WIP: Pin to specific version of retire.js repository
Work around changes introduced in
https://github.com/RetireJS/retire.js/commit/d9097bc1a901d88d5c0bd8456bad1bcdf768faa6#diff-b3f2035551f6e48c67489ace9f588f94, resulting in vulnerabilities not being reported anymore for handlebars
.
Failing job: https://gitlab.com/gitlab-org/security-products/tests/js-yarn/-/jobs/471864340
Last successful job: https://gitlab.com/gitlab-org/security-products/tests/js-yarn/-/jobs/471361347
Same goes for js-npm:
Failing job: https://gitlab.com/gitlab-org/security-products/tests/js-npm/-/jobs/471968002
Last successful job: https://gitlab.com/gitlab-org/security-products/tests/js-npm/-/jobs/471198384
What's next?
This should be ported to the master
and node_modules
branches of https://gitlab.com/gitlab-org/security-products/tests/js-npm, and to the no_DinD-FREEZE
branches of both projects.