Update dependencies - 1st try (security)

StackStorm / st2chatops

Packaging environment for building StackStorm chatops native packages

Apache License 2.0

32 stars 41 forks source link

Update dependencies - 1st try (security) #183

Closed arm4b closed 9 months ago

arm4b commented 9 months ago

The current state of st2chatops is the following:

Work on https://github.com/StackStorm/st2chatops/issues/133, trying to update as many upstream dependencies as possible and regenerate npm lock (npm-shrinkwrap.json).

arm4b commented 9 months ago

First go of npm audit fix gave something meaningful:

fixed 45 of 215 vulnerabilities in 633 scanned packages

arm4b commented 9 months ago

I'll take it as a quick win.

I think it makes sense to merge this PR and see if it goes through e2e st2cicd chatops tests on Slack. Then try to do more radical changes in the next PR and see again if it passes e2e tests or not. This way if things broke, I'll have an easy way to revert.