Page MenuHomePhabricator
Create Task
Maniphest T243792

Upgrade dev dependencies of repositiory wikimedia/portals
Closed, DuplicatePublic
Actions

Description

Overview: https://libraryupgrader2.wmflabs.org/r/wikimedia/portals

Repo wikimedia/portals is using some npm packages which are reporting issues on npm audit

Please upgrade to avoid security isses with developer machine or on the WMF CI running node jobs.

Have a look at https://libraryupgrader2.wmflabs.org/vulns/npm and search for the repo name to find issues or run the audit command

Related Objects

Event Timeline

Umherirrender created this task.Jan 27 2020, 9:26 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 27 2020, 9:26 PM
Jdforrester-WMF added a subscriber: Jdforrester-WMF.Jan 28 2020, 4:00 PM

This is pretty much a dupe of T237479, which is blocked. :-(

Pretty much any change there is blocked by T213806 and T238747; we're still running both the build (this specific code) and the actual hosting (!) in node 6 on bare-metal.

Jdforrester-WMF closed this task as a duplicate of T237479: Update the wikimedia-portals repo's CI/linting code for various security issues.Jan 28 2020, 4:02 PM
Content licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted; code licensed under GNU General Public License (GPL) or other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL