Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update 3rd party dependencies #824

Merged
merged 2 commits into from
May 8, 2023
Merged

Conversation

sourcegraph-wk
Copy link

Summary

Frontend Frameworks is updating dependencies.

This batch raises maximum versions for a set of 3rd party dependencies
in order to get the latest (nullsafe) versions of these packages.

pubspec_codemod raise-max codemirror 0.8.0 --recursive
pubspec_codemod raise-max csv 6.0.0 --recursive
pubspec_codemod raise-max diff_match_patch 0.5.0 --recursive
pubspec_codemod raise-max faker 3.0.0 --recursive
pubspec_codemod raise-max get_it 7.0.0 --recursive
pubspec_codemod raise-max redux 6.0.0 --recursive
pubspec_codemod raise-max redux_dev_tools 0.8.0 --recursive
pubspec_codemod raise-max redux_saga 4.0.0 --recursive
pubspec_codemod raise-max redux_thunk 0.5.0 --recursive
pubspec_codemod raise-max synchronized 4.0.0 --recursive

A test batch was done prior to verify that these new versions were statically safe.
CI tests passed on this test batch as well.

A second followup batch will raise the minimum versions once the newer versions
have been consumed everywhere.

Post questions or concerns in #support-frontend-dx

Created by Sourcegraph batch change Workiva/raise_3rd_party_deps.

@aviary2-wf
Copy link

Security Insights

No security relevant content was detected by automated scans.

Action Items

  • Review PR for security impact; comment "security review required" if needed or unsure
  • Verify aviary.yaml coverage of security relevant code

Questions or Comments? Reach out on Slack: #support-infosec.

@robbecker-wf robbecker-wf marked this pull request as ready for review May 8, 2023 18:54
Copy link
Member

@robbecker-wf robbecker-wf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+10 @Workiva/release-management-p

Copy link

@rmconsole-wf rmconsole-wf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 from RM

@rmconsole7-wk rmconsole7-wk merged commit 50e3d77 into master May 8, 2023
@rmconsole7-wk rmconsole7-wk deleted the batch/fedx/raise_3rd_party_deps branch May 8, 2023 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants