Skip to content

Conversation

@renovate
Copy link

@renovate renovate bot commented Feb 27, 2022

Mend Renovate

This PR contains the following updates:

Package Change
browserslist 4.14.2 -> 4.16.5

GitHub Vulnerability Alerts

CVE-2021-23364

The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot force-pushed the renovate/npm-browserslist-vulnerability branch 24 times, most recently from 8fce4d4 to d97edfa Compare March 7, 2022 03:55
@renovate renovate bot force-pushed the renovate/npm-browserslist-vulnerability branch 5 times, most recently from 3029d40 to dd1bd6a Compare March 8, 2022 18:45
@renovate renovate bot force-pushed the renovate/npm-browserslist-vulnerability branch 24 times, most recently from 5324e0f to c8169de Compare March 31, 2022 13:24
@renovate renovate bot force-pushed the renovate/npm-browserslist-vulnerability branch from c8169de to a9bc901 Compare March 31, 2022 18:13
@renovate renovate bot force-pushed the renovate/npm-browserslist-vulnerability branch from a9bc901 to af6c9a8 Compare March 31, 2022 23:45
@renovate
Copy link
Author

renovate bot commented Mar 31, 2022

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: packages/event-management-frontend/package-lock.json
npm notice 
npm notice New minor version of npm available! 8.5.0 -> 8.6.0
npm notice Changelog: <https://github.com/npm/cli/releases/tag/v8.6.0>
npm notice Run `npm install -g [email protected]` to update!
npm notice 
npm WARN deprecated [email protected]: this library is no longer supported
npm WARN deprecated [email protected]: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
npm WARN deprecated [email protected]: The functionality that this package provided is now in @npmcli/arborist
npm WARN deprecated [email protected]: request has been deprecated, see https://github.com/request/request/issues/3142
lerna notice cli v4.0.0
lerna info versioning independent
lerna notice cli v4.0.0
lerna info versioning independent
lerna info Bootstrapping 3 packages
lerna info Installing external dependencies
lerna ERR! npm install --ignore-scripts --ignore-scripts --no-audit --package-lock-only exited 1 in '@learnspot/discussion-board-management-frontend'
lerna ERR! npm install --ignore-scripts --ignore-scripts --no-audit --package-lock-only stderr:
npm WARN ERESOLVE overriding peer dependency
npm WARN While resolving: @carbon/[email protected]
npm WARN Found: [email protected]
npm WARN node_modules/d3
npm WARN   d3@"^5.16.0" from the root project
npm WARN 
npm WARN Could not resolve dependency:
npm WARN peer d3@">=5.0.0 <=5.14.2" from @carbon/[email protected]
npm WARN node_modules/@carbon/charts
npm WARN   @carbon/charts@"^0.41.79" from @carbon/[email protected]
npm WARN   node_modules/@carbon/charts-react
npm WARN 
npm WARN Conflicting peer dependency: [email protected]
npm WARN node_modules/d3
npm WARN   peer d3@">=5.0.0 <=5.14.2" from @carbon/[email protected]
npm WARN   node_modules/@carbon/charts
npm WARN     @carbon/charts@"^0.41.79" from @carbon/[email protected]
npm WARN     node_modules/@carbon/charts-react
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: @carbon/[email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/react
npm ERR!   react@"^17.0.2" from the root project
npm ERR!   peer react@"^17.0.2" from @carbon/[email protected]
npm ERR!   node_modules/@carbon/charts-react
npm ERR!     @carbon/charts-react@"^0.41.79" from the root project
npm ERR!   15 more (@carbon/icons-react, carbon-components-react, ...)
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer react@"^16.8.6" from @carbon/[email protected]
npm ERR! node_modules/@carbon/ibm-security
npm ERR!   @carbon/ibm-security@"^1.42.0" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: [email protected]
npm ERR! node_modules/react
npm ERR!   peer react@"^16.8.6" from @carbon/[email protected]
npm ERR!   node_modules/@carbon/ibm-security
npm ERR!     @carbon/ibm-security@"^1.42.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate-cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate-cache/others/npm/_logs/2022-03-31T23_44_29_887Z-debug-0.log
lerna ERR! npm install --ignore-scripts --ignore-scripts --no-audit --package-lock-only exited 1 in '@learnspot/discussion-board-management-frontend'
lerna WARN complete Waiting for 1 child process to exit. CTRL-C to exit immediately.

@renovate renovate bot changed the title chore: update dependency browserslist to 4.16.5 [security] chore: update dependency browserslist to 4.16.5 [security] - abandoned Mar 22, 2023
@renovate
Copy link
Author

renovate bot commented Mar 22, 2023

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants