gatsby-plugin-s3 icon indicating copy to clipboard operation
gatsby-plugin-s3 copied to clipboard

Published 20 hours ago • verified publisher icon gatsby-uc

chore: Upgrade proxy-agent

Open jessdelacruzsantos opened this issue 5 months ago • 4 comments

Context

The current version of proxy-agent has the package vm2 as a dependency. vm2 has a current vulnerability found here. Unfortunately vm2 is no longer supported. The only mitigation is to upgrade proxy-agent to a version that no longer relies on vm2.

I've upgraded this dependency to the latest version.

Difference

The main differences between the old and the new proxy-agent are:

  • ProxyAgent is an attribute of the exported package
  • When creating a new ProxyAgent instance we no longer have to pass in the HTTP(S) proxy URL, it is retrieved from the environment variables.

Issues addressed

https://github.com/gatsby-uc/gatsby-plugin-s3/issues/257

jessdelacruzsantos avatar Sep 05 '24 16:09 jessdelacruzsantos