Martijn Visser created FLINK-40998:
--------------------------------------
Summary: Web dashboard: Update dependencies with open Dependabot
advisories
Key: FLINK-40998
URL: https://issues.apache.org/jira/browse/FLINK-40998
Project: Flink
Issue Type: Technical Debt
Components: Runtime / Web Frontend
Reporter: Martijn Visser
Assignee: Martijn Visser
Fix For: 2.4.0
Dependabot drops the optional peer entry for less from the lockfile in
flink-runtime-web/web-dashboard, which breaks ng build, so none of its open npm
PRs can be merged as is.
We should declare less as a devDependency and update the affected packages
within the Angular v21 LTS line, including monaco-editor 0.57.0 (DOMPurify
3.4.15). DOMPurify still needs 3.4.16, which no monaco-editor release ships yet.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
