Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Theia 1.20.0, yarn upgrade #182

Merged
merged 2 commits into from
Dec 1, 2021
Merged

Theia 1.20.0, yarn upgrade #182

merged 2 commits into from
Dec 1, 2021

Conversation

marcdumais-work
Copy link
Contributor

What it does

Update Blueprint's underlying framework, Theia, to v1.20.0 and run yarn upgrade to update various dependencies to the latest possible, as per their requested version range.

Vulnerabilities (yarn audit):

Before this PR:

48 vulnerabilities found - Packages audited: 1846
Severity: 14 Low | 31 Moderate | 3 High

After this PR (yarn upgrade):

28 vulnerabilities found - Packages audited: 1709
Severity: 14 Low | 14 Moderate

How to test

Build and run Blueprint, both in-place and in packaged form. Make sure everything still seems to work.

Review checklist

Reminder for reviewers

@marcdumais-work marcdumais-work changed the title Theia 1.20.0 Theia 1.20.0, yarn upgrade Nov 29, 2021
@marcdumais-work marcdumais-work marked this pull request as draft November 29, 2021 20:10
@marcdumais-work
Copy link
Contributor Author

Sorry, I think at least one unintended changes has seeped-in. Please hold-off on reviewing for the moment.

@marcdumais-work marcdumais-work force-pushed the theia-1.20.0 branch 4 times, most recently from a0ddfc5 to 04bd22e Compare November 29, 2021 20:44
@marcdumais-work marcdumais-work marked this pull request as ready for review November 29, 2021 22:13
@marcdumais-work
Copy link
Contributor Author

Ok, should be good now.

Copy link
Contributor

@jfaltermeier jfaltermeier left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, I've tested the changes and they look good imo.
I just have one question whether the electron-updater version change was intentional, since it was lowered.

theia-extensions/theia-blueprint-updater/package.json Outdated Show resolved Hide resolved
@marcdumais-work
Copy link
Contributor Author

@jfaltermeier @vince-fugnitto about the version of electron-updater, since you both had questions about it, I will extract that change into its own commit with a little explanation. The total of the two commits will be exactly the same as the current single commit.

`yarn upgrade` happily updated to a newer version of this dependency, but
newer versions did not play well at runtime, causing the AppImage package
to fail at startup (1). I tried a few versions, starting with newer ones, and
pinned the first one that worked.

(1):

```bash
theia-blueprint$ ./applications/electron/dist/TheiaBlueprint.AppImage
Failed to start the electron application.
Error: Cannot find module 'fs/promises'
Require stack:
- /tmp/.mount_TheiaBXVxquD/resources/app/node_modules/electron-updater/out/AppUpdater.js
- /tmp/.mount_TheiaBXVxquD/resources/app/node_modules/electron-updater/out/main.js
- /tmp/.mount_TheiaBXVxquD/resources/app/node_modules/theia-blueprint-updater/lib/electron-main/update/theia-updater-impl.js
- /tmp/.mount_TheiaBXVxquD/resources/app/node_modules/theia-blueprint-updater/lib/electron-main/update/theia-updater-main-module.js
- /tmp/.mount_TheiaBXVxquD/resources/app/src-gen/frontend/electron-main.js
- /tmp/.mount_TheiaBXVxquD/resources/app/scripts/theia-electron-main.js
-
    at Module._resolveFilename (internal/modules/cjs/loader.js:797:17)
    at Function.o._resolveFilename (electron/js2c/browser_init.js:281:681)
    at Module._load (internal/modules/cjs/loader.js:690:27)
    at Function.Module._load (electron/js2c/asar.js:769:28)
    at Module.require (internal/modules/cjs/loader.js:852:19)
    at require (internal/modules/cjs/helpers.js:74:18)
    at Object.<anonymous> (/tmp/.mount_TheiaBXVxquD/resources/app/node_modules/electron-updater/out/AppUpdater.js:8:20)
    at Module._compile (internal/modules/cjs/loader.js:967:30)
    at Object.Module._extensions..js (internal/modules/cjs/loader.js:1004:10)
    at Module.load (internal/modules/cjs/loader.js:815:32) {
  code: 'MODULE_NOT_FOUND',
  requireStack: [
    '/tmp/.mount_TheiaBXVxquD/resources/app/node_modules/electron-updater/out/AppUpdater.js',
    '/tmp/.mount_TheiaBXVxquD/resources/app/node_modules/electron-updater/out/main.js',
    '/tmp/.mount_TheiaBXVxquD/resources/app/node_modules/theia-blueprint-updater/lib/electron-main/update/theia-updater-impl.js',
    '/tmp/.mount_TheiaBXVxquD/resources/app/node_modules/theia-blueprint-updater/lib/electron-main/update/theia-updater-main-module.js',
    '/tmp/.mount_TheiaBXVxquD/resources/app/src-gen/frontend/electron-main.js',
    '/tmp/.mount_TheiaBXVxquD/resources/app/scripts/theia-electron-main.js',
    undefined
  ]
}
```

Signed-off-by: Marc Dumais <[email protected]>
@marcdumais-work
Copy link
Contributor Author

I had done a quick job, finding a working version of electron-updater. I have refined the search and used the latest, working version: "electron-updater": "4.3.9"

@marcdumais-work
Copy link
Contributor Author

Thanks for the review comments. I will go ahead and merge.

@marcdumais-work marcdumais-work merged commit 0ca8134 into master Dec 1, 2021
@marcdumais-work marcdumais-work deleted the theia-1.20.0 branch December 1, 2021 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants