Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Onyx] - Updated lodash dependency to fix vulnerability #53

Merged
merged 1 commit into from
Mar 19, 2021

Conversation

Luke9389
Copy link
Contributor

@Luke9389 Luke9389 commented Mar 19, 2021

cc @tgolen

Details

Rather than using individual packages for each lodash method, we are using the main lodash package and selectively loading the methods we need (using this handy syntax: lodash/merge)

Fixed Issues

Fixes https://github.com/Expensify/Expensify/issues/157899

Web QA

Just regular regression testing will suffice for this. No special tests are needed. Thanks!

@Luke9389 Luke9389 self-assigned this Mar 19, 2021
@Luke9389 Luke9389 requested a review from a team as a code owner March 19, 2021 21:30
@botify botify requested review from bondydaa and removed request for a team March 19, 2021 21:30
@Luke9389 Luke9389 changed the title swapped lodash.merge for lodash/merge Updated lodash dependency to fix vulnerability Mar 19, 2021
@Luke9389 Luke9389 changed the title Updated lodash dependency to fix vulnerability [Onyx] - Updated lodash dependency to fix vulnerability Mar 19, 2021
Copy link
Contributor

@bondydaa bondydaa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you add a QA section that states regular regressions are all that are needed, no special tests.

@bondydaa bondydaa merged commit bd59626 into master Mar 19, 2021
@bondydaa bondydaa deleted the luke-update-lodash-dependency branch March 19, 2021 21:41
@github-actions github-actions bot locked and limited conversation to collaborators Mar 19, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants