Skip to content

chore(deps-dev): pin lerna to 8.1.2 #2646

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 13, 2024
Merged

chore(deps-dev): pin lerna to 8.1.2 #2646

merged 1 commit into from
Jun 13, 2024

Conversation

dreamorosi
Copy link
Contributor

Summary

Changes

Please provide a summary of what's being changed

This PR temporarily pins the lerna development dependency to version 8.1.2 due to a known regression in version 8.1.3 and later (lerna/lerna#4026), which caused our release pipeline to fail.

Due to that version depending on a vulnerable dependency, the PR also applies a temporary override on the tar transitive dependency.

Please add the issue number below, if no issue is present the PR might get blocked and not be reviewed

Issue number: #2645


By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

@dreamorosi dreamorosi self-assigned this Jun 13, 2024
@dreamorosi dreamorosi requested a review from a team June 13, 2024 09:46
@dreamorosi dreamorosi requested a review from a team as a code owner June 13, 2024 09:46
@boring-cyborg boring-cyborg bot added the dependencies Changes that touch dependencies, e.g. Dependabot, etc. label Jun 13, 2024
@pull-request-size pull-request-size bot added the size/XS PR between 0-9 LOC label Jun 13, 2024
@dreamorosi dreamorosi changed the title chore(build-dev): pin lerna to 8.1.2 chore(deps-dev): pin lerna to 8.1.2 Jun 13, 2024
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@dreamorosi dreamorosi merged commit df6952a into main Jun 13, 2024
18 checks passed
@dreamorosi dreamorosi deleted the chore/pin_lerna branch June 13, 2024 09:50
@dreamorosi dreamorosi linked an issue Jun 14, 2024 that may be closed by this pull request
2 tasks
am29d pushed a commit that referenced this pull request Jun 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Changes that touch dependencies, e.g. Dependabot, etc. size/XS PR between 0-9 LOC
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Maintenance: pin lerna to 8.1.2 due to upstream regression
2 participants