Skip to content

refactor(chore): fix audit vulnerability - #251

Merged
yeshamavani merged 1 commit into
masterfrom
GH-250
Dec 16, 2025
Merged

yeshamavani merged 1 commit into
masterfrom
GH-250

Conversation

@piyushsinghgaur1

Copy link
Copy Markdown
Contributor

Description

fix audit vulnerability

Fixes #250
GH-250

image

@sonarqubecloud

Copy link
Copy Markdown

SonarQube reviewer guide

Summary: Updates multiple npm dependencies including body-parser, glob, js-yaml, jws, node-forge, and validator to their latest patch/minor versions.

Review Focus: This is a routine dependency update PR. Key security-relevant updates include node-forge (1.3.1→1.3.3), body-parser (2.2.0→2.2.1), and js-yaml (4.1.0→4.1.1). The npm package itself has a major version bump (11.6.2→11.7.0) with extensive internal changes.

Start review at: package-lock.json at the body-parser and node-forge sections. These are production dependencies with security implications that warrant verification of the changes.

💬 Please send your feedback

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@yeshamavani
yeshamavani merged commit 1c661f4 into master Dec 16, 2025
7 checks passed
@yeshamavani
yeshamavani deleted the GH-250 branch December 16, 2025 14:19
@yeshamavani

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 10.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix audit vulnerability scan issues

2 participants