Details
-
Task
-
Resolution: Unresolved
-
Major
-
None
-
1
Description
Latest dependabot bump retains some high priority changes, and others which can't be automatically resolved: https://github.com/couchbaselabs/try-cb-frontend-v2/security/dependabot
Most of these are related to vue.js being old. I suspect we need to upgrade to v3, though the site itself isn't very clear on this, Wikipedia https://en.wikipedia.org/wiki/Vue.js#Versions suggests v2 will be end of LTS by March 2022.
V3 VueJS is not compatible with BootstrapVue as per https://github.com/bootstrap-vue/bootstrap-vue/issues/5196
I suspect the easiest thing is to rip out bootstrap-vue entirely, though this requires some re-templating.
We can update to Bootstrap 5 at the same time, as that is the current stable now.