same at 97.657% when pulling cac23e9 on update-deps into aacd5ea on master.

"istanbul": "0.3.x",
"jasmine-node": "1.14.5",
"istanbul": "^0.4.5",
"jasmine-node": "github:daern91/jasmine-node",
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

jasmine-node has one critical dependency and has not yet updated it due to it becoming a breaking change and not supporting node v4. More reading here: mhevery/jasmine-node#421

Therefore, I forked and upgraded it since we only support Node >= 6 anyways.

@daern91
Copy link
Contributor Author

daern91 commented Nov 20, 2018

Hmm, very strange. It worked on the first run with coveralls but now it fails again. Just like in the PR from @Freyert... Will look into it more.

@daern91 daern91 force-pushed the update-deps branch 2 times, most recently from 646b7c7 to 9135446 Compare November 20, 2018 17:19
"grunt-cli": "^1.2.0",
"grunt-coffeelint": "0.0.13",
"grunt-contrib-clean": "0.6.0",
"grunt-contrib-coffee": "0.13.x",
"grunt-contrib-coffee": "github:daern91/grunt-contrib-coffee",
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changing this one to forked version with updated dependencies. Reason for this is that v1.0.0 works for us but has one warning. In addition, v2.x.x fixed this but also upgraded to use CoffeeScript v2 which introduced a lot of breaking changes

This did not work out for us and made all tests fail

'#\n' +
'# <%= _.pluck(pkg.licenses, \"url\").join(\"\\n\") %>\n' +
'# <%= _.map(pkg.licenses, \"url\").join(\"\\n\") %>\n' +
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

underscore dropped support for _.pluck() since it had the same functionality as _.map()

"sphere-coffeelint": "git://github.com/sphereio/sphere-coffeelint.git#master",
"underscore": "1.8.x",
"underscore-mixins": "0.1.x",
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

duplicate, already inside dependencies as found by @Freyert

@Freyert
Copy link

Freyert commented Nov 20, 2018

I think the next step will be to pull this into the sphere-order-export module and then bump a few of its dependencies.

@daern91
Copy link
Contributor Author

daern91 commented Nov 20, 2018

Good idea, I've started a wip PR in most of them and will finish tomorrow.

@daern91 daern91 merged commit cd48efb into master Nov 21, 2018
@daern91 daern91 deleted the update-deps branch November 21, 2018 09:27
@daern91 daern91 requested a review from junajan November 21, 2018 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Update deps
3 participants