Resolve #3571839 "Remove or update"

Harumi Jangrequested to merge
issue/canvas-3571839:3571839-remove-or-update into 1.x

Closes #3571839

Critical security issues with older versions of glob (Github CVE issue linked in below links):

https://github.com/isaacs/rimraf/pull/337

https://github.com/storybookjs/storybook/issues/33767

  • Bump rimraf in @drupal-canvas/create directly to update glob to 13.0.1 there.
  • The other dependencies that use it @storybook/react-vite and eslint-config-drupal both have sub-dependencies that use a compromised version of glob so updated the overrides key in our package.json to 13.0.1.

image.png

Edited by Harumi Jang

Merge request reports