search

jason-johnson / azure-pipelines-tasks-terraform

Azure Pipelines extension for Terraform
MIT License
122 stars 51 forks source link

Update azure-pipelines-task-lib to latest #419

Open riemers opened 4 months ago

riemers commented 4 months ago

Please update the azure-pipelines-task-lib to i think 4.10.0 as this resolves a lot of security issues.

That would at least fix mockery which is like 7 years old ;p work in a big company and alert bells go off etc ;)

image

Inside: image

I think if you change this to something like ^2.0.0 then we are all good again, thats the source from what i can tell that calls the old one.

captainhook commented 1 week ago

@jason-johnson any update on this? Happy to do a PR but is there anything else holding this back?

jason-johnson commented 1 week ago

A PR would certainly speed up the process. I just need to make sure the PR doesn’t break anything. I’m in the process of moving more of the pipeline to GitHub so you get immediate feedback on errors.