Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] Warnings of deprecation and vulnerabilities on step 5 - Deploy #74

Open
rffontenelle opened this issue Mar 20, 2024 · 0 comments
Open
Labels
bug Something isn't working needs engineering Requires engineering-specific changes only.

Comments

@rffontenelle
Copy link
Contributor

Summary

In Step 5: Deploy to a production environment based on labels, when running the deploy-prod.yml workflow, the npm install and build webpack step from build job emits several warnings of deprecation and vulnerabilities for the dependencies of the webpack used in the exercise.

How to reproduce

  1. Get to the Step 5: Deploy to a production environment based on labels
  2. Follow instructions Activities 1 and then Activities 2
  3. Once the PR is merged into main, deploy-prod.yml workflow will be triggered
  4. Browse the logs for this workflow run, check build job, npm install and build webpack step
  5. See warnings in the log
Click here to show the text if the warning shown in the image below
npm WARN deprecated [email protected]: Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated [email protected]: See https://github.com/lydell/source-map-url#deprecated
npm WARN deprecated [email protected]: some dependency vulnerabilities fixed, support for node < 10 dropped, and newer ECMAScript syntax/features added
npm WARN deprecated [email protected]: https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated [email protected]: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
npm WARN deprecated [email protected]: The querystring API is considered Legacy. new code should use the URLSearchParams API instead.
npm WARN deprecated [email protected]: See https://github.com/lydell/source-map-resolve#deprecated
npm WARN deprecated [email protected]: Debug versions >=3.2.0 <3.2.7 || >=4 <4.3.1 have a low-severity ReDos regression when used in a Node.js environment. It is recommended you upgrade to 3.2.7 or 4.3.1. (https://github.com/visionmedia/debug/issues/797)
npm WARN deprecated [email protected]: Chokidar 2 does not receive security updates since 2019. Upgrade to chokidar 3 with 15x fewer dependencies
npm WARN deprecated [email protected]: This version of 'buffer' is out-of-date. You must update to v4.9.2 or newer
npm WARN deprecated [email protected]: Debug versions >=3.2.0 <3.2.7 || >=4 <4.3.1 have a low-severity ReDos regression when used in a Node.js environment. It is recommended you upgrade to 3.2.7 or 4.3.1. (https://github.com/visionmedia/debug/issues/797)

added 1680 packages, and audited 1681 packages in 13s

47 packages are looking for funding
run npm fund for details

12 vulnerabilities (1 low, 3 moderate, 8 high)

To address issues that do not require attention, run:
npm audit fix

To address all issues (including breaking changes), run:
npm audit fix --force

Run npm audit for details.

image

Additional context

Reference of the latest commit from this repository in which I did my exercise: 02e588b

@rffontenelle rffontenelle added the bug Something isn't working label Mar 20, 2024
@hectorsector hectorsector added the needs engineering Requires engineering-specific changes only. label Jul 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working needs engineering Requires engineering-specific changes only.
Projects
None yet
Development

No branches or pull requests

2 participants