File tree Expand file tree Collapse file tree 7 files changed +4031
-1354
lines changed Expand file tree Collapse file tree 7 files changed +4031
-1354
lines changed Original file line number Diff line number Diff line change @@ -2,7 +2,7 @@ version: 2.1
2
2
parameters :
3
3
node-version :
4
4
type : string
5
- default : " 16 .13.2 "
5
+ default : " 18 .13.0 "
6
6
orbs :
7
7
node : circleci/node@5.0.0
8
8
slack : circleci/slack@4.5.3
@@ -72,7 +72,7 @@ commands:
72
72
jobs :
73
73
test :
74
74
docker : # run the steps with Docker
75
- - image : cimg/base:stable
75
+ - image : cimg/node:18.13.0
76
76
steps :
77
77
- checkout
78
78
- node/install :
@@ -82,13 +82,13 @@ jobs:
82
82
override-ci-command : npm install
83
83
- run :
84
84
name : Audit Dependencies
85
- command : npm audit --production -- audit-level=high
85
+ command : npm run audit
86
86
- run :
87
87
name : test
88
88
command : npm test
89
89
build :
90
90
docker :
91
- - image : cimg/base:stable
91
+ - image : cimg/node:18.13.0
92
92
user : root
93
93
steps :
94
94
- checkout
@@ -118,6 +118,8 @@ workflows:
118
118
jobs :
119
119
- build :
120
120
name : " Build and publish docker image"
121
+ context :
122
+ - componentspusher
121
123
filters :
122
124
branches :
123
125
ignore : /.*/
Original file line number Diff line number Diff line change
1
+ ignore :
2
+ - vulnerability : CVE-2022-3996
3
+ package :
4
+ name : libssl3
5
+ version : 3.0.7-r0
6
+
7
+ - vulnerability : CVE-2022-3996
8
+ package :
9
+ name : libcrypto3
10
+ version : 3.0.7-r0
Original file line number Diff line number Diff line change
1
+ {
2
+ "GHSA-27h2-hvpr-p74q": {
3
+ "active": true,
4
+ "notes": "We don't use verify function from jsonwebtoken, so not affected"
5
+ },
6
+ "GHSA-wc69-rhjr-hc9g": {
7
+ "active": true,
8
+ "notes": "Bunyan library set only new Date to momentjs as parameter"
9
+ },
10
+ "GHSA-hrpp-h998-j3pp": {
11
+ "active": true,
12
+ "notes": "There is no query-string user input in sailor"
13
+ }
14
+ }
Original file line number Diff line number Diff line change
1
+ ## 1.2.9 (February 10, 2023)
2
+
3
+ * Update Sailor version to 2.7.1
4
+
1
5
## 1.2.8 (April 08, 2022)
2
6
3
7
* Update Sailor version to 2.6.27
Original file line number Diff line number Diff line change 1
1
{
2
2
"title" : " Node.js Code" ,
3
- "version" : " 1.2.8 " ,
3
+ "version" : " 1.2.9 " ,
4
4
"description" : " You can write your own code and deploy it as part of integration process." ,
5
5
"docsUrl" : " http://go2.elastic.io/code-component" ,
6
6
"fields" : {
You can’t perform that action at this time.
0 commit comments