Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CI and update npm packages #45

Merged
merged 8 commits into from
Mar 18, 2025
Merged

Fix CI and update npm packages #45

merged 8 commits into from
Mar 18, 2025

Conversation

martincostello
Copy link
Member

  • Update to Node.js v22.
  • Remove Travis CI configuration.
  • Add dependabot configuration file.
  • React to https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2 and fix tests for Windows.
  • equal() is deprecated, so use strictEqual() instead.
  • Add launch configuration for VS Code to debug Mocha.
  • Suggest VS Code extensions for running and debugging Mocha tests.
  • Bump cross-fetch, glob and mocha to their latest versions.
  • Run npm audit fix to resolve some security vulnerabilities.

A bigger piece of work to upgrade Yeoman itself is needed to resolve them all. That's for another time, this should just reduce the volume of weekly nagging from GitHub security alerts.

Update to Node.js v22.
Remove Travis CI configuration.
Add dependabot configuration file.
`equal()` is deprecated, so use `strictEqual()` instead.
Add launch configuration for VS Code to debug Mocha.
Suggest VS Code extensions for running and debugging Mocha tests.
- Bump cross-fetch, glob and mocha to their latest versions.
- Run `npm audit fix` to resolve some security vulnerabilities.
@martincostello martincostello added enhancement dependencies Pull requests that update a dependency file labels Mar 18, 2025
@martincostello martincostello marked this pull request as ready for review March 18, 2025 10:58
@martincostello martincostello merged commit 7e7d0f5 into dev Mar 18, 2025
1 check passed
@martincostello martincostello deleted the npm-audit-fix branch March 18, 2025 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file enhancement
Development

Successfully merging this pull request may close these issues.

1 participant