MLE-24230 Updating all devDependencies#1001
Conversation
|
Copyright Validation Results ⏭️ Skipped (Excluded) Files
✅ All files have valid copyright headers! |
9f76d8f to
5670ce1
Compare
There was a problem hiding this comment.
Pull Request Overview
This PR updates all devDependencies to their latest versions and reorganizes the overrides section in package.json. The PR also adds comprehensive documentation explaining each override's purpose, particularly focusing on security vulnerability mitigation.
- Updates 21 devDependencies to newer versions, removing caret (^) version prefixes for exact version pinning
- Alphabetizes the overrides section and removes obsolete entries (is-arrayish, nanoid, simple-get, serialize-javascript)
- Adds detailed documentation in CONTRIBUTING.md explaining the purpose of each override, including CVE references and affected dependencies
Reviewed Changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| package.json | Updates all devDependencies to latest versions with exact version pinning, reorganizes and cleans up the overrides section |
| CONTRIBUTING.md | Adds comprehensive documentation for each package.json override, explaining security vulnerabilities and their mitigations |
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
|
I asked Copilot to analyze every dependency in package.json, here's it's conclusion: 🚀 READY FOR LINTING WORK! Zero vulnerabilities You're all set to move back to the linting work! The foundation is solid. 💪 |
5670ce1 to
e12461b
Compare
And not using the caret so we know exactly which version we're using. Also documented each override and alphabetized them. And removed the following overrides which Copilot verified were not in the dependency graph: - is-arrayish - nanoid - simple-get - serialize-javascript
e12461b to
c57c5ea
Compare
Draft for now, as it depends on 2 other PRs waiting to be merged.