uillinois-community / uillinois-community.github.io

User-supported documentation for the University of Illinois github service.
6 stars 3 forks source link

Update to resolve dependabot alerts #45

Closed edthedev closed 2 years ago

edthedev commented 2 years ago

We should tell npm to update our package versions that drive the 11ty library that converts our Markdown into HTML. None of the dependabot alerts likely affects anything we're doing, as we use it entirely during CI/CD, but we should update to the latest package versions anyway to ease future maintenance.

Steps

npm update
npm audit fix --force

The --force flag might not be required, if the version of 11ty hasn't moved too far since last update, but it almost certainly is needed this time as 11ty recently had a big update.

The --force flag allows changes that result in needing changes to our Markdown templates, but it's unlikely to affect our site as we're not using includes or other advanced functionality.