Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade vinyl-fs from 3.0.2 to 4.0.0 #930

Merged
merged 1 commit into from
Oct 13, 2023

Conversation

woutervanvliet
Copy link
Contributor

Why am I submitting this PR

There is a high vulnerability attached to vinyl-fs' dependency tree, blocking me from being able to use this package in my own project. The automatic dependabot PR can't merge, due to changes in glob-handling, which I'm also handling in this PR.

Does it fix an existing ticket?

Yes #684

Checklist

  • only relevant code is changed (make a diff before you submit the PR)
  • tests are included and pass: yarn test (see details here)
  • documentation is changed or added

@socket-security
Copy link

New dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
vinyl-fs 4.0.0 None +23 971 kB phated

@woutervanvliet
Copy link
Contributor Author

Turned out glob-stream, used by vinyl-fs, only scans from the current directory and upwards, thus not finding temporary files created by Broccoli and in turn not creating translation files.

I don't have experience with Broccoli though, so I'm a bit unsure if this change will have any implications on projects using i18next-parser with Broccoli. Added a note though to the readme file that hopefully provides enough information for Broccoli users.

@karellm karellm merged commit a60f4f8 into i18next:master Oct 13, 2023
4 checks passed
@karellm
Copy link
Member

karellm commented Oct 13, 2023

Thanks! This is deployed as 8.9.0

@woutervanvliet woutervanvliet deleted the feature/upgrade-vinyl-fs branch October 16, 2023 07:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants