search

cagov / ui-claim-tracker

This repo contains the Claim Status Tracker app, which helps Californians better understand what’s happening with their unemployment claim and benefits.
9 stars 4 forks source link

Resolve yarn install warning about ansi-html-community #567

Closed rocketnova closed 2 years ago

rocketnova commented 2 years ago

Description

In #565, we patched the vuln in the abandoned ansi-html package, but using ansi-html-community. However, I just noticed that yarn install --frozen-lockfile is showing this warning:

warning Pattern ["ansi-html-community@0.0.8"] is trying to unpack in the same destination "/home/runner/.cache/yarn/v6/npm-ansi-html-0.0.8-69fbc4d6ccbe383f9736934ae34c3f8290f1bf41-integrity/node_modules/ansi-html" as pattern ["ansi-html@https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz#69fbc4d6ccbe383f9736934ae34c3f8290f1bf41","ansi-html@0.0.7","ansi-html@^0.0.7"]. This could result in non-deterministic behavior, skipping.

See the github actions next.js CI run for merging in #565 as an example.

Acceptance Criteria