Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Handle dependency updates on master and release/4.x branches #7492

Closed
char0n opened this issue Sep 10, 2021 · 4 comments
Closed

Handle dependency updates on master and release/4.x branches #7492

char0n opened this issue Sep 10, 2021 · 4 comments
Assignees
@char0n
Labels
dependencies Pull requests that update a dependency file security fix Security fix generated by WhiteSource security vulnerability Security vulnerability detected by WhiteSource version: 3.x version: 4.x

Comments

@char0n
Copy link
Member

char0n commented Sep 10, 2021 •
edited

We're interested primarily in fixing all issues in production dependencies.

Secondarily in fixing dev dependencies security issues.

Issues that cannot be currently fixed will be dismissed (these issues are specific either to dev dependency webpack@4 or dependencies with no fix available)

All the changes done on master need to be ported to release/4.x branch and changes need to released for v3 and v4.
@char0n char0n added version: 3.x dependencies Pull requests that update a dependency file security vulnerability Security vulnerability detected by WhiteSource security fix Security fix generated by WhiteSource version: 4.x labels Sep 10, 2021
@char0n char0n self-assigned this Sep 10, 2021
@char0n
Copy link
Member Author

char0n commented Sep 10, 2021

All fixable problems have been fixed. We have clear production dependencies.

I've cleaned all dependabot PRs or merge ones that made sense to merge (in context of v4)

@char0n char0n mentioned this issue Sep 10, 2021
Merged
17 tasks
@char0n
Copy link
Member Author

char0n commented Sep 10, 2021

All production deps vulnerabilities have been fixed.

char0n added a commit that referenced this issue Sep 10, 2021
@char0n
fix(security): fix security issue in prismjs dep (#7493)
2a1b710 
Refs #7492
char0n added a commit that referenced this issue Sep 13, 2021
@char0n
chore(deps): bump url-parse from 1.5.1 to 1.5.3
764c16a 
Refs #7492
char0n added a commit that referenced this issue Sep 13, 2021
@char0n
fix(security): fix security issue in prismjs dep
f7277d0 
Refs #7492
char0n added a commit that referenced this issue Sep 13, 2021
@char0n
chore(deps-dev): fix all fixable security issues in dev deps
95f20c8 
Refs #7492
char0n added a commit that referenced this issue Sep 13, 2021
@char0n
chore(deps): bump url-parse from 1.5.1 to 1.5.3
12b617e 
Refs #7492
char0n added a commit that referenced this issue Sep 13, 2021
@char0n
fix(security): fix security issue in prismjs dep
e8c9fdf 
Refs #7492
char0n added a commit that referenced this issue Sep 13, 2021
@char0n
chore(deps-dev): fix all fixable security issues in dev deps
3674a41 
Refs #7492
@char0n
Copy link
Member Author

char0n commented Sep 13, 2021

Released as https://github.com/swagger-api/swagger-ui/releases/tag/v4.0.0-rc.1

char0n added a commit that referenced this issue Sep 13, 2021
@char0n
chore(deps): bump url-parse from 1.5.1 to 1.5.3
719c93e 
Refs #7492
char0n added a commit that referenced this issue Sep 13, 2021
@char0n
fix(security): fix security issue in prismjs dep
c409bac 
Refs #7492
char0n added a commit that referenced this issue Sep 13, 2021
@char0n
chore(deps-dev): fix all fixable security issues in dev deps
0ce5432 
Refs #7492
@char0n
Copy link
Member Author

char0n commented Sep 13, 2021

Released as https://github.com/swagger-api/swagger-ui/releases/tag/v3.52.2

@char0n char0n closed this as completed Sep 13, 2021
char0n added a commit that referenced this issue Sep 15, 2021
@char0n
chore(deps): bump url-parse from 1.5.1 to 1.5.3
f1d2e74 
Refs #7492
char0n added a commit that referenced this issue Sep 15, 2021
@char0n
fix(security): fix security issue in prismjs dep
b667d99 
Refs #7492
char0n added a commit that referenced this issue Sep 15, 2021
@char0n
chore(deps-dev): fix all fixable security issues in dev deps
c398bf2 
Refs #7492
char0n added a commit that referenced this issue Sep 20, 2021
@char0n
chore(deps): bump url-parse from 1.5.1 to 1.5.3
a44cf50 
Refs #7492
char0n added a commit that referenced this issue Sep 20, 2021
@char0n
fix(security): fix security issue in prismjs dep
3490577 
Refs #7492
char0n added a commit that referenced this issue Sep 20, 2021
@char0n
chore(deps-dev): fix all fixable security issues in dev deps
8778bdb 
Refs #7492
char0n added a commit that referenced this issue Oct 8, 2021
@char0n
chore(deps): bump url-parse from 1.5.1 to 1.5.3
c2aa9ed 
Refs #7492
char0n added a commit that referenced this issue Oct 8, 2021
@char0n
fix(security): fix security issue in prismjs dep
72b63cc 
Refs #7492
char0n added a commit that referenced this issue Oct 8, 2021
@char0n
chore(deps-dev): fix all fixable security issues in dev deps
6a1f961 
Refs #7492
char0n added a commit that referenced this issue Oct 12, 2021
@char0n
chore(deps): bump url-parse from 1.5.1 to 1.5.3
5951944 
Refs #7492
char0n added a commit that referenced this issue Oct 12, 2021
@char0n
fix(security): fix security issue in prismjs dep
006a753 
Refs #7492
char0n added a commit that referenced this issue Oct 12, 2021
@char0n
chore(deps-dev): fix all fixable security issues in dev deps
768385e 
Refs #7492
char0n added a commit that referenced this issue Oct 22, 2021
@char0n
chore(deps): bump url-parse from 1.5.1 to 1.5.3
ab735ef 
Refs #7492
char0n added a commit that referenced this issue Oct 22, 2021
@char0n
fix(security): fix security issue in prismjs dep
ac8e55d 
Refs #7492
char0n added a commit that referenced this issue Oct 22, 2021
@char0n
chore(deps-dev): fix all fixable security issues in dev deps
af2818b 
Refs #7492
char0n added a commit that referenced this issue Nov 2, 2021
@char0n
chore(deps): bump url-parse from 1.5.1 to 1.5.3
2c16d16 
Refs #7492
char0n added a commit that referenced this issue Nov 2, 2021
@char0n
fix(security): fix security issue in prismjs dep
6b3ff14 
Refs #7492
char0n added a commit that referenced this issue Nov 2, 2021
@char0n
chore(deps-dev): fix all fixable security issues in dev deps
9e04788 
Refs #7492
char0n added a commit that referenced this issue Nov 3, 2021
@char0n
chore(deps): bump url-parse from 1.5.1 to 1.5.3
d6c2604 
Refs #7492
char0n added a commit that referenced this issue Nov 3, 2021
@char0n
fix(security): fix security issue in prismjs dep
ece5945 
Refs #7492
char0n added a commit that referenced this issue Nov 3, 2021
@char0n
chore(deps-dev): fix all fixable security issues in dev deps
640aa3a 
Refs #7492
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@char0n char0n

Labels
dependencies Pull requests that update a dependency file security fix Security fix generated by WhiteSource security vulnerability Security vulnerability detected by WhiteSource version: 3.x version: 4.x
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@char0n