Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): Update Lockfile #386

Merged
merged 7 commits into from
Oct 31, 2023
Merged

Conversation

evansims
Copy link
Member

@evansims evansims commented Oct 31, 2023

Description

This updates the dependencies lockfile to resolve a transient dependency vulnerability in get-func-name.

Note: The lockfile on this project is presently problematic. Because we support Node 14, we must support NPM 6. However, that version of NPM doesn't support the 'npm:' prefix/alias we use in package.json. Support for that wasn't added until NPM 8, which does not support Node 14. As such, we must generate the lockfile using a version of NPM >= 8, after which NPM 6 will successfully npm install using it. We cannot create lockfiles using NPM 6 at present, though.

References

N/A

Testing

N/A

Checklist

  • I have added documentation for new/changed functionality in this PR or in auth0.com/docs
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used, if not the default branch

@evansims evansims added the dependencies Pull requests that update a dependency file label Oct 31, 2023
@evansims evansims requested a review from a team as a code owner October 31, 2023 16:56
@evansims evansims temporarily deployed to internal October 31, 2023 16:56 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 16:56 — with GitHub Actions Inactive
@evansims evansims marked this pull request as draft October 31, 2023 16:58
@evansims evansims temporarily deployed to internal October 31, 2023 17:07 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 17:07 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 18:30 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 18:30 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 18:31 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 18:31 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 18:32 — with GitHub Actions Inactive
@evansims evansims marked this pull request as ready for review October 31, 2023 18:34
@evansims evansims merged commit eadbe78 into master Oct 31, 2023
17 checks passed
@evansims evansims deleted the chore/dependencies/update-lockfile branch October 31, 2023 22:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants