Skip to content

NXT-20662: Update package dependencies to fix security vulnerabilities #276

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
daniel-stoian-lgp merged 7 commits into from
Oct 8, 2026
Merged

NXT-20662: Update package dependencies to fix security vulnerabilities #276

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
fea95c6
Updated minor dependencies.
alexandrumorariu Oct 1, 2026
8ec0000
Major dependencies
alexandrumorariu Oct 1, 2026
07e5e33
Fixes
alexandrumorariu Oct 1, 2026
38b6c07
Fixes for package-lock
alexandrumorariu Oct 1, 2026
3ce6ad7
Fixes for package-lock
alexandrumorariu Oct 2, 2026
963b97e
Fix for ci-reusable
alexandrumorariu Oct 5, 2026
97b5ae2
Updated Changelog entry
alexandrumorariu Oct 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci-reusable.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ jobs:

- name: Clone and setup Enact CLI
run: |
git clone --branch=release/7.2.x.develop --depth 1 https://github.com/enactjs/cli ../cli
git clone --branch=develop --depth 1 https://github.com/enactjs/cli ../cli
pushd ../cli
npm install
npm link
Expand Down
6 changes: 6 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,12 @@

The following is a curated list of changes in the Enact docs-utils module, newest changes on the top.

## [unreleased]

- Updated minor dependencies versions to the latest.

@dan-ichim-lgp dan-ichim-lgp Oct 6, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This entry does not match the diff. linkinator moves from 6 to 8 and react-live moves from 4 to 5, and the CI workflow now clones cli develop. Please name those changes here.

@alexandrumorariu alexandrumorariu Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done

- Updated `react-live` to version `5.0.0`.
- Updated `linkinator` to version `8.1.0`.

## [5.0.0] - 2026-10-01

- Migrated from `Gatsby` to `Astro/Starlight`.
Expand Down
998 changes: 401 additions & 597 deletions package-lock.json
View file
Open in desktop

Large diffs are not rendered by default.

14 changes: 7 additions & 7 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,17 +21,17 @@
"@astrojs/react": "^5.0.7",
"@astrojs/starlight": "^0.40.0",
"astro": "^6.4.7",
"highlight.js": "^11.11.1",
"react": "^19.2.7",
"react-dom": "^19.2.7"
"highlight.js": "^11.12.0",
"react": "^19.3.0",
"react-dom": "^19.3.0"
},
"devDependencies": {
"@enact/docs-utils": "^0.5.0",
"@types/react": "^19.2.17",
"@types/react-dom": "^19.2.3",
"eslint": "^9.39.4",
"@types/react": "^19.3.0",
"@types/react-dom": "^19.3.0",
"eslint": "^9.39.5",
"eslint-config-enact": "^5.1.3",
"linkinator": "^6.1.2",
"linkinator": "^8.1.0",

@dan-ichim-lgp dan-ichim-lgp Oct 6, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a two-major jump from ^6.1.2 and it is not mentioned in the description. npm run check-links still calls linkinator ./dist --recurse --verbosity error. Please confirm those flags still work on linkinator 8.

@alexandrumorariu alexandrumorariu Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I ran the command on linkinator 8.1.0 here, and npm run check-links (linkinator ./dist --recurse --verbosity error) works the same as on 6.1.2.

"minimist": "^1.2.8",
"shelljs": "^0.10.0"
},
Expand Down
6 changes: 3 additions & 3 deletions sample-runner/agate/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,8 +29,8 @@
"@enact/ui": "^5.6.0",
"ilib": "^14.22.0",
"prop-types": "^15.8.1",
"react": "^19.2.7",
"react-dom": "^19.2.7",
"react-live": "^4.1.8"
"react": "^19.3.0",
"react-dom": "^19.3.0",
"react-live": "^5.0.0"
}
}
6 changes: 3 additions & 3 deletions sample-runner/core/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,8 +25,8 @@
"@enact/ui": "^5.6.0",
"ilib": "^14.22.0",
"prop-types": "^15.8.1",
"react": "^19.2.7",
"react-dom": "^19.2.7",
"react-live": "^4.1.8"
"react": "^19.3.0",
"react-dom": "^19.3.0",
"react-live": "^5.0.0"
}
}
8 changes: 4 additions & 4 deletions sample-runner/limestone/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,13 +24,13 @@
"dependencies": {
"@enact/core": "^5.6.0",
"@enact/i18n": "^5.6.0",
"@enact/limestone": "^1.11.2",
"@enact/limestone": "^1.12.0",
"@enact/spotlight": "^5.6.0",
"@enact/ui": "^5.6.0",
"ilib": "^14.22.0",
"prop-types": "^15.8.1",
"react": "^19.2.7",
"react-dom": "^19.2.7",
"react-live": "^4.1.8"
"react": "^19.3.0",
"react-dom": "^19.3.0",
"react-live": "^5.0.0"
}
}
Loading