search

GoogleChrome / lighthouse

Automated auditing, performance metrics, and best practices for the web.
https://developer.chrome.com/docs/lighthouse/overview/
Apache License 2.0
28.42k stars 9.39k forks source link

deps(sentry): upgrade to v7 #16215

Closed G-Rath closed 1 month ago

G-Rath commented 1 month ago

Summary

The current version of @sentry/node brings in a vulnerable version of the cookie package (https://github.com/advisories/GHSA-pxg6-pf52-xh8x), which is not present in v7.

This should be an easy bump as v7 was mainly about changes to the internals of Sentry so has a very small upgrade path: https://docs.sentry.io/platforms/javascript/migration/v6-to-v7/

Note that the latest is v8 but that has a lot more breaking changes in the public interface: https://docs.sentry.io/platforms/javascript/migration/v7-to-v8/

Related Issues/PRs

Relates to #16131

G-Rath commented 1 month ago

looks like the smoke test job has failed due to an external issue with the npm/yarn registry - it should hopefully pass if re-run