Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Project: Vulnerability fixes #246

Merged
merged 6 commits into from
Jul 24, 2023
Merged

Project: Vulnerability fixes #246

merged 6 commits into from
Jul 24, 2023

Conversation

rokotyan
Copy link
Contributor

@rokotyan rokotyan commented Jul 18, 2023 •
edited
Loading

Security enhancements:

  • Manually updating deep dependencies in the package-lock.json to resolve the vulnerability warnings (it's an anti-pattern but we had to do it).
  • Fixing security issues in our code found by CodeQL.

npm audit results:

  • workspace (root): found 0 vulnerabilities
  • packages/dev: found 0 vulnerabilities
  • packages/website: 20 moderate severity vulnerabilities

@rokotyan rokotyan marked this pull request as draft July 18, 2023 18:13
@rokotyan rokotyan force-pushed the fix/vuln branch 5 times, most recently from a000902 to 015fb61 Compare July 19, 2023 22:20
@rokotyan rokotyan requested a review from reb-dev July 19, 2023 22:28
@rokotyan rokotyan added the enhancement New feature or request label Jul 19, 2023
@rokotyan rokotyan added this to the Release 1.2.1 milestone Jul 19, 2023
@rokotyan rokotyan marked this pull request as ready for review July 19, 2023 22:38
@rokotyan rokotyan changed the title Project: Updating dependencies to fix vulnerability warnings Project: Vulnerability fixes Jul 20, 2023
@rokotyan rokotyan merged commit c32c077 into main Jul 24, 2023
3 checks passed
@rokotyan rokotyan mentioned this pull request Aug 22, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@reb-dev reb-dev reb-dev approved these changes

Assignees

@reb-dev reb-dev

Labels
enhancement New feature or request
Projects
None yet
Milestone
Release 1.2.1
Development

Successfully merging this pull request may close these issues.
2 participants
@rokotyan @reb-dev