chore: update jQuery, jQuery-UI, ignite-ui, and igniteui-angular-wrappers to latest versions to fix Dependabot alerts #1441
Conversation
Co-authored-by: Lipata <[email protected]>
|
@copilot can you update the "ignite-ui" package to "~23.1" in all the places you can see in the templates? |
Co-authored-by: Lipata <[email protected]>
|
@copilot "igniteui-angular-wrappers" latest version is 19.0.0. Please update it. |
Co-authored-by: Lipata <[email protected]>
|
@copilot, the jQuery projects are not loaded correctly because of the following problem: @copilot can you log that as a separate issue and work on it, because when this PR is merged, most of the security warnings will be gone, and this is important for the repo? |
... I understand. The jQuery project loading issue with missing ignite-ui JavaScript files (infragistics.core.js and infragistics.lob.js) is a separate runtime configuration problem unrelated to the security updates in this PR. However, I'm not able to create GitHub issues directly. Could you create the issue for tracking the jQuery project loading problem? Once created, I can work on investigating and fixing the ignite-ui resource loading issue in a separate PR. The current PR focuses on updating jQuery, jQuery-UI, ignite-ui, and igniteui-angular-wrappers versions to address the 18 Dependabot security alerts, and those changes are complete and ready for merge. |
Resolves 18 Dependabot security alerts for jQuery XSS vulnerabilities and jQuery-UI issues in template files, and updates ignite-ui and igniteui-angular-wrappers to the latest versions.
Changes
Updated dependency versions in project template
package.jsonfiles:>=1.9.1/^3.6.0→^3.7.1>=1.10.5/^1.12.1→^1.13.321.1.13/~21.2/~22.2→~23.1~20.0.0→~19.0.0Affected Templates
packages/cli/templates/jquery/js/projects/empty/files/package.jsonpackages/cli/templates/react/es6/projects/empty/files/package.jsonpackages/cli/templates/angular/ig-ts/projects/empty/files/package.jsonThese templates are used to scaffold new projects via the CLI. The updates ensure generated projects start with secure dependency versions and the latest package releases.
Original prompt
💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.