 Alex Rudenko
|
6abfa37a65
|
Fix socket.io-parser lock to resolve to 4.2.4
Bug: none
Change-Id: I58fab347c8ee39412d79696762e72dd16b74c15a
Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/5454234
Auto-Submit: Alex Rudenko <alexrudenko@chromium.org>
Commit-Queue: Alex Rudenko <alexrudenko@chromium.org>
Reviewed-by: Simon Zünd <szuend@chromium.org>
Commit-Queue: Simon Zünd <szuend@chromium.org>
|
2024-04-16 08:48:36 +00:00 |
|
|
Simon Zünd
|
cba2ac9e1c
|
[deps] Update 'terser' to 5.19.1
The update contains a bug fix that improves the quality for DevTools
release source maps.
The update also seems to stop minifiying certain names in the overlay
bundle so we had to slightly bump the limit.
* Old size: 69660
* New size: 71295
DISABLE_THIRD_PARTY_CHECK=Bump overlay size limit
R=alexrudenko@chromium.org
Bug: 1459146
Change-Id: I3036787bbb3ba8d28669b9aaab9c29c5f5581e55
Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4693881
Commit-Queue: Simon Zünd <szuend@chromium.org>
Reviewed-by: Alex Rudenko <alexrudenko@chromium.org>
|
2023-07-18 09:44:36 +00:00 |
|
|
Guangyue Xu
|
2314ddcbfe
|
npm pakage security updates
Ran the following script to update engine.io and socket.io-parser
package from 4.2.1 to 4.2.4 to address the security issue tracked
in crbug.com/1464405:
`npm run install-deps audit fix --audit-level=critical`
Bug:1464405
Change-Id: I40f54d721642ad124b81a2df1307ab1d2dfecbdc
Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4682214
Commit-Queue: Guangyue Xu <guangyue.xu@microsoft.com>
Reviewed-by: Danil Somsikov <dsv@chromium.org>
|
2023-07-13 17:37:54 +00:00 |
|
|
Brandon Walderman
|
f64f77e749
|
Update node_modules to address security vulnerabilities
This change addresses 2 issues in uglify-js and socket.io-parser. See
reports below for details:
- https://www.mend.io/vulnerability-database/CVE-2022-37598
- https://nvd.nist.gov/vuln/detail/CVE-2022-2421
The socket.io-parser issue was addressed by running npm audit via the
following command:
`npm run install-deps audit fix --audit-level=critical`
Since audit didn't recognize the uglify-js issue, I updated uglify-js
to version 3.13.10 "manually" by adding an entry in
manage_node_deps.py. running install-deps to update package-lock.json
and then removing the entry from manage_node_deps.py.
Bug: None
Change-Id: I29238b14773a1b94b973886b0bb700f50e45cfa9
Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4061168
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Commit-Queue: Brandon Walderman <brwalder@microsoft.com>
|
2022-11-30 15:19:46 +00:00 |
|