Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update deps from 1.5 release #1592

Closed
humphd opened this issue Jan 22, 2021 · 7 comments
Closed

Update deps from 1.5 release #1592

humphd opened this issue Jan 22, 2021 · 7 comments
Assignees
Labels
type: enhancement New feature or request
Milestone

Comments

@humphd
Copy link
Contributor

humphd commented Jan 22, 2021

[humphd@mbp ~/repos/telescope (master)]$ npm outdated
Package                           Current  Wanted  Latest  Location
@elastic/elasticsearch              7.9.0   7.9.0  7.10.0  @seneca/telescope
@typescript-eslint/eslint-plugin    4.8.1   4.8.1  4.14.0  @seneca/telescope
@typescript-eslint/parser           4.8.1   4.8.1  4.14.0  @seneca/telescope
@vercel/node                        1.8.2   1.8.2   1.9.0  @seneca/telescope
@wordpress/wordcount               2.11.0  2.11.0  2.14.0  @seneca/telescope
bull                               3.18.0  3.18.0  3.20.0  @seneca/telescope
bull-board                          0.9.0   0.9.0   1.2.0  @seneca/telescope
cross-env                           7.0.2   7.0.2   7.0.3  @seneca/telescope
eslint                             7.14.0  7.14.0  7.18.0  @seneca/telescope
eslint-config-prettier             6.11.0  6.11.0   7.2.0  @seneca/telescope
eslint-plugin-prettier              3.1.4   3.1.4   3.3.1  @seneca/telescope
eslint-plugin-react                7.21.5  7.21.5  7.22.0  @seneca/telescope
express-handlebars                  5.1.0   5.1.0   5.2.0  @seneca/telescope
express-validator                   6.6.1   6.6.1   6.9.2  @seneca/telescope
fast-xml-parser                    3.17.4  3.17.4  3.17.6  @seneca/telescope
feed                                4.2.1   4.2.1   4.2.2  @seneca/telescope
helmet                              4.1.1   4.1.1   4.4.1  @seneca/telescope
highlight.js                       10.4.1  10.4.1  10.5.0  @seneca/telescope
http-proxy-middleware               1.0.5   1.0.5   1.0.6  @seneca/telescope
husky                               4.3.0   4.3.0   4.3.8  @seneca/telescope
ioredis                            4.17.3  4.17.3  4.19.4  @seneca/telescope
ioredis-mock                        5.1.0   5.1.0   5.2.0  @seneca/telescope
jest                               26.4.2  26.4.2  26.6.3  @seneca/telescope
nock                               13.0.4  13.0.4  13.0.6  @seneca/telescope
normalize-url                       5.1.0   5.1.0   5.3.0  @seneca/telescope
passport-saml                       2.0.2   2.0.2   2.0.4  @seneca/telescope
pino                                6.6.1   6.6.1  6.11.0  @seneca/telescope
pino-elasticsearch                  5.3.0   5.3.0   5.4.0  @seneca/telescope
pino-pretty                         4.2.1   4.2.1   4.3.0  @seneca/telescope
prettier                            2.1.2   2.1.2   2.2.1  @seneca/telescope
pretty-quick                        3.0.2   3.0.2   3.1.0  @seneca/telescope
release-it                         14.0.3  14.0.3  14.2.2  @seneca/telescope
sanitize-html                      1.27.4  1.27.4   2.3.1  @seneca/telescope
set-interval-async                 1.0.33  1.0.33  1.0.34  @seneca/telescope
supertest                           4.0.2   4.0.2   6.1.1  @seneca/telescope
@humphd humphd added the type: enhancement New feature or request label Jan 22, 2021
@humphd humphd added this to the 1.6 Release milestone Jan 22, 2021
@humphd
Copy link
Contributor Author

humphd commented Jan 22, 2021

Per @birtony, we should also look into using some automated tooling like Dependabot.

