Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Upgrade babel deps to v7.23.3 #14711

Closed
wants to merge 9 commits into from

Conversation

reece-white
Copy link

Summary

Babel <v7.23.2 contains vulnerability CVE-2023-45133 https://security.snyk.io/vuln/SNYK-JS-BABELTRAVERSE-5962462

Test plan

Copy link

linux-foundation-easycla bot commented Nov 23, 2023

CLA Signed

The committers listed above are authorized under a signed CLA.

Copy link

netlify bot commented Nov 23, 2023

Deploy Preview for jestjs ready!

Built without sensitive environment variables

Name Link
🔨 Latest commit 9e83696
🔍 Latest deploy log https://app.netlify.com/sites/jestjs/deploys/65bb7b622748d9000998d519
😎 Deploy Preview https://deploy-preview-14711--jestjs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@andrewfritz86
Copy link

andrewfritz86 commented Jan 11, 2024

Is there a release plan for this? Would love to have this vulnerability patched.

cc @isolde-a

@reece-white
Copy link
Author

Any chance I can get some reviews on this please 🙏

@reece-white
Copy link
Author

Hi @SimenB, sorry for the tag but I'm struggling for reviews here.

@SimenB
Copy link
Member

SimenB commented Mar 16, 2024

Hey @reece-white! Sorry, somehow missed the pings in this PR.

I don't think we need to do this, as all the versions are within our semver range (as can be seen by no versions changing in our lockfile). Is there any concrete issues we solve by forcing newer versions?

Copy link

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
Please note this issue tracker is not a help forum. We recommend using StackOverflow or our discord channel for questions.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators May 12, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants