bcgov / landuseplanning-admin

Land Use Planning Engagement Platform - Admin view
Apache License 2.0
3 stars 4 forks source link

bugfix/deseng379: Updated some packages/dependencies to address Github Dependabot alerts #101

Closed jareth-whitney closed 1 year ago

jareth-whitney commented 1 year ago

ua-parser-js > 0.7.30 > 0.7.36 🤔 loader-utils > some dependencies updated from 2.0.0 > 2.0.4, some use 1.4.2 (vulnerable) ❌ terser > unable to update (dependency of build-angular) 🤔 glob-parent > some dependencies from 5.1.1 > 5.1.2, others still on 3.1.0 (vulnerable) ❌ node-forge > unable to update (dependency of build-angular) 🤔 semver > some dependencies 6.3.0 > 6.3.1, others use version 5.3.0 (vulnerable) ✅ engine.io > updated via socket.io 4.4.1 > 4.7.2 (engine.io version now 6.5.2) ❌ tough-cookie > unable to update, angular/cli dependency ❌ xml2js > unable to update dependency (breaking changes) ❌ request > no patch available ❌ @angular/core as a dependency to codelyzer @ version 9.0.0, no fix available