Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix: update node deps due to vulns (#583)
### **PR Type** Bug fix, Dependencies ___ ### **Description** - Removed `GHSA-952p-6rrq-rcjv` from the allowlist in `audit-ci.jsonc`. - Added new dependency overrides in `package.json` for `cookie`, `elliptic`, and `cross-spawn` to address vulnerabilities. - Updated `pnpm-lock.yaml` to reflect the new versions of `cookie`, `elliptic`, and `cross-spawn`, and removed older versions of these and other dependencies. ___ ### **Changes walkthrough** 📝 <table><thead><tr><th></th><th align="left">Relevant files</th></tr></thead><tbody><tr><td><strong>Bug fix</strong></td><td><table> <tr> <td> <details> <summary><strong>audit-ci.jsonc</strong><dd><code>Remove specific vulnerability from allowlist</code> </dd></summary> <hr> audit-ci.jsonc - Removed `GHSA-952p-6rrq-rcjv` from the allowlist. </details> </td> <td><a href="https://github.com/nhost/hasura-auth/pull/583/files#diff-4ede69da2a1704e53e08b8d647a315c202f037cc9277f16c94176d9622d261c6">+0/-1</a> </td> </tr> </table></td></tr><tr><td><strong>Dependencies</strong></td><td><table> <tr> <td> <details> <summary><strong>package.json</strong><dd><code>Add new dependency overrides for security</code> </dd></summary> <hr> package.json <li>Added new dependency overrides for <code>cookie</code>, <code>elliptic</code>, and <code>cross-spawn</code>.<br> </details> </td> <td><a href="https://github.com/nhost/hasura-auth/pull/583/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519">+4/-1</a> </td> </tr> <tr> <td> <details> <summary><strong>pnpm-lock.yaml</strong><dd><code>Update dependencies to address vulnerabilities</code> </dd></summary> <hr> pnpm-lock.yaml <li>Updated versions for <code>cookie</code>, <code>elliptic</code>, and <code>cross-spawn</code>.<br> <li> Removed older versions of <code>cookie</code>, <code>cross-spawn</code>, and other dependencies.<br> <br> </details> </td> <td><a href="https://github.com/nhost/hasura-auth/pull/583/files#diff-32824c984905bb02bc7ffcef96a77addd1f1602cff71a11fbbfdd7f53ee026bb">+25/-93</a> </td> </tr> </table></td></tr></tr></tbody></table> ___ > 💡 **PR-Agent usage**: Comment `/help "your question"` on any pull request to receive relevant information
- Loading branch information