Skip to content

Commit 29368b8

Browse files
authored
feat: Make @mdx-js/loader an optional peer dependency (#567)
BREAKING CHANGE: If importing `scoobie/webpack`, you'll need to add this optional peer dependency: ```sh yarn add '@mdx-js/loader@^1.6.22' ``` This is to avoid including dependencies which have some security vulnerabilities (CVE-2020-7753, CVE-2022-37601, CVE-2022-37599, CVE-2022-37603) if unnecessary. This is a bridge until #566
1 parent 08d3c71 commit 29368b8

File tree

2 files changed

+9
-6
lines changed

2 files changed

+9
-6
lines changed

package.json

+7-3
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,6 @@
77
"version": "0.0.0-semantically-released",
88
"dependencies": {
99
"@capsizecss/core": "^3.0.0",
10-
"@mdx-js/loader": "^1.6.22",
1110
"@mdx-js/react": "^1.6.22",
1211
"@types/mdx-js__react": "^1.5.5",
1312
"@vanilla-extract/css": "^1.2.3",
@@ -42,7 +41,8 @@
4241
"react-router-dom": "6.16.0",
4342
"semantic-release": "21.1.2",
4443
"sku": "12.4.2",
45-
"webpack": "5.88.2"
44+
"webpack": "5.88.2",
45+
"@mdx-js/loader": "^1.6.22"
4646
},
4747
"files": [
4848
"src",
@@ -57,11 +57,15 @@
5757
"braid-design-system": ">= 31.21.0",
5858
"react": ">= 17 < 19",
5959
"react-router-dom": ">= 5.3.0",
60-
"sku": ">= 10.13.4 < 13"
60+
"sku": ">= 10.13.4 < 13",
61+
"@mdx-js/loader": "^1.6.22"
6162
},
6263
"peerDependenciesMeta": {
6364
"@mermaid-js/mermaid-cli": {
6465
"optional": true
66+
},
67+
"@mdx-js/loader": {
68+
"optional": true
6569
}
6670
},
6771
"repository": {

yarn.lock

+2-3
Original file line numberDiff line numberDiff line change
@@ -4658,9 +4658,8 @@
46584658
"@types/emscripten" "^1.39.6"
46594659
tslib "^1.13.0"
46604660

4661-
"@zendesk/babel-plugin-react-displayname@github:zendesk/babel-plugin-react-displayname#7a837f2":
4661+
"@zendesk/babel-plugin-react-displayname@zendesk/babel-plugin-react-displayname#7a837f2":
46624662
version "1.0.0"
4663-
uid "7a837f2e92fbd6c5e348dcd178dc9de05309a804"
46644663
resolved "https://codeload.github.com/zendesk/babel-plugin-react-displayname/tar.gz/7a837f2e92fbd6c5e348dcd178dc9de05309a804"
46654664
dependencies:
46664665
"@babel/helper-plugin-utils" "^7.0.0"
@@ -14113,7 +14112,7 @@ sku@12.4.2:
1411314112
"@vocab/phrase" "^1.2.4"
1411414113
"@vocab/pseudo-localize" "^1.0.1"
1411514114
"@vocab/webpack" "^1.2.1"
14116-
"@zendesk/babel-plugin-react-displayname" "github:zendesk/babel-plugin-react-displayname#7a837f2"
14115+
"@zendesk/babel-plugin-react-displayname" zendesk/babel-plugin-react-displayname#7a837f2
1411714116
autoprefixer "^10.3.1"
1411814117
babel-jest "^29.0.0"
1411914118
babel-loader "^9.1.2"

0 commit comments

Comments
 (0)