Upgrade lerna
- Dominant language
- TypeScript
- Stars
- 53
- Forks
- 63
- Avg merge
- 2d 4h
- Merged PRs (30d)
- 15
Description
### Summary
We need to upgrade lerna to v9 in order to keep up to date and remove some vulnerabilities from our allowlist.
### 💬 Description
The breaking change for us for [lerna v9](https://lerna.js.org/docs/legacy-package-management) is the removal of lerna bootstrap to link packages together. We can replace it with a workspaces array in the root package.json.
I tried upgrading and changing quickly and ran into an issue with typescript and stencil being outdated (these should be updated in #4193 and #3857). I'm not sure what other issues might come out of it, but it seems that only the bootstrap command is affected so the publish should still work.
We also need to upgrade `@commitlint/config-lerna-scopes`, which may require a full upgrade of `@commitlint/cli` to v20.
After the upgrade is done, please check through the audit allowlist to see if there's any vulnerabilities that can be removed.
### 🚨 Urgency (low, medium or high)
Medium - it doesn't affect customers but it would massively reduce the vulnerabilities in the audit allowlist.
Contributor guide
Assessment
This issue has not been assessed yet.