Skip to content

Conversation

masontikhonov
Copy link
Contributor

@masontikhonov masontikhonov commented Nov 21, 2024

What

This reverts previous version 0.88.0.

Why

New release added Node.js-level warnings to output which broke custom parsing of CLI output.

@masontikhonov masontikhonov merged commit 04b5e0a into master Nov 21, 2024
1 check passed
@masontikhonov masontikhonov deleted the revert-latest branch November 21, 2024 16:41
masontikhonov added a commit that referenced this pull request Nov 24, 2024
masontikhonov added a commit that referenced this pull request Nov 27, 2024
## What

This PR reapplies #866 that was previously reverted in #869.

It contains upgrade for multiple dependencies to address critical- and
high-level CVE.

In addition to #866, it:

* upgrades `npm` to address
[CVE-2024-21538](https://scout.docker.com/vulnerabilities/id/CVE-2024-21538?s=github&n=cross-spawn&t=npm&vr=%3E%3D7.0.0%2C%3C7.0.5&utm_source=desktop&utm_medium=ExternalLink).
* Sets `NODE_NO_WARNINGS=1` env in Dockerfile
([ref](https://nodejs.org/api/cli.html#node_no_warnings1)) in order to
suppress Node.js deprecation warnings, that may interrupt end-user
automations, that rely on exact CLi output.
* Migrates from `pkg`, which is no longer maintained, to its fork
`@yao-pkg/pkg`.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants