Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Dependencies to Address Security Vulnerabilities #1702

Open
wants to merge 2 commits into
base: dev
Choose a base branch
from

Conversation

MostlyKIGuess
Copy link

Summary

This pull request updates the dependencies in the package.json and package-lock.json files to their latest versions. The primary goal is to address security vulnerabilities and ensure the application remains secure and up-to-date.

Changes

  • Updated axios to the latest version.
  • Updated electron to the latest version.
  • Updated hosted-git-info to the latest version.
  • Updated i18next to the latest version.
  • Updated ini to the latest version.
  • Updated normalize-url to the latest version.
  • Updated requirejs to the latest version.
  • Updated semver to the latest version.
  • Updated tmp to the latest version.
  • Updated grunt to the latest version.
  • Updated grunt-terser to the latest version.
  • Updated terser to the latest version.

Motivation

Keeping dependencies up-to-date is crucial for maintaining the security and stability of the application. This update addresses known security vulnerabilities and ensures compatibility with the latest features and improvements.

Testing

  • Verified that the application builds successfully.
  • Ran the application to ensure that all functionalities work as expected.
  • Conducted basic regression testing to confirm that no new issues were introduced.

Additional Notes

  • The axios was the only breaking change , which affects jest tests, but we don't have those so it's fine. Linked here.

- Updated dependencies to the latest versions to address security vulnerabilities.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant