Repository navigation
EDD-91: Update dependencies - #82
Merged
Merged
Conversation
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #82 +/- ##
=======================================
Coverage 95.64% 95.64%
=======================================
Files 121 121
Lines 2504 2504
Branches 496 496
=======================================
Hits 2395 2395
Misses 109 109 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
eudoroolivares2016
requested review from
macrouch,
mandyparson and
trevorlang
September 4, 2026 14:59
mandyparson
approved these changes
Sep 8, 2026
macrouch
approved these changes
Sep 8, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Overview
What is the feature?
earthdata-download package needs to update some dependencies
What is the Solution?
Running 'npm audit fix'
Note historically we elected for these not to justify a new release of the actual application purposefully not doing that here
What areas of the application does this impact?
package-lock.json
Testing
Reproduction steps
Check https://app.snyk.io/org/esdis-cumulus-core-gibs-cmr-etc./project/d39edb4e-2801-4809-ab11-67a705f0b3d6/pr-check/5e362bd1-f240-44a4-ac9d-7c435623d660
Make sure the earthdata-download package is not flagged as malicious
Also do some regression testing of the app locally with these bumps by checking out the branch by doing an
npm run startand then from edsc https://search.earthdata.nasa.gov/ initiating a download it should automatically favor using electron instead of your download versionAttachments
Basic regression testing
https://app.snyk.io/org/esdis-cumulus-core-gibs-cmr-etc./project/a8adc8b1-d7ce-40ee-b43d-c7944df23e3a
Checklist