Upgrade development Node and dependent packages to the latest version #111

yhatt · 2019-12-13T09:14:54Z

This PR will upgrade development Node LTS and dependent packages to the latest version via yarn upgrade --latest.

Development Node LTS version has been bumped to v12.13.1. But we would re-bump as soon as released next security release after Dec 17.
yarn has been bumped to v1.21.1. A vulnerability reported from npm CLI would affect to yarn < v1.21.1 too.

Resolve vulnerability in deep deps: rollup-plugin-terser > serialize-javascript (CVE-2019-16769)
Migration rollup official plugins into monorepo is still in progress. We are using @rollup/plugin-node-resolve instead of rollup-plugin-node-resolve.

Yuki Hattori added 7 commits December 13, 2019 17:12

Upgrade development Node LTS to the latest version

c96e880

Upgrade yarn to the latest version

7ebc829

Upgrade dependent packages to the latest version

e950905

Migrate rollup node-resolve plugin to namespaced package

629290b

Revert a way to upgrade yarn on CircleCI

cd3c134

Fix indent level in .circleci/config.yml

94a0538

[ci skip] Update CHANGELOG.md

4fbe37e

yhatt merged commit 6c63771 into master Dec 13, 2019

yhatt deleted the upgrade-node-and-dependencies branch December 13, 2019 10:37

Provide feedback