Skip to content
This repository has been archived by the owner on Feb 12, 2024. It is now read-only.

Uplift to fix all vulnerabilities #22

Merged
merged 35 commits into from Dec 20, 2019

Conversation

jasonkshar
Copy link
Contributor

Addressed all vulnerabilities as reported by npm audit. Many major changes were made as part of this:

  • Uplifted Terra-Toolkit from 1.X to 5.X
    • v5 of Terra-Toolkit removed support for Nightwatch, so those tests are rewritten in WDIO
  • Updated to babel 7.x
  • Updated to webpack 4.x

@jasonkshar
Copy link
Contributor Author

There is one outstanding peer dependency warning:
npm WARN terra-toolkit@5.12.0 requires a peer of webpack@^4.30.0 but none is installed. You must install peer dependencies yourself.

I don't think you can update webpack to 4.30.0 because of this issue: webpack/webpack#8656

@jasonkshar
Copy link
Contributor Author

Since the wdio tests require docker now, I'm wondering if there's something that needs to be configured for travis. Might have to reach out to the terra-toolkit maintainers for that.

@kolkheang
Copy link
Member

Maybe we need to install Chrome using headless mode?

https://docs.travis-ci.com/user/gui-and-headless-browsers/#using-the-chrome-addon-in-the-headless-mode

@jasonkshar
Copy link
Contributor Author

No bueno. That testing should all be contained within the docker container, I think.

@jasonkshar
Copy link
Contributor Author

guess you needed to specify a few things:

  • node 10
  • docker-compose and Dockerfile

Dockerfile Outdated Show resolved Hide resolved
@kolkheang
Copy link
Member

@jasonkshar could you squash all the commits when you merge?

@vibhutitripathi12 , @shriniketsarkar could you review when you get a chance?

"babel-loader": "^6.2.8",
"@babel/cli": "^7.6.4",
"@babel/core": "^7.0.0",
"@babel/plugin-proposal-class-properties": "^7.0.0",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are all of these @babel/plugin-proposal-* modules needed?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think so. I used https://github.com/babel/babel-upgrade to go through it.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1

@jasonkshar
Copy link
Contributor Author

I don't have permissions to merge, but isn't there an option to squash and merge when accepting this PR?

@kolkheang
Copy link
Member

@jasonkshar can you re-run npm run build? It looks like a few files were deleted from the /build/ dir.

@jasonkshar
Copy link
Contributor Author

If you're referring to the intl-polyfill-bundle.min.js file, that file gets removed when I npm run build is executed.

@kolkheang
Copy link
Member

@jasonkshar I think that is going to be a problem for the app since currently that file is being referenced in the index.html.
https://github.com/cerner/ascvd-risk-calculator/blob/master/index.html#L11

@jasonkshar
Copy link
Contributor Author

That was a problem then, couldn't trust webpack-merge

@shriniketsarkar
Copy link

@jasonkshar Sorry about the delay in reviewing it. Thanks for working on this :) .

@kolkheang kolkheang changed the title SMART-207: Uplift to fix all vulnerabilities Uplift to fix all vulnerabilities Dec 20, 2019
@kolkheang kolkheang merged commit 1871faa into cerner:master Dec 20, 2019
@kolkheang
Copy link
Member

Thanks @jasonkshar for contributing!

@jasonkshar jasonkshar deleted the SMART-207_audit_fix branch December 26, 2019 16:29
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants