Open
Description
What would you like to be added:
We need to update the dependencies version due to security concerns:
Dependencies in ui/apps/dashboard/pnpm-lock.yaml:
- Upgrade
cross-spawn
to version 7.0.5 or later. - Upgrade
nanoid
to version 3.3.8 or later. - Upgrade
rollup
to version 4.22.4 or later. - Upgrade
axios
to version 1.7.4 or later. - Upgrade
vite
to version 5.3.6 or later. - Upgrade
micromatch
to version 4.0.8 or later.
Dependencies in go.mod
- Upgrade github.com/golang-jwt/jwt/v4 to version 4.5.1 or later. (@RainbowMango, [CVE-2024-51744] Bump jwt to v5.2.1 to address CVE concerns #158)
- Upgrade golang.org/x/crypto to version 0.31.0 or later. (@adwait-godbole, [CVE-2024-45337] [CVE-2024-45338] Bump
golang.org/x/crypto
tov0.32.0
andgolang.org/x/net
tov0.34.0
to address CVE concerns #185) - Upgrade golang.org/x/net to version 0.33.0 or later. (@adwait-godbole, [CVE-2024-45337] [CVE-2024-45338] Bump
golang.org/x/crypto
tov0.32.0
andgolang.org/x/net
tov0.34.0
to address CVE concerns #185)
Why is this needed: