Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

frontend: bump data-pipelines dependency versions #1706

Merged
merged 3 commits into from
Mar 7, 2023

Conversation

DeltaMichael
Copy link
Contributor

@DeltaMichael DeltaMichael commented Mar 6, 2023

Why

Fixes following vulnerabilities

https://github.com/vmware/versatile-data-kit/security/dependabot/6
https://github.com/vmware/versatile-data-kit/security/dependabot/7

What

Bump patch versions for moment.js and ua-parser-js

How has this been tested?

Manual build data-pipelines and run tests

What type of change are you making?

Bugfix

Why

Fixes following vulnerabilities

https://github.com/vmware/versatile-data-kit/security/dependabot/6
https://github.com/vmware/versatile-data-kit/security/dependabot/7

What

Bump patch versions for moment.js and ua-parser-js

How has this been tested?

Manual build data-pipelines and run tests

What type of change are you making?

Bugfix

Signed-off-by: Dilyan Marinov <mdilyan@vmware.com>
Copy link
Contributor

@ivakoleva ivakoleva left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

May use a bound in favour of pinning?

@DeltaMichael DeltaMichael enabled auto-merge (squash) March 6, 2023 14:40
@DeltaMichael DeltaMichael merged commit 60dcc5e into main Mar 7, 2023
@DeltaMichael DeltaMichael deleted the person/mdilyan/frontend-dependabot branch March 7, 2023 10:59
ivakoleva pushed a commit that referenced this pull request Mar 9, 2023
#### Why

Fixes following vulnerabilities

https://github.com/vmware/versatile-data-kit/security/dependabot/6 
https://github.com/vmware/versatile-data-kit/security/dependabot/7

#### What

Bump patch versions for moment.js and ua-parser-js

#### How has this been tested?

Manual build data-pipelines and run tests

#### What type of change are you making?

Bugfix

Signed-off-by: Dilyan Marinov <mdilyan@vmware.com>
Co-authored-by: Dilyan Marinov <mdilyan@vmware.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants