[TTAHUB-2958] Bump http-proxy-middleware to 3.0.7 to resolve high severity vulnerability#3712
Closed
kryswisnaskas wants to merge 21 commits into
Closed
[TTAHUB-2958] Bump http-proxy-middleware to 3.0.7 to resolve high severity vulnerability#3712kryswisnaskas wants to merge 21 commits into
kryswisnaskas wants to merge 21 commits into
Conversation
Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) from 1.1.5 to 1.2.0. - [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-builder@v1.1.5...v1.2.0) --- updated-dependencies: - dependency-name: fast-xml-builder dependency-version: 1.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…erity vulnerability Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Collaborator
|
@kryswisnaskas I wrote a different PR to remove this package, we aren't using it |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description of change
Upgrades
http-proxy-middlewarefrom3.0.5to3.0.7in the frontend to address a high-severity security vulnerability flagged byyarn audit. The package was a direct dependency and the fix was straightforward — no API changes are required.How to test
Run the frontend audit check and confirm the vulnerability is no longer reported:
The
http-proxy-middlewareentry should no longer appear. Remaining issues should only be pre-existing known entries inyarn-audit-known-issues.Jira Issue(s)
Checklists
Every PR
Before merge to main
Production Deploy
ready_for_reviewtransition triggers the Slack/Jira automation)elainaparrishis the authorized approver under normal circumstances)After merge/deploy