Skip to content

[Snyk] Security upgrade web-ext from 4.3.0 to 8.0.0 #559

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Security upgrade web-ext from 4.3.0 to 8.0.0 #559

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion packages/react-devtools-extensions/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,6 @@
"workerize-loader": "^1.3.0"
},
"dependencies": {
"web-ext": "^4"
"web-ext": "^8.0.0"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

This PR upgrades web-ext across four major versions (from v4 to v8). This is a significant jump that likely introduces breaking changes, as also indicated by the Snyk PR metadata (isBreakingChange:true).

web-ext appears to be used for building and testing the Firefox extension (e.g., via the test:firefox script). The command-line interface or configuration for web-ext may have changed between v4 and v8.

Any scripts using web-ext will need to be updated for compatibility with v8. The Firefox extension build and associated tests must pass with this new version before this PR is merged. Without these changes, the build and testing pipeline for the Firefox extension is likely to fail.

}
}