Security Update Sprint T+12

[smcmurtry]

Issue by SupeDeDupe
Monday Mar 18, 2019 at 13:47 GMT
Originally opened as veteransaffairscanada#2005

---

Our aim is to update all package dependencies once per sprint. Responsibility for this task is rotated through all the developers. We have come up with the following more or less sane workflow given the the Javascript ecosystem:

In a new branch

• Prune things no longer needed
• Run yarn upgrade-interactive --latest --ignore-engines to find upgraded packages
• Upgrade patch and minor version changes (green and yellow)
• Run tests
• Commit

For each red (major version) upgrade:

• Upgrade
• Run tests
• Examine app locally
• Commit