-
Notifications
You must be signed in to change notification settings - Fork 1
Update dependencies #119
Copy link
Copy link
Open
Labels
javascriptIssues or pull requests which involve changes to the JS source codeIssues or pull requests which involve changes to the JS source codesecurityIssues relating to hardening or vulnerabilitiesIssues relating to hardening or vulnerabilities
Description
Metadata
Metadata
Assignees
Labels
javascriptIssues or pull requests which involve changes to the JS source codeIssues or pull requests which involve changes to the JS source codesecurityIssues relating to hardening or vulnerabilitiesIssues relating to hardening or vulnerabilities
CadenceBot still uses old dependencies that are often deprecated outright.
The worst culprits here are
fetchanddiscord.jsitself. These badly need updating to new versions, and discord.js especially has follow-on dependencies that are themselves deprecated.Update these packages to latest versions, make any needed changes for the bot to run with full functionality, and this will increase security and also enable us to use many new features of updated APIs.