fix: resolve DOM Clobbering CVE-2024-43788 (#689)

* fix: resolve DOM Clobbering CVE-2024-43788 * Upgrade JavaScript tests GHA to use Node 20
Keeper-Security · Dec 9, 2024 · a079dd7 · a079dd7
1 parent 5969bbd
commit a079dd7
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/.github/workflows/test.js.yml b/.github/workflows/test.js.yml
@@ -11,12 +11,12 @@ jobs:
       run:
         working-directory: ./sdk/javascript/packages/core
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
-      - name: Use Node.js 16
-        uses: actions/setup-node@v3
+      - name: Use Node.js 20
+        uses: actions/setup-node@v4
         with:
-          node-version: 16
+          node-version: 20
 
       - run: npm install
         env:

diff --git a/sdk/javascript/packages/core/package.json b/sdk/javascript/packages/core/package.json
@@ -23,7 +23,7 @@
     "@types/node": "^22.5.4",
     "babel-jest": "^29.7.0",
     "jest": "^29.7.0",
-    "rollup": "^2.79.1",
+    "rollup": "^3.29.5",
     "rollup-plugin-sourcemaps": "^0.6.3",
     "rollup-plugin-typescript2": "^0.35.0",
     "rollup-plugin-version-injector": "^1.3.3",