sentry-cordova icon indicating copy to clipboard operation
sentry-cordova copied to clipboard

Fix: dependabot security fixes

Open lucas-zimerman opened this issue 1 year ago • 0 comments

This PR aims to decrease the number of Security issues spotted by Dependabot, most of them do not affect users, only local builds of the SDK.

Fixes:

  • sentry-cordova/security/dependabot/115
  • sentry-cordova/security/dependabot/113
  • sentry-cordova/security/dependabot/112
  • sentry-cordova/security/dependabot/110
  • sentry-cordova/security/dependabot/106
  • sentry-cordova/security/dependabot/52
  • sentry-cordova/security/dependabot/48
  • sentry-cordova/security/dependabot/44
  • sentry-cordova/security/dependabot/41
  • sentry-cordova/security/dependabot/36
  • sentry-cordova/security/dependabot/35
  • sentry-cordova/security/dependabot/33
  • sentry-cordova/security/dependabot/35
  • sentry-cordova/security/dependabot/19
  • sentry-cordova/security/dependabot/14
  • sentry-cordova/security/dependabot/12
  • sentry-cordova/security/dependabot/6
  • sentry-cordova/security/dependabot/4
  • sentry-cordova/security/dependabot/2
  • sentry-cordova/security/dependabot/1

Removed:

  • Removed only packages that weren't in use or that were too old and could be easily replaced by an alternative.

  • codecov package: deprecated in favor of Github action: https://about.codecov.io/blog/codecov-uploader-deprecation-plan/

  • npm-run-all: latest update from the package was 3 years ago, replaced it by simple scripts.

  • rollup packages: replaced by new packages by rollup.

Code change:

  • There were no logic change, only formatting changes implemented by yarn fix script and also additional deprecated warnings to allow the build to pass.

lucas-zimerman avatar Oct 24 '24 15:10 lucas-zimerman