Update Dependencies about catalog-harvest-registry HOT 6 CLOSED

Looks like jquery should be updated to 3.0.0:

2 known vulnerabilities found
CVE-2015-9251
Moderate severity
CVE-2016-10707
Moderate severity
package.json update suggested:
jquery ~> 3.0.0

Always verify the validity and compatibility of suggestions with your codebase.

from catalog-harvest-registry.

I'm not clear on what the issue is here. What dependencies should be updated?

from catalog-harvest-registry.

Check the GitHub project page, there's a vulnerability notice, that's all. Can we update affected versions?

from catalog-harvest-registry.

Your view must be different than mine. I have seen vulnerability notices for projects on the asascience organization, but I don't see them on the project page when I view them here under the IOOS organization. Could you post them here and/or take a screenshot?

from catalog-harvest-registry.

There are probably a couple breaking changes going from one major version of Jquery to another, see https://jquery.com/upgrade-guide/3.0/#summary-of-important-changes

We'll fix the noted changes as well as test the application for breaking changes prior to pushing up a new version to production.

from catalog-harvest-registry.

Created this PR:
#129
I upgraded JQuery to 3.3.1. I had to downgrade Bootstrap one versions since current version of Bootstrap is not compatible with JQuery 3. I attempted upgrading Bootstrap but this was a breaking change with the meteor app. I tested JQuery 3.3.1 and twbs:[email protected] from twbs:[email protected] and I'm not seeing any errors related to jQuery or bootstrap.

from catalog-harvest-registry.