Skip to content

Conversation

@strmer15
Copy link
Contributor

@strmer15 strmer15 commented Nov 3, 2023

Purpose of this pull request?

  • Documentation update
  • Bug fix
  • Enhancement
  • Other, please explain:
    Updating a dependency that has security vulnerabilities reported, due to out-of-date subdependencies.

What changes did you make?

I updated the got library to v11, which is the latest that can be used without switching to ESM-only. The only thing that it's currently being used for is to pull a blacklist from the web when installing a generator. The only change that was relevant was removing the {json: true} config in favor of the .json() function to return a Promise with a JSON body.

This package currently uses got v8, here are the releases between then and v11:

https://github.com/sindresorhus/got/releases/tag/v11.0.0
https://github.com/sindresorhus/got/releases/tag/v10.0.0
https://github.com/sindresorhus/got/releases/tag/v9.0.0

Is there anything you'd like reviewers to focus on?

The http://yeoman.io/blacklist.json website doesn't seem to exist - when I go to it in my browser I get a 404. Is this functionality even working currently, or should there be a different blacklist URL?

@strmer15
Copy link
Contributor Author

strmer15 commented Nov 3, 2023

This should fix #780

@strmer15
Copy link
Contributor Author

strmer15 commented Nov 6, 2023

@mshima Would you be able to review this?

@mshima
Copy link
Member

mshima commented Nov 6, 2023

@strmer15 please increase tests timeout for tests to pass.

@strmer15
Copy link
Contributor Author

strmer15 commented Nov 6, 2023

@strmer15 please increase tests timeout for tests to pass.

Ok, will do - thanks!

@strmer15
Copy link
Contributor Author

strmer15 commented Nov 6, 2023

@mshima Updated it just now and everything is passing 👍

@mshima mshima merged commit ca168e4 into yeoman:main Nov 6, 2023
@strmer15 strmer15 deleted the update_got branch November 6, 2023 20:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants