Skip to content

Chore/229/js update javascript dependencies#792

Open
jupiter007 wants to merge 4 commits into
v5from
chore/229/JS-update-javascript-dependencies
Open

Chore/229/js update javascript dependencies#792
jupiter007 wants to merge 4 commits into
v5from
chore/229/JS-update-javascript-dependencies

Conversation

@jupiter007
Copy link
Copy Markdown
Collaborator

@jupiter007 jupiter007 commented May 22, 2026

Fixes #229

I ran yarn audit initially and found 43 vulnerabilities (2 Critical, 22 High, 16 Moderate, and 3 Low).

After update dependencies, there was only one vulnerability listed at Moderate and that was for bootstrap. We cannot update bootstrap though because that would require tons of code changes or a detailed polyfill. I tried to create one, but it got really involved, so I stopped.

  • Updated dependencies in package.json and yarn.lock to address security vulnerabilities.
  • Fixed a bug with adding Research Outputs under Upload Plan section, because validation was always requiring a url
  • Updated Dockerfiles to skip the download of chrome-headless-shell since we already install chromium via apt-get
  • Updated webpack.config to add an alias to resolve jquery use the same instance to prevent multiple versions loading.
  • Made small updates to javscript/src/utils/accordion.js and views/phases/_guidances_notes.html.erb due to package updates.
  • Fixed existing bug in controllers/contributors_controller.rb because after editing contributor info, the panel didn't change back to the table view.

@jupiter007 jupiter007 requested a review from briri May 22, 2026 19:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant