opensafely-core / interactive-templates

Code to generate the reports generated by OpenSAFELY Interactive
Other
0 stars 0 forks source link

Fix dependabot security alerts #362

Closed lucyb closed 2 days ago

lucyb commented 6 days ago

Ben pointed out that we have 17 security alerts on this repo: https://github.com/opensafely-core/interactive-templates/security/dependabot

We should update the affected libraries. I think Dependabot may not be picking up updates to production libraries, only dev ones, so this will need a manual upgrade rather than just merging the existing PRs.

Jongmassey commented 5 days ago

I've been through the existing dependabot PRs to hopefully make this a bit simpler