Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: security issues #179

Merged
merged 13 commits into from
Dec 13, 2023

Conversation

pedrokohler
Copy link
Collaborator

@pedrokohler pedrokohler commented Nov 13, 2023

Fix all high and critical security issues listed in the file below:

yarn-audit.txt

dependabot bot and others added 13 commits October 14, 2022 14:52
Bumps [terser](https://github.com/terser/terser) from 5.14.1 to 5.15.1.
- [Release notes](https://github.com/terser/terser/releases)
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](terser/terser@v5.14.1...v5.15.1)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v1.0.1...v1.0.2)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [webpack](https://github.com/webpack/webpack) from 5.75.0 to 5.79.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.75.0...v5.79.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [crypto-js](https://github.com/brix/crypto-js) from 4.1.1 to 4.2.0.
- [Commits](brix/crypto-js@4.1.1...4.2.0)

---
updated-dependencies:
- dependency-name: crypto-js
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.20.5 to 7.23.2.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.23.2/packages/babel-traverse)

---
updated-dependencies:
- dependency-name: "@babel/traverse"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…agingDataCommons/slim into resolve-security-issues
…ingDataCommons/slim into resolve-security-issues
…magingDataCommons/slim into resolve-security-issues
…ImagingDataCommons/slim into resolve-security-issues
…b.com:ImagingDataCommons/slim into resolve-security-issues
Copy link
Collaborator

@igoroctaviano igoroctaviano left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@igoroctaviano
Copy link
Collaborator

@cgorman can u merge this one? the gh deploy is failing but I don't have permission to investigate. It's probably expired tokens.

@cgorman
Copy link
Collaborator

cgorman commented Nov 14, 2023

@igoroctaviano Hey sorry I also don't have the required permissions to do that. Maybe @fedorov can bump you to admin?

@fedorov fedorov merged commit eb8ddc0 into ImagingDataCommons:master Dec 13, 2023
4 of 5 checks passed
@fedorov
Copy link
Member

fedorov commented Dec 13, 2023

Sorry for such a delay in responding. I missed the github notifications. Next time if I do not respond, please ping me on slack. I am getting too many notifications from github and things are falling through the cracks unfortunately.

github-actions bot pushed a commit to igoroctaviano/slim that referenced this pull request May 2, 2024
# [0.2.0](v0.1.1...v0.2.0) (2024-05-02)

### Bug Fixes

* **package.json:** Fix Inefficient Regular Expression Complexity in nth-check (vulnerability) ([ImagingDataCommons#151](https://github.com/igoroctaviano/slim/issues/151)) ([4f42258](4f42258))
* security issues ([ImagingDataCommons#179](https://github.com/igoroctaviano/slim/issues/179)) ([eb8ddc0](eb8ddc0))
* **test.txt:** testing release ([00aabd6](00aabd6))

### Features

* add secondary dicom server ([ImagingDataCommons#188](https://github.com/igoroctaviano/slim/issues/188)) ([356009f](356009f))
github-actions bot pushed a commit to igoroctaviano/slim that referenced this pull request May 2, 2024
# [0.2.0](v0.1.1...v0.2.0) (2024-05-02)

### Bug Fixes

* **package.json:** Fix Inefficient Regular Expression Complexity in nth-check (vulnerability) ([ImagingDataCommons#151](https://github.com/igoroctaviano/slim/issues/151)) ([4f42258](4f42258))
* security issues ([ImagingDataCommons#179](https://github.com/igoroctaviano/slim/issues/179)) ([eb8ddc0](eb8ddc0))
* **test.txt:** testing release ([00aabd6](00aabd6))

### Features

* add secondary dicom server ([ImagingDataCommons#188](https://github.com/igoroctaviano/slim/issues/188)) ([356009f](356009f))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants