Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[vtadmin-web] Update postcss to v8.4.6 #9612

Merged
merged 1 commit into from
Feb 1, 2022

Conversation

doeg
Copy link
Contributor

@doeg doeg commented Feb 1, 2022

Signed-off-by: Sara Bee 855595+doeg@users.noreply.github.com

Description

This updates to postcss v8.4.6 in order to fix CVE-2021-23566 in the nested nanoid dependency.

For reference, here is the postcss CHANGELOG.

Related Issue(s)

Checklist

  • Should this PR be backported? Yes, I can create a PR to backport this to 13.0 RC1.
  • Tests were added or are not required N/A
  • Documentation was added or is not required N/A

Deployment Notes

VTAdmin operators are recommended to redeploy VTAdmin to pick up the fix.

Signed-off-by: Sara Bee <855595+doeg@users.noreply.github.com>
Copy link
Contributor

@notfelineit notfelineit left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yisss

@doeg doeg merged commit 12a208a into vitessio:main Feb 1, 2022
@doeg doeg deleted the sarabee-update-postcss-8.4.6 branch February 1, 2022 19:18
@doeg doeg removed the Backport me! label Feb 16, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants