Skip to content

STRWEB-148: stripes-webpack 6.1.0 fixing vulns#3595

Open
julianladisch wants to merge 1 commit into
R1-2025-okapifrom
STRWEB-148
Open

STRWEB-148: stripes-webpack 6.1.0 fixing vulns#3595
julianladisch wants to merge 1 commit into
R1-2025-okapifrom
STRWEB-148

Conversation

@julianladisch
Copy link
Copy Markdown
Contributor

@julianladisch julianladisch requested review from a team and fsejenkins April 27, 2026 13:41
JohnC-80
JohnC-80 previously approved these changes Apr 29, 2026
@JohnC-80 JohnC-80 self-requested a review April 29, 2026 14:27
@JohnC-80 JohnC-80 dismissed their stale review April 29, 2026 14:29

I think we're going to have to pin a resolution for webpack as well - the Jenkins build appears to fail due to an error with webpack manifest plugin.

@JohnC-80
Copy link
Copy Markdown

@julianladisch version for webpack:
"webpack": "~5.105.4"
This will boost the version for stripes-build.

Copy link
Copy Markdown
Member

@zburke zburke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@julianladisch, this PR does not address STRWEB-148. We implemented STRWEB-148 in v7.0.0 for Trillium, not v6.1.0. We noted that it was a Trillium-only release when we announced it on Slack.

It should be possible to build a Sunflower platform with v7, but a better approach than resolutions would be to bump the @folio/stripes-build dep from ^1.0.0 to ^2.0.0 (which, whoops, I see we have not released. I'll do that today).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants