-
Notifications
You must be signed in to change notification settings - Fork 46
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Dep updates 2025 01 03 #5673
base: staging
Are you sure you want to change the base?
Dep updates 2025 01 03 #5673
Conversation
akuny
commented
Jan 2, 2025
•
edited
Loading
edited
- Upgrade unpinned npm packages
- Upgrade to aws-cli 2.22.27
- bump Docker image to 4.3.25 and publish
- Update documentation to include node-canvas peer dependency issue
- Exp build
@@ -91,7 +101,7 @@ Below is a list of dependencies that are locked down due to known issues with se | |||
### pdfjs-dist | |||
|
|||
- `pdfjs-dist` has a major version update to ^3.x,x. A devex card has been created to track work being done towards updating the package. Please add notes and comments to [this card](https://trello.com/c/gjDzhUkb/1111-upgrade-pdfjs-dist). | |||
- The high-severity security issue "vulnerable to arbitrary JavaScript execution" has been addressed by us here: https://app.zenhub.com/workspaces/flexionef-cms-5bbe4bed4b5806bc2bec65d3/issues/gh/flexion/ef-cms/10407 and can therefore be ignored. | |||
- The high-severity security issue "vulnerable to arbitrary JavaScript execution" has been addressed by us here: https://github.com/flexion/ef-cms/issues/10407 and can therefore be ignored. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @akuny! Would it be worthwhile to add a caveat to dependency-updates about upgrading the AWS terraform provider (e.g., "as of X, updating the AWS terraform provider causes issues our CI/CD pipeline").