Outdated dependencies
New Issue Checklist
- [x] I am not disclosing a vulnerability.
- [x] I am not just asking a question.
- [x] I have searched through existing issues.
- [x] I can reproduce the issue with the latest versions of Parse Server and Parse Dashboard.
Issue Description
Currently, most of the dependencies from package.json are outdated, some of them have a vulnerability reported by npm audit. I created this ticket to keep track of the progress, as I think the best way to get everything updated is to update everything one by one which helps with testing and debugging what went wrong.
Steps to reproduce
Run any command that checks for dependency updates.
Actual Outcome
- [x] @babel/runtime
- [ ] bcryptjs
- [ ] commander
- [ ] graphiql
- [ ] graphql
- [ ] history
- [x] immutable
- [x] package-json
- [ ] react
- [ ] react-ace
- [ ] react-dnd
- [ ] react-dnd-html5-backend
- [ ] react-dom
- [x] react-helmet
- [x] react-popper-tooltip
- [ ] react-redux
- [ ] regenerator-runtime
- [ ] semver
- [ ] @actions/core
- [x] @babel/core
- [x] @babel/plugin-proposal-decorators
- [x] @babel/plugin-transform-regenerator
- [x] @babel/plugin-transform-runtime
- [x] @babel/preset-env
- [x] @babel/preset-react
- [ ] @semantic-release/changelog
- [ ] @semantic-release/commit-analyzer
- [ ] @semantic-release/git
- [ ] @semantic-release/github
- [ ] @semantic-release/npm
- [ ] @semantic-release/release-notes-generator
- [ ] all-node-versions
- [x] babel-loader
- [ ] core-js
- [ ] cross-env
- [x] css-loader
- [ ] eslint
- [ ] eslint-plugin-jest
- [ ] eslint-plugin-react
- [x] http-server
- [ ] jest
- [ ] marked
- [x] node-sass
- [ ] path-to-regexp
- [ ] puppeteer
- [ ] react-test-renderer
- [x] sass-loader
- [ ] semantic-release
- [x] style-loader
- [x] webpack
- [x] webpack-cli
- [ ] yaml
Expected Outcome
There should not be any outdated dependency, or at least all dependencies included in npm audit should be fixed.
Environment
Node v14.17.3
Dashboard
- Parse Dashboard version: 3.3.0-alpha.14
- Browser (Safari, Chrome, Firefox, Edge, etc.): n/a
- Browser version: n/a
Server
- Parse Server version: n/a
- Operating system: n/a
- Local or remote host (AWS, Azure, Google Cloud, Heroku, Digital Ocean, etc): n/a
Database
- System (MongoDB or Postgres): n/a
- Database version: n/a
- Local or remote host (MongoDB Atlas, mLab, AWS, Azure, Google Cloud, etc): n/a
Logs
Thanks for opening this issue!
- 🚀 You can help us to fix this issue faster by opening a pull request with a failing test. See our Contribution Guide for how to make a pull request, or read our New Contributor's Guide if this is your first time contributing.
@visualfanatic That's quite an effort - hats off! Maybe you could reduce your work if you combine dependency upgrades that are not major version upgrades into 1 common PR. We trust that the package maintainers follow semver, so we usually do not test anything manually if the CI passes and it's not a major version upgrade.
Upgrading semantic-release 17.4.6 → 18.0.0 requires Node 16 in the CI as well. A PR for that should include the related dependencies @semantic....
🎉 This change has been released in version 5.1.0-beta.2
🎉 This change has been released in version 5.1.0-alpha.11
🎉 This change has been released in version 5.1.0