]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
mgr/dashboard: fix frontend deps' vulnerabilities 44297/head
authorAlfonso Martínez <almartin@redhat.com>
Thu, 2 Dec 2021 14:05:23 +0000 (15:05 +0100)
committerAlfonso Martínez <almartin@redhat.com>
Mon, 13 Dec 2021 15:49:38 +0000 (16:49 +0100)
commit9210b7d970c97887e1087470249714ee48d71853
tree75f1ac387fabe1c0f01debebeed9cba917fa2366
parent86d4249e78b3be91ff32b157c314609fa11bd47d
mgr/dashboard: fix frontend deps' vulnerabilities

- Remove npm-force-resolutions: no resolution needed anymore and this is modifying package-lock.json every time it is run (striping last empty line).
- Add .npmrc: save exact version by default; do not launch audit report when installing.

Fixes: https://tracker.ceph.com/issues/48005
Signed-off-by: Alfonso Martínez <almartin@redhat.com>
(cherry picked from commit f08c0db689dc6bd29323ac03a91c69e2fe7365a2)

 Conflicts:
src/pybind/mgr/dashboard/frontend/package-lock.json
    - Accept version from master branch.
src/pybind/mgr/dashboard/frontend/package.json
    - Accept version from master branch.
doc/dev/developer_guide/dash-devel.rst
src/pybind/mgr/dashboard/frontend/.npmrc [new file with mode: 0644]
src/pybind/mgr/dashboard/frontend/package-lock.json
src/pybind/mgr/dashboard/frontend/package.json
src/pybind/mgr/dashboard/run-frontend-unittests.sh