Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Yarn upgrade archiver and logging #1379

Closed
wants to merge 3 commits into from
Closed

Yarn upgrade archiver and logging #1379

wants to merge 3 commits into from

Conversation

philmcmahon
Copy link
Contributor

This is another effort to resolve the lodash vulnerability addressed in #1376 - I've run yarn upgrade on archiver and logging

@@ -13,7 +13,7 @@ export const frontController = (req: Request, res: Response) => {
req.params.version,
isPreview,
)
const edition = req.params.edition
const edition = getEditionOrFallback(req.params.edition)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If this is just a yarn upgrade then why do we have changes to logic?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was wondering that! Basically after I ran yarn upgrade the validate step started failing - perhaps because of babel changes? Doesn't really make sense though.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You can see the failure stuff here - basically it was angry about treating strings as typed values

Copy link
Contributor

@jimhunty jimhunty left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very strange, as long as you have tested it, then im happy for it to go in.

@philmcmahon philmcmahon force-pushed the pm-more-lodash branch 2 times, most recently from 3310615 to 1aa14d5 Compare August 19, 2020 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants