[ 
https://issues.apache.org/jira/browse/UNOMI-1034?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Serge Huber updated UNOMI-1034:
-------------------------------
    Fix Version/s: unomi-tracker-2.1.0

> Tracker: upgrade the build tools to rollup 4 and ESLint 9 or later
> ------------------------------------------------------------------
>
>                 Key: UNOMI-1034
>                 URL: https://issues.apache.org/jira/browse/UNOMI-1034
>             Project: Apache Unomi
>          Issue Type: Sub-task
>          Components: unomi-tracker
>            Reporter: Serge Huber
>            Priority: Major
>             Fix For: unomi-tracker-2.1.0
>
>
> The tools that build and check the tracker are several major versions behind, 
> and most of the open security alerts come from them. They do not end up in 
> the tracker that websites load, but they run on the machines that build the 
> releases.
> * rollup 2 to 4, with its plugins (babel, commonjs, node-resolve, license). 
> rollup.config.js becomes an ES module.
> * ESLint 8 (no longer maintained) to 9 or later, and eslint-plugin-json 5. 
> The configuration moves to the flat config format.
> * Fixes the remaining Dependabot alerts (minimatch, picomatch, lodash, 
> moment, flatted, cross-spawn, braces, rollup).
> Done when the compatibility harness shows no difference.



--
This message was sent by Atlassian Jira
(v10.3.26#10030026)

Reply via email to