Skip to content

Bump dependencies to fix vulnerabilities in ansi-regex, glob-parent and yargs-parser #105

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
nblagoev merged 3 commits into from
Feb 22, 2022
Merged

Bump dependencies to fix vulnerabilities in ansi-regex, glob-parent and yargs-parser #105

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
cc1ed1a
Bump required NPM to v8 to benefit from the overrides feature in pack…
nblagoev Feb 22, 2022
fc396d4
Override vulnerable transitive dependency versions in package.json
nblagoev Feb 22, 2022
320b817
Lock NPM version to 8.3.1 in the GibHub Actions workflows
nblagoev Feb 22, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,8 +36,8 @@ jobs:
with:
node-version: ${{ matrix.node-version }}

- name: Use NPM 7
run: npm install -g npm@7
- name: Use NPM 8
run: npm install -g npm@8.3.1 # lock to 8.3.1 until actions/setup-node#411 and npm/cli#4341 are fixed

- name: Set version number of package.json and build artifact
id: version_step
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/draft-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,13 @@ jobs:
- name: echo github.ref
run: echo ${{ github.ref }}

- name: Use Node.js 14.x
- name: Use Node.js 16.x
uses: actions/setup-node@v2
with:
node-version: 14.x
node-version: 16.x

- name: Use NPM 7
run: npm install -g npm@7
- name: Use NPM 8
run: npm install -g npm@8.3.1 # lock to 8.3.1 until actions/setup-node#411 and npm/cli#4341 are fixed

- name: Install sha256sum
run: brew install coreutils
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/lint-pr.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,13 +11,13 @@ jobs:
steps:
- uses: actions/checkout@v2

- name: Use Node.js 14
- name: Use Node.js 16
uses: actions/setup-node@v2
with:
node-version: 14.x
node-version: 16.x

- name: Use NPM 7
run: npm install -g npm@7
- name: Use NPM 8
run: npm install -g npm@8.3.1 # lock to 8.3.1 until actions/setup-node#411 and npm/cli#4341 are fixed

- name: reviewdog
uses: reviewdog/action-eslint@v1
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,10 +7,10 @@ jobs:
name: Publish to Visual Studio Marketplace and GitHub Packages
runs-on: ubuntu-latest
steps:
- name: Use Node.js 14.x
- name: Use Node.js 16.x
uses: actions/setup-node@v2
with:
node-version: 14.x
node-version: 16.x

- name: Install vsce
run: npm install -g vsce
Expand Down
8 changes: 4 additions & 4 deletions build/preinstall.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,8 @@

const major = parseInt(/^(\d+)\./.exec(process.versions.node)[1]);

if (major < 12) {
console.error('\033[1;31m*** Please use node >=12.0.0.\033[0;0m');
if (major < 14) {
console.error('\033[1;31m*** Please use node >=14.0.0.\033[0;0m');
process.exit(1);
}

Expand All @@ -18,8 +18,8 @@ const npmVersion = cp.execSync('npm -v', {
const parsedNpmVersion = /^(\d+)\.(\d+)\./.exec(npmVersion);
const majorNpmVersion = parseInt(parsedNpmVersion[1]);

if (majorNpmVersion < 7) {
console.error('\033[1;31m*** Please use npm >=7.0.0.\033[0;0m');
if (majorNpmVersion < 8) {
console.error('\033[1;31m*** Please use npm >=8.0.0.\033[0;0m');
process.exit(1);
}

Expand Down
Loading