Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update npm dependencies for the project root package.json #19814

Closed
1 task
Tracked by #19795 ...
edmund-dunn opened this issue Nov 6, 2024 · 0 comments · Fixed by #20025
Closed
1 task
Tracked by #19795 ...

Update npm dependencies for the project root package.json #19814

edmund-dunn opened this issue Nov 6, 2024 · 0 comments · Fixed by #20025
Assignees
Labels
CMS Team CMS Product team that manages both editor exp and devops Drupal engineering CMS team practice area

Comments

@edmund-dunn
Copy link
Contributor

User Story or Problem Statement

We need to update all npm dependencies. This will fix most, if not all, security issues identified by dependabot. The change to nodejs v22.11 will also align us with the rest of the platform. Drupal 10 requires nodejs v18 or greater, and Drupal 11 requires v20 or greater.

Description or Additional Context

https://github.com/department-of-veterans-affairs/va.gov-cms/security/dependabot?q=is%3Aopen+ecosystem%3Anpm+manifest%3Apackage-lock.json

Steps for Implementation

  • update /.nvmrc to 22.11
  • restart ddev
  • update dependencies, ensuring all commands contained in package.json work
  • ensure all critical, high and moderate security issues are fixed and as many info issues are fixed as possible

Acceptance Criteria

  • All dependencies updated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CMS Team CMS Product team that manages both editor exp and devops Drupal engineering CMS team practice area
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants