Skip to content

Update dependencies to fix security vulnerabilities #506

@katariniss

Description

@katariniss

Need to update the listed packages across all UI services
So that security vulnerabilities are mitigated

Description

List of packages:

  • @tourmalinecore/react-tc-auth to 2.2.6
  • vite to 7.3.5
  • axios to 1.16.1
  • react-router-dom to 6.30.4
  • sass to 1.100.0

Transitive dependencies (not listed in package.json):

  • flatted to 3.4.2
  • handlebars to 4.7.9
  • tmp to 0.2.6
  • fast-uri to 3.1.1
  • minimatch to 3.1.3
  • picomatch to 4.0.4
  • rollup to 4.59.0

Need to replicate this to the following services (list of dependencies may differ, especially transitive ones):

  • time-ui
  • books-ui
  • layout-ui
  • compensations-ui
  • documents-ui
  • inner-circle-ui (employees)
  • auth-ui
  • accounts-ui
  • invoices-ui

Definition of Done

  1. Packages that are listed in package.json can be updated directly through npm install package-version.
  2. Transitive dependencies can be updated through npm update package (you can't specify a certain version, it can only be updated to the latest version) which will update the version in package-lock.json file.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions