Skip to content

Commit

Permalink
Upgrade most Javascript dependencies to latest
Browse files Browse the repository at this point in the history
This was done using a yarn "rejuvenation" script:
https://gist.github.com/pftg/fa8fe4ca2bb4638fbd19324376487f42

This avoid CVE-2019-10747 in the set-value package.

I was also forced to fork the PrismJS library to fix a bug related
to improper use of the ternary operator in one of its plugins. I've
submitted a PR for that: PrismJS/prism#2167
  • Loading branch information
harigopal committed Jan 9, 2020
1 parent 4153e1e commit f46bcb2
Show file tree
Hide file tree
Showing 2 changed files with 2,055 additions and 1,860 deletions.
18 changes: 9 additions & 9 deletions package.json
Expand Up @@ -7,7 +7,7 @@
"@glennsl/bs-json": "5.0.1",
"@rails/ujs": "^6.0.0",
"@rails/webpacker": "^4.2.2",
"babel-plugin-prismjs": "^1.1.0",
"babel-plugin-prismjs": "^2.0.0",
"babel-plugin-react-css-modules": "^3.3.2",
"babel-plugin-transform-react-remove-prop-types": "^0.4.24",
"babel-preset-react": "^6.24.1",
Expand All @@ -20,13 +20,13 @@
"date-fns": "^1.30.1",
"dotenv": "^8.0.0",
"draft-js": "^0.11.0",
"markdown-it": "^8.4.2",
"markdown-it-multimd-table": "^3.2.3",
"markdown-it": "^10.0.0",
"markdown-it-multimd-table": "^4.0.0",
"markdown-it-sub": "^1.0.0",
"markdown-it-sup": "^1.0.0",
"pnotify": "^4.0.0",
"postcss-scss": "^2.0.0",
"prismjs": "^1.16.0",
"prismjs": "harigopal/prism#patch-1",
"prop-types": "^15.7.2",
"react": "^16.8.6",
"react-datepicker": "^2.9.6",
Expand All @@ -36,17 +36,17 @@
"webpack-merge": "^4.2.1"
},
"devDependencies": {
"@baransu/graphql_ppx_re": "0.4.0",
"@graphql-codegen/cli": "^1.8.2",
"@graphql-codegen/introspection": "^1.8.2",
"@baransu/graphql_ppx_re": "^0.4.9",
"@graphql-codegen/cli": "^1.11.2",
"@graphql-codegen/introspection": "^1.11.2",
"bs-platform": "7.0.1",
"graphql": "^14.5.8",
"node-sass": "^4.12.0",
"prettier": "1.18.2",
"prettier": "1.19.1",
"reason-react": ">=0.7.0",
"sass-loader": "^7.1.0",
"tailwindcss": "^1.0.5",
"webpack-dev-server": "^3.9.0"
"webpack-dev-server": "^3.10.1"
},
"resolutions": {
"lodash.mergewith": "^4.6.2",
Expand Down

0 comments on commit f46bcb2

Please sign in to comment.