Summary: | Update yarn.lock file | ||
---|---|---|---|
Product: | Koha | Reporter: | Jonathan Druart <jonathan.druart> |
Component: | Architecture, internals, and plumbing | Assignee: | Jonathan Druart <jonathan.druart> |
Status: | CLOSED FIXED | QA Contact: | Testopia <testopia> |
Severity: | minor | ||
Priority: | P5 - low | CC: | fridolin.somers, martin.renvoize, oleonard |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
Change sponsored?: | --- | Patch complexity: | Small patch |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: |
21.05.00
|
|
Circulation function: | |||
Attachments: |
Bug 27939: Update yarn.lock file
Bug 27939: Update yarn.lock file Bug 27939: Update yarn.lock file |
Description
Jonathan Druart
2021-03-12 08:29:51 UTC
Created attachment 118180 [details] [review] Bug 27939: Update yarn.lock file There is a minor security vulnerability, it is good to fix it even if there is no impact on security: yarn is only used for dev purpose. The the logs of https://wiki.koha-community.org/wiki/Development_IRC_meeting_24_February_2021 It generates some changes on the compiled CSS files. Looks like: - no-repeat is moved - Sans,Liberation is added - some changes about "overflow:visible" - added -webkit-sticky!important Created attachment 118214 [details] [review] Bug 27939: Update yarn.lock file There is a minor security vulnerability, it is good to fix it even if there is no impact on security: yarn is only used for dev purpose. The the logs of https://wiki.koha-community.org/wiki/Development_IRC_meeting_24_February_2021 Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com> https://bugs.koha-community.org/show_bug.cgi?id=27938 Builds work as expected, CSS changes as expected. I've played with the OPAC and Staff clients and can't spot any obvious issues. Signing off Created attachment 118219 [details] [review] Bug 27939: Update yarn.lock file There is a minor security vulnerability, it is good to fix it even if there is no impact on security: yarn is only used for dev purpose. See the logs of https://wiki.koha-community.org/wiki/Development_IRC_meeting_24_February_2021 Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com> https://bugs.koha-community.org/show_bug.cgi?id=27938 Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Pushed to master for 21.05, thanks to everybody involved! Should we backport this ? I'd say you could backport it but wait for one more month, in case we find a UI bug. |