search

microsoft / azure-devops-extension-sample

Sample web extension for Azure DevOps
MIT License
235 stars 154 forks source link

Resolving xml2js Dependabot Alert #141

Closed lohitakshgupta closed 1 year ago

lohitakshgupta commented 1 year ago

Resolving xml2js Dependabot Alert: https://github.com/microsoft/azure-devops-extension-sample/security/dependabot/40

I only added overrides in package.json and then ran npm install --package-lock-only

dpaquette commented 1 year ago

Just a note that the reason for the big changes in package-lock.json is because we've moved to npm 8.15.0 so we can take advantage of the new overrides feature of package.json.