OfficeDev / Office-Addin-Scripts

A set of scripts and packages that are consumed in Office add-ins projects.
MIT License
152 stars 93 forks source link

Fix axios and other vulnerabilities #825

Closed kwame-ansong closed 5 months ago

kwame-ansong commented 6 months ago

Upgrade axios and other packages to address vulnerabilities.

lsmith77 commented 5 months ago

I think it would also make sense to bump up the min versions in the package.json

millerds commented 5 months ago

Can you also update the direct reference to teamsfx-cli in packages/office-addin-dev-settings/src/publish.ts. The string used for the cli command is currently referencing the alpha version to get some preview fixes that should now be part of the release teamsfx-cli so the version reference can become 2.1.0 instead of the current alpha reference.

kwame-ansong commented 5 months ago

Abandoning this for now. A different PR will be sent out in place of this one.