@cindyorangis
Copy link
Contributor

Don't we already use Dependabot?
Screenshot 2021-01-23 124627

@birtony
Copy link
Contributor

birtony commented Jan 31, 2021

@cindyledev I think so far Dependabot only automatically creates PRs for security alerts. In this case, we might actually want it to automatically create PRs to keep all of our dependencies up-to-date, even if there are no security vulnerabilities found in the versions of dependencies we currently use. Looks like we need to create a config file for it to do so: https://github.com/Seneca-CDOT/telescope/network/updates
image

CC @humphd

@birtony
Copy link
Contributor

birtony commented Feb 3, 2021

@cindyledev I think so far Dependabot only automatically creates PRs for security alerts. In this case, we might actually want it to automatically create PRs to keep all of our dependencies up-to-date, even if there are no security vulnerabilities found in the versions of dependencies we currently use. Looks like we need to create a config file for it to do so: https://github.com/Seneca-CDOT/telescope/network/updates
image

CC @humphd

Opened this issue to create a config file for Dependabot

@yuanLeeMidori
Copy link
Contributor

outdated dependencies

~/Documents/Projects/telescope$ npm outdated
Package                           Current  Wanted  Latest  Location
@elastic/elasticsearch              7.9.0   7.9.0  7.11.0  @senecacdot/telescope
@typescript-eslint/eslint-plugin    4.8.1   4.8.1  4.15.1  @senecacdot/telescope
@typescript-eslint/parser           4.8.1   4.8.1  4.15.1  @senecacdot/telescope
@vercel/node                        1.8.2   1.8.2   1.9.0  @senecacdot/telescope
@wordpress/wordcount               2.11.0  2.11.0  2.14.1  @senecacdot/telescope
bull                               3.18.0  3.18.0  3.20.1  @senecacdot/telescope
bull-board                          0.9.0   0.9.0   1.2.0  @senecacdot/telescope
connect-redis                       5.0.0   5.0.0   5.1.0  @senecacdot/telescope
date-fns                           2.16.1  2.16.1  2.17.0  @senecacdot/telescope
eslint                             7.14.0  7.14.0  7.20.0  @senecacdot/telescope
eslint-config-prettier             6.11.0  6.11.0   7.2.0  @senecacdot/telescope
eslint-plugin-prettier              3.1.4   3.1.4   3.3.1  @senecacdot/telescope
eslint-plugin-promise               4.2.1   4.2.1   4.3.1  @senecacdot/telescope
eslint-plugin-react                7.21.5  7.21.5  7.22.0  @senecacdot/telescope
express-handlebars                  5.1.0   5.1.0   5.2.0  @senecacdot/telescope
express-pino-logger                 5.0.0   5.0.0   6.0.0  @senecacdot/telescope
express-validator                   6.6.1   6.6.1   6.9.2  @senecacdot/telescope
feed                                4.2.1   4.2.1   4.2.2  @senecacdot/telescope
helmet                              4.1.1   4.1.1   4.4.1  @senecacdot/telescope
highlight.js                       10.4.1  10.4.1  10.6.0  @senecacdot/telescope
http-proxy-middleware               1.0.5   1.0.5   1.0.6  @senecacdot/telescope
husky                               4.3.0   4.3.0   5.0.9  @senecacdot/telescope
ioredis                            4.17.3  4.17.3  4.22.0  @senecacdot/telescope
ioredis-mock                        5.1.0   5.1.0   5.2.2  @senecacdot/telescope
jest                               26.4.2  26.4.2  26.6.3  @senecacdot/telescope
nock                               13.0.4  13.0.4  13.0.7  @senecacdot/telescope
normalize-url                       5.1.0   5.1.0   5.3.0  @senecacdot/telescope
passport-saml                       2.0.2   2.0.2   2.0.5  @senecacdot/telescope
pino                                6.6.1   6.6.1  6.11.1  @senecacdot/telescope
pino-elasticsearch                  5.3.0   5.3.0   5.4.0  @senecacdot/telescope
pino-pretty                         4.2.1   4.2.1   4.5.0  @senecacdot/telescope
prettier                            2.1.2   2.1.2   2.2.1  @senecacdot/telescope
pretty-quick                        3.0.2   3.0.2   3.1.0  @senecacdot/telescope
sanitize-html                      1.27.4  1.27.4   2.3.2  @senecacdot/telescope
set-interval-async                 1.0.33  1.0.33  1.0.34  @senecacdot/telescope
supertest                           4.0.2   4.0.2   6.1.3  @senecacdot/telescope

@birtony
Copy link
Contributor

birtony commented Feb 18, 2021

@yuanLeeMidori, Dependabot, and finished updating all of our dependencies (except for Gatsby ones, which will be dropped soon anyways). Closing

@birtony birtony closed this as completed Feb 18, 2021
@humphd
Copy link
Contributor Author

humphd commented Feb 18, 2021

Amazing work, thank you @birtony and @yuanLeeMidori 🎆

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

5 participants