Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Check Dependabot alerts and update packages when possible #3097

Open
LeandraH opened this issue Feb 17, 2025 · 1 comment
Open

Check Dependabot alerts and update packages when possible #3097

LeandraH opened this issue Feb 17, 2025 · 1 comment
Assignees
@steffenkleinle
Labels
dependencies Pull requests that update a dependency file not-testable Not testable by our tester security Task

Comments

@LeandraH
Copy link
Contributor

LeandraH commented Feb 17, 2025 •
edited by steffenkleinle
Loading

Describe the Problem

According to our Dependabot alerts, we currently have 35 security issues, 10 of which are of a high severity (though at least no critical ones). We should fix as many as possible of those.

Describe Your Preferred Solution

Upgrade the packages that we can; if an issue doesn't affect us, dismiss it.

Describe Possible Alternatives

Wait?

Related Issues

Blocked by #2389

Additional Information

N/A
@LeandraH LeandraH added dependencies Pull requests that update a dependency file not-testable Not testable by our tester security Task labels Feb 17, 2025
@steffenkleinle steffenkleinle self-assigned this Feb 17, 2025
@steffenkleinle
Copy link
Member

Guess its time for dependency upgrades again 🙈 😆

@steffenkleinle steffenkleinle moved this to Next Up in team-app Feb 17, 2025
@steffenkleinle steffenkleinle mentioned this issue Feb 20, 2025
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@steffenkleinle steffenkleinle

Labels
dependencies Pull requests that update a dependency file not-testable Not testable by our tester security Task
Projects
team-app
Status: Next Up
Milestone
No milestone
Development

No branches or pull requests
2 participants
@LeandraH @steffenkleinle