Skip to content

WIP: Pin to specific version of retire.js repository

Fabien Catteau requested to merge pin-retire.js-repo into master

Work around changes introduced in https://github.com/RetireJS/retire.js/commit/d9097bc1a901d88d5c0bd8456bad1bcdf768faa6#diff-b3f2035551f6e48c67489ace9f588f94, resulting in vulnerabilities not being reported anymore for handlebars.

Failing job: https://gitlab.com/gitlab-org/security-products/tests/js-yarn/-/jobs/471864340

Last successful job: https://gitlab.com/gitlab-org/security-products/tests/js-yarn/-/jobs/471361347

Same goes for js-npm:

Failing job: https://gitlab.com/gitlab-org/security-products/tests/js-npm/-/jobs/471968002

Last successful job: https://gitlab.com/gitlab-org/security-products/tests/js-npm/-/jobs/471198384

What's next?

This should be ported to the master and node_modules branches of https://gitlab.com/gitlab-org/security-products/tests/js-npm, and to the no_DinD-FREEZE branches of both projects.

Edited by 🤖 GitLab Bot 🤖

Merge request reports