microsoft / vscode-azurestaticwebapps

Azure Static Web Apps extension for VS Code
https://marketplace.visualstudio.com/items?itemName=ms-azuretools.vscode-azurestaticwebapps
MIT License
88 stars 35 forks source link

Replace moment with dayjs to fix CVE-2022-24785 #641

Closed alexweininger closed 2 years ago

alexweininger commented 2 years ago

The stars have aligned to finally replace moment with dayjs. Been waiting since https://github.com/microsoft/vscode-azureappservice/issues/1777 to do this!

Aligned stars:

Fixes CVE-2022-24785, and removes a large deprecated package from our dependencies. 🎉

We used moment to format GitHub action run timestamps into human readable strings, worked the same with dayjs.

image