Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removes unnecessary manual resolutions #1300

Merged
merged 1 commit into from
Mar 2, 2022

Conversation

tmarkley
Copy link
Contributor

@tmarkley tmarkley commented Feb 28, 2022

Description

  • Many of these resolutions brought in libraries that were no longer in the dependency tree. Those could be removed without any changes.
  • Upgrades geckodriver from v1.21.0 to v3.0.1.
  • Upgrades load-grunt-config from v3.0.1 to v4.0.1.
  • Bumps ejs from v3.1.5 to v3.1.6 and @types/ejs from v3.0.4 to v3.1.0.

Issues Resolved

Partially addresses #1298

Check List

  • New functionality includes testing.
    • All tests pass
      • yarn test:jest
      • yarn test:jest_integration
      • yarn test:ftr
  • New functionality has been documented.
  • Commits are signed per the DCO using --signoff

@tmarkley tmarkley added dependencies Pull requests that update a dependency file v2.0.0 labels Feb 28, 2022
@tmarkley tmarkley requested a review from a team as a code owner February 28, 2022 23:47
* Many of these resolutions brought in libraries that were no longer in
  the dependency tree. Those could be removed without any changes.
* Upgrades `geckodriver` from v1.21.0 to v3.0.1.
  * No breaking changes: [CHANGELOG](https://github.com/vladikoff/node-geckodriver/tree/v3.0.1#changelog)
* Upgrades `load-grunt-config` from v3.0.1 to v4.0.1.
  * No breaking changes: [CHANGELOG](https://github.com/firstandthird/load-grunt-config/blob/4.0.1/CHANGELOG.md)
* Bumps `ejs` from v3.1.5 to v3.1.6 and
  `@types/ejs` from v3.0.4 to v3.1.0.

Partially addresses opensearch-project#1298

Signed-off-by: Tommy Markley <markleyt@amazon.com>
"**/trim": "^0.0.3",
"**/trim-newlines": "^3.0.1",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was added for GHSA-7p7h-4mm5-852v?

So it's no longer needed or wasn't needed?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's no longer needed because of the other upstream dependency changes that have been made since. If you look at the lockfile there are no versions before 3.x that are depended on anymore (this wasn't the case when this line was added).

Copy link
Member

@kavilla kavilla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Just one question inline. I'm curious the impact for opensearch-project plugins.

Copy link
Member

@ashwin-pc ashwin-pc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@tmarkley tmarkley merged commit 7cb8297 into opensearch-project:main Mar 2, 2022
@tmarkley tmarkley deleted the remove-resolutions branch March 2, 2022 00:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file v2.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants