Security/26 fix vulnerabilities (#27)

* #26: update dependencies * #26: swapped out jsrsasign for node-forge * run pk fix and update changes file
exasol · Feb 6, 2024 · ae9369d · ae9369d
1 parent 70c737c
commit ae9369d
Show file tree

Hide file tree

Showing 9 changed files with 1,353 additions and 945 deletions.
diff --git a/.github/workflows/broken_links_checker.yml b/.github/workflows/broken_links_checker.yml
diff --git a/.github/workflows/project-keeper-verify.yml b/.github/workflows/project-keeper-verify.yml
diff --git a/.github/workflows/project-keeper.sh b/.github/workflows/project-keeper.sh
diff --git a/dependencies.md b/dependencies.md
diff --git a/doc/changes/changelog.md b/doc/changes/changelog.md
diff --git a/doc/changes/changes_0.1.3.md b/doc/changes/changes_0.1.3.md
@@ -0,0 +1,23 @@
+# Exasol Driver ts 0.1.3, released 2024-02-06
+
+Code name: Fix bable traverse and jsrsasign vulnerabilities.
+
+## Summary
+
+This release fixes vulnerabilities in bable traverse by updating the package and swaps out jsrsasign with node-forge to replace RSA encryption.
+
+## Features
+
+- #26: Fix vulnerabilities
+
+## Dependency Updates
+
+### Compile Dependency Updates
+
+* Added `node-forge:^1.3.1`
+* Removed `jsrsasign:^10.8.6`
+
+### Development Dependency Updates
+
+* Added `@types/node-forge:^1.3.11`
+* Removed `@types/jsrsasign:^10.5.8`