Closed mudetroit closed 9 months ago
This pull request has been linked to Shortcut Story #127975: Drop Node 8 support to eliminate a security risk.
@waltjones we talked about possibly vendorizing istanbul-instrumenter-loader
. I haven't done that yet; because, there were about 3 other packages that still flagged vulnerabilities. I didn't know if it was worth it for the single item or not. Totally open to your opinion there.
I think removing Node 8 clears the way to upgrade to a newer webpack, karma, etc. and then we don't need this package.
That said, I wouldn't be opposed to vendorizing in the short term. Sooner than later we should update the main build/CI deps.
I think removing Node 8 clears the way to upgrade to a newer webpack, karma, etc. and then we don't need this package.
That said, I wouldn't be opposed to vendorizing in the short term. Sooner than later we should update the main build/CI deps.
@waltjones I would agree, how would you feel about splitting the deprecation of Node 8 support from upgrading webpack/karma/etc? Make this the official break leaving us more free to select what the next step is
splitting the deprecation of Node 8 support from upgrading webpack/karma/etc
👍 Agreed.
Description of the change
Remove support for node 8, and update dependencies as we are able to.
Type of change
Related issues
Checklists
Development
Code review