Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor: update imagemin and its dependencies #1162

Merged
merged 2 commits into from
Dec 24, 2018

Conversation

ahmadalfy
Copy link
Contributor

Greetings,

I introduced imagemin to compress the images in an earlier versions. Currently the versions used have security issues as noticed by npm audit.

found 9 vulnerabilities (1 low, 8 moderate) in 30578 scanned packages
7 vulnerabilities require semver-major dependency updates.
2 vulnerabilities require manual review. See the full report for details.

The problem happens because of a dependency on a package called tunnel-agent

Motivation

Getting rid of insecure packages.

Have you read the Contributing Guidelines on pull requests?

Yes

Test Plan

Run build script and check the output. It should compress the images

Related PRs

#654

@facebook-github-bot facebook-github-bot added the CLA Signed Signed Facebook CLA label Dec 23, 2018
@docusaurus-bot
Copy link
Contributor

docusaurus-bot commented Dec 23, 2018

Deploy preview for docusaurus-preview ready!

Built with commit 7676e68

https://deploy-preview-1162--docusaurus-preview.netlify.com

@endiliey endiliey merged commit 6f820d6 into facebook:master Dec 24, 2018
@SimenB
Copy link
Contributor

SimenB commented Jan 24, 2019

This moved it from dependencies to devDependencies, is that on purpose?

@SimenB
Copy link
Contributor

SimenB commented Jan 24, 2019

/cc @yangshun since the merger is on vacation 🙂

@ahmadalfy
Copy link
Contributor Author

@SimenB I think because they are not a part of the final output, it just modify the files so yes. I could be wrong.

@SimenB
Copy link
Contributor

SimenB commented Jan 24, 2019

It's just supposed to minimize the images of docusaursus itself, not those of sites using docusaurus?

@ahmadalfy
Copy link
Contributor Author

No it is supposed to optimize the images of the user as well. I saw what I did here 😅 I can revert it back to be in dependencies then.

@merlinnot
Copy link

Please revert to dependencies. Builds of websites are failing after a clean install.

@ahmadalfy
Copy link
Contributor Author

ahmadalfy commented Jan 24, 2019

Submitted, my apologies

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CLA Signed Signed Facebook CLA
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants