Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: ws dependency vulnerability #1543

Merged
merged 2 commits into from
Jul 26, 2024
Merged

Conversation

MarcAstr0
Copy link
Collaborator

@MarcAstr0 MarcAstr0 commented Jul 25, 2024

Description

This PR fixes vulnerability CVE-2024-37890 found in the ws library which is listed as a dependency in several Booster packages.

Changes

  • Bump ws version from 8.12.0 to 8.17.1.

Checks

  • Project Builds
  • Project passes tests and checks
  • Updated documentation accordingly

@MarcAstr0 MarcAstr0 added the dependencies Pull requests that update a dependency file label Jul 25, 2024
Copy link

what-the-diff bot commented Jul 25, 2024

PR Summary

  • Added new update tracking file
    A new file ws_version_bump_2024-07-25-19-50.json was added to the common/changes/@boostercloud/framework-core directory, which is used to keep track of the changes within the project.

  • Updated ws dependency version in multiple packages
    The version of the ws dependency was upgraded from 8.12.0 to 8.17.1 across multiple package files. This update helps to ensure the use of the latest version of the library, with new updates, error fixes and potential performance improvements. The packages affected are as follows:

    • packages/application-tester/package.json
    • packages/framework-core/package.json
    • packages/framework-integration-tests/package.json
    • packages/framework-provider-local/package.json
    • packages/framework-types/package.json

@MarcAstr0
Copy link
Collaborator Author

/integration sha=290e67b190d0e40c8332131934fba4bfcf201e28

Copy link
Contributor

⌛ Integration tests are running...

Check their status here 👈

Copy link
Contributor

✅ Integration tests have finished successfully!

@NickSeagull NickSeagull merged commit 229be3f into boostercloud:main Jul 26, 2024
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants