Upgrade to resolve security vulnerabilities

juanca / react-aria-components

React ARIA-compliant Components

https://juanca.github.io/react-aria-components

MIT License

6 stars 3 forks source link

Closed ahuth closed 5 years ago

ahuth commented 5 years ago

npm audit revealed 1 high priority and a couple low-priority security vulnerabilities.

The high-priority one was with Jest, and updating that required me to update Babel. All told, this upgrades:

Babel from v6 to v7 (change log)
Jest from v23 to v24 (change log)
webpack-cli from v2 to v3 (not sure if there are any implications here, but everything still runs correctly) (change log)

ahuth commented 5 years ago

@juanca what do you think? Should we fix the warning on install for security vulnerabilities?

juanca commented 5 years ago

Definitely. I have a couple more things I need to look into before approving and merging this PR. I'll try to get it done by tonight.