[#25392] - [4.0] Update dependencies
- Fixed in Code Base
- 2 Jul 2019
- Medium
- Build: 4.0-dev
- # 25392
- Diff
- Hackwar:j4composerupdate
- Pending Hound Hound is busy sniffing around... Details
User tests: Successful: Unsuccessful:
This updates both the composer and npm dependencies to the latest versions. We also had 25 warnings about security issues coming from the skipto package. @wilsonge provided that package a PR which updates their dependencies, but after 3 months they still weren't able to do a new release. So I switched the dependency to the repo instead. With this PR all security warnings are fixed.
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Category | ⇒ | External Library Composer Change NPM Change |
Maybe go directly to 2.1.0?
Hard to do that as it hasnt been released ;)
they are a bit strange with the version history ^^
https://www.npmjs.com/package/skipto they already have a version history for this version...
But ok then upgrading to 2.0.4 is the better idea ;-)
| Labels |
Added:
?
NPM Resource Changed
?
|
||
There you go
| Status | Pending | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2019-07-02 08:17:39 |
| Closed_By | ⇒ | wilsonge |
Thanks!
Skipto 2.0.4 is out. Please swap to that rather than master :)