New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependency Housekeeping #163

Merged

josephbirkner merged 4 commits into main from npm-audit

Oct 18, 2024

Collaborator

josephbirkner commented Oct 15, 2024 •

edited

Loading

Fix reported vulnerabilities
This PR also pins emscripten to 3.1.67. This is because 3.1.68 pulls in a newer development version of llvm 20, which contains this change:
- llvm/llvm-project@d8a2815
- The change leads to a compile failure for all fmt versions. The change was made in response to this open C++ working group issue:
  - http://wg21.link/CWG2765
- The more interesting question: Why do emscripten not reference a fixed llvm version, but whatever is currently on the main branch of llvm??
- Note: a fix was merged into fmt two weeks ago. We should keep a look out for the next fmt release (the current one is 11.0.2): Format string checking incorrectly assumes repeated evaluation of string literal will produce the same pointer fmtlib/fmt#4177

josephbirkner added 4 commits

October 15, 2024 18:57


          npm audit fix

f4d04ba


          Upgrade formly to 6.3.9

b023277


          Pin emscripten

fe32412


          Upgrade ngx-formly/primeng to 6.3.9 as well.

81af8da

josephbirkner changed the title ~~npm audit fix~~ Dependency Housekeeping

Waguramu approved these changes

View reviewed changes

josephbirkner merged commit a4d9749 into main

2 checks passed

josephbirkner deleted the npm-audit branch

October 18, 2024 07:46

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet