-
Notifications
You must be signed in to change notification settings - Fork 10.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: update some nonbreaking major packages #26709
Closed
Closed
Changes from 37 commits
Commits
Show all changes
44 commits
Select commit
Hold shift + click to select a range
e2ab194
chore(gatsby): update babel-plugin-add-module-exports
hoobdeebla 8aba54e
perf(gatsby): enable parallel terser runs on WSL
hoobdeebla 5380de4
chore: update better-opn, v8-compile-cache, react-refresh
hoobdeebla ef75cf3
Revert "perf(gatsby): enable parallel terser runs on WSL"
hoobdeebla 0959f02
chore: update micromatch, null-loader, string-similarity
hoobdeebla 9b80729
chore: update find-yarn-workspace-root, parse-numeric-range, preval.m…
hoobdeebla 7f50eb9
chore: update graphql-tools packages, eslint-related packages, docume…
hoobdeebla d727bf4
chore(gatsby): remove @types/webpack-merge
hoobdeebla 13e875e
chore: update fast-levenshtein, markdown-magic, mini-css-extract-plug…
hoobdeebla 694f9e6
fix(gatsby-recipes): switch from isomorphic-fetch to cross-fetch
hoobdeebla 7d51ceb
chore: update md5-file, mkdirp, p-queue, pify, puppeteer, tmp-promise…
hoobdeebla 3d26f5f
chore(gatsby-theme): update globby and inquirer, remove duplicate glo…
hoobdeebla 076a890
Merge branch 'master' into gatsby-nonbreaking-major
hoobdeebla d0e0849
test(gatsby-recipes): update snapshot
hoobdeebla c232473
Merge branch 'master' into gatsby-nonbreaking-major
hoobdeebla 4fdbb2b
chore: update axios, guess-webpack, jest-environment-jsdom-fourteen, …
hoobdeebla 1e5da4c
chore: update change-case, debug, file-type, got, jest-worker, json2c…
hoobdeebla 0fce86f
chore: update cache-manager, coffee-loader, execa, rollup plugins, su…
hoobdeebla ce025e5
Merge branch 'master' into gatsby-nonbreaking-major
hoobdeebla b720063
Merge branch 'master' into gatsby-nonbreaking-major
hoobdeebla c0cddb1
chore: update react-docgen, xlsx, zipkin
hoobdeebla 0b1fc11
chore: update fs-extra, remove duplicate monorepo devDeps from packages
hoobdeebla dcfd7a1
Merge branch 'master' into gatsby-nonbreaking-major
hoobdeebla 7a2e987
chore(gatsby-recipes): remove unused acorn deps
hoobdeebla cd30c0b
chore: update agadoo, ast-types, babel-plugin-react-css-modules, comm…
hoobdeebla e22e39c
Merge branch 'master' into gatsby-nonbreaking-major
hoobdeebla dc59a3e
test(gatsby-recipes): update gatsby-plugin-manifest README snapshot
hoobdeebla dfbac05
Merge branch 'master' into gatsby-nonbreaking-major
hoobdeebla 0db97d4
test(gatsby-recipes): update snapshot
hoobdeebla 233dd05
Merge branch 'master' into gatsby-nonbreaking-major
hoobdeebla 342df3b
chore(gatsby-recipes): update rollup and plugin test snapshot
hoobdeebla 846f060
chore: update mini-css-extract-plugin, update-notifier, whatwg-fetch,…
hoobdeebla 3cdde0b
Merge branch 'master' into gatsby-nonbreaking-major
hoobdeebla c6c354f
chore: yarn
hoobdeebla 2251a90
chore: update yargs
hoobdeebla f588d32
fix: revert breaking yargs update
hoobdeebla 48656d1
chore(monorepo): update danger, husky, lint-staged
hoobdeebla fede07f
test: update jest to v25
hoobdeebla bcc956a
chore: update @contentful/rich-text-types, chalk, friendly-errors-web…
hoobdeebla dd8123a
chore: update contentful-management, mini-css-extract-plugin, xlsx
hoobdeebla ec3924a
chore: update ast-types, yurnalist
hoobdeebla cb394b1
Merge branch 'master' into gatsby-nonbreaking-major
hoobdeebla 012ce31
chore: update prefresh, subfont, webpack-virtual-modules, yurnalist
hoobdeebla 9184b31
chore: update file-type, graphql-request, graphql
hoobdeebla File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why switch to cross-fetch?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
From the cross-fetch README:
Why not isomorphic-fetch?
My preferred library used to be isomorphic-fetch but it has this bug that prevents it from running in a react native environment. It seems unlikely to be fixed since there haven't been any new commits to it since 2016. That means dependencies are outdated as well.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Additionally,
isomorphic-fetch
usesnode-fetch@1
, which is vulnerable to CVE-2020-15168 (disclosed yesterday).There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In saying that,cross-fetch
uses exact version constraints so is also currently affected by the same advisoryThey're released a new version that updates
node-fetch
🎉There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pulled out this security fix into its own PR here: #26876
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you @karlhorky! Beat me to it haha