BB2-4988: Updates for security#166
Conversation
|
G2G! Have another eng review and approve. Thanks! |
bwang-icf
left a comment
There was a problem hiding this comment.
Was able to do all the verification. Thanks for doing this! What exactly were your update steps? It seems like you had to do more than just running an npm update. I will still approve but am just curious
I added js-yaml to the to the resolutions section of package.json. After running an npm install and then npm ls js-yaml, I saw that the version hadn't updated to 4.3.0, because of mistmatches with eslint and vite-plugin-svgr. So I upgraded eslint and vite-plugin-svgr as well to make sure that js-yaml would update correctly, and the version updates for those two seemed to do it! |
JIRA Ticket:
BB2-4988
What Does This PR Do?
Updates js-yaml, the version of Node, and the version of libcap2 that are being used in the project to address security vulnerabilities.
What Should Reviewers Watch For?
Validation
If you're reviewing this PR, please check for these things in particular: