Skip to content
This repository was archived by the owner on May 12, 2023. It is now read-only.

Commit 113fdff

Browse files
authored
fix: vulnerabilities (#78)
* bump minimist (i think) * attempted fix to dev dependency being installed
1 parent 9811da8 commit 113fdff

File tree

3 files changed

+15
-12
lines changed

3 files changed

+15
-12
lines changed

.github/workflows/release.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
- uses: actions/setup-node@v1
2020
with:
2121
node-version: 16
22-
- run: npm install
22+
- run: npm install --omit=dev
2323
- uses: JS-DevTools/npm-publish@v1
2424
with:
2525
registry: https://npm.pkg.github.com

lib/codemirror/mode/dockerfile/test.js

+2-2
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
"[comment # A wildcard is used to ensure both package.json AND package-lock.json are copied]",
1414
"[comment # where available (npm@5+)]",
1515
"[keyword COPY] package*.json ./",
16-
"[keyword RUN] npm install",
16+
"[keyword RUN] npm install --omit=dev",
1717
"[keyword COPY] . .",
1818
"[keyword EXPOSE] [number 8080] [number 3000]",
1919
"[keyword ENV] NODE_ENV development",
@@ -71,7 +71,7 @@
7171

7272
MT("scripts",
7373
"[comment # Set an entrypoint, to automatically install node modules]",
74-
"[keyword ENTRYPOINT] [[ [string \"/bin/bash\"], [string \"-c\"], [string \"if [[ ! -d node_modules ]]; then npm install; fi; exec \\\"${@:0}\\\";\"] ]]",
74+
"[keyword ENTRYPOINT] [[ [string \"/bin/bash\"], [string \"-c\"], [string \"if [[ ! -d node_modules ]]; then npm install --omit=dev; fi; exec \\\"${@:0}\\\";\"] ]]",
7575
"[keyword CMD] npm start",
7676
"[keyword RUN] npm run build && \\",
7777
"[comment # a comment between the shell commands]",

package-lock.json

+12-9
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)