Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update quip-apps-webpack-config dependency to match the latest version. #565

Merged
merged 6 commits into from
May 2, 2024

Conversation

kvnlam
Copy link
Contributor

@kvnlam kvnlam commented May 2, 2024

Background / Why?

We have packages that have been using a really old version of quip-apps-webpack-config. The current version contains several security vulnerabilities so updating to the latest version should resolve things.

This is part of an ongoing effort to tackle our outstanding Snyk tickets: https://jira.tinyspeck.com/browse/QUIPCORE-1540

Summary

Update quip-apps-webpack-config dependency to match the latest version.

Quip Pull Requests & flow | Quip Emergency PR Approval Docs

@kvnlam kvnlam force-pushed the kvnlam_dreamy-heisenberg branch from d1e1d0f to 01293f7 Compare May 2, 2024 00:08
kvnlam added 5 commits May 2, 2024 14:10
- Remove `prebuild` step since it's causing a lot of typing errors
- Change test workflow to use Node 20
- Change test workflow to run `npm ci` instead of `npm install`
- Update Typescript and add React dependencies to ensure compatibility
- Upgrade dependencies as required
- Update GitHub test workflows to use Node 20
- This package is also references an outdated version of `quip-apps-webpack-config`
"tape": "^4.11.0",
"typescript": "^3.6.3"
"typescript": "^5.4.5"
},
"gitHead": "1633a60816f6da91d4b022751e9f3bfd45ae18c1"
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i had to update these dependencies to prevent the build from failing

@kvnlam kvnlam requested a review from hao2018 May 2, 2024 22:10
Copy link
Contributor

@hao2018 hao2018 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you Kevin!

@kvnlam kvnlam merged commit c62f3af into next May 2, 2024
8 checks passed
@kvnlam kvnlam deleted the kvnlam_dreamy-heisenberg branch May 3, 2024 20:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants