Skip to content

Update packages #405

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 4 commits into from
Apr 3, 2024
Merged

Update packages #405

merged 4 commits into from
Apr 3, 2024

Conversation

jozefizso
Copy link
Collaborator

I change the @types/node package for the Node 18 runtime as the project still targets Node 18 (see .nvmrc).

I've updates most of the packages, but some of them were not upgraded to latest major versions because I had issues with compiling the project (eg. see octokit/types.ts#626)

npm audit report

undici  <=5.28.2
Undici proxy-authorization header not cleared on cross-origin redirect in fetch - https://github.com/advisories/GHSA-3787-6prv-h9w3
fix available via `npm audit fix`
node_modules/undici

1 low severity vulnerability

 @actions/core@1.10.1
  └─┬ @actions/http-client@2.2.0
    └── undici@5.28.2

@jozefizso jozefizso self-assigned this Apr 2, 2024
@jozefizso jozefizso added this to the v1.9.0 milestone Apr 2, 2024
@jozefizso jozefizso merged commit 82b258b into main Apr 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@DominikPalo DominikPalo DominikPalo approved these changes

@j-catania j-catania j-catania approved these changes

@dorny dorny Awaiting requested review from dorny

Assignees

@jozefizso jozefizso

Labels
None yet
Projects
None yet
Milestone
v1.9.0
Development

Successfully merging this pull request may close these issues.
3 participants
@jozefizso @DominikPalo @j-catania