search

phetsims / chipper

Tools for developing and building PhET interactive simulations.
MIT License
11 stars 12 forks source link

Cross-realm object access in Webpack 5 #1398

Closed samreid closed 12 months ago

samreid commented 12 months ago

Would be good to address: https://github.com/phetsims/chipper/security/dependabot/4

samreid commented 12 months ago

@marlitas and I reviewed the changelog https://github.com/webpack/webpack/releases/tag/v5.76.0 and agreed it seems very safe to upgrade to Webpack 5.75 -> 5.76.

samreid commented 12 months ago

It seemed straightforward. We tested a built phet-io version, and it seemed OK. We also saw that https://github.com/phetsims/chipper/security/dependabot/4 closed itself. We will PSA that everyone needs to pull and update.

samreid commented 12 months ago

PSA sent, closing.