Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: update dependencies to the latest version #1537

Merged
merged 1 commit into from
Aug 2, 2023

Conversation

ersachin3112
Copy link
Contributor

@ersachin3112 ersachin3112 commented Aug 2, 2023

This PR contains a:

  • bugfix
  • new feature
  • code refactor
  • test update
  • typo fix
  • metadata update

Motivation / Use-Case

update dependencies to the latest version

Breaking Changes

No

Additional Info

No

@codecov
Copy link

codecov bot commented Aug 2, 2023

Codecov Report

Patch and project coverage have no change.

Comparison is base (579fc13) 95.78% compared to head (0867041) 95.78%.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #1537   +/-   ##
=======================================
  Coverage   95.78%   95.78%           
=======================================
  Files          10       10           
  Lines        1185     1185           
  Branches      456      456           
=======================================
  Hits         1135     1135           
  Misses         41       41           
  Partials        9        9           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@snitin315 snitin315 merged commit e2b6dd1 into webpack-contrib:master Aug 2, 2023
19 checks passed
@ersachin3112 ersachin3112 deleted the deps-up-date branch September 1, 2023 23:59
@lhtdesignde
Copy link

@snitin315 @ersachin3112 Would it be possible to make a release with this? It would fix this vulnerability GHSA-c2qf-rxjj-qqgw
Version 6.8.1 still runs "semver": "^7.3.8"

@evenstensberg
Copy link
Member

CC @alexander-akait

@alexander-akait
Copy link
Member

@lhtdesignde Hello, what is the problem to update postcss locally? We use ^ so we don't block this action

@lhtdesignde
Copy link

@alexander-akait not sure what you mean. I have semver version 7.5.4 installed but the version within the node_modules of css-loader is still 7.3.8. 🤷🏻‍♀️ I can't really handle this as semver is not a peer dependency.
But no worries. It's not a critical vulnerability. It can wait till your next release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants