Update dependencies to resolve vulnerabilities

ColinEberhardt / applause-button

A zero-configuration medium-style button for adding applause / claps / kudos to web pages and blog posts

http://applause-button.com/

MIT License

426 stars 41 forks source link

Update dependencies to resolve vulnerabilities #104

Closed chriswilty closed 1 month ago

chriswilty commented 2 months ago

This is a general sweep of the package dependencies, as there were some critical and high vulnerabilities, as well as some deprecated packages (such as document-register-element and the unscoped babel libs).

Alongside these, there are some lightweight formatting changes due to SASS deprecation warnings and prettier upgrade to v3 (which is now even more opinionated 😉).

This is a BREAKING CHANGE: Node 18+ is required by rollup v4 and semantic-release v22

dogle-scottlogic commented 1 month ago

can we close off the dependabot PRs after this goes in?

github-actions[bot] commented 1 month ago

:tada: This PR is included in version 4.0.0 :tada:

The release is available on:

Your semantic-release bot :package::rocket: