Update packages to remove security vulnerabilities - #605
Conversation
|
Thanks for the pull request, @mamankhan99! I've created OSPR-6770 to keep track of it in JIRA, where we prioritize reviews. Please note that it may take us up to several weeks or months to complete a review and merge your PR. Feel free to add as much of the following information to the ticket as you can:
All technical communication about the code itself will be done via the GitHub pull request interface. As a reminder, our process documentation is here. Please let us know once your PR is ready for our review and all tests are green. |
|
@mamankhan99 Thank you for your contribution. Once your forms have been processed, we will be able to review. |
|
Blocked till #607 got merged. |
|
@mamankhan99 Your CLA check got green, so owning team can review and merge any time they find fit. |
|
Looks good, seems like it has some failing tests though. Probably need to save some snapshots, I'd guess? |
Codecov Report
@@ Coverage Diff @@
## master #605 +/- ##
==========================================
+ Coverage 39.53% 39.58% +0.05%
==========================================
Files 106 106
Lines 2188 2190 +2
Branches 582 586 +4
==========================================
+ Hits 865 867 +2
Misses 1238 1238
Partials 85 85
Continue to review full report at Codecov.
|
* fix: updated vulnerable packages * fix: fixed failed tests after package update * fix: linting issues failing ci tests * fix: package lock update * fix: snapshot updated to UTC * fix: missing dependency 'long'
Update packages to remove security vulnerabilities (openedx#605) * fix: updated vulnerable packages * fix: fixed failed tests after package update * fix: linting issues failing ci tests * fix: package lock update * fix: snapshot updated to UTC * fix: missing dependency 'long'
This PR contains the following updates:
1.2.5->1.2.61.2.1->1.3.01.14.5->1.14.84.17.15->4.17.212.6.1->2.6.72.1.2->2.6.1Git issues:
chore(deps): update dependency node-forge to 1.3.0 [security]
chore(deps): update dependency minimist to 1.2.6 [security]
Pre-Merge Checklist:
Updated the version number in edx_proctoring/init.py and package.json if these changes are to be released.
Described your changes in CHANGELOG.rst
Confirmed Github reports all automated tests/checks are passing.
Approved by at least one additional reviewer.
Post-Merge:
Create a tag matching the new version number.