Migrate to request to axios and moment with Luxon#1
Open
Conversation
ppamorim
force-pushed
the
feature/axios
branch
from
f8ab000 to
34ef949
Compare
ppamorim
force-pushed
the
feature/axios
branch
2 times, most recently
from
0b95be0 to
a55469d
Compare
ppamorim
force-pushed
the
feature/axios
branch
from
a55469d to
757c906
Compare
ppamorim
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note: A significant portion of the +2000 line changes are due to updates in
package-lock.json.This PR addresses the migration of outdated and deprecated libraries to improve security and keep the project updated with the current recommended libraries.
Migration from
requestThe request library, now deprecated and no longer receiving updates, has been replaced.
The library relied on
tough-cookie:2.4.3, which contains a critical vulnerability: [CVE-2023-26136] (Severity: 9.8).Replacing request resolves dependency on this vulnerable library.
Migration from
momenttoLuxonmomentis also deprecated and has been replaced withLuxonto take advantage of its modern, immutable date-time API and improved performance.Luxon offers better support for time zones and localization while aligning with modern JavaScript standards.