Skip to content

Conversation

pieh
Copy link
Contributor

@pieh pieh commented Feb 21, 2024

Description

Addressing npm audit alert

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Got allows a redirect to a UNIX socket                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ got                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=11.8.5                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gatsby-source-contentful                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gatsby-source-contentful > is-online > public-ip > got       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1088948                     │
└───────────────┴──────────────────────────────────────────────────────────────┘

Documentation

Tests

Related Issues

@gatsbot gatsbot bot added the status: triage needed Issue or pull request that need to be triaged and assigned to a reviewer label Feb 21, 2024
@pieh pieh added type: maintenance An issue or pull request describing a change that isn't a bug, feature or documentation change topic: source-contentful Related to Gatsby's integration with Contentful and removed status: triage needed Issue or pull request that need to be triaged and assigned to a reviewer labels Feb 21, 2024
`trim-lines`,
`estree-util-to-js`,
`is-reference`,
`github-slugger`,
].join(`|`)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this list was getting messy, so I did sort it lexigraphically

Comment on lines +38 to +41
async function isOnline() {
return (await import(`is-online`)).default()
}

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed version is ESM-only, hence await import trick

Copy link

@MarcL MarcL left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me.

@pieh pieh merged commit 89cb129 into master Apr 25, 2024
@pieh pieh deleted the michalpiechowiak/fra-339-upgrade-is-online-in-gatsby-source-contentful branch April 25, 2024 11:34
pieh added a commit that referenced this pull request May 6, 2024
* chore(gatsby-source-contentful): upgrade is-online

* test: update esm packages for jest config

(cherry picked from commit 89cb129)
pieh added a commit that referenced this pull request May 6, 2024
* chore(gatsby-source-contentful): upgrade is-online

* test: update esm packages for jest config

(cherry picked from commit 89cb129)

Co-authored-by: Michal Piechowiak <misiek.piechowiak@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
topic: source-contentful Related to Gatsby's integration with Contentful type: maintenance An issue or pull request describing a change that isn't a bug, feature or documentation change
Projects
Status: Published
Development

Successfully merging this pull request may close these issues.

2 participants