Updated package.json to include all non-breaking security fixes #3061
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The Big 4.0! Co-authored-by: Sara Federico <[email protected]> Co-authored-by: Paolo Mariotti <[email protected]> Co-authored-by: <[email protected]> Co-authored-by: Tan Nguyen <[email protected]> Co-authored-by: Jon Winn <[email protected]> Co-authored-by: paulogdm <[email protected]> Co-authored-by: Marcellin Nshimiyimana <[email protected]> Co-authored-by: Ryan Swart <[email protected]> Co-authored-by: Benedikt Franke <[email protected]> Co-authored-by: Khayyam Saleem <[email protected]> Co-authored-by: Vladimir Cibizov <[email protected]> Co-authored-by: Al-un <[email protected]> Co-authored-by: Larry <[email protected]>
nf3
requested review from
julienben,
gretzky,
justingreenberg,
jwinn and
Mensae
as code owners
There are a few key areas updated to add support for the Vault Vision Login-as-a-Service - Add Sagas flows for the loading user context from session storage and for validating the post authorization JWT token that first established a user as being authenticated by the Vault Vision OIDC identity provider - Add Actions for pre and post user loading and pre and post callback authorization api call - Add appropriate Reducers to consume Saga and Action triggers in order to modify Redux state - Update unit tests to 100% PASS - Create a PrivateRoute component that can be used to easily protect pages and routes that require authentication - Create an example Dashboard page that requires authentication - Create an example Profile page that requires authentication and displays all the available user data for an authenticated user - Create SignIn, SignUp, SignOut button Components - Integrate the NPM oidc-client - Add a userManager that interfaces to the open source OIDC client library - Add support for reading environment variables for OIDC settings using dotenv - Update NPM packages to have 0 known vulnerabilities
The semver-regex package listed a vulnerability in the npm audit for version 3.1.3, this vulnerability was fixed in 3.1.4
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
NPM Package changelog
npm install dotenv
npm install oidc-client
npm install [email protected]
npm install [email protected]
npm install [email protected]
npm install [email protected]
npm install [email protected]
npm install --save-dev [email protected]
npm install --save-dev [email protected]
npm install --save-dev [email protected]
npm install --save-dev [email protected]
npm install --save-dev [email protected]
npm update ansi-regex --depth 5
npm update terser-webpack-plugin --depth 2
npm update ajv --depth 4
npm update null --depth 2
npm install --save-dev [email protected]
npm install --save-dev [email protected]
npm install --save-dev [email protected]
npm install --save-dev [email protected]
npm install --save-dev [email protected]
npm install --save-dev [email protected]
npm install npm@latest -g
npm install --legacy-peer-deps
plus the following overrides