Upgrade testcafe to remove dependency vuln

yext / answers-search-ui

Answers Javascript API Library for building Search experiences.

Other

22 stars 7 forks source link

Upgrade testcafe to remove dependency vuln #1883

Closed Fondryext closed 3 months ago

Fondryext commented 3 months ago

Upgrade testcafe from 1.19.0 to 3.6.1. In the process, this removes the dependency on jsonwebtoken, which had a vuln in the version we were using. https://nvd.nist.gov/vuln/detail/CVE-2022-23539#vulnCurrentDescriptionTitle J=VULN-39101 TEST=auto

coveralls commented 3 months ago

coverage: 62.092%. remained the same when pulling 059889ddc8b3ea65ccae3bf5d0924cfd41694274 on dev/v1.17.2 into b393ad7df8a2c162a2a67722577968aa8755c91d on hotfix/v1.17.2.

coveralls commented 3 months ago

coverage: 62.092%. remained the same when pulling 059889ddc8b3ea65ccae3bf5d0924cfd41694274 on dev/v1.17.2 into b393ad7df8a2c162a2a67722577968aa8755c91d on hotfix/v1.17.2.