[Snyk] Security upgrade parcel from 1.12.4 to 2.0.0#3267
[Snyk] Security upgrade parcel from 1.12.4 to 2.0.0#3267prodsecmachine wants to merge 2 commits into
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-DEBUG-12552895 - https://snyk.io/vuln/SNYK-JS-ISARRAYISH-12552904 - https://snyk.io/vuln/SNYK-JS-SIMPLESWIZZLE-12552908
|
A documentation preview will be available soon. Request a new doc build by commenting
If your PR continues to fail for an unknown reason, the doc build pipeline may be broken. Elastic employees can check the pipeline status here. |
|
@elastic/docs-engineering do we need to do something with this? |
|
This upgrade is too troublesome. Too many breakages. Parcel not only builds the frontend but also the tests. The only thing we ship to customers is the air gapped image where I have already removed this dependency. The air gapped image is a chainguard image and I minimized the node dependencies so we have 0 CVE's there. We might do the same for the preview image when we have time. Let's leave this PR open though |
✅ This PR has been automatically closedThe security issues addressed by this pull request are no longer present in the latest project scan. All vulnerabilities this PR was created to fix have been resolved through other means (e.g., dependency updates, direct fixes, or changes in vulnerability data). Resolved Issues
What should I do?No action is required. If you believe this PR was closed in error, you can reopen it and contact Snyk support. This action was performed automatically by Snyk. |
Snyk has created this PR to fix 3 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-DEBUG-12552895
SNYK-JS-ISARRAYISH-12552904
SNYK-JS-SIMPLESWIZZLE-12552908
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.