This repository has been archived by the owner on Aug 19, 2022. It is now read-only.
Update udaru-hapi-plugin dependencies to the latest @hapi scope to fix a vulnerability issue #581
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
When running
npm audit
on my node project I received:There are no way to fix this issue on my own, because
hapi
andsubtext
dependencies are not maintained (they moved to@hapi/hapi
and@hapi/subtext
), therefore thenpm audit fix
command couldn't solve the issue. The only way to fix it is to update the@nearform/udaru-hapi-plugin
dependencies.In this PR I've updated the following dependencies:
"boom": "^7.2.2"
->"@hapi/boom": "^8.0.1"
"hoek": "^6.1.3"
->"@hapi/hoek": "^8.3.0"
And I noticed that the
hapi
package was only used in tests and not in the main code, so I moved"hapi": "^18.1.0"
todevDependencies
as"@hapi/hapi": "^18.4.0"
.I've also updated the
devDependencies
:"code": "^5.2.4"
->"@hapi/code": "^6.0.0"
"lab": "^18.0.2"
->"@hapi/lab": "^20.4.0"
Let me know if anything else is needed in order to merge this PR.