Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrades jwks-rsa and axios to patch security vulnerability #633

Merged
merged 1 commit into from
Nov 14, 2023

Conversation

mxosman
Copy link
Contributor

@mxosman mxosman commented Nov 14, 2023

Description of the change

Upgrades packages jwks-rsa and axios to patch security vulnerability.

Reference: https://github.com/Recidiviz/public-dashboard/security/dependabot/137

Type of change

  • Bug fix (non-breaking change that fixes an issue)
  • New feature (non-breaking change that adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Configuration change (adjusts configuration to achieve some end related to functionality, development, performance, or security)

Checklists

Development

These boxes should be checked by the submitter prior to merging:

  • Manual testing against realistic data has been performed locally

Code review

These boxes should be checked by reviewers prior to merging:

  • This pull request has a descriptive title and information useful to a reviewer
  • This pull request has been moved out of a Draft state, has no "Work In Progress" label, and has assigned reviewers
  • Potential security implications or infrastructural changes have been considered, if relevant

@mxosman mxosman requested review from phenggeler and a team November 14, 2023 15:03
@coveralls
Copy link

Pull Request Test Coverage Report for Build 6865457245

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 78.516%

Totals Coverage Status
Change from base Build 6748553201: 0.0%
Covered Lines: 2135
Relevant Lines: 2557

💛 - Coveralls

Copy link

@morden35 morden35 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm!

@mxosman
Copy link
Contributor Author

mxosman commented Nov 14, 2023

TY Michelle!

@mxosman mxosman merged commit ff9d971 into main Nov 14, 2023
15 checks passed
@mxosman mxosman deleted the mahmoud/security-upgrades branch November 14, 2023 15:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants