-
Notifications
You must be signed in to change notification settings - Fork 1.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[MAINTENANCE] update yarn.lock to handle vanta vulnerabilities. #10839
Conversation
❌ Deploy Preview for niobium-lead-7998 failed. Why did it fail? →
|
❌ Deploy Preview for niobium-lead-7998 failed. Why did it fail? →
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
✅ All tests successful. No failed tests found.
Additional details and impacted files@@ Coverage Diff @@
## develop #10839 +/- ##
============================================
- Coverage 80.69% 70.01% -10.68%
============================================
Files 465 463 -2
Lines 40493 40491 -2
============================================
- Hits 32677 28351 -4326
- Misses 7816 12140 +4324 Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
We build errors when upgrading docusaurus which look like this issue: facebook/docusaurus#10690 |
The vulnerable versions we want to avoid are:
npm-cross-spawn >= 7.0.0, < 7.0.5
npm-path-to-regexp < 0.1.12
npm-nanoid < 3.3.8
invoke lint
(usesruff format
+ruff check
)For more information about contributing, visit our community resources.
After you submit your PR, keep the page open and monitor the statuses of the various checks made by our continuous integration process at the bottom of the page. Please fix any issues that come up and reach out on Slack if you need help. Thanks for contributing!