Skip to content

Commit 9f76d8f

Browse files
committed
MLE-24763 Updating all devDependencies
And not using the caret so we know exactly which version we're using.
1 parent 70f1683 commit 9f76d8f

File tree

3 files changed

+435
-692
lines changed

3 files changed

+435
-692
lines changed

CONTRIBUTING.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -62,3 +62,8 @@ be found in the `Jenkinsfile` file in this repository in the `runE2ETests` funct
6262
We are using @fastify/busboy because it has a forked copy of dicer that apparently does not
6363
have the same high security vulnerability that the 0.3.1 release of dicer has.
6464

65+
Forcing chalk to 4.1.2. This avoids the compromised 5.6.1 version. And it keeps eslint happy,
66+
which requires 4.x and won't work with 5.x.
67+
68+
sanitize-html is in both devDependencies and overrides; the override is needed to force gulp-jsdoc3 to use a
69+
non-vulnerable version.

0 commit comments

Comments
 (0)