Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Address Snyk vulnerabilities #320

Merged
merged 1 commit into from
Oct 31, 2022
Merged

Address Snyk vulnerabilities #320

merged 1 commit into from
Oct 31, 2022

Conversation

nmanu1
Copy link
Contributor

@nmanu1 nmanu1 commented Oct 28, 2022

Update the version of @xmldom/xmldom to address a vulnerability in Snyk. Regenerate the test-site package-lock to update some dependencies and remove other unnecessary dependencies from the top-level search-ui-react package.

J=SLAP-2423
TEST=none

@nmanu1 nmanu1 requested a review from a team as a code owner October 28, 2022 18:08
@coveralls
Copy link

Coverage Status

Coverage remained the same at 85.401% when pulling a6fc050 on dev/snyk-vulnerabilities into 3b0ecbf on develop.

@github-actions
Copy link
Contributor

Current unit coverage is 88.49693251533742%
Current visual coverage is 77.40899357601712%
Current combined coverage is 89.03374233128834%

@nmanu1 nmanu1 merged commit 5057f43 into develop Oct 31, 2022
@nmanu1 nmanu1 deleted the dev/snyk-vulnerabilities branch October 31, 2022 14:23
nmanu1 added a commit that referenced this pull request Nov 8, 2022
Update the version of `@xmldom/xmldom` to address a vulnerability in Snyk. Regenerate the test-site package-lock to update some dependencies and remove other unnecessary dependencies from the top-level `search-ui-react` package.

J=SLAP-2423
TEST=none
@nmanu1 nmanu1 mentioned this pull request Nov 8, 2022
nmanu1 added a commit that referenced this pull request Nov 9, 2022
### Bug Fixes
- Address security vulnerabilities in `ejs`, `async`, and `terser` (#308)
- Address security vulnerabilities in `@xmldom/xmldom` and `loader-utils` (#320, #326)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants