Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RHINENG-15289: Bump eslint-plugin-jest to bump semver dependency #349

Merged
merged 2 commits into from
Jan 15, 2025

Conversation

marleystipich2
Copy link
Contributor

@marleystipich2 marleystipich2 commented Jan 13, 2025

The vulnerable version of semver was 5.7.0 and we needed to bump it to at least 5.7.2. I had to bump eslint-plugin-jest one version up to 23.0.0 which bumped the dependencies @typescript-eslint/experimental-utils and @typescript-eslint/typescript-estree which then bumped semver to 7.6.3.

Screenshot 2025-01-14 at 12 21 10 PM

## Secure Coding Practices Checklist GitHub Link
- https://github.com/RedHatInsights/secure-coding-checklist

## Secure Coding Checklist
- [ ] Input Validation
- [ ] Output Encoding
- [ ] Authentication and Password Management
- [ ] Session Management
- [ ] Access Control
- [ ] Cryptographic Practices
- [ ] Error Handling and Logging
- [ ] Data Protection
- [ ] Communication Security
- [ ] System Configuration
- [ ] Database Security
- [ ] File Management
- [ ] Memory Management
- [ ] General Coding Practices

@marleystipich2
Copy link
Contributor Author

/retest

@marleystipich2
Copy link
Contributor Author

/retest

Copy link
Collaborator

@rexwhite rexwhite left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍🏻

@marleystipich2 marleystipich2 merged commit 659497a into master Jan 15, 2025
7 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants