vuestorefront / storefront-api

Storefront GraphQL API Gateway. Modular architecture. ElasticSearch included. Works great with Magento1, Magento2, Spree, OpenCart, Pimcore and custom backends

Home Page:https://storefrontapi.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Upgrade node packages

peterlohaus opened this issue · comments

What is the motivation for adding / enhancing this feature?

Running yarn audit on clean installation of vue-storefront-api on branch master outputs 19 vulnerabilities. 2 with critical severity.
Running yarn outdated states most of the packages current version being behind wanted semver version and way behind latest versions, thus do not apply minor or major updates.

What are the acceptance criteria

  • yarn audit shows 0 vulnerabilities
  • yarn outdated shows packages apply latest version

Can you complete this feature request by yourself?

  • YES
  • NO

Which Release Cycle state this refers to? Info for developer.

Pick one option.

  • This is a normal feature request. This should be available on https://test.storefrontcloud.io and then after tests this can be added to next Vue Storefront version. In this case Developer should create branch from develop branch and create Pull Request 2. Feature / Improvement back to develop.
  • (Pick this option only if you're sure) This is an important improvement request for current Release Candidate version on https://next.storefrontcloud.io and should be placed in next RC version. In this case Developer should create branch from release branch and create Pull Request 3. Stabilisation fix back to release.
  • (Pick this option only if you're sure) This is a critical improvement request for current Stable version on https://demo.storefrontcloud.io and should be placed in next stable version. In this case Developer should create branch from hotfix or master branch and create Pull Request 4. Hotfix back to hotfix.

Additional information

Screenshot from 2020-02-26 14-51-06

Thanks, we'll take care of it. @ResuBaka can you take a look please?

I can do it. I only would look into it in the develop branch as we don't really have a released version on master, when that is okay?