Spencer update npm deps #4501
Merged
Spencer update npm deps #4501
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Updates slugify version from 1.3.0 (^1.2.9) to 1.3.1 and pins to 1.3.1
Removes babel-plugin-syntax-dynamic-import @6.18.0 and babel-plugin-dynamic-import-node @1.2.0 from package-lock.json Both were removed automatically when running `meteor npm install`
Fixes a snyk reported vulnerability on react-dom by bumping our pinned version from 16.4.1 to 16.4.2
Chownr has a recently reported issue to snyk, though the issue itself has been known for over a year. isaacs/chownr#14 This issue has been introduced via sharp via tar and tar-fs npm packages We'll continue to follow this issue on the chownr repo. And I've added a comment to the issue thread. isaacs/chownr#14 (comment)
nnnnat
previously requested changes
Aug 6, 2018
Updates pinned version of React from 16.4.1 to 16.4.2
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR updates a few dependencies to satisfy the snyk vulnerability scan.
fix: remove unused babel dynamic dev deps
Removes babel-plugin-syntax-dynamic-import @6.18.0
and babel-plugin-dynamic-import-node @1.2.0 from package-lock.json
Both were removed automatically when running
meteor npm installfix: update slugify and pin to 1.3.1
Updates slugify version from 1.3.0 (^1.2.9) to 1.3.1 and pins to 1.3.1
fix: update react to 16.4.2
Updates our pinned version of react from 16.4.1 to 16.4.2
fix: update react-dom to 16.4.2
Fixes a snyk reported vulnerability on react-dom by
bumping our pinned version from 16.4.1 to 16.4.2
fix: adds chownr to snyk ignore file
Chownr has a recently reported issue to snyk, though the issue itself
has been known for over a year. isaacs/chownr#14
This issue has been introduced via sharp via tar and tar-fs npm packages
We'll continue to follow this issue on the chownr repo. And I've added
a comment to the issue thread. isaacs/chownr#14 (comment)