Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Frontend Vulnerabilities Flagged by GithHub Actions #144

Conversation

Matthew-Grayson
Copy link
Contributor

@Matthew-Grayson Matthew-Grayson commented Apr 1, 2024

Bump body-parser from 1.20.1 to 1.20.2
Bump cookie from 0.5.0 to 0.6.0
Bump es5-ext from 0.10.62 to 0.10.64
Add dependency esniff 2.0.1 to es5-ext
Bump express from 4.18.2 to 4.19.2
Bump follow-redirects from 1.15.4 to 1.15.6
Bump raw-body from 2.5.1 to 2.5.2
Bump webpack-dev-middleware from 5.3.3 to 5.3.4

🗣 Description

💭 Motivation and context

Closes issue #142

🧪 Testing

All unit tests pass.
All site pages function as expected.

✅ Pre-approval checklist

  • This PR has an informative and human-readable title.
  • Changes are limited to a single goal - eschew scope creep!
  • All future TODOs are captured in issues, which are referenced
    in code comments.
  • All relevant type-of-change labels have been added.
  • I have read the CONTRIBUTING document.
  • These code changes follow cisagov code standards.
  • All relevant repo and/or project documentation has been updated
    to reflect the changes in this PR.
  • Tests have been added and/or modified to cover the changes in this PR.
  • All new and existing tests pass.

✅ Pre-merge checklist

  • Revert dependencies to default branches.
  • Finalize version.

✅ Post-merge checklist

  • Create a release.

Bump body-parser from 1.20.1 to 1.20.2
Bump cookie from 0.5.0 to 0.6.0
Bump es5-ext from 0.10.62 to 0.10.64
Add dependency esniff 2.0.1 to es5-ext
Bump express from 4.18.2 to 4.19.2
Bump follow-redirects from 1.15.4 to 1.15.6
Bump raw-body from 2.5.1 to 2.5.2
Bump webpack-dev-middleware from 5.3.3 to 5.3.4
@Matthew-Grayson Matthew-Grayson self-assigned this Apr 1, 2024
@Matthew-Grayson Matthew-Grayson marked this pull request as ready for review April 1, 2024 18:47
@ameliav ameliav self-requested a review April 1, 2024 19:13
Copy link
Contributor

@ameliav ameliav left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Collaborator

@nickviola nickviola left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@nickviola nickviola merged commit bb8d714 into develop Apr 8, 2024
12 of 14 checks passed
@nickviola nickviola deleted the 142-address-failing-github-action-check-for-vulnerabilities-frontend branch April 8, 2024 14:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Address Failing GitHub Action: Check for Vulnerabilities / frontend
3 participants