Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(webpack): update stylus version to fix security issue #28646

Merged
merged 1 commit into from
Nov 1, 2024

Conversation

jaysoo
Copy link
Member

@jaysoo jaysoo commented Oct 25, 2024

Current Behavior

Expected Behavior

Related Issue(s)

Fixes #28541

@jaysoo jaysoo requested a review from a team as a code owner October 25, 2024 18:41
@jaysoo jaysoo requested a review from leosvelperez October 25, 2024 18:41
Copy link

vercel bot commented Oct 25, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

1 Skipped Deployment
Name Status Preview Updated (UTC)
nx-dev ⬜️ Ignored (Inspect) Visit Preview Oct 25, 2024 6:50pm

@xiongemi
Copy link
Collaborator

there is stylusVersion, should it also get updated?

@jaysoo
Copy link
Member Author

jaysoo commented Oct 25, 2024

there is stylusVersion, should it also get updated?

It's not used since we removed Stylus back in v17. I'll do a follow-up to remove the remaining Stylus code, but it needs to be in a minor release, not a patch release.

@jaysoo jaysoo merged commit 8e460f1 into master Nov 1, 2024
6 checks passed
@jaysoo jaysoo deleted the fix/stylus-security-update branch November 1, 2024 17:00
jaysoo added a commit that referenced this pull request Nov 1, 2024
<!-- Please make sure you have read the submission guidelines before
posting an PR -->
<!--
https://github.com/nrwl/nx/blob/master/CONTRIBUTING.md#-submitting-a-pr
-->

<!-- Please make sure that your commit message follows our format -->
<!-- Example: `fix(nx): must begin with lowercase` -->

<!-- If this is a particularly complex change or feature addition, you
can request a dedicated Nx release for this pull request branch. Mention
someone from the Nx team or the `@nrwl/nx-pipelines-reviewers` and they
will confirm if the PR warrants its own release for testing purposes,
and generate it for you if appropriate. -->

## Current Behavior
<!-- This is the behavior we have today -->

## Expected Behavior
<!-- This is the behavior we should expect with the changes in this PR
-->

## Related Issue(s)
<!-- Please link the issue being fixed so it gets closed when this is
merged. -->

Fixes #28541
Copy link

github-actions bot commented Nov 7, 2024

This pull request has already been merged/closed. If you experience issues related to these changes, please open a new issue referencing this pull request.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Nov 7, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

inflight security issue in @nx/webpack
3 participants