deluan / contentful-migrate

🐎 Schema migration tooling for Contentful, with state management
https://www.contentful.com/blog/2018/09/13/content-model-changes-scale-telus-cms-as-code/
MIT License
60 stars 37 forks source link

Could we update the contentful-migration dependency? #183

Closed OriginalEXE closed 3 years ago

OriginalEXE commented 3 years ago

Hello,

The contentful-migration dependency is an old version and it's causing some vulnerability alerts because of the old axios version that it depends on.

Is there a reason that this library needs to stay on the 1.x version, or do you think it's realistic to update to the latest version? I can help with a PR, but just wanted to check if there's a reason why 1.x was kept while other dependencies were bumped.

Thanks

deluan commented 3 years ago

The only reason the contentful-migration lib is pinned is to ensure compatibility. Looks like the integration tests are not passing with the latest version. I'll try to fix this this week, but in the meantime feel free to try and send a PR, if you get the tests to pass

OriginalEXE commented 3 years ago

@deluan PR is ready, apologies for the delay: https://github.com/deluan/contentful-migrate/pull/196

deluan commented 3 years ago

Awesome! Thanks! Will take a look tonight.

deluan commented 3 years ago

Merged! Integration tests are passing now, and I will release a new version tonight. Thanks!