Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Update vite and sanitize-html to update postcss for dependabot #9767

Conversation

bnussman-akamai
Copy link
Member

Description 📝

Detailed Explanation

  • Updates vite and sanitize-html so that postcss consequently gets bumped to resolve https://github.com/linode/manager/security/dependabot/84. This works because vite and sanitize-html are the only two dependents on postcss and updating both of them will result in us getting the desired postcss version

Major Changes 🔄

  • Updates vite to latest
  • Updates sanitize-html (and its types) to latest
  • Updates @vitejs/plugin-react-swc to latest

How to test 🧪

  • Verify that in the yarn.lock, postcss resolves to only version 8.4.31 or newer
  • Verify automated checks pass
  • Check out the PR and perform a quick check on Cloud Manager and Storybook

@bnussman-akamai bnussman-akamai added the Dependencies Pull requests that update a dependency file label Oct 6, 2023
@bnussman-akamai bnussman-akamai self-assigned this Oct 6, 2023
@bnussman-akamai bnussman-akamai requested a review from a team as a code owner October 6, 2023 14:59
@bnussman-akamai bnussman-akamai requested review from jdamore-linode and carrillo-erik and removed request for a team October 6, 2023 14:59
Copy link
Contributor

@jdamore-linode jdamore-linode left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @bnussman-akamai!

  • Confirmed postcss resolves to 8.4.31 in yarn.lock
  • Confirmed that Cloud builds via yarn dev and via yarn build
  • Confirmed that the Cypress tests build OK (didn't run the full suite, however)
  • Poked around a bit in Cloud and Storybook and did not observe any issues

@carrillo-erik
Copy link
Contributor

postcss version 8.4.31
Screenshot 2023-10-06 at 3 49 20 PM

I didn't find any issues running the PR locally.

@bnussman-akamai bnussman-akamai merged commit 68ce4de into linode:develop Oct 9, 2023
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants