Dozens of dependency upgrades to resolve nearly 50 Dependabot alerts for #990 . Notable upgrades include: react-scripts, emotion, and babel. Also enables the app to build and run on the latest LTS Node.js v16 for #991 .
Due to major version change of emotion, all css and styled imports in the UI had to be updated.
There are LOTS of new linter warnings, but those will be resolved in a future PR.
Deploy Instructions
Unknown at this time. May require clearing the node_modules directories in each project before doing the yarn install. Will be tested on collab to find out.
UPDATE 05/30/2022: after testing the deploy on collab, no extra steps were required. It was noted, however, that build times take much longer.
UPDATE 05/31/2022: a subsequent PR has been created to fix all the new linter warnings that have sprung up following the dependency upgrades. This appears to have improved build times a bit: https://github.com/nci-hcmi-catalog/portal/pull/994
Update installed versions of browserslist and caniuse-lite to clean up compiler warnings that were happening on each install and run of the application
Upgrade (almost) ALL the dependencies! 🎉
Dozens of dependency upgrades to resolve nearly 50 Dependabot alerts for #990 . Notable upgrades include:
react-scripts,emotion, andbabel. Also enables the app to build and run on the latest LTS Node.js v16 for #991 .Due to major version change of
emotion, allcssandstyledimports in the UI had to be updated.There are LOTS of new linter warnings, but those will be resolved in a future PR.
Deploy Instructions
Unknown at this time. May require clearing the
node_modulesdirectories in each project before doing theyarninstall. Will be tested on collab to find out.UPDATE 05/30/2022: after testing the deploy on collab, no extra steps were required. It was noted, however, that build times take much longer.
UPDATE 05/31/2022: a subsequent PR has been created to fix all the new linter warnings that have sprung up following the dependency upgrades. This appears to have improved build times a bit: https://github.com/nci-hcmi-catalog/portal/pull/994
Commits
⬆️ Upgrade express-restify-mongoose to v6.1.2 (https://github.com/nci-hcmi-catalog/portal/issues/990)
⬆️ Upgrade migrate-mongo to v8.2.2 (https://github.com/nci-hcmi-catalog/portal/issues/990)
⬆️ Upgrade moment-timezone to v0.5.34 (https://github.com/nci-hcmi-catalog/portal/issues/990)
⬆️ Upgrade nodemon to v2.0.16 (https://github.com/nci-hcmi-catalog/portal/issues/990)
⬆️ Upgrade yup to v0.32.11 (https://github.com/nci-hcmi-catalog/portal/issues/990)
⬆️ Upgrade googleapis to v100 (https://github.com/nci-hcmi-catalog/portal/issues/990)
node-forge:⬆️ Upgrade json-schema to v0.4.0 (https://github.com/nci-hcmi-catalog/portal/issues/990)
⬆️ Upgrade eslint to v7.32.0 (https://github.com/nci-hcmi-catalog/portal/issues/990)
ajv:⬆️ Upgrade mpath to v0.8.4 (https://github.com/nci-hcmi-catalog/portal/issues/990)
Uses forced resolutions to upgrade mpath from 0.8.3 to 0.8.4, since the package requiring it is no longer maintained
Resolves the following security alert:
🚨 Update browserslist and caniuse-lite
Update installed versions of browserslist and caniuse-lite to clean up compiler warnings that were happening on each install and run of the application
⬆️ Upgrade react-scripts, Enable Node.js v16 Upgrade (https://github.com/nci-hcmi-catalog/portal/issues/990) (https://github.com/nci-hcmi-catalog/portal/issues/991)
sharpto v0.28.3 to prevent breaking on builds under Node.js 16uuidusage to prevent breaking on builds under Node.js 16💚 Fix yarn.lock file (https://github.com/nci-hcmi-catalog/portal/issues/990)
⬆️ Upgrade @babel/cli and other dependencies (https://github.com/nci-hcmi-catalog/portal/issues/990)
⬆️ Upgrade react-app-polyfill (https://github.com/nci-hcmi-catalog/portal/issues/990)
➖ Remove unused express-inspector dependency (https://github.com/nci-hcmi-catalog/portal/issues/990)
⬆️ Upgrade babel-jest, jest, and yargs in data_model (https://github.com/nci-hcmi-catalog/portal/issues/990)
data_modelproject, resolving the following security vulnerabilities:⬆️ Upgrade selfsigned (https://github.com/nci-hcmi-catalog/portal/issues/990)
🔒️ Force immer to v9.0.14 (https://github.com/nci-hcmi-catalog/portal/issues/990)
immerto resolve to v9.0.14 to fix the following security vulnerabilities:🔒️ Force ansi-html to v0.0.9 (https://github.com/nci-hcmi-catalog/portal/issues/990)
ansi-htmlto resolve to v0.0.9 to fix the following security vulnerability:🔒️ Force browserslist to v4.20.3 (https://github.com/nci-hcmi-catalog/portal/issues/990)
browserslistto resolve to v4.20.3 to fix the following security vulnerability:🔒️ Force graphiql to v1.9.3 (https://github.com/nci-hcmi-catalog/portal/issues/990)
graphiqlto resolve to v1.9.3 to fix the following vulnerabilities:🔒️ Force isomorphic-fetch to v3.0.0 (https://github.com/nci-hcmi-catalog/portal/issues/990)
isomorphic-fetchto resolve to v3.0.0 to fix the following security vulnerabilities innode-fetch:⬇️ Bump graphiql forced resolution down to v1.7.2 (https://github.com/nci-hcmi-catalog/portal/issues/990)
🔒️ Force glob-parent to v6.0.2 (https://github.com/nci-hcmi-catalog/portal/issues/990)
glob-parentto resolve to v6.0.2 to fix the following security vulnerability:🔒️ Force css-select to v4.3.0 (https://github.com/nci-hcmi-catalog/portal/issues/990)
css-selectto resolve to v4.3.0 to fix a security vulnerability withnth-check< 2.0.1: