Skip to content

Dependabot vulnerabilities -- what we are doing #17

Closed

Description

@dannyreg

Dependabot is giving us a few PRs to update dependencies, thankfully most of these are dev dependencies, but given how two of them are major versions -- we gotta be a little careful here because tests may break.

What I am going to do is create a PR that not only updates the packages, but also removes the statuses module and attempt to replace it with http-status-codes .

Activity

  1. self-assigned this
    on Oct 10, 2021
  2. jankapunkt commented on Oct 10, 2021

    @jankapunkt
    Member

    you will see if it breaks things, since we have now our CI running :-)

  3. jankapunkt commented on Oct 10, 2021

    @jankapunkt
    Member

    Also note, that future dependabot PRs will automatically include, whether CI has failed or passed

  4. added
    completed 😀Work that has been completed
    and removed on Oct 13, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

completed 😀Work that has been completeddependencies 🔌Pull requests that update a dependency filediscussion 🗨️Discussion about a particular topic.

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions