WordPress.org
Get WordPress

Make WordPress Core

Opened 8 months ago

Closed 8 months ago

#63229 closed defect (bug) (duplicate)

Update npm Packages in TwentyTwenty Theme

Reported by: debarghyabanerjee's profile debarghyabanerjee Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Bundled Theme Keywords: has-patch
Focuses: Cc:

Description

Recently dependabot has flagged security vulnerabilities in the npm packages used by the TwentyTwenty theme.

Change History (2)

This ticket was mentioned in ​PR #8647 on ​WordPress/wordpress-develop by ​@debarghyabanerjee.
8 months ago #1

  • Keywords has-patch added; needs-patch removed

Trac Ticket: Core-63229

### Summary
This pull request addresses the security vulnerability alert flagged by Dependabot in the npm packages used by the Twenty Twenty theme.

### Changes

  • Updated vulnerable npm packages to the latest secure versions

#2 @poena
8 months ago

  • Component changed from Themes to Bundled Theme
  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Status changed from new to closed

Duplicate of #62220.

Hi @debarghyabanerjee The packages are updated for each theme release, as part of the release process.
Please see https://core.trac.wordpress.org/ticket/62220

Note: See TracTickets for help on using tickets.