Skip to content

chore(deps): Update Lockfile#386

Merged
evansims merged 7 commits intomasterfrom
chore/dependencies/update-lockfile
Oct 31, 2023
Merged

chore(deps): Update Lockfile#386
evansims merged 7 commits intomasterfrom
chore/dependencies/update-lockfile

Conversation

@evansims
Copy link
Copy Markdown
Contributor

@evansims evansims commented Oct 31, 2023

Description

This updates the dependencies lockfile to resolve a transient dependency vulnerability in get-func-name.

Note: The lockfile on this project is presently problematic. Because we support Node 14, we must support NPM 6. However, that version of NPM doesn't support the 'npm:' prefix/alias we use in package.json. Support for that wasn't added until NPM 8, which does not support Node 14. As such, we must generate the lockfile using a version of NPM >= 8, after which NPM 6 will successfully npm install using it. We cannot create lockfiles using NPM 6 at present, though.

References

N/A

Testing

N/A

Checklist

  • I have added documentation for new/changed functionality in this PR or in auth0.com/docs
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used, if not the default branch

@evansims evansims added the dependencies Pull requests that update a dependency file label Oct 31, 2023
@evansims evansims requested a review from a team as a code owner October 31, 2023 16:56
@evansims evansims temporarily deployed to internal October 31, 2023 16:56 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 16:56 — with GitHub Actions Inactive
@evansims evansims marked this pull request as draft October 31, 2023 16:58
@evansims evansims temporarily deployed to internal October 31, 2023 17:07 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 17:07 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 18:30 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 18:30 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 18:31 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 18:31 — with GitHub Actions Inactive
@evansims evansims temporarily deployed to internal October 31, 2023 18:32 — with GitHub Actions Inactive
@evansims evansims marked this pull request as ready for review October 31, 2023 18:34
@evansims evansims merged commit eadbe78 into master Oct 31, 2023
@evansims evansims deleted the chore/dependencies/update-lockfile branch October 31, 2023 22:47
@nandan-bhat nandan-bhat mentioned this pull request Mar 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants