1457888 - BLRG-PT-18-001: upgrade to latest javascript libraries

Status: RESOLVED WONTFIX

(Release Engineering Graveyard :: Applications: Balrog (frontend), enhancement, P3)

Description

[[e-mail] (:bhearsum)]

During "npm install", numerous outdated (and potentially insecure) libraries are installed. We should be doing our best to keep these up-to-date, though we may be limited by the fact that we're on an old version of Angular.

To start, we should update to the latest version of packages that don't cause bustage.

Comment 1

[[e-mail] (:bhearsum)]

Simon Bennetts did some research on what it would take to get us to safe versions of our major dependencies, his results are in https://docs.google.com/document/d/1wDLc5NuQy49Nj3Yzo3S2UGNWyzPexZTkh26mfT8MN4I/edit#

I suspect that Angular will be the worst, since we use a more varied set of features from it.

Comment 2

[[e-mail] (:bhearsum)]

It's looking like we may prioritize a new Balrog UI in Q3, which means this is not likely to get looked at. That work is being tracked in https://bugzilla.mozilla.org/show_bug.cgi?id=1465206.

Comment 3

[[e-mail] (:bhearsum)]

We're working on a new UI, and bugs like are not worth fixing in the current one. We will ensure that the new UI is regularly updated to the latest libraries, however.