agilesix / AgileSix.com

Agile Six works with government agencies to create customized digital solutions that meet the needs of their users, both staff and citizens.
https://agile6.com
MIT License
4 stars 1 forks source link

Security fix: upgrade Gatsby, Tailwind and NPM dependencies #40

Closed amponce closed 1 year ago

amponce commented 1 year ago

Site maintenance and security

This update addresses security issues related Gatsby falling a bit behind, the fix required quite a few updates.

Initial Security flags 59 vulnerabilities found - Packages audited: 2741 Severity: 3 Low | 32 Moderate | 19 High | 5 Critical

Remaining security flags Severity: 5 Moderate | 5 High

Upgraded to gatsby(^4.24.4) -> Previously gatsby(^2.4.2) Upgraded to Tailwind(^3.1.8) -> Previously Tailwind(^1.0.3) Upgraded all gatsby-plugins-* Added: netlify-cms-app(^2.15.72) as replacement to netlify-cms Added: gatsby-plugin-purgecss Removed: netlify-cms(^2.9.1) Removed: all references to fmImagesToRelative

netlify[bot] commented 1 year ago

Deploy Preview for agile6 ready!

Name Link
Latest commit 5705d30c4f8ead447b0f64f7d6bb882da9f508b0
Latest deploy log https://app.netlify.com/sites/agile6/deploys/6349ee392fb2e70008f727d1
Deploy Preview https://deploy-preview-40--agile6.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

amponce commented 1 year ago

@ahay-agile6 @DanielMiller-agile6 I'm in between projects and working with Brian on some enhancements to the site, I noticed we feel a bit behind with Gatsby and the related plugins, I bumped everything up and moved us to node16 since support for node 12 ended recently. Let me know if these changes look ok or if you'd like me to change anything :D