Updated package.json to include all non-breaking security fixes - #3061
Open
nf3 wants to merge 4 commits into
Open
Updated package.json to include all non-breaking security fixes#3061nf3 wants to merge 4 commits into
nf3 wants to merge 4 commits into
Conversation
The Big 4.0! Co-authored-by: Sara Federico <gretzky@users.noreply.github.com> Co-authored-by: Paolo Mariotti <pmariott@gmail.com> Co-authored-by: <thaur.yang@gmail.com> Co-authored-by: Tan Nguyen <Tannd1993@gmail.com> Co-authored-by: Jon Winn <jwinn@users.noreply.github.com> Co-authored-by: paulogdm <paulogdemitri@gmail.com> Co-authored-by: Marcellin Nshimiyimana <mn2587@columbia.edu> Co-authored-by: Ryan Swart <serjndestroy@gmail.com> Co-authored-by: Benedikt Franke <benedikt@franke.tech> Co-authored-by: Khayyam Saleem <khayyam.saleem@gmail.com> Co-authored-by: Vladimir Cibizov <vladimir.tsibizow@gmail.com> Co-authored-by: Al-un <alun.sng@gmail.com> Co-authored-by: Larry <lsanders@gmail.com>
nf3
requested review from
JohnMostlyR,
julienben,
justingreenberg,
jwinn and
vineyardbovines
as code owners
May 12, 2022 19:19
There are a few key areas updated to add support for the Vault Vision Login-as-a-Service - Add Sagas flows for the loading user context from session storage and for validating the post authorization JWT token that first established a user as being authenticated by the Vault Vision OIDC identity provider - Add Actions for pre and post user loading and pre and post callback authorization api call - Add appropriate Reducers to consume Saga and Action triggers in order to modify Redux state - Update unit tests to 100% PASS - Create a PrivateRoute component that can be used to easily protect pages and routes that require authentication - Create an example Dashboard page that requires authentication - Create an example Profile page that requires authentication and displays all the available user data for an authenticated user - Create SignIn, SignUp, SignOut button Components - Integrate the NPM oidc-client - Add a userManager that interfaces to the open source OIDC client library - Add support for reading environment variables for OIDC settings using dotenv - Update NPM packages to have 0 known vulnerabilities
The semver-regex package listed a vulnerability in the npm audit for version 3.1.3, this vulnerability was fixed in 3.1.4
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
NPM Package changelog
npm install dotenv
npm install oidc-client
npm install immer@9.0.13
npm install lodash@4.17.21
npm install minimist@1.2.3
npm install react-redux@7.2.8
npm install react-router-dom@5.3.1
npm install --save-dev lint-staged@12.4.1
npm install --save-dev webpack@4.32.0
npm install --save-dev plop@3.1.0
npm install --save-dev stylelint@13.13.1
npm install --save-dev jest-cli@26.6.3
npm update ansi-regex --depth 5
npm update terser-webpack-plugin --depth 2
npm update ajv --depth 4
npm update null --depth 2
npm install --save-dev add-asset-html-webpack-plugin@5.0.2
npm install --save-dev image-webpack-loader@8.1.0
npm install --save-dev compression-webpack-plugin@6.1.1
npm install --save-dev terser-webpack-plugin@4.2.3
npm install --save-dev webpack-cli@3.3.10
npm install --save-dev node-plop@0.31.0
npm install npm@latest -g
npm install --legacy-peer-deps
plus the following overrides