#1039 Update the dependecy that have moderate vulnerabilities #1051

Open

b24idalu wants to merge 1 commit from #1039-dependencies-with-mid-vulnerabilities into team_2_week_7

b24idalu commented

2026-05-20 13:04:13 +00:00

Collaborator

Regarding issue #1039 : Update the dependencies that have moderate vulnerabilities.

Problems: 1. When installing the dependencies by running the install scripts, one used to see a list from low to high vulnerabilities. Update the moderate ones, without making the projects functionality affected.

Solution: 1. Since npm audit fix had already been run, there were only outdated packets left with un-updated dependencies. Overrode three dependencies to get newer versions that solve bugs they previously had. "webpack-dev-server" (used for react dev servers, hot reload and local development servers), "postcss" (used for tailwind, autoprefixes, CSS transforms and CRA CSS pipelines) and "@tootallnate/once" (utility for waiting for an event to happen one time, ex await once()).

Notes:

To check that all vulnerabilities are gone you can go into frontend and open a command prompt and do "npm audit".
All low vulnerabilities are solved as well.

Regarding issue #1039 : Update the dependencies that have moderate vulnerabilities. Problems: 1. When installing the dependencies by running the install scripts, one used to see a list from low to high vulnerabilities. Update the moderate ones, without making the projects functionality affected. Solution: 1. Since npm audit fix had already been run, there were only outdated packets left with un-updated dependencies. Overrode three dependencies to get newer versions that solve bugs they previously had. "webpack-dev-server" (used for react dev servers, hot reload and local development servers), "postcss" (used for tailwind, autoprefixes, CSS transforms and CRA CSS pipelines) and "@tootallnate/once" (utility for waiting for an event to happen one time, ex await once()). Notes: - To check that all vulnerabilities are gone you can go into frontend and open a command prompt and do "npm audit". - All low vulnerabilities are solved as well.

b24idalu added 1 commit

2026-05-20 13:04:13 +00:00

Overridden mid to low vulnerabilities 9d51982e2c

Overridden mid to low vulnerabilities

b24idalu self-assigned this

2026-05-20 13:04:16 +00:00

b24idalu added the

needs review

library

security

labels

2026-05-20 13:07:27 +00:00

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin #1039-dependencies-with-mid-vulnerabilities:#1039-dependencies-with-mid-vulnerabilities

git switch #1039-dependencies-with-mid-vulnerabilities

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch team_2_week_7

git merge --no-ff #1039-dependencies-with-mid-vulnerabilities

git switch #1039-dependencies-with-mid-vulnerabilities

git rebase team_2_week_7

git switch team_2_week_7

git merge --ff-only #1039-dependencies-with-mid-vulnerabilities

git switch #1039-dependencies-with-mid-vulnerabilities

git rebase team_2_week_7

git switch team_2_week_7

git merge --no-ff #1039-dependencies-with-mid-vulnerabilities

git switch team_2_week_7

git merge --squash #1039-dependencies-with-mid-vulnerabilities