youch icon indicating copy to clipboard operation
youch copied to clipboard

chore: upgrade dependencies

Open hacknug opened this issue 1 year ago โ€ข 0 comments

๐Ÿ”— Linked issue

No issue but this is what npm audit returns:

29 vulnerabilities (2 low, 13 moderate, 11 high, 3 critical)

โ“ Type of change

  • [ ] ๐Ÿ“– Documentation (updates to the documentation or readme)
  • [ ] ๐Ÿž Bug fix (a non-breaking change that fixes an issue)
  • [ ] ๐Ÿ‘Œ Enhancement (improving an existing functionality)
  • [ ] โœจ New feature (a non-breaking change that adds functionality)
  • [x] ๐Ÿงน Chore (updates to the build process or auxiliary tools and libraries)
  • [x] โš ๏ธ Breaking change (fix or feature that would cause existing functionality to change)

๐Ÿ“š Description

A client's project is stuck using nuxt v2 and some of the warning during npm audit come from this package.

I updated the dependencies only using npm audit fix --force to avoid as many changes as possible. This fixes all of the issues reported by npm audit (running without --force leaves us with 10 vulnerabilities (1 low, 5 moderate, 4 high)).

I also removed yarn.lock since it seems there already is a package-lock.json that was touched more recently.

All tests pass but since both changes are major updates, merging this could not be as straightforward as I'd like.

Feel free to merge, close, or request changes as you see fit ๐Ÿ‘

hacknug avatar Dec 09 '24 14:12 hacknug