Closed lucyb closed 2 days ago
Ben pointed out that we have 17 security alerts on this repo: https://github.com/opensafely-core/interactive-templates/security/dependabot
We should update the affected libraries. I think Dependabot may not be picking up updates to production libraries, only dev ones, so this will need a manual upgrade rather than just merging the existing PRs.
I've been through the existing dependabot PRs to hopefully make this a bit simpler
Ben pointed out that we have 17 security alerts on this repo: https://github.com/opensafely-core/interactive-templates/security/dependabot
We should update the affected libraries. I think Dependabot may not be picking up updates to production libraries, only dev ones, so this will need a manual upgrade rather than just merging the existing PRs.