Skip to content

Fork razzle-dev-utils into @plone/razzle-dev-utils#7973

Merged
davisagli merged 9 commits intomainfrom
razzle-dev-utils
Mar 11, 2026
Merged

Fork razzle-dev-utils into @plone/razzle-dev-utils#7973
davisagli merged 9 commits intomainfrom
razzle-dev-utils

Conversation

@wesleybl
Copy link
Member

@wesleybl wesleybl commented Mar 7, 2026

razzle-dev-utils has dependencies with vulnerabilities. Therefore, we can update those dependencies.


📚 Documentation preview 📚: https://volto--7973.org.readthedocs.build/

pnpm-lock.yaml Outdated
- supports-color
- utf-8-validate

webpack-dev-server@4.11.1(webpack@5.90.1):
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, why did it add this version of webpack-dev-server again when it is already there above?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think I understood what you meant. But I recreated the pnpm-lock.yaml file, which should remove any duplication.

Perhaps it's because it's a peer dependency of @plone/razzle-dev-utils and a dependency of @plone/volto?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are 3 entries for webpack-dev-server@4.11.1 in pnpm-lock.yaml:

  • webpack-dev-server@4.11.1(debug@4.3.4)(webpack@5.105.4(esbuild@0.25.12)):
  • webpack-dev-server@4.11.1(webpack@5.105.4(esbuild@0.25.12)):
  • webpack-dev-server@4.11.1(webpack@5.105.4):

I think it has something to do with peer dependencies but I don't really understand it. We can come back to this.

@wesleybl wesleybl requested a review from davisagli March 11, 2026 00:29
@davisagli davisagli merged commit eaf3eb4 into main Mar 11, 2026
78 checks passed
@davisagli davisagli deleted the razzle-dev-utils branch March 11, 2026 00:36
@davisagli
Copy link
Member

FYI, I had to add type: "commonjs" to package.json to avoid an error when webpack tried to read these scripts as ESM modules. 2f3f30a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants