Skip to content

USWDS - 3.6.0: Npm audit fix#5461

Merged
thisisdano merged 2 commits into
developfrom
cm-3.6.0-audit-fix
Sep 28, 2023
Merged

USWDS - 3.6.0: Npm audit fix#5461
thisisdano merged 2 commits into
developfrom
cm-3.6.0-audit-fix

Conversation

@mahoneycm

@mahoneycm mahoneycm commented Aug 25, 2023

Copy link
Copy Markdown
Contributor

Summary

Ran npm audit fix on develop branch after 3.6.0

Vulnerabilities

Before

33 vulnerabilities (4 moderate, 29 high)

After

30 vulnerabilities (1 moderate, 29 high)

Breaking change

This is not a breaking change

Preview link

Preview link →

Testing and review

  1. Checkout branch
  2. Run npm install
  3. Confirm no build errors
  4. Confirm less vulnerabilities

@amyleadem amyleadem added this to the uswds 3.6.1 milestone Aug 29, 2023

@amyleadem amyleadem left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Confirming that npm audit fix reduces the number of vulnerabilities as described in the PR description.

  • Running npm audit on develop shows 33 vulnerabilities (4 moderate, 29 high)
  • Running npm audit fix on develop shows 30 vulnerabilities (1 moderate, 29 high)
  • npm start runs without error and the build looks as expected

@mejiaj mejiaj left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@mahoneycm can you fix conflicts? Otherwise LGTM.

@mahoneycm mahoneycm requested a review from mejiaj September 13, 2023 13:48
@mahoneycm

Copy link
Copy Markdown
Contributor Author

@mejiaj Conflicts resolved 👍

@thisisdano thisisdano merged commit 5d47dbb into develop Sep 28, 2023
@thisisdano thisisdano deleted the cm-3.6.0-audit-fix branch September 28, 2023 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Affects: Dependencies Relates to project dependencies

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

4 participants