aio-cli

aio-cli copied to clipboard

fix: update package-lock for high severity items

3

fixes #617 ## Description Only moderate items remain: ``` $ npm audit # npm audit report axios 0.8.1 - 0.27.2 Severity: moderate Axios Cross-Site Request Forgery Vulnerability - https://github.com/advisories/GHSA-wf5p-g6vw-rhxx fix...

shazron

npm scripts are not cross-platform

1

1. `npm run unlink` fails (Windows, rm does not exist) 2. `npm run link` fails (are we doing linking on Windows?) Not sure if these are relevant anymore, for cross-platform...

shazron

fix npm audit issues

1

See PR #616

shazron

chore(deps-dev): bump oclif from 3.17.2 to 4.9.0

1

Bumps [oclif](https://github.com/oclif/oclif) from 3.17.2 to 4.9.0. Release notes Sourced from oclif's releases. 4.9.0 Features no lockfiles in tarballs (#1385) (4bfa96f), closes #1386 4.8.8 Bug Fixes deps: bump @​oclif/core from 3.26.3...

dependabot[bot]

Output action urls during run/dev

3

Developers report errors to us sometimes, and they are simply lacking information on what url to load to test their action code. During run/dev we only output the frontend url,...

purplecabbage

web actions and web sequences with the same name can be deployed, web action implementation is unreachable

4

## Actual You are able to deploy a web action and web sequence with the same name, and they have the same web url, listed twice. The web url listed...

shazron

Bumps [ejs](https://github.com/mde/ejs) from 3.1.9 to 3.1.10. Release notes Sourced from ejs's releases. v3.1.10 Version 3.1.10 Commits d3f807d Version 3.1.10 9ee26dd Mocha TDD e469741 Basic pollution protection 715e950 Merge pull request...

dependabot[bot]

Confusing lowercase .env keys

1

When we `aio app use` to get new credentials for a project/namespace the .env file is merged/overwritten. The values we write are of the form: `AIO_runtime_namespace=` If we want to...

purplecabbage

Bumps [@oclif/core](https://github.com/oclif/core) from 2.11.7 to 3.26.4. Release notes Sourced from @​oclif/core's releases. 3.26.4 Bug Fixes deps: bump tar from 6.1.15 to 6.2.1 (#1049) (6507e37) 3.26.3 Bug Fixes deps: bump ejs...

dependabot[bot]

npm install warnings >= v10.1.0

3

Investigate to update any outdated packages. Most of these are dependencies of our dependencies (sub-dependencies), so we are dependent on the module authors to update them. Some of our dependencies...

shazron