Closed carueda closed 4 years ago
Right now, under https://github.com/mmisw/orr-portal/network/alerts :
Dependabot suggests:
But
... cannot create a pull request as one or more other dependencies require a version that is incompatible with this update.
orr-portal's package.json itself has "lodash": "^4.17.13"
"lodash": "^4.17.13"
so the complain is about some transitive dependencies, in fact, package-lock.json has for example:
package-lock.json
"gulp-util": { "version": "3.0.8", ... "requires": { ... "lodash._reescape": "^3.0.0", "lodash._reevaluate": "^3.0.0", "lodash._reinterpolate": "^3.0.0", "lodash.template": "^3.0.0", ...
In particular, gulp is only used for development (not deployed), so in that sense this is not as critical.
gulp
Right now, under https://github.com/mmisw/orr-portal/network/alerts :
Dependabot suggests:
But
orr-portal's package.json itself has
"lodash": "^4.17.13"
so the complain is about some transitive dependencies, in fact,
package-lock.json
has for example:In particular,
gulp
is only used for development (not deployed), so in that sense this is not as critical.