Skip to content

form-data package update for synk#9046

Merged
EmmanuelNwa247 merged 2 commits into
mainfrom
Emmanuel/synk-Aug
Aug 6, 2025
Merged

form-data package update for synk#9046
EmmanuelNwa247 merged 2 commits into
mainfrom
Emmanuel/synk-Aug

Conversation

@EmmanuelNwa247
Copy link
Copy Markdown
Contributor

@EmmanuelNwa247 EmmanuelNwa247 commented Aug 1, 2025 •
edited
Loading

DEVOPS PULL REQUEST

Related Issue

Changes Proposed

  • updated frontend/package.json with form-data 4.0.4
  • updated cypress/package.json with form-data 4.0.4

Additional Information

  • The form-data package with its dependencies needs to be updated to prevent an attacker from manipulating HTTP request boundaries by exploiting predictable values.

Testing

  • A smoke test of basic functionality should be accomplished before merging.
  • this PR has already been verified in dev4

@EmmanuelNwa247 EmmanuelNwa247 changed the title form-data dependency update for synk form-data package update for synk Aug 1, 2025
@EmmanuelNwa247 EmmanuelNwa247 marked this pull request as ready for review August 1, 2025 18:51
@EmmanuelNwa247 EmmanuelNwa247 requested review from a team as code owners August 1, 2025 18:51
@EmmanuelNwa247 EmmanuelNwa247 requested review from DanielSass, arinkulshi-skylight, kevinfiol and shanice-skylight and removed request for a team August 1, 2025 18:51
shanice-skylight
shanice-skylight approved these changes Aug 1, 2025
View reviewed changes
Copy link
Copy Markdown
Collaborator

@shanice-skylight shanice-skylight left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested the following on dev4: adding an organization admin, adding a new facility, testing a patient. All passed. LGTM

arinkulshi-skylight
arinkulshi-skylight approved these changes Aug 6, 2025
View reviewed changes
Copy link
Copy Markdown
Contributor

@arinkulshi-skylight arinkulshi-skylight left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LG!

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Aug 6, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@EmmanuelNwa247 EmmanuelNwa247 added this pull request to the merge queue Aug 6, 2025
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Aug 6, 2025
@EmmanuelNwa247 EmmanuelNwa247 added this pull request to the merge queue Aug 6, 2025
Merged via the queue into main with commit cef281f Aug 6, 2025
46 checks passed
@EmmanuelNwa247 EmmanuelNwa247 deleted the Emmanuel/synk-Aug branch August 6, 2025 22:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@DanielSass DanielSass DanielSass approved these changes

@shanice-skylight shanice-skylight shanice-skylight approved these changes

@kevinfiol kevinfiol Awaiting requested review from kevinfiol kevinfiol is a code owner automatically assigned from CDCgov/simplereport-dependencyreviews

+1 more reviewer

@arinkulshi-skylight arinkulshi-skylight arinkulshi-skylight approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@EmmanuelNwa247 @DanielSass @shanice-skylight @arinkulshi-skylight