openedx / edx-platform

The Open edX LMS & Studio, powering education sites around the world!
https://openedx.org
GNU Affero General Public License v3.0
7.09k stars 3.78k forks source link

Dependency Dashboard #34900

Open renovate[bot] opened 3 weeks ago

renovate[bot] commented 3 weeks ago

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

These problems occurred while renovating this repository. View logs.

[!WARNING] These dependencies are deprecated:

Datasource Name Replacement PR?
npm @babel/plugin-proposal-object-rest-spread Unavailable
npm picturefill Unavailable
npm popper.js Unavailable

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

Detected dependencies

npm
package.json - `@babel/core 7.19.0` - `@babel/plugin-proposal-object-rest-spread ^7.18.9` - `@babel/plugin-transform-object-assign ^7.18.6` - `@babel/preset-env ^7.19.0` - `@babel/preset-react 7.18.6` - `@edx/brand-edx.org ^2.0.7` - `@edx/edx-bootstrap 1.0.4` - `@edx/edx-proctoring ^4.18.1` - `@edx/frontend-component-cookie-policy-banner 2.2.0` - `@edx/paragon 2.6.4` - `@edx/studio-frontend ^2.1.0` - `axios ^0.28.0` - `babel-loader ^9.1.3` - `babel-plugin-transform-class-properties 6.24.1` - `babel-polyfill 6.26.0` - `backbone 1.4.1` - `backbone-associations 0.6.2` - `backbone.paginator 2.0.8` - `bootstrap 4.0.0` - `camelize 1.0.1` - `classnames 2.3.1` - `css-loader 0.28.8` - `datatables 1.10.18` - `datatables.net-fixedcolumns 3.2.6` - `edx-ui-toolkit 1.5.5` - `exports-loader 0.6.4` - `file-loader ^6.2.0` - `font-awesome 4.7.0` - `hls.js 0.14.17` - `imports-loader 0.7.1` - `jest-environment-jsdom ^26.0.0` - `jquery 2.2.4` - `jquery-migrate 1.4.1` - `jquery.scrollto 2.1.3` - `js-cookie 3.0.5` - `jwt-decode ^3.1.2` - `moment 2.30.1` - `moment-timezone 0.5.45` - `node-gyp 10.0.1` - `picturefill 3.0.3` - `popper.js 1.16.1` - `prop-types 15.6.0` - `raw-loader 0.5.1` - `react 16.14.0` - `react-dom 16.14.0` - `react-focus-lock ^1.19.1` - `react-redux 5.0.7` - `react-router-dom 5.1.2` - `react-slick 0.29.0` - `redux 3.7.2` - `redux-thunk 2.2.0` - `requirejs 2.3.6` - `rtlcss 2.2.1` - `sass ^1.54.8` - `sass-loader ^14.1.1` - `scriptjs 2.5.9` - `style-loader 0.18.2` - `svg-inline-loader 0.8.2` - `uglify-js 2.7.0` - `underscore 1.12.1` - `underscore.string 3.3.6` - `universal-cookie ^4.0.4` - `webpack ^5.90.3` - `webpack-bundle-tracker 0.4.3` - `webpack-merge 4.1.1` - `whatwg-fetch 2.0.4` - `which-country 1.0.0` - `@edx/eslint-config ^3.1.1` - `@edx/mockprock 3ad18c6888e6521e9bf7a4df0db6f8579b928235` - `@edx/stylelint-config-edx 2.3.3` - `babel-jest 26.0.0` - `enzyme 3.11.0` - `enzyme-adapter-react-16 1.15.8` - `eslint-import-resolver-webpack 0.13.8` - `jasmine-core 2.6.4` - `jest 26.0.0` - `jest-enzyme 6.0.2` - `karma 0.13.22` - `karma-chrome-launcher 0.2.3` - `karma-coverage 0.5.5` - `karma-firefox-launcher 0.1.7` - `karma-jasmine 0.3.8` - `karma-jasmine-html-reporter 0.2.2` - `karma-junit-reporter 1.1.0` - `karma-requirejs 0.2.6` - `karma-selenium-webdriver-launcher 0.0.4-openedx.0` - `karma-sourcemap-loader 0.3.7` - `karma-spec-reporter 0.0.36` - `karma-webpack ^5.0.1` - `plato 1.7.0` - `react-test-renderer 16.4.0` - `selenium-webdriver 3.4.0` - `sinon 2.4.1` - `squirejs 0.1.0` - `string-replace-loader ^3.1.0` - `stylelint-formatter-pretty 1.1.4` - `webpack-cli ^5.1.4`

robrap commented 3 weeks ago

@feanil: Is there any relationship between this issue and any of the larger upgrades, or is this independent? Is this prioritized on the maintenance board? @jristau1984: I am guessing that arbi-bom would pick up this work at some point, but you can confirm. Thank you.

feanil commented 3 weeks ago

@robrap as fellow maintainers I just wanted everyone to be aware of all the know out of date packages there are currently in edx-platform. This issue is auto-generated by renovate. I didn't put it on the maintenance board because it is specific to the maintenance of edx-platform and not work being coordinated by the maintenance working group. As maintainers, we should figure out how we want to tackle this, but step 1 was making the work visible.

jristau1984 commented 3 weeks ago

I have added this to the Arbi-BOM board, and the team will be triaging it in the next few days. The plan is to identify the subset of the overall list that the team will tackle (most are FE, and FE dependencies can be tricky to update).

There is a new member of the team, so some of these will be used to help onboard her to the platform. There is no timeline for landing any of these updates from the team right now.

robrap commented 3 weeks ago

@feanil: That makes sense. And I guess it is really for @jristau1984 to decide when he has questions prioritizing general edx-platform maintenance work against changes with deadlines (e.g. major upgrades, DEPR, etc.).