fix: update dependencies

[jkrenge]

@parcelLab/backend You think this can have any effect on backend, where this package is used?

[lacazeto]

just curious where is this coming from???

do we have some security alert related to it? That would sound strange to me since this is a dev dependency 😄

anyways, I also don't see any errors or warnings when installing the packages via npm

[jkrenge]

That is correct, Vanta flagged a lot of repos so I just did an npm update ;)

[andibeuge]

@lacazeto Vanta started to monitor all the dependabot security findings.

e.g. those https://github.com/parcelLab/regionIdentifier/security/dependabot

We have a long list of findings that we need to fix within the next 10 days to meet our SLAs we have for our certifications.

[andibeuge]

@jkrenge @lacazeto we have a similar situation with this https://github.com/parcelLab/typescript-plcommon/security/dependabot

[lacazeto]

@jkrenge @lacazeto we have a similar situation with this https://github.com/parcelLab/typescript-plcommon/security/dependabot

I'm working on those critical / high level ones

[lacazeto]

@lacazeto Vanta started to monitor all the dependabot security findings.

e.g. those https://github.com/parcelLab/regionIdentifier/security/dependabot

We have a long list of findings that we need to fix within the next 10 days to meet our SLAs we have for our certifications.

I was missplaced! This entered my backend email box folder and I didnt notice it was for another project!

[jkrenge]

@claude If we're updating dependencies here, and then in turn use this as a package in another node app, can this cause any issues? I think not because those dependencies are isolated, right?

[lacazeto]

I just tested main backend with this branch as the dependency
"region_identifier": "github:parcelLab/regionIdentifier#fix/update-dependencies",

Backend eslint-plugin-unicorn version takes precedence in the resolution!

Can't detect any issues! linter still passing!

[dogabudak]

@claude If we're updating dependencies here, and then in turn use this as a package in another node app, can this cause any issues? I think not because those dependencies are isolated, right?

@claude Answer to your master please