-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
TPP-799: Fix Atlassian JIRA plugin vuln (Snyk, @mui/utils) #289
Conversation
"@mui/types": "^7.2.14", | ||
"@mui/utils": "^5.15.14", | ||
"@mui/utils": "^5.15.20", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I am not 100% this goes far enough? The snyk vuln report says it needs v6 at least.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Seems it might be worth a wait-and-see for now... since it may be a false positive on Snyk's side?
mui/material-ui#42607
@@ -46,9 +46,9 @@ | |||
"dependencies": { | |||
"@emotion/react": "^11.11.4", | |||
"@emotion/styled": "^11.11.5", | |||
"@mui/icons-material": "^5.15.18", | |||
"@mui/material": "^5.15.18", | |||
"@mui/x-date-pickers": "^7.5.0", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
may be we can upgrade the @mui libraries to 6.0.0-alpha.9
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks like that fails in the CI pipeline 😭
What this PR does, and why
Notification from Atlassian regarding JIRA plugin - vulnerability detected (by Snyk) in
@mui/utils
Includes a minor release upgrade to Storybook 7.6 to .19
One outstanding vulnerability (no available fix yet)