chore: 🔒 amqplib will use the security patched version of urlpar…

[suhail-n]

Overview

The current url-parse version 1.5.3 has the following critical vulnerabilities CVE-2022-0691, and CVE-2022-0686

Security Patch

• Updated url-parse to version 1.5.10

EDIT

After making changes, the CI build was failing. This was occurring because the configured workflow was attempting to install rabbitmq manually using sudo apt-get install rabbitmq-server -y --fix-missing. I replaced it with the service container for rabbitmq.

Before using an install command in under steps:

steps:
- name: Install rabbitmq
      run: |
        sudo apt-get install rabbitmq-server -y --fix-missing

After removing steps and using a service container:

jobs:
  build:
    runs-on: ubuntu-latest
    services:
# using rabbitmq:latest image
      rabbitmq:
        image: rabbitmq
        ports:
          - 5672:5672

[kibertoad]

Thanks a lot!

[kibertoad]

@cressie176 @squaremo We need to publish a new patch version with this.