Skip to content

change: [M3-8382] - Update jsdom to remove WS package vulnerability - #10829

Merged
abailly-akamai merged 2 commits into
linode:developfrom
abailly-akamai:M3-8382
Aug 26, 2024
Merged

abailly-akamai merged 2 commits into
linode:developfrom
abailly-akamai:M3-8382

Conversation

@abailly-akamai

@abailly-akamai abailly-akamai commented Aug 24, 2024

Copy link
Copy Markdown
Contributor

Description 📝

Small PR to mitigate a vulnerability with a sub dependency of jsdom (ws): https://github.com/linode/manager/security/dependabot/103

This is only affecting dev dependencies for our unit tests.

Changes 🔄

  • Update jsdom to 24.1.1

How to test 🧪

Verification steps

  • make sure out unit test suites still all pass and don't log extra noise

As an Author I have considered 🤔

Check all that apply

  • 👀 Doing a self review
  • ❔ Our contribution guidelines
  • 🤏 Splitting feature into small PRs
  • ➕ Adding a changeset
  • 🧪 Providing/Improving test coverage
  • 🔐 Removing all sensitive information from the code and PR description
  • 🚩 Using a feature flag to protect the release
  • 👣 Providing comprehensive reproduction steps
  • 📑 Providing or updating our documentation
  • 🕛 Scheduling a pair reviewing session
  • 📱 Providing mobile support
  • ♿ Providing accessibility support

Comment thread yarn.lock
whatwg-encoding "^3.1.1"
whatwg-mimetype "^4.0.0"
whatwg-url "^14.0.0"
ws "^8.18.0"

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is the one we need since the requirement is >= 8.17.1

@abailly-akamai
abailly-akamai marked this pull request as ready for review August 24, 2024 01:22
@abailly-akamai
abailly-akamai requested a review from a team as a code owner August 24, 2024 01:22
@abailly-akamai
abailly-akamai requested review from dwiley-akamai and harsh-akamai and removed request for a team August 24, 2024 01:22
@github-actions

Copy link
Copy Markdown

Coverage Report:
Base Coverage: 82.62%
Current Coverage: 82.62%

@bnussman-akamai bnussman-akamai left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice. Thanks for getting around to these 📦

@bnussman-akamai bnussman-akamai added the Dependencies Pull requests that update a dependency file label Aug 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file Tech Debt

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

3 participants