(#495)(#519)(#521)(#524) Bump to version 2.6.0#523
Conversation
This sets a flag to ignore audit suggestions that are only related to a depreciated package. This flag will still allow the vulnerability to come up if the package contains other vulnerabilities other than it being depreciated, which is wanted. Unfortunately some libraries depend on package that are depreciated, but otherwise safe, with no other version to upgrade to.
This continues some work that was previously done in choco-theme 2.5.2. This upgrades a few dependencies to their latest versions to bring in new fixes and features.
This upgrades Astro and it's components to their latest versions. No functionality changes will be apparent in Chocolatey websites that run Astro.
717ac3b to
a5af162
Compare
There was a problem hiding this comment.
Pull request overview
Bumps the monorepo and several packages to version 2.6.0 while updating key dependencies and adjusting the audit script behavior.
Changes:
- Bump package versions to
2.6.0across multiple workspaces. - Update dependencies (e.g.,
pdfmake,purgecss,astro/@astrojs/node,msnodesqlv8) to newer versions. - Update the root
auditscript to include a “no deprecations” option and remove a previous exclusion.
Reviewed changes
Copilot reviewed 6 out of 7 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| packages/test-tools/package.json | Bumps package version and updates msnodesqlv8. |
| packages/credits/package.json | Bumps package version and updates pdfmake. |
| packages/core/package.json | Updates pdfmake version to match other workspaces. |
| packages/build-tools/package.json | Bumps package version and upgrades purgecss. |
| packages/astro/package.json | Bumps package version and updates Astro dependencies. |
| package.json | Bumps root version and modifies the audit script flags/behavior. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
a5144a6 to
1bbea1a
Compare
|
@gep13 This requires a code owner review for the minor bump to the This PR has been looked at by @alexaveldanez but my force push overrode that review. This should be good for a merge after the Code Owner review. |
|
I put this back to draft because of failures in associated sites. |
1bbea1a to
5a5d096
Compare
The ESLint config has been updated to correctly scan Playwright files for errors and warnings. As part of this, errors and warnings that showed up in the new scan have been fixed.
5a5d096 to
383e8c6
Compare
gep13
left a comment
There was a problem hiding this comment.
Just one quick question here, otherwise, this looks good to me, so I will approve it as is, and we can discuss further depending on the answer.
Description Of Changes
--no-depreciationflag onyarn auditto ignore packages that are merely depreciated with no other issues.Motivation and Context
These dependencies needed updated to their latest versions, so our websites could be up to date.
Testing
Follow instructions on each individual PR.
Operating Systems Testing
Dev VM 4.
Change Types Made
Change Checklist
Related Issue