Azure-Samples / ms-identity-ciam-javascript-tutorial

CIAM JavaScript samples
MIT License
32 stars 40 forks source link

Algo 1/fix vulnerabilities 2 #107

Closed algo-1 closed 2 months ago

algo-1 commented 2 months ago

Purpose

Fix vulnerabilities in dependencies

Does this introduce a breaking change?

[ ] Yes
[x] No

Pull Request Type

What kind of change does this Pull Request introduce?

[ ] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Documentation content changes
[x] Other... Please describe: Update dependencies to fix vulnerabilities

How to Test

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]

Other Information

There were axios vulnerabilities from just two days ago. I should have run npm audit just before merge of the last pr. Also in this pr are updates to fix the postcss vulnerability. Initially I did not fix this because I noticed that there was a rule setup to dismiss non-prod stuff & running npm audit --omit=dev shows no errors but dependabot requires it to be fixed. I have fixed this now so that there is no flag from dependabot after merging.