You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Sandor Molnar (Jira)" <ji...@apache.org> on 2022/11/04 10:13:00 UTC

[jira] [Created] (KNOX-2834) Take care of existing javascript upgrades by dependabot

Sandor Molnar created KNOX-2834:
-----------------------------------

             Summary: Take care of existing javascript upgrades by dependabot
                 Key: KNOX-2834
                 URL: https://issues.apache.org/jira/browse/KNOX-2834
             Project: Apache Knox
          Issue Type: Improvement
          Components: AdminUI, Homepage
    Affects Versions: 2.0.0
            Reporter: Sandor Molnar
            Assignee: Balazs Marton
             Fix For: 2.0.0
         Attachments: image-2022-11-04-11-12-00-500.png

[~MrtnBalazs] - as discussed offline, there is a list of open PRs generated by Apache's dependabot for our javascript-based Maven modules (*-ui) where there are some components such as angular-cli that needed to be upgraded to a higher version due to security reasons (see attached screenshot).

Please compile a table with the source/target dependency versions and make sure they are all applied in our code base within the scope of this JIRA and covered by manual testing as discussed.

 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)