Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump oclif v4 #2800

Merged
merged 2 commits into from
Jul 11, 2024
Merged

Bump oclif v4 #2800

merged 2 commits into from
Jul 11, 2024

Conversation

otaviojacobi
Copy link
Contributor

@otaviojacobi otaviojacobi commented Jul 10, 2024

In short: oclif v4 has been around for a few months already but because of oclif/oclif#1324 I have avoided bumping it (even though it has improvements and allows us to drop a patch).

However, now AWS SDK has fixed some of the dependency mess caused on downstream repos so that the issue above barely impacts us (in fact, it generates a smaller shrinkwrap 🎉 ) . This allows us to finally bump to oclif v4 and drop the last pending high vulnerability. Now down to 11 vulnerabilities, 10 coming from request library and 1 from got.


Please check the CONTRIBUTING.md file for relevant information and some
guidance. Keep in mind that the CLI is a cross-platform application that runs
on Windows, macOS and Linux. Tests will be automatically run by balena CI on
all three operating systems, but this will only help if you have added test
code that exercises the modified or added feature code.

Note that each commit message (currently only the first line) will be
automatically copied to the CHANGELOG.md file, so try writing it in a way
that describes the feature or fix for CLI users.

If there isn't a linked issue or if the linked issue doesn't quite match the
PR, please add a PR description to explain its purpose or the features that it
implements. Adding PR comments to blocks of code that aren't self explanatory
usually helps with the review process.

If the PR introduces security considerations or affects the development, build
or release process, please be sure to highlight this in the PR description.

Thank you very much for your contribution!

Change-type: patch
@otaviojacobi otaviojacobi force-pushed the bump-oclif-v4 branch 2 times, most recently from 12d1189 to bd50341 Compare July 10, 2024 22:12
@otaviojacobi otaviojacobi merged commit e64a09d into master Jul 11, 2024
57 checks passed
@otaviojacobi otaviojacobi deleted the bump-oclif-v4 branch July 11, 2024 10:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants