Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(bit): update deps that have vulnerabilities #8804

Draft
wants to merge 45 commits into
base: master
Choose a base branch
from
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
45 commits
Select commit Hold shift + click to select a range
7b5301a
fix vulnerabilities (1)
luvkapur Apr 19, 2024
154dbf9
sync with origin/master
luvkapur Apr 30, 2024
6795d1a
fix trivy from detecting comment as leaking symmetricPrivateKey (priv…
luvkapur Apr 30, 2024
8bc5bb6
bump react dev utils
luvkapur Apr 30, 2024
0a813cf
shorten the capsule dir (#8827)
davidfirst Apr 24, 2024
6880f74
improvement(sign), introduce a new flag --save-locally to make debugg…
davidfirst Apr 24, 2024
d4ecc8d
fix(checkout-reset), reset component.json if exists locally (#8826)
davidfirst Apr 24, 2024
9d63c7b
sync with origin/master
luvkapur May 3, 2024
f09d698
bump teambit version to 1.6.146 [skip ci]
Apr 25, 2024
6fb1a3e
remove envs from workspace.jsonc#generators.envs when they got remove…
davidfirst Apr 25, 2024
7507bbf
fix(remove), block removal of new aspects that are used by other comp…
davidfirst Apr 25, 2024
8fcc37a
fix(Overview): API Reference overview section design fixes (#8832)
luvkapur Apr 25, 2024
6fc6925
fix(create), block using component-name with the same name as the tem…
davidfirst Apr 25, 2024
4ac59ff
improve merge-error message (#8833)
davidfirst Apr 25, 2024
09708ff
bump @teambit/legacy version to 1.0.690 [skip ci]
Apr 26, 2024
ddd6fe7
bump teambit version to 1.6.147 [skip ci]
Apr 26, 2024
b4b9675
feat(lanes), introduce a new sub-command "merge-move" (#8834)
davidfirst Apr 26, 2024
1c78c9c
improvement(status), show all soft-tagged in a dedicated category (#8…
davidfirst Apr 26, 2024
b733dc7
bump @teambit/legacy version to 1.0.691 [skip ci]
Apr 27, 2024
b070de4
bump teambit version to 1.6.148 [skip ci]
Apr 27, 2024
9c04295
bump teambit version to 1.6.149 [skip ci]
Apr 28, 2024
7a577e8
bump teambit version to 1.6.150 [skip ci]
Apr 29, 2024
cd92e69
improvement(import), allow importing main components with wildcard wh…
davidfirst Apr 29, 2024
131dfea
preparation for performance improvement by asking server for existenc…
davidfirst Apr 29, 2024
ac73a8c
add a graphql query to get bit version of the remote scope (#8840)
davidfirst Apr 29, 2024
eddf1db
feat(Schema | API Ref): alias support for exported nodes (#8838)
luvkapur Apr 29, 2024
8da99ae
bump @teambit/legacy version to 1.0.692 [skip ci]
Apr 30, 2024
d7b528a
bump teambit version to 1.6.151 [skip ci]
GiladShoham Apr 30, 2024
1c5b245
update lock file
GiladShoham Apr 30, 2024
11e3de9
fix(scope-rename), replace aspects properly in workspace.jsonc (#8842)
davidfirst Apr 30, 2024
b0b04c8
add a new component-issue "Import From Directory" suggesting to impor…
davidfirst Apr 30, 2024
31f8ca7
feat(delete), introduce --range flag to delete tags of a specific ran…
davidfirst Apr 30, 2024
1497ac8
bump @teambit/legacy version to 1.0.693 [skip ci]
May 1, 2024
b1c037e
bump teambit version to 1.6.152 [skip ci]
May 1, 2024
153019a
feat, support using .gitignore file in the component root-dir (#8847)
davidfirst May 1, 2024
84504f8
refactor, remove tsconfig-writer (#8846)
davidfirst May 1, 2024
527ae75
feat(unuse), introduce a new command "bit unuse", the opposite of "bi…
davidfirst May 1, 2024
23de2c3
chore: replace `mocha-circleci-reporter` with `mocha-multi-reporters`…
luvkapur May 1, 2024
24478c3
bump @teambit/legacy version to 1.0.694 [skip ci]
May 2, 2024
9290f9f
bump teambit version to 1.6.153 [skip ci]
May 2, 2024
1faec8f
feat: unset-peer (#8843)
zkochan May 2, 2024
2c95fc7
chore: vulnerability fix - fork and componentize package-json-validat…
luvkapur May 2, 2024
16948a3
bump @teambit/legacy version to 1.0.695 [skip ci]
May 3, 2024
72ef871
bump teambit version to 1.6.154 [skip ci]
May 3, 2024
8933ca3
sync with origin/master
luvkapur May 3, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -38,14 +38,14 @@ export interface DependencyResolverWorkspaceConfig {

/**
* A client certificate to pass when accessing the registry. Values should be in PEM format (Windows calls it "Base-64 encoded X.509 (.CER)") with newlines replaced by the string "\n". For example:
* cert="-----BEGIN CERTIFICATE-----\nXXXX\nXXXX\n-----END CERTIFICATE-----"
* cert="----BEGIN CERTIFICATE-----\nXXXX\nXXXX\n-----END CERTIFICATE----"
* It is not the path to a certificate file (and there is no "certfile" option).
*/
cert?: string;

/**
* A client key to pass when accessing the registry. Values should be in PEM format with newlines replaced by the string "\n". For example:
* key="-----BEGIN PRIVATE KEY-----\nXXXX\nXXXX\n-----END PRIVATE KEY-----"
* key="----BEGIN PRIVATE KEY-----\nXXXX\nXXXX\n-----END PRIVATE KEY----"
* It is not the path to a key file (and there is no "keyfile" option).
*/
key?: string;
Expand Down
2 changes: 1 addition & 1 deletion scopes/react/aspect-docs/react-native/react-native.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -919,7 +919,7 @@ One last thing we need to do, is to add the peer dependencies of the parallel li
"policy": {
"dependencies": {
"react-native-svg-web": "1.0.9",
"react-native-web": "0.16.2",
"react-native-web": "0.16.5",
"prop-types": "15.7.2"
}
}
Expand Down
5 changes: 3 additions & 2 deletions scopes/react/react-native/component.json
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,8 @@
"teambit.dependencies/dependency-resolver": {
"policy": {
"dependencies": {
"@teambit/legacy": "-"
"@teambit/legacy": "-",
"react-native": "^0.68.0"
},
"devDependencies": {
"@teambit/legacy": "-",
Expand All @@ -19,7 +20,7 @@
"peerDependencies": {
"react": "^16.8.0 || ^17.0.0",
"react-dom": "^16.8.0 || ^17.0.0",
"react-native-web": "^0.16.0",
"react-native-web": "^0.16.5",
"@teambit/legacy": "1.0.695"
}
}
Expand Down
6 changes: 3 additions & 3 deletions scopes/react/react-native/react-native.env.ts
Original file line number Diff line number Diff line change
Expand Up @@ -45,16 +45,16 @@ export class ReactNativeEnv implements Environment, DependenciesEnv, PreviewEnv
'@types/jest': '^26.0.0',
'@types/react': '^17.0.8',
'@types/react-dom': '^17.0.5',
'@types/react-native': '^0.64.1',
'@types/react-native': '^0.68.5',
// This is added as dev dep since our jest file transformer uses babel plugins that require this to be installed
'@babel/runtime': '7.23.2',
'@types/testing-library__jest-dom': '5.9.5',
},
peerDependencies: {
react: '^16.8.0 || ^17.0.0',
'react-dom': '^16.8.0 || ^17.0.0',
'react-native': '^0.64.1',
'react-native-web': '^0.16.0',
'react-native': '^0.68.0',
'react-native-web': '^0.16.5',
},
};
}
Expand Down