search

posit-dev / positron

Positron, a next-generation data science IDE
https://positron.posit.co
Other
2.82k stars 90 forks source link

Update dependencies in several positron extensions for prerelease/2024.11 #5415

Closed petetronic closed 2 days ago

petetronic commented 2 days ago

Snyk reports updates are needed to express, http-proxy-middleware and micromatch to address vulnerabilities.

Tested that Help and Viewer continued to work after these upgrades.

petetronic commented 2 days ago

Note: the other changes in yarn.lock were just from running yarn and picking up dependencies based on the normal rules in package.json. The two ws dependency updates in yarn.lock are advantageous as they address two High vulnerabilities via two different transitive dependencies of different major versions that both needed updates.

petetronic commented 2 days ago

Thanks, I also tried out Mac and Windows desktop too