search

vanvalenlab / kiosk-frontend

DeepCell web application built using NodeJS, Express, React, and Webpack.
Other
1 stars 0 forks source link

Upgrade dependencies in preparation for dependabot fixes. #108

Closed willgraf closed 4 years ago

willgraf commented 4 years ago

Some of our dependencies depend on insecure versions of kind-of (CVE-2019-20149) and minimify (CVE-2020-7598). While we do not depend on these directly, some of our dependencies are pinned to versions that do.

This PR upgrades all related dependencies to their latest version, which also necessitates a base image upgrade from carbon-apline to lts-alpine (which was long overdue).