Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@sannivasreddy
Copy link

@sannivasreddy sannivasreddy commented Oct 30, 2025

There are a couple of change here. We first update dependencies of the @meteorjs/babel npm package to resolve vulnerabilities. Some tests also had to be fixed. See this commit for the equivalent fixes in the original Meteor repo. Then, we make a tarball of this package and upload it to the release here. Finally, we update the babel-compiler package to use the tarball, along with updating its json5 dependency.

@sannivasreddy sannivasreddy marked this pull request as ready for review October 30, 2025 19:05
Copy link
Collaborator

@quickgiant quickgiant left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. I have updated the repository settings to make release tags and assets immutable, so that should prevent any issues with the tarball changing, along with the integrity checks NPM will do using the hash in the shrinkwrap file.

@sannivasreddy sannivasreddy merged commit 6384f43 into tulip-release-2.16 Oct 31, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants