Commit e7bd681
committed
chore(deps): Get audit-filter working for all packages in monorepo
* Add a lint:deps job to the top-level package.json, so lerna can run
lint:deps in all packages in parallel.
* Also fix today's handlebars vulnerability, so that builds don't fail.
Some of the vulnerabilities are in transitive dependencies, yet the
suggested `npm update foo --depth N` command sometimes seems to do
nothing. There was a related bug in npm 6.6.0 - 6.11.2, fixed by
npm/cli#239, but perhaps that didn't fix all the
cases? (I was using npm 6.12.0.) As a workaround, I've added audit-filter
exceptions where `npm update` wasn't able to fix vulnerabilities.
Fixes #2229.1 parent e098929 commit e7bd681
21 files changed
Lines changed: 2165 additions & 107 deletions
File tree
- packages
- fxa-amplitude-send
- fxa-auth-db-mysql
- fxa-auth-server
- fxa-content-server
- fxa-customs-server
- fxa-dev-launcher
- fxa-geodb
- fxa-payments-server
- fxa-profile-server
- fxa-support-panel
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
6 | 6 | | |
7 | 7 | | |
8 | 8 | | |
| 9 | + | |
9 | 10 | | |
10 | 11 | | |
11 | 12 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
0 commit comments