Quantcast
Channel: Issues for Drupal core
Viewing all articles
Browse latest Browse all 297597

Update our yarn dev dependencies

$
0
0

Problem/Motivation

yarn audit shows the following numbers of vulnerabilities on each branch:

  • 10.0.x, 9.4.x, and 9.3.x: 18 Moderate | 3 High
  • 9.2.x: 24 Moderate | 4 High

Steps to reproduce

  1. cd core
  2. yarn install
  3. yarn audit

Proposed resolution

Not all of the dependency updates can be addressed without increasing our constraints. However, running a yarn upgrade without modifying the constraints gets rid of some of the vulnerabilities, reducing it to:

  • 10.0.x, 9.4.x, 9.3.x: 16 Moderate | 1 High
  • 9.2.x: 12 Moderate

Let's fix those first (after reviewing that the upgraded versions are safe and testing). Then, let's handle whatever increases we need to make to constraints in followup issues.

Remaining tasks

Patches for 10.0.x, 9.4.x, 9.3.x, and 9.2.x that run:

  1. cd core
  2. yarn install
  3. yarn upgrade

User interface changes

API changes

Data model changes

Release notes snippet


Viewing all articles
Browse latest Browse all 297597

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>