Maniphest T242703

libup/npm messes up when trying to upgrade minimatch to 3.0.4
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Legoktm
	Jan 14 2020, 6:54 AM

Tags

Referenced Files

None

Subscribers

Jdforrester-WMF

Description

See discussion on https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ConfirmAccount/+/563442

Fairly sure this is an upstream npm issue, specifically https://github.com/npm/cli/issues/301

in any case, https://gerrit.wikimedia.org/r/q/hashtag:%22cve-2016-10540%22+(status:open%20OR%20status:merged) shows the impact of this and we need to work around it...

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	Disable fixing npm advisory 118	labs/libraryupgrader	master	+3 -0

Customize query in gerrit

Related Objects

Mentioned In: rLLUP715fc9786e3e: Disable fixing npm advisory 118

Event Timeline

Legoktm created this task.Jan 14 2020, 6:54 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 14 2020, 6:54 AM

Fun.

Legoktm mentioned this in rLLUP715fc9786e3e: Disable fixing npm advisory 118.Jan 15 2020, 3:17 AM

Jdforrester-WMF closed this task as Resolved.May 1 2026, 3:51 PM

Jdforrester-WMF assigned this task to Legoktm.