[TASK] Raise to recent moment & moment-timezone versions
+ npm package moment up to v2.29.2 contained a vulnerability (https://github.com/advisories/GHSA-8hfj-j24r-96c4) which only affected npm server users - in order to avoid confusion concerning security aspects, the package version is raised + npm package moment-timezone was upgraded to recent timezone data "IANA TZDB 2021" Executed commands: cd Build; \ nvm use; \ yarn upgrade moment moment-timezone; \ yarn exec grunt clear-build; \ yarn exec grunt build Resolves: #97723 Releases: main, 11.5, 10.4 Change-Id: I84ea9ca6b696d74aab70cfa45e6d41a95ae0159d Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/74804 Tested-by:core-ci <typo3@b13.com> Tested-by:
Simon Schaufelberger <simonschaufi+typo3@gmail.com> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Reviewed-by:
Simon Schaufelberger <simonschaufi+typo3@gmail.com> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de>
Showing
- Build/yarn.lock 9 additions, 4 deletionsBuild/yarn.lock
- typo3/sysext/core/Resources/Public/JavaScript/Contrib/moment-timezone.js 1 addition, 1 deletion...re/Resources/Public/JavaScript/Contrib/moment-timezone.js
- typo3/sysext/core/Resources/Public/JavaScript/Contrib/moment.js 1 addition, 1 deletion...sysext/core/Resources/Public/JavaScript/Contrib/moment.js
Please register or sign in to comment