Joomla! Issue Tracker - CMS

Download
Launch
Feeling Lucky

[#36050] - [4.0] Update NPM dependencies to fix audit issues

? NPM Resource Changed Pending

User tests: Successful: Unsuccessful:

avatar SniperSister
SniperSister
15 Nov 2021

Summary of Changes

Updated several NPM dependencies to fix security issues in upstream packages. As the issues in questions are either only relevant for the build process or have insignificant risks, I'm doing a public PR.

Issues fixed in packages

  • ansi-regex
  • nth-check
  • cssnano
  • postcss

Testing Instructions

Check out branch, run build scripts.

/cc @dgrammatiko

avatar SniperSister SniperSister - open - 15 Nov 2021
avatar SniperSister SniperSister - change - 15 Nov 2021
Status New ⇒ Pending
avatar joomla-cms-bot joomla-cms-bot - change - 15 Nov 2021
Category ⇒ NPM Change
avatar dgrammatiko
dgrammatiko - comment - 15 Nov 2021

@SniperSister you need to also update PostCSS to 8.x
Also, @brianteeman has a PR for tinyMCE that deals with the deprecations for version 6, so please revert this here. The PR is #35889

avatar SniperSister SniperSister - change - 15 Nov 2021
Labels Added: ? NPM Resource Changed
avatar SniperSister SniperSister - change - 15 Nov 2021
The description was changed
avatar SniperSister SniperSister - edited - 15 Nov 2021
avatar SniperSister
SniperSister - comment - 15 Nov 2021

@dgrammatiko done as requested, thx!

avatar wilsonge wilsonge - change - 16 Nov 2021
Status Pending ⇒ Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 ⇒ 2021-11-16 19:22:09
Closed_By ⇒ wilsonge
avatar wilsonge wilsonge - close - 16 Nov 2021
avatar wilsonge wilsonge - merge - 16 Nov 2021
avatar wilsonge
wilsonge - comment - 16 Nov 2021

Thanks!

Add a Comment

Login with GitHub to post a comment