Skip to content

Commit f30c280

Browse files
Dependabot fixes - critical (#94)
* Update versions of json-scheme and minimalist to fix dependabot vulnerabilities * Revert "Update versions of json-scheme and minimalist to fix dependabot vulnerabilities" This reverts commit a04fd34. * Add json-schema and bump mimist versions for dependabot fixes * Update nlkm and url-lib versions in requirement files * Modify requirements version format to try and get build to succeed * Remove ntlk as a package * Add and update npm packages to fix high level dependabot alerts * Set type as module in package.json to handle ES6 syntax * Revert "Add and update npm packages to fix high level dependabot alerts" This reverts commit 60a2943. Co-authored-by: wondrousWebWorks <alberts.johann@gmail.com>
1 parent c3b6912 commit f30c280

File tree

5 files changed

+6
-5
lines changed

5 files changed

+6
-5
lines changed

package.json

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
{
22
"name": "edx",
33
"version": "0.1.0",
4+
"type": "module",
45
"dependencies": {
56
"@edx/edx-bootstrap": "1.0.4",
67
"@edx/edx-proctoring": "^1.5.0",
@@ -37,6 +38,7 @@
3738
"jquery-migrate": "1.4.1",
3839
"jquery.scrollto": "2.1.2",
3940
"js-cookie": "2.2.0",
41+
"json-schema": ">=0.4.0",
4042
"lodash": ">=4.17.21",
4143
"moment": "2.29.4",
4244
"moment-timezone": "0.5.14",
@@ -98,6 +100,7 @@
98100
"jasmine-jquery": "git+https://github.com/velesin/jasmine-jquery.git#ebad463d592d3fea00c69f26ea18a930e09c7b58",
99101
"jest": "^26.6.3",
100102
"jest-enzyme": "^7.1.2",
103+
"json-schema": ">=0.4.0",
101104
"karma": "^6.1.0",
102105
"karma-chrome-launcher": "0.2.3",
103106
"karma-coverage": "0.5.5",
@@ -110,6 +113,7 @@
110113
"karma-sourcemap-loader": "0.3.7",
111114
"karma-spec-reporter": "0.0.20",
112115
"karma-webpack": "^5.0.0",
116+
"minimist": ">=1.2.6",
113117
"react-test-renderer": "^17.0.1",
114118
"selenium-webdriver": "3.4.0",
115119
"sinon": "2.3.5",

requirements/edx-sandbox/shared.in

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,4 +11,3 @@
1111

1212
cryptography # Implementations of assorted cryptography algorithms
1313
lxml # XML parser
14-
nltk # Natural language processing; used by the chem package

requirements/edx-sandbox/shared.txt

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,6 @@ click==7.1.2 # via nltk
99
cryptography==2.9.2 # via -r requirements/edx-sandbox/shared.in
1010
joblib==0.14.1 # via -c requirements/edx-sandbox/../constraints.txt, nltk
1111
lxml==4.5.0 # via -c requirements/edx-sandbox/../constraints.txt, -r requirements/edx-sandbox/shared.in
12-
nltk==3.5 # via -r requirements/edx-sandbox/shared.in
1312
pycparser==2.20 # via cffi
1413
regex==2020.7.14 # via nltk
1514
six==1.15.0 # via cryptography

requirements/edx/base.txt

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -161,7 +161,6 @@ more-itertools==8.4.0 # via -r requirements/edx/paver.txt, zipp
161161
mpmath==1.1.0 # via sympy
162162
mysqlclient==2.0.1 # via -r requirements/edx/base.in
163163
newrelic==5.14.1.144 # via -r requirements/edx/base.in, edx-django-utils
164-
nltk==3.5 # via -r requirements/edx/../edx-sandbox/shared.txt, chem
165164
nodeenv==1.4.0 # via -r requirements/edx/base.in
166165
numpy==1.18.5 # via -c requirements/edx/../constraints.txt, chem, openedx-calc, scipy
167166
oauthlib==3.0.1 # via -c requirements/edx/../constraints.txt, -r requirements/edx/base.in, django-oauth-toolkit, lti-consumer-xblock, requests-oauthlib, social-auth-core
@@ -236,7 +235,7 @@ tqdm==4.47.0 # via -r requirements/edx/../edx-sandbox/shared.txt, n
236235
ua-parser==0.10.0 # via django-cookies-samesite
237236
unicodecsv==0.14.1 # via -r requirements/edx/base.in, edx-enterprise
238237
uritemplate==3.0.1 # via coreapi, drf-yasg
239-
urllib3==1.25.9 # via -r requirements/edx/paver.txt, elasticsearch, geoip2, requests
238+
urllib3==1.26.5 # via -r requirements/edx/paver.txt, elasticsearch, geoip2, requests
240239
user-util==0.2 # via -r requirements/edx/base.in
241240
voluptuous==0.11.7 # via ora2
242241
watchdog==0.10.3 # via -r requirements/edx/paver.txt

requirements/edx/paver.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ python-memcached==1.59 # via -r requirements/edx/paver.in
2424
requests==2.24.0 # via -r requirements/edx/paver.in
2525
six==1.15.0 # via edx-opaque-keys, libsass, mock, paver, python-memcached, stevedore
2626
stevedore==1.32.0 # via -c requirements/edx/../constraints.txt, -r requirements/edx/paver.in, edx-opaque-keys
27-
urllib3==1.25.9 # via requests
27+
urllib3==1.26.5 # via requests
2828
watchdog==0.10.3 # via -r requirements/edx/paver.in
2929
wrapt==1.11.2 # via -c requirements/edx/../constraints.txt, -r requirements/edx/paver.in
3030
zipp==1.0.0 # via -c requirements/edx/../constraints.txt, importlib-metadata

0 commit comments

Comments
 (0)