Visitar URL original
USWDS-Site - Dependencies: POAM March '24 by mahoneycm · Pull Request #2514 · uswds/uswds-site · GitHub
Skip to content

USWDS-Site - Dependencies: POAM March '24 - #2514

Merged
thisisdano merged 6 commits into
mainfrom
cm-POAM-march-24
Mar 11, 2024
Merged

thisisdano merged 6 commits into
mainfrom
cm-POAM-march-24

Conversation

@mahoneycm

@mahoneycm mahoneycm commented Mar 4, 2024 •

Copy link
Copy Markdown
Contributor

Summary

Monthly POAM checks and dependency vulnerability resolution.

Before: 2 vulnerabilities (1 low, 1 high)
After: 0 vulnerabilities

Related issue

uswds/uswds#5801

Closes https://github.com/uswds/uswds-site/security/dependabot/57
Closes https://github.com/uswds/uswds-site/security/dependabot/59

Preview link

Preview link →

Problem statement

Various dependencies were causing high and low security vulnerabilities.

Solution

Bump dependencies with resolving updates.

Testing and review

  1. Run npm run build without error
  2. Run npm run test without error // Test currently fails due to style error found in main
  3. Run npm run start and confirm there are no visual regressions

@mahoneycm mahoneycm mentioned this pull request Mar 4, 2024
4 tasks done
@mahoneycm
mahoneycm marked this pull request as ready for review March 5, 2024 19:34
@mahoneycm
mahoneycm requested review from amyleadem and mejiaj March 5, 2024 21:52
- Fixes 404 html proofer error
@mejiaj

mejiaj commented Mar 8, 2024 •

Copy link
Copy Markdown
Contributor

Pronouns page reference is broken.

image

Source →

For the Links > External check, the following failures were found:

* At ./_site/patterns/create-a-user-profile/pronouns/index.html:2976:

  External link http://www.practicemakesprogress.org/blog/2015/9/18/asking-about-gender-on-online-forms failed: Not Found (status code 404)

Latest build error: test_build (25776) - uswds/uswds-site


Update

I've removed the link in 2835c17 and created an issue to revisit #2520.

## References
- Ask users for gender or sex. (n.d.) Retrieved on July 19, 2022, from [https://design-system.service.gov.uk/patterns/gender-or-sex/](https://design-system.service.gov.uk/patterns/gender-or-sex/)
- Asking about gender in online forms. (September 18, 2015) Retrieved on July 19, 2022, from [http://www.practicemakesprogress.org/blog/2015/9/18/asking-about-gender-on-online-forms](http://www.practicemakesprogress.org/blog/2015/9/18/asking-about-gender-on-online-forms)
- Asking about gender in online forms. (September 18, 2015) Retrieved on July 19, 2022, from http://www.practicemakesprogress.org/blog/2015/9/18/asking-about-gender-on-online-forms

@mejiaj mejiaj Mar 8, 2024 •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note

Removed for now in 2835c17, but follow-up captured in #2520.


I've also started a section for handling these types of problems in the Engineering Guide gDoc 🔒

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I also added a link to an archive.org capture on this one. I can add that to the SOP in the Engineering Guide

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome, thank you!

@mahoneycm mahoneycm left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good to me!

  • Builds without error
  • Pa11y errors are squashed
  • Cloud pages updated link is accurate

@mahoneycm
mahoneycm requested a review from thisisdano March 11, 2024 15:14
@mejiaj

This comment was marked as outdated.

@thisisdano

Copy link
Copy Markdown
Contributor

Merging over CI crashes

@thisisdano
thisisdano merged commit d1b4da1 into main Mar 11, 2024
@thisisdano
thisisdano deleted the cm-POAM-march-24 branch March 11, 2024 16:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

No open projects
Archived in project

Development

Successfully merging this pull request may close these issues.

3 participants