Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate to NPM package lock over Yarn, and update dependencies #114

Merged
merged 6 commits into from
Sep 11, 2020

Conversation

stevehobbsdev
Copy link
Contributor

@stevehobbsdev stevehobbsdev commented Sep 11, 2020

Changes

  • Remove yarn.lock in favour of using NPM's lock file
  • Update dependencies where possible, including those for security alerts.

Note: acorn cannot yet be updated, there is a pending release with an update but is not yet available in NPM.

Testing

Please describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. If this library has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

  • This change adds test coverage

Checklist

@stevehobbsdev stevehobbsdev added this to the vNext milestone Sep 11, 2020
@stevehobbsdev stevehobbsdev requested a review from a team September 11, 2020 10:38
@stevehobbsdev stevehobbsdev added CH: Security dependencies Pull requests that update a dependency file tiny labels Sep 11, 2020
Copy link
Contributor

@lbalmaceda lbalmaceda left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@stevehobbsdev now that it's removed, can we add the yarn lock file to the .gitignore, please?

@stevehobbsdev
Copy link
Contributor Author

@lbalmaceda Of course! Done :)

@stevehobbsdev stevehobbsdev merged commit 88d31eb into master Sep 11, 2020
@stevehobbsdev stevehobbsdev mentioned this pull request Sep 11, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CH: Changed CH: Security dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants