Skip to content

Resolving xml2js Dependabot Alert - #141

Merged
Lohitaksh Gupta (lohitakshgupta) merged 1 commit into
masterfrom
resolve-dependabot-alerts
May 11, 2023
Merged

Resolving xml2js Dependabot Alert#141
Lohitaksh Gupta (lohitakshgupta) merged 1 commit into
masterfrom
resolve-dependabot-alerts

Conversation

@lohitakshgupta

@lohitakshgupta Lohitaksh Gupta (lohitakshgupta) commented May 10, 2023

Copy link
Copy Markdown
Contributor

Resolving xml2js Dependabot Alert: https://github.com/microsoft/azure-devops-extension-sample/security/dependabot/40

I only added overrides in package.json and then ran npm install --package-lock-only

@dpaquette

Copy link
Copy Markdown
Contributor

Just a note that the reason for the big changes in package-lock.json is because we've moved to npm 8.15.0 so we can take advantage of the new overrides feature of package.json.

@lohitakshgupta
Lohitaksh Gupta (lohitakshgupta) deleted the resolve-dependabot-alerts branch May 11, 2023 20:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants