[ 
https://issues.apache.org/jira/browse/KNOX-2834?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17644186#comment-17644186
 ] 

ASF subversion and git services commented on KNOX-2834:
-------------------------------------------------------

Commit a2e679024d5e3b5aaaa38c32cc3b96358af5e559 in knox's branch 
refs/heads/dependabot/npm_and_yarn/knox-webshell-ui/decode-uri-component-0.2.2 
from MrtnBalazs
[ https://gitbox.apache.org/repos/asf?p=knox.git;h=a2e679024 ]

KNOX-2834 - Bumped angular/cli to 14.2.9 in admin-ui, token-generation-ui, 
homepage-ui, token-management-ui, webshell-ui  (#683)



> Take care of existing javascript upgrades by dependabot
> -------------------------------------------------------
>
>                 Key: KNOX-2834
>                 URL: https://issues.apache.org/jira/browse/KNOX-2834
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: AdminUI, Homepage
>    Affects Versions: 2.0.0
>            Reporter: Sandor Molnar
>            Assignee: Marton Balázs
>            Priority: Major
>             Fix For: 2.0.0
>
>         Attachments: image-2022-11-04-11-12-00-500.png
>
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> [~MrtnBalazs] - as discussed offline, there is a list of open PRs generated 
> by Apache's dependabot for our javascript-based Maven modules (*-ui) where 
> there are some components such as angular-cli that needed to be upgraded to a 
> higher version due to security reasons (see attached screenshot).
> Please compile a table with the source/target dependency versions and make 
> sure they are all applied in our code base within the scope of this JIRA and 
> covered by manual testing as discussed.
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to