search

josephfrazier / reported-web

Web front-end for https://twitter.com/Reported_NYC: https://reported-web.herokuapp.com
https://reported-web.herokuapp.com
MIT License
10 stars 1 forks source link

Upgrade react-dev-utils to allow minimatch to be upgraded to fix vuln alert, see https://github.com/josephfrazier/reported-web/security/dependabot/132 #439

Closed josephfrazier closed 1 year ago

josephfrazier commented 1 year ago

Dependabot cannot update minimatch to a non-vulnerable version

The latest possible version that can be installed is 3.0.4 because of the following conflicting dependency:

react-dev-utils@11.0.4 requires minimatch@3.0.4 via recursive-readdir@2.2.2

The earliest fixed version is 3.0.5.