Skip to content

Upgrade 2.x deps#287

Closed
raymondfeng wants to merge 63 commits into2.x-latestfrom
upgrade-2.x-deps
Closed

Upgrade 2.x deps#287
raymondfeng wants to merge 63 commits into2.x-latestfrom
upgrade-2.x-deps

Conversation

@raymondfeng
Copy link
Copy Markdown
Member

@raymondfeng raymondfeng commented Mar 22, 2019

Description

Upgrade deps to remove npm audit warnings.

Related issues

  • connect to <link_to_referenced_issue>

Checklist

  • New tests added or existing tests modified to cover all changes
  • Code conforms with the style
    guide

jannyHou and others added 30 commits May 5, 2016 17:33
Add flag var lazyConnect to ds config
 * update copyright notices and license (Ryan Graham)
 * Add flag var lazyConnect to ds config (juehou)
Add a simple implementation of getRandomValues to the browser context
to get rid of the following warning:

    [SECURITY] node-uuid: crypto not usable, falling back to insecure
    Math.random()
travis: drop io.js, add Node v4 and v6
 * Update URLs in CONTRIBUTING.md (#198) (Ryan Graham)
 * travis: drop io.js, add Node v4 and v6 (Miroslav Bajtoš)
 * Stop caching config files (Miroslav Bajtoš)
Add two new options `middlewareRootDir` and `componentRootDir`
allowing users to load middleware and/or components from a custom
place
…ath-configuration

Configurable directory for components and middleware

Close #171
 * Configurable dir for components and middleware (Doped Dude)
 * test: fix security warning (Miroslav Bajtoš)
To avoid port collision when running in Jenkins
Change test cases port to be dynamic
Replace fs.existsSync calls with wrapped fs.statSync

Close #204
 * Replace fs.existsSync calls with fs.statSync (Joshua Estrin Skrzypek)
 * Change test cases port to be dynamic (David Cheung)
 * Globalization for Loopback-boot (David Cheung)
This should fix build failures on Windows caused by line-ending
mismatch.
Normalize line endings to support both LF and CRLF [2.x]
Fix the code loading "loopback#errorhandler" (for example) to correctly
look up the "loopback" module in node_modules of the bootstrapped
application, instead of looking it up in node_modules of loopback-boot.
…odules-2x

Fix resolution of middleware modules [2.x]
 * Fix resolution of middleware modules (Miroslav Bajtoš)
 * Normalize line endings to support both LF and CRLF (Miroslav Bajtoš)
uses simple regex check to test if a path matches NTFS notation
Fix browser tests on Node.js 0.10
bajtos and others added 24 commits June 26, 2017 15:04
 * Support es2015 module exports (Babel, TypeScript) (John McLaughlin)
Add support for ES6 style async boot scripts
 * Add support for ES6 style async boot scripts (Jürg Lehni)
 * Update Italian translated strings Q2 2017 (Allen Boone)
 * Update translated strings Q2 2017 (Allen Boone)
Do not call callbacks twice in async boot scripts
 * Do not call callbacks twice in async boot scripts (Jürg Lehni)
Ignore js sourcemap files from boot
 * Ignore js sourcemap files from boot (Zak Barbuto)
Some of our dependencies are no longer supporting pre-4.0 versions of
Node.js. As a result, our CI builds are failing on these platforms.

This pull request removes 0.10 and 0.12 from our Travis CI build matrix
and also adds "engines" field to package.json to tell our internal
Jenkins CI to stop testing 0.10 and 0.12 versions too.
Drop support for Node.js versions 0.10 and 0.12
 * Drop support for Node.js versions 0.10 and 0.12 (Miroslav Bajtoš)
 * CODEOWNERS: move @lehni to Alumni section (Miroslav Bajtoš)
 * CODEOWNERS: add zbarbuto (Miroslav Bajtoš)
 * Add CODEOWNERS file (Miroslav Bajtoš)
 * Upgrade lodash from 3.x to 4.x (Miroslav Bajtoš)
Copy link
Copy Markdown
Member

@b-admike b-admike left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM overall, just have some questions.

function createContext() {
var context = {
// required by browserify
XMLHttpRequest: function() { throw new Error('not implemented'); },
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this change also associated with the upgrade?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes. Otherwise, it throws an error - not implemented

@@ -0,0 +1 @@
package-lock=true
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need to enable package-lock here? Is that something we want to do throughout our repos?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I enabled it to run npm audit.

@raymondfeng
Copy link
Copy Markdown
Member Author

FYI: I'm not sure why this PR shows 63 commits.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.