Closed ningsongshen closed 4 years ago
This PR just commits package-lock.json, which really is just a transient file. What we want to do instead is update the dependencies of package.json (via ncu), which should hopefully address all dependabot's issues in the process.
We are converting this to TypeScript soon (which I think has the updated packages) so I will leave it as is for now.
Not sure why it was failing (perhaps b/c I was using TS branch deps) but reinstalled all packages, tested it, and updates a bunch of dependencies.
This should resolve all of dependabot's updates.