-
Notifications
You must be signed in to change notification settings - Fork 367
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
deps: [M3-8782] - Patch cookie version #11434
Conversation
Coverage Report: ✅ |
Thanks for looking into this one, looks good! Can you run |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approving pending Banks' comment so my pending review doesn't block this PR.
✅ Storybook runs as expected
✅ Cloud Manager runs as expected, no issues with MSW
✅ package.json version resolution is non-vulnerable
This PR is stale because it has been open 15 days with no activity. Please attend to this PR or it will be closed in 5 days |
@bnussman-akamai done ✅ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sweet, thanks!
Cloud Manager UI test results🔺 1 failing test on test run #3 ↗︎
Details
TroubleshootingUse this command to re-run the failing tests: yarn cy:run -s "cypress/e2e/core/kubernetes/lke-update.spec.ts" |
* deps: [M3-8782] - Patch cookie version * Added changeset: Patch `cookie` version as resolution for dependabot * Add lockfile --------- Co-authored-by: Jaalah Ramos <jaalah.ramos@gmail.com>
Description 📝
See: https://github.com/linode/manager/security/dependabot/131
cookie
is being used bymsw
(Mock Service Worker) through@bundled-es-modules
cookie
is also being used byexpress
which stems from@storybook/react-vite
and@storybook/builder-vite
Changes 🔄
Target release date 🗓️
01/14/2025
How to test 🧪
Reproduction steps
yarn why cookie
to observe dependencies and versions found in yarn.lockVerification steps
yarn storybook
and observe it still worksHoisted just means that it was moved up in the dependency tree for deduplication
Author Checklists
As an Author, to speed up the review process, I considered 🤔
👀 Doing a self review
❔ Our contribution guidelines
🤏 Splitting feature into small PRs
➕ Adding a changeset
🧪 Providing/improving test coverage
🔐 Removing all sensitive information from the code and PR description
🚩 Using a feature flag to protect the release
👣 Providing comprehensive reproduction steps
📑 Providing or updating our documentation
🕛 Scheduling a pair reviewing session
📱 Providing mobile support
♿ Providing accessibility support
As an Author, before moving this PR from Draft to Open, I confirmed ✅