[YUNIKORN-3268] WEB UI: Update dependencies#273
Conversation
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #273 +/- ##
=======================================
Coverage 41.66% 41.66%
=======================================
Files 61 61
Lines 2328 2328
Branches 383 383
=======================================
Hits 970 970
Misses 1165 1165
Partials 193 193 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
|
Moving to draft as the changes for security fixes in dependencies will change with the karma to vite PR open #271. |
CVEs fixed based on the open dependabot reports. Regenerated the pnpm-lock.yaml file after the updates
| "lodash@>=4.0.0 <=4.18.0": "4.18.1", | ||
| "hono@<4.12.18": "4.12.18", | ||
| "postcss@<8.5.10": "8.5.10", | ||
| "picomatch@>=4.0.0 <4.0.4": "4.0.4", |
There was a problem hiding this comment.
Only lodash and picomatch are dependencies for karma.
Other dependencies can be updated by updating direct dependencies of which they are part of.
Please see - https://github.com/apache/yunikorn-web/blob/master/README.md#security-fixes
adityadtu5
left a comment
There was a problem hiding this comment.
Please check https://github.com/apache/yunikorn-web/blob/master/README.md#security-fixes. It should be possible to further reduce number of overrides.
What is this PR for?
CVEs fixed based on the open dependabot reports.
Regenerated the pnpm-lock.yaml file after the updates
What type of PR is it?
What is the Jira issue?
How should this be tested?
Ran a clean build: