Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor: resolves a dependabot alert #1520

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Conversation

mfranzke
Copy link
Member

No description provided.

@mfranzke mfranzke added the dependencies Pull requests that update a dependency file label Nov 18, 2024
@mfranzke mfranzke self-assigned this Nov 18, 2024
@mfranzke mfranzke marked this pull request as draft November 18, 2024 22:47
@mfranzke mfranzke marked this pull request as ready for review November 18, 2024 23:12
@mfranzke mfranzke enabled auto-merge November 18, 2024 23:12
@mfranzke mfranzke disabled auto-merge November 18, 2024 23:12
@mfranzke mfranzke removed their assignment Nov 19, 2024
@nmerget
Copy link
Member

nmerget commented Nov 19, 2024

@mfranzke we don't need it in the e2e packages npm ls cross-spawn was empty, but we need it in the react-tailwind-template

@mfranzke
Copy link
Member Author

mfranzke commented Nov 19, 2024

@mfranzke we don't need it in the e2e packages npm ls cross-spawn was empty, but we need it in the react-tailwind-template

but cross-spawn is included in e2e/package-lock.json, so I would assume that we even also need it there. Within react-tailwind-template there's no npm-run-all reference (that includes the outdated and vulnerable cross-spawn version).

@mfranzke mfranzke enabled auto-merge December 18, 2024 07:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants