From 310b270e9b396640abb595689b986c0ffd01c5a0 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 14 May 2022 20:36:20 +0000 Subject: [PATCH 01/62] chore(deps): update timoa/nodejs-encryption-api-example digest to f73079c --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index 9ec52354e..a8584a7e1 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -2,7 +2,7 @@ version: '3.3' services: api: - image: timoa/nodejs-encryption-api-example:latest@sha256:509d3424b92adb94f06ceedaa8044aaffed0e99015ae4b8dcb95be0a82c0a7b2 + image: timoa/nodejs-encryption-api-example:latest@sha256:f73079c8045d361899b8c372566616cba1249e61edcc6288549a2f3729dd3de6 environment: - NODE_ENV=production - NODE_HOST=0.0.0.0 From 4a4678dc488f81a2d449453317e9bad6ae51df44 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 14 May 2022 22:25:11 +0000 Subject: [PATCH 02/62] chore(deps): update dependency mocha to v10 --- package-lock.json | 135 ++++++++++++++++------------------------------ package.json | 2 +- 2 files changed, 48 insertions(+), 89 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4eacd25a7..01d37a248 100644 --- a/package-lock.json +++ b/package-lock.json @@ -37,7 +37,7 @@ "eslint-plugin-jsx-a11y": "6.5.1", "eslint-plugin-react": "7.29.4", "espree": "9.3.1", - "mocha": "9.2.2", + "mocha": "10.0.0", "npm-run-all": "4.1.5", "nyc": "15.1.0", "request": "2.88.2" @@ -2760,15 +2760,6 @@ "integrity": "sha512-9ByhssR2fPVsNZj478qUUbKfmL0+t5BDVyjShtyZZLiK7ZDAArFFfopyOTj0M05wE2tJPisA4iTnnXl2YoPvOA==", "dev": true }, - "node_modules/growl": { - "version": "1.10.5", - "resolved": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz", - "integrity": "sha512-qBr4OuELkhPenW6goKVXiv47US3clb3/IbuWF9KNKEijAy9oeHxU9IgzjvJhHkUzhaj7rOUD7+YGWqUjLp5oSA==", - "dev": true, - "engines": { - "node": ">=4.x" - } - }, "node_modules/har-schema": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz", @@ -3833,71 +3824,55 @@ "dev": true }, "node_modules/mocha": { - "version": "9.2.2", - "resolved": "https://registry.npmjs.org/mocha/-/mocha-9.2.2.tgz", - "integrity": "sha512-L6XC3EdwT6YrIk0yXpavvLkn8h+EU+Y5UcCHKECyMbdUIxyMuZj4bX4U9e1nvnvUUvQVsV2VHQr5zLdcUkhW/g==", + "version": "10.0.0", + "resolved": "https://registry.npmjs.org/mocha/-/mocha-10.0.0.tgz", + "integrity": "sha512-0Wl+elVUD43Y0BqPZBzZt8Tnkw9CMUdNYnUsTfOM1vuhJVZL+kiesFYsqwBkEEuEixaiPe5ZQdqDgX2jddhmoA==", "dev": true, "dependencies": { "@ungap/promise-all-settled": "1.1.2", "ansi-colors": "4.1.1", "browser-stdout": "1.3.1", "chokidar": "3.5.3", - "debug": "4.3.3", + "debug": "4.3.4", "diff": "5.0.0", "escape-string-regexp": "4.0.0", "find-up": "5.0.0", "glob": "7.2.0", - "growl": "1.10.5", "he": "1.2.0", "js-yaml": "4.1.0", "log-symbols": "4.1.0", - "minimatch": "4.2.1", + "minimatch": "5.0.1", "ms": "2.1.3", - "nanoid": "3.3.1", + "nanoid": "3.3.3", "serialize-javascript": "6.0.0", "strip-json-comments": "3.1.1", "supports-color": "8.1.1", - "which": "2.0.2", - "workerpool": "6.2.0", + "workerpool": "6.2.1", "yargs": "16.2.0", "yargs-parser": "20.2.4", "yargs-unparser": "2.0.0" }, "bin": { "_mocha": "bin/_mocha", - "mocha": "bin/mocha" + "mocha": "bin/mocha.js" }, "engines": { - "node": ">= 12.0.0" + "node": ">= 14.0.0" }, "funding": { "type": "opencollective", "url": "https://opencollective.com/mochajs" } }, - "node_modules/mocha/node_modules/debug": { - "version": "4.3.3", - "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.3.tgz", - "integrity": "sha512-/zxw5+vh1Tfv+4Qn7a5nsbcJKPaSvCDhojn6FEl9vupwK2VCSDtEiEtqr8DFtzYFOdz63LBkxec7DYuc2jon6Q==", + "node_modules/mocha/node_modules/brace-expansion": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz", + "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==", "dev": true, "dependencies": { - "ms": "2.1.2" - }, - "engines": { - "node": ">=6.0" - }, - "peerDependenciesMeta": { - "supports-color": { - "optional": true - } + "balanced-match": "^1.0.0" } }, - "node_modules/mocha/node_modules/debug/node_modules/ms": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", - "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==", - "dev": true - }, "node_modules/mocha/node_modules/find-up": { "version": "5.0.0", "resolved": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz", @@ -3930,12 +3905,12 @@ } }, "node_modules/mocha/node_modules/minimatch": { - "version": "4.2.1", - "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-4.2.1.tgz", - "integrity": "sha512-9Uq1ChtSZO+Mxa/CL1eGizn2vRn3MlLgzhT0Iz8zaY8NdvxvB0d5QdPFmCKf7JKA9Lerx5vRrnwO03jsSfGG9g==", + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-5.0.1.tgz", + "integrity": "sha512-nLDxIFRyhDblz3qMuq+SoRZED4+miJ/G+tdDrjkkkRnjAsBexeGpgjLEQ0blJy7rHhR2b93rhQY4SvyWu9v03g==", "dev": true, "dependencies": { - "brace-expansion": "^1.1.7" + "brace-expansion": "^2.0.1" }, "engines": { "node": ">=10" @@ -4118,9 +4093,9 @@ "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==" }, "node_modules/nanoid": { - "version": "3.3.1", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.1.tgz", - "integrity": "sha512-n6Vs/3KGyxPQd6uO0eH4Bv0ojGSUvuLlIHtC3Y0kEO23YRge8H9x1GCzLn28YX0H66pMkxuaeESFq4tKISKwdw==", + "version": "3.3.3", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.3.tgz", + "integrity": "sha512-p1sjXuopFs0xg+fPASzQ28agW1oHD7xDsd9Xkf3T15H3c/cifrFHVwrh74PdoklAPi+i7MdRsE47vm2r6JoB+w==", "dev": true, "bin": { "nanoid": "bin/nanoid.cjs" @@ -6243,9 +6218,9 @@ } }, "node_modules/workerpool": { - "version": "6.2.0", - "resolved": "https://registry.npmjs.org/workerpool/-/workerpool-6.2.0.tgz", - "integrity": "sha512-Rsk5qQHJ9eowMH28Jwhe8HEbmdYDX4lwoMWshiCXugjtHqMD9ZbiqSDLxcsfdqsETPzVUtX5s1Z5kStiIM6l4A==", + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/workerpool/-/workerpool-6.2.1.tgz", + "integrity": "sha512-ILEIE97kDZvF9Wb9f6h5aXK4swSlKGUcOEGiIYb2OOu/IrDU9iwj0fD//SsA6E5ibwJxpEvhullJY4Sl4GcpAw==", "dev": true }, "node_modules/wrap-ansi": { @@ -8500,12 +8475,6 @@ "integrity": "sha512-9ByhssR2fPVsNZj478qUUbKfmL0+t5BDVyjShtyZZLiK7ZDAArFFfopyOTj0M05wE2tJPisA4iTnnXl2YoPvOA==", "dev": true }, - "growl": { - "version": "1.10.5", - "resolved": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz", - "integrity": "sha512-qBr4OuELkhPenW6goKVXiv47US3clb3/IbuWF9KNKEijAy9oeHxU9IgzjvJhHkUzhaj7rOUD7+YGWqUjLp5oSA==", - "dev": true - }, "har-schema": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz", @@ -9300,52 +9269,42 @@ "dev": true }, "mocha": { - "version": "9.2.2", - "resolved": "https://registry.npmjs.org/mocha/-/mocha-9.2.2.tgz", - "integrity": "sha512-L6XC3EdwT6YrIk0yXpavvLkn8h+EU+Y5UcCHKECyMbdUIxyMuZj4bX4U9e1nvnvUUvQVsV2VHQr5zLdcUkhW/g==", + "version": "10.0.0", + "resolved": "https://registry.npmjs.org/mocha/-/mocha-10.0.0.tgz", + "integrity": "sha512-0Wl+elVUD43Y0BqPZBzZt8Tnkw9CMUdNYnUsTfOM1vuhJVZL+kiesFYsqwBkEEuEixaiPe5ZQdqDgX2jddhmoA==", "dev": true, "requires": { "@ungap/promise-all-settled": "1.1.2", "ansi-colors": "4.1.1", "browser-stdout": "1.3.1", "chokidar": "3.5.3", - "debug": "4.3.3", + "debug": "4.3.4", "diff": "5.0.0", "escape-string-regexp": "4.0.0", "find-up": "5.0.0", "glob": "7.2.0", - "growl": "1.10.5", "he": "1.2.0", "js-yaml": "4.1.0", "log-symbols": "4.1.0", - "minimatch": "4.2.1", + "minimatch": "5.0.1", "ms": "2.1.3", - "nanoid": "3.3.1", + "nanoid": "3.3.3", "serialize-javascript": "6.0.0", "strip-json-comments": "3.1.1", "supports-color": "8.1.1", - "which": "2.0.2", - "workerpool": "6.2.0", + "workerpool": "6.2.1", "yargs": "16.2.0", "yargs-parser": "20.2.4", "yargs-unparser": "2.0.0" }, "dependencies": { - "debug": { - "version": "4.3.3", - "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.3.tgz", - "integrity": "sha512-/zxw5+vh1Tfv+4Qn7a5nsbcJKPaSvCDhojn6FEl9vupwK2VCSDtEiEtqr8DFtzYFOdz63LBkxec7DYuc2jon6Q==", + "brace-expansion": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz", + "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==", "dev": true, "requires": { - "ms": "2.1.2" - }, - "dependencies": { - "ms": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", - "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==", - "dev": true - } + "balanced-match": "^1.0.0" } }, "find-up": { @@ -9368,12 +9327,12 @@ } }, "minimatch": { - "version": "4.2.1", - "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-4.2.1.tgz", - "integrity": "sha512-9Uq1ChtSZO+Mxa/CL1eGizn2vRn3MlLgzhT0Iz8zaY8NdvxvB0d5QdPFmCKf7JKA9Lerx5vRrnwO03jsSfGG9g==", + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-5.0.1.tgz", + "integrity": "sha512-nLDxIFRyhDblz3qMuq+SoRZED4+miJ/G+tdDrjkkkRnjAsBexeGpgjLEQ0blJy7rHhR2b93rhQY4SvyWu9v03g==", "dev": true, "requires": { - "brace-expansion": "^1.1.7" + "brace-expansion": "^2.0.1" } }, "ms": { @@ -9501,9 +9460,9 @@ "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==" }, "nanoid": { - "version": "3.3.1", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.1.tgz", - "integrity": "sha512-n6Vs/3KGyxPQd6uO0eH4Bv0ojGSUvuLlIHtC3Y0kEO23YRge8H9x1GCzLn28YX0H66pMkxuaeESFq4tKISKwdw==", + "version": "3.3.3", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.3.tgz", + "integrity": "sha512-p1sjXuopFs0xg+fPASzQ28agW1oHD7xDsd9Xkf3T15H3c/cifrFHVwrh74PdoklAPi+i7MdRsE47vm2r6JoB+w==", "dev": true }, "natural-compare": { @@ -11161,9 +11120,9 @@ "dev": true }, "workerpool": { - "version": "6.2.0", - "resolved": "https://registry.npmjs.org/workerpool/-/workerpool-6.2.0.tgz", - "integrity": "sha512-Rsk5qQHJ9eowMH28Jwhe8HEbmdYDX4lwoMWshiCXugjtHqMD9ZbiqSDLxcsfdqsETPzVUtX5s1Z5kStiIM6l4A==", + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/workerpool/-/workerpool-6.2.1.tgz", + "integrity": "sha512-ILEIE97kDZvF9Wb9f6h5aXK4swSlKGUcOEGiIYb2OOu/IrDU9iwj0fD//SsA6E5ibwJxpEvhullJY4Sl4GcpAw==", "dev": true }, "wrap-ansi": { diff --git a/package.json b/package.json index 6280bde81..f715ee08c 100644 --- a/package.json +++ b/package.json @@ -69,7 +69,7 @@ "eslint-plugin-jsx-a11y": "6.5.1", "eslint-plugin-react": "7.29.4", "espree": "9.3.1", - "mocha": "9.2.2", + "mocha": "10.0.0", "npm-run-all": "4.1.5", "nyc": "15.1.0", "request": "2.88.2" From 013fc04ab7c6ffd34fc9467159fb40a172910b19 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 16 May 2022 15:12:27 +0000 Subject: [PATCH 03/62] fix(deps): update dependency @snyk/protect to v1.915.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 01d37a248..ab9e014ae 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.914.0", + "@snyk/protect": "1.915.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -695,9 +695,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.914.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.914.0.tgz", - "integrity": "sha512-UdN6fw2XXRi5O6mAnzRI3juJU1NsmF+VfU86dCeXWozjWq/YFCSIiB+gOk77tKhNb8Z8sWXF2QnPSgDOtzUO5g==", + "version": "1.915.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.915.0.tgz", + "integrity": "sha512-6K1/bbjyh9Sn1URJpQHtRlOXbVdlNjnMgtwU1raTTPooPrhLwDbKwEgPRwr+t64luQe23I54mTK3FqQM2SsYeg==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6864,9 +6864,9 @@ } }, "@snyk/protect": { - "version": "1.914.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.914.0.tgz", - "integrity": "sha512-UdN6fw2XXRi5O6mAnzRI3juJU1NsmF+VfU86dCeXWozjWq/YFCSIiB+gOk77tKhNb8Z8sWXF2QnPSgDOtzUO5g==" + "version": "1.915.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.915.0.tgz", + "integrity": "sha512-6K1/bbjyh9Sn1URJpQHtRlOXbVdlNjnMgtwU1raTTPooPrhLwDbKwEgPRwr+t64luQe23I54mTK3FqQM2SsYeg==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index f715ee08c..c9ab16bf0 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.914.0", + "@snyk/protect": "1.915.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From ce5ba657c6db4e8ae50c1b0345ea507f3d4e00a4 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 17 May 2022 12:03:50 +0000 Subject: [PATCH 04/62] chore(deps): update github/codeql-action action to v2.1.11 --- .github/workflows/codeql-analysis.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index d524e51bb..a92e675c5 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -36,7 +36,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@2f58583a1b24a7d3c7034f6bf9fa506d23b1183b # tag=v2.1.10 + uses: github/codeql-action/init@a3a6c128d771b6b9bdebb1c9d0583ebd2728a108 # tag=v2.1.11 # Override language selection by uncommenting this and choosing your languages # with: # languages: go, javascript, csharp, python, cpp, java @@ -44,7 +44,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below). - name: Autobuild - uses: github/codeql-action/autobuild@2f58583a1b24a7d3c7034f6bf9fa506d23b1183b # tag=v2.1.10 + uses: github/codeql-action/autobuild@a3a6c128d771b6b9bdebb1c9d0583ebd2728a108 # tag=v2.1.11 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -58,4 +58,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@2f58583a1b24a7d3c7034f6bf9fa506d23b1183b # tag=v2.1.10 + uses: github/codeql-action/analyze@a3a6c128d771b6b9bdebb1c9d0583ebd2728a108 # tag=v2.1.11 From 556d9db3c869a1e025eaefc8d15bccf4b06a0b81 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 18 May 2022 12:18:04 +0000 Subject: [PATCH 05/62] fix(deps): update dependency @snyk/protect to v1.917.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index ab9e014ae..960a76aed 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.915.0", + "@snyk/protect": "1.917.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -695,9 +695,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.915.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.915.0.tgz", - "integrity": "sha512-6K1/bbjyh9Sn1URJpQHtRlOXbVdlNjnMgtwU1raTTPooPrhLwDbKwEgPRwr+t64luQe23I54mTK3FqQM2SsYeg==", + "version": "1.917.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.917.0.tgz", + "integrity": "sha512-nMjELXSPOLIqr/jsl1AbQgEpiQn3vGLm1NyNaw3jx7tkwXswD1P6asC7Sjgasj83rYDSmmqgevkq6ZJMEvlcpw==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6864,9 +6864,9 @@ } }, "@snyk/protect": { - "version": "1.915.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.915.0.tgz", - "integrity": "sha512-6K1/bbjyh9Sn1URJpQHtRlOXbVdlNjnMgtwU1raTTPooPrhLwDbKwEgPRwr+t64luQe23I54mTK3FqQM2SsYeg==" + "version": "1.917.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.917.0.tgz", + "integrity": "sha512-nMjELXSPOLIqr/jsl1AbQgEpiQn3vGLm1NyNaw3jx7tkwXswD1P6asC7Sjgasj83rYDSmmqgevkq6ZJMEvlcpw==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index c9ab16bf0..ec6cd6c58 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.915.0", + "@snyk/protect": "1.917.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 653ad311a9312a40cda110cf4b5bead7761eaf27 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 19 May 2022 18:44:45 +0000 Subject: [PATCH 06/62] fix(deps): update dependency @snyk/protect to v1.918.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 960a76aed..54fee4dc8 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.917.0", + "@snyk/protect": "1.918.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -695,9 +695,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.917.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.917.0.tgz", - "integrity": "sha512-nMjELXSPOLIqr/jsl1AbQgEpiQn3vGLm1NyNaw3jx7tkwXswD1P6asC7Sjgasj83rYDSmmqgevkq6ZJMEvlcpw==", + "version": "1.918.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.918.0.tgz", + "integrity": "sha512-aDqQkypHQYtnSqe70NJ/J/wde42eCNdvOY5+z1MTptsYpss1SHjMwfk5DnGw1aTi/7tv70rHaek2rgcOyIxK3A==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6864,9 +6864,9 @@ } }, "@snyk/protect": { - "version": "1.917.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.917.0.tgz", - "integrity": "sha512-nMjELXSPOLIqr/jsl1AbQgEpiQn3vGLm1NyNaw3jx7tkwXswD1P6asC7Sjgasj83rYDSmmqgevkq6ZJMEvlcpw==" + "version": "1.918.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.918.0.tgz", + "integrity": "sha512-aDqQkypHQYtnSqe70NJ/J/wde42eCNdvOY5+z1MTptsYpss1SHjMwfk5DnGw1aTi/7tv70rHaek2rgcOyIxK3A==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index ec6cd6c58..6b709f906 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.917.0", + "@snyk/protect": "1.918.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 429764a849994e7fce4336b7284c7984fb14f7da Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 May 2022 11:33:13 +0000 Subject: [PATCH 07/62] fix(deps): update dependency @snyk/protect to v1.919.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 54fee4dc8..487ec7823 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.918.0", + "@snyk/protect": "1.919.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -695,9 +695,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.918.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.918.0.tgz", - "integrity": "sha512-aDqQkypHQYtnSqe70NJ/J/wde42eCNdvOY5+z1MTptsYpss1SHjMwfk5DnGw1aTi/7tv70rHaek2rgcOyIxK3A==", + "version": "1.919.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.919.0.tgz", + "integrity": "sha512-sK7iZ9L0V2OOt4qOy4Gpu5mR1+EyEt6JALw/nZSIFxUV66d5r1GPoOnZ+/6a/n8KSM8Q46wUuxMKrhoNDbwGCw==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6864,9 +6864,9 @@ } }, "@snyk/protect": { - "version": "1.918.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.918.0.tgz", - "integrity": "sha512-aDqQkypHQYtnSqe70NJ/J/wde42eCNdvOY5+z1MTptsYpss1SHjMwfk5DnGw1aTi/7tv70rHaek2rgcOyIxK3A==" + "version": "1.919.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.919.0.tgz", + "integrity": "sha512-sK7iZ9L0V2OOt4qOy4Gpu5mR1+EyEt6JALw/nZSIFxUV66d5r1GPoOnZ+/6a/n8KSM8Q46wUuxMKrhoNDbwGCw==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 6b709f906..6c8dd9b3c 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.918.0", + "@snyk/protect": "1.919.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From b98e7942c82e08a4f46d566009a3c1e50aac5c6f Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 May 2022 19:12:12 +0000 Subject: [PATCH 08/62] fix(deps): update dependency @snyk/protect to v1.921.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 487ec7823..e92c597d8 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.919.0", + "@snyk/protect": "1.921.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -695,9 +695,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.919.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.919.0.tgz", - "integrity": "sha512-sK7iZ9L0V2OOt4qOy4Gpu5mR1+EyEt6JALw/nZSIFxUV66d5r1GPoOnZ+/6a/n8KSM8Q46wUuxMKrhoNDbwGCw==", + "version": "1.921.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.921.0.tgz", + "integrity": "sha512-GT0gbpkiepkCX+/R/yrDWh93I/ul4MriPD7AhMCQWGaFo458uQGk9cWMjmWR/oSGPpfk942UyankFwb4+kgfjw==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6864,9 +6864,9 @@ } }, "@snyk/protect": { - "version": "1.919.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.919.0.tgz", - "integrity": "sha512-sK7iZ9L0V2OOt4qOy4Gpu5mR1+EyEt6JALw/nZSIFxUV66d5r1GPoOnZ+/6a/n8KSM8Q46wUuxMKrhoNDbwGCw==" + "version": "1.921.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.921.0.tgz", + "integrity": "sha512-GT0gbpkiepkCX+/R/yrDWh93I/ul4MriPD7AhMCQWGaFo458uQGk9cWMjmWR/oSGPpfk942UyankFwb4+kgfjw==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 6c8dd9b3c..abbb067a7 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.919.0", + "@snyk/protect": "1.921.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 285934feee6fbd8382b890ea5a3e5f4480887285 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 May 2022 22:05:48 +0000 Subject: [PATCH 09/62] chore(deps): update docker/build-push-action action to v3 --- .github/workflows/nodejs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index bdaafad0d..3a5065760 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -175,7 +175,7 @@ jobs: password: ${{ secrets.DOCKER_PASSWORD }} - name: Build and push - uses: docker/build-push-action@ac9327eae2b366085ac7f6a2d02df8aa8ead720a # tag=v2.10.0 + uses: docker/build-push-action@e551b19e49efd4e98792db7592c17c09b89db8d8 # tag=v3.0.0 with: context: . push: true From c65f6a05e4dfaaf69eec18e3856e121e92fd07d6 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 May 2022 22:05:52 +0000 Subject: [PATCH 10/62] chore(deps): update docker/login-action action to v2 --- .github/workflows/nodejs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index bdaafad0d..669c1817f 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -169,7 +169,7 @@ jobs: uses: docker/setup-buildx-action@f211e3e9ded2d9377c8cadc4489a4e38014bc4c9 # tag=v1.7.0 - name: Login to DockerHub - uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # tag=v1.14.1 + uses: docker/login-action@49ed152c8eca782a232dede0303416e8f356c37b # tag=v2.0.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} From 5f2909aebf1cbe1f4de2c32a00f5e9e1fd1fe952 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 21 May 2022 03:38:29 +0000 Subject: [PATCH 11/62] chore(deps): update docker/metadata-action action to v4 --- .github/workflows/nodejs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 3a5065760..28802740d 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -149,7 +149,7 @@ jobs: - name: Docker meta id: meta - uses: docker/metadata-action@b2391d37b4157fa4aa2e118d643f417910ff3242 # tag=v3.8.0 + uses: docker/metadata-action@69f6fc9d46f2f8bf0d5491e4aabe0bb8c6a4678a # tag=v4.0.1 with: images: ${{ github.repository }} tags: | From 87c1cbdbb6342f68f68c84b17e1f18ecd901dc51 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 21 May 2022 03:38:33 +0000 Subject: [PATCH 12/62] chore(deps): update docker/setup-buildx-action action to v2 --- .github/workflows/nodejs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 3a5065760..7e923180d 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -166,7 +166,7 @@ jobs: uses: docker/setup-qemu-action@27d0a4f181a40b142cce983c5393082c365d1480 # tag=v1.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@f211e3e9ded2d9377c8cadc4489a4e38014bc4c9 # tag=v1.7.0 + uses: docker/setup-buildx-action@dc7b9719a96d48369863986a06765841d7ea23f6 # tag=v2.0.0 - name: Login to DockerHub uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # tag=v1.14.1 From 3682b944928d3d65ca1a8d911104f5ed3ba3c69a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 21 May 2022 03:38:37 +0000 Subject: [PATCH 13/62] chore(deps): update docker/setup-qemu-action action to v2 --- .github/workflows/nodejs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 3a5065760..fa85c2259 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -163,7 +163,7 @@ jobs: type=raw,value=latest - name: Set up QEMU - uses: docker/setup-qemu-action@27d0a4f181a40b142cce983c5393082c365d1480 # tag=v1.2.0 + uses: docker/setup-qemu-action@8b122486cedac8393e77aa9734c3528886e4a1a8 # tag=v2.0.0 - name: Set up Docker Buildx uses: docker/setup-buildx-action@f211e3e9ded2d9377c8cadc4489a4e38014bc4c9 # tag=v1.7.0 From 10d64fc3e0cd82264d4071d5fc5cc02fd7d47f04 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 21 May 2022 17:54:48 +0000 Subject: [PATCH 14/62] fix(deps): update dependency @snyk/protect to v1.922.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index e92c597d8..ef65745a6 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.921.0", + "@snyk/protect": "1.922.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -695,9 +695,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.921.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.921.0.tgz", - "integrity": "sha512-GT0gbpkiepkCX+/R/yrDWh93I/ul4MriPD7AhMCQWGaFo458uQGk9cWMjmWR/oSGPpfk942UyankFwb4+kgfjw==", + "version": "1.922.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.922.0.tgz", + "integrity": "sha512-DC6LJu3wfLW9T5LZou++HlIXIhQzIwFWJ7zA5iBIn0i5UQHzsIJU6r9msAhT7YE45WEeBidsNAQXbxolkGBxyg==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6864,9 +6864,9 @@ } }, "@snyk/protect": { - "version": "1.921.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.921.0.tgz", - "integrity": "sha512-GT0gbpkiepkCX+/R/yrDWh93I/ul4MriPD7AhMCQWGaFo458uQGk9cWMjmWR/oSGPpfk942UyankFwb4+kgfjw==" + "version": "1.922.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.922.0.tgz", + "integrity": "sha512-DC6LJu3wfLW9T5LZou++HlIXIhQzIwFWJ7zA5iBIn0i5UQHzsIJU6r9msAhT7YE45WEeBidsNAQXbxolkGBxyg==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index abbb067a7..6def74d29 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.921.0", + "@snyk/protect": "1.922.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From aac0108b3d4b2f09f1045621d4ff350ddf843857 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 21 May 2022 20:30:51 +0000 Subject: [PATCH 15/62] chore(deps): update dependency espree to v9.3.2 --- package-lock.json | 49 +++++++++++------------------------------------ package.json | 2 +- 2 files changed, 12 insertions(+), 39 deletions(-) diff --git a/package-lock.json b/package-lock.json index ef65745a6..6d8daec4d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -36,7 +36,7 @@ "eslint-plugin-import": "2.26.0", "eslint-plugin-jsx-a11y": "6.5.1", "eslint-plugin-react": "7.29.4", - "espree": "9.3.1", + "espree": "9.3.2", "mocha": "10.0.0", "npm-run-all": "4.1.5", "nyc": "15.1.0", @@ -483,20 +483,6 @@ "node": "^12.22.0 || ^14.17.0 || >=16.0.0" } }, - "node_modules/@eslint/eslintrc/node_modules/espree": { - "version": "9.3.2", - "resolved": "https://registry.npmjs.org/espree/-/espree-9.3.2.tgz", - "integrity": "sha512-D211tC7ZwouTIuY5x9XnS0E9sWNChB7IYKX/Xp5eQj3nFXhqmiUDB9q27y76oFl8jTg3pXcQx/bpxMfs3CIZbA==", - "dev": true, - "dependencies": { - "acorn": "^8.7.1", - "acorn-jsx": "^5.3.2", - "eslint-visitor-keys": "^3.3.0" - }, - "engines": { - "node": "^12.22.0 || ^14.17.0 || >=16.0.0" - } - }, "node_modules/@fastify/ajv-compiler": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/@fastify/ajv-compiler/-/ajv-compiler-1.1.0.tgz", @@ -2160,13 +2146,13 @@ } }, "node_modules/espree": { - "version": "9.3.1", - "resolved": "https://registry.npmjs.org/espree/-/espree-9.3.1.tgz", - "integrity": "sha512-bvdyLmJMfwkV3NCRl5ZhJf22zBFo1y8bYh3VYb+bfzqNB4Je68P2sSuXyuFquzWLebHpNd2/d5uv7yoP9ISnGQ==", + "version": "9.3.2", + "resolved": "https://registry.npmjs.org/espree/-/espree-9.3.2.tgz", + "integrity": "sha512-D211tC7ZwouTIuY5x9XnS0E9sWNChB7IYKX/Xp5eQj3nFXhqmiUDB9q27y76oFl8jTg3pXcQx/bpxMfs3CIZbA==", "dev": true, "dependencies": { - "acorn": "^8.7.0", - "acorn-jsx": "^5.3.1", + "acorn": "^8.7.1", + "acorn-jsx": "^5.3.2", "eslint-visitor-keys": "^3.3.0" }, "engines": { @@ -6685,19 +6671,6 @@ "js-yaml": "^4.1.0", "minimatch": "^3.1.2", "strip-json-comments": "^3.1.1" - }, - "dependencies": { - "espree": { - "version": "9.3.2", - "resolved": "https://registry.npmjs.org/espree/-/espree-9.3.2.tgz", - "integrity": "sha512-D211tC7ZwouTIuY5x9XnS0E9sWNChB7IYKX/Xp5eQj3nFXhqmiUDB9q27y76oFl8jTg3pXcQx/bpxMfs3CIZbA==", - "dev": true, - "requires": { - "acorn": "^8.7.1", - "acorn-jsx": "^5.3.2", - "eslint-visitor-keys": "^3.3.0" - } - } } }, "@fastify/ajv-compiler": { @@ -8020,13 +7993,13 @@ "dev": true }, "espree": { - "version": "9.3.1", - "resolved": "https://registry.npmjs.org/espree/-/espree-9.3.1.tgz", - "integrity": "sha512-bvdyLmJMfwkV3NCRl5ZhJf22zBFo1y8bYh3VYb+bfzqNB4Je68P2sSuXyuFquzWLebHpNd2/d5uv7yoP9ISnGQ==", + "version": "9.3.2", + "resolved": "https://registry.npmjs.org/espree/-/espree-9.3.2.tgz", + "integrity": "sha512-D211tC7ZwouTIuY5x9XnS0E9sWNChB7IYKX/Xp5eQj3nFXhqmiUDB9q27y76oFl8jTg3pXcQx/bpxMfs3CIZbA==", "dev": true, "requires": { - "acorn": "^8.7.0", - "acorn-jsx": "^5.3.1", + "acorn": "^8.7.1", + "acorn-jsx": "^5.3.2", "eslint-visitor-keys": "^3.3.0" } }, diff --git a/package.json b/package.json index 6def74d29..4f5da0d53 100644 --- a/package.json +++ b/package.json @@ -68,7 +68,7 @@ "eslint-plugin-import": "2.26.0", "eslint-plugin-jsx-a11y": "6.5.1", "eslint-plugin-react": "7.29.4", - "espree": "9.3.1", + "espree": "9.3.2", "mocha": "10.0.0", "npm-run-all": "4.1.5", "nyc": "15.1.0", From 14bba27c2d31b61ccf67890b2718db889e66191b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 21 May 2022 22:53:53 +0000 Subject: [PATCH 16/62] chore(deps): update dependency eslint to v8.15.0 --- package-lock.json | 26 +++++++++++++------------- package.json | 2 +- 2 files changed, 14 insertions(+), 14 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6d8daec4d..50eb3ddf3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -31,7 +31,7 @@ "chai": "4.3.6", "chai-as-promised": "7.1.1", "chai-http": "4.3.0", - "eslint": "8.14.0", + "eslint": "8.15.0", "eslint-config-airbnb": "19.0.4", "eslint-plugin-import": "2.26.0", "eslint-plugin-jsx-a11y": "6.5.1", @@ -1818,12 +1818,12 @@ } }, "node_modules/eslint": { - "version": "8.14.0", - "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.14.0.tgz", - "integrity": "sha512-3/CE4aJX7LNEiE3i6FeodHmI/38GZtWCsAtsymScmzYapx8q1nVVb+eLcLSzATmCPXw5pT4TqVs1E0OmxAd9tw==", + "version": "8.15.0", + "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.15.0.tgz", + "integrity": "sha512-GG5USZ1jhCu8HJkzGgeK8/+RGnHaNYZGrGDzUtigK3BsGESW/rs2az23XqE0WVwDxy1VRvvjSSGu5nB0Bu+6SA==", "dev": true, "dependencies": { - "@eslint/eslintrc": "^1.2.2", + "@eslint/eslintrc": "^1.2.3", "@humanwhocodes/config-array": "^0.9.2", "ajv": "^6.10.0", "chalk": "^4.0.0", @@ -1834,7 +1834,7 @@ "eslint-scope": "^7.1.1", "eslint-utils": "^3.0.0", "eslint-visitor-keys": "^3.3.0", - "espree": "^9.3.1", + "espree": "^9.3.2", "esquery": "^1.4.0", "esutils": "^2.0.2", "fast-deep-equal": "^3.1.3", @@ -1850,7 +1850,7 @@ "json-stable-stringify-without-jsonify": "^1.0.1", "levn": "^0.4.1", "lodash.merge": "^4.6.2", - "minimatch": "^3.0.4", + "minimatch": "^3.1.2", "natural-compare": "^1.4.0", "optionator": "^0.9.1", "regexpp": "^3.2.0", @@ -7734,12 +7734,12 @@ "dev": true }, "eslint": { - "version": "8.14.0", - "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.14.0.tgz", - "integrity": "sha512-3/CE4aJX7LNEiE3i6FeodHmI/38GZtWCsAtsymScmzYapx8q1nVVb+eLcLSzATmCPXw5pT4TqVs1E0OmxAd9tw==", + "version": "8.15.0", + "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.15.0.tgz", + "integrity": "sha512-GG5USZ1jhCu8HJkzGgeK8/+RGnHaNYZGrGDzUtigK3BsGESW/rs2az23XqE0WVwDxy1VRvvjSSGu5nB0Bu+6SA==", "dev": true, "requires": { - "@eslint/eslintrc": "^1.2.2", + "@eslint/eslintrc": "^1.2.3", "@humanwhocodes/config-array": "^0.9.2", "ajv": "^6.10.0", "chalk": "^4.0.0", @@ -7750,7 +7750,7 @@ "eslint-scope": "^7.1.1", "eslint-utils": "^3.0.0", "eslint-visitor-keys": "^3.3.0", - "espree": "^9.3.1", + "espree": "^9.3.2", "esquery": "^1.4.0", "esutils": "^2.0.2", "fast-deep-equal": "^3.1.3", @@ -7766,7 +7766,7 @@ "json-stable-stringify-without-jsonify": "^1.0.1", "levn": "^0.4.1", "lodash.merge": "^4.6.2", - "minimatch": "^3.0.4", + "minimatch": "^3.1.2", "natural-compare": "^1.4.0", "optionator": "^0.9.1", "regexpp": "^3.2.0", diff --git a/package.json b/package.json index 4f5da0d53..0c8b141be 100644 --- a/package.json +++ b/package.json @@ -63,7 +63,7 @@ "chai": "4.3.6", "chai-as-promised": "7.1.1", "chai-http": "4.3.0", - "eslint": "8.14.0", + "eslint": "8.15.0", "eslint-config-airbnb": "19.0.4", "eslint-plugin-import": "2.26.0", "eslint-plugin-jsx-a11y": "6.5.1", From ff098c28fdece8282c80e1f3fd93b46214266731 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 24 May 2022 01:34:46 +0000 Subject: [PATCH 17/62] chore(deps): update mongo digest to 50d8918 --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index a8584a7e1..a8284d86c 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -17,7 +17,7 @@ services: - mongo mongo: container_name: mongo - image: mongo@sha256:82a55eb6d60997007ff390087d4e064218d477e9611a7becd78664a2ab490eff + image: mongo@sha256:50d8918de7b076feceb9ba1ee264afd5f67fb4baaff07949f3b9de92cdca79c2 volumes: - ./data:/data/db ports: From 343b91a154396911074e8610abff1666d74f6a20 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 24 May 2022 15:43:52 +0000 Subject: [PATCH 18/62] fix(deps): update dependency @snyk/protect to v1.924.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 50eb3ddf3..9c0dc8f7c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.922.0", + "@snyk/protect": "1.924.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.922.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.922.0.tgz", - "integrity": "sha512-DC6LJu3wfLW9T5LZou++HlIXIhQzIwFWJ7zA5iBIn0i5UQHzsIJU6r9msAhT7YE45WEeBidsNAQXbxolkGBxyg==", + "version": "1.924.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.924.0.tgz", + "integrity": "sha512-Eez00DuA2uGOvvzDf/k+fcRJbQvdhtK+jSXWBJt/eusUqO/VPnidIIktSuSISMB7oGkD65qI0+fBJv/FW9ncUw==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.922.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.922.0.tgz", - "integrity": "sha512-DC6LJu3wfLW9T5LZou++HlIXIhQzIwFWJ7zA5iBIn0i5UQHzsIJU6r9msAhT7YE45WEeBidsNAQXbxolkGBxyg==" + "version": "1.924.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.924.0.tgz", + "integrity": "sha512-Eez00DuA2uGOvvzDf/k+fcRJbQvdhtK+jSXWBJt/eusUqO/VPnidIIktSuSISMB7oGkD65qI0+fBJv/FW9ncUw==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 0c8b141be..81d6115b1 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.922.0", + "@snyk/protect": "1.924.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 537ef49636f21409596b0911a6ec9c3b35ee0a04 Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Wed, 25 May 2022 10:50:27 +0200 Subject: [PATCH 19/62] chore(cicd): add the Harden Runner GitHub Action (audit) --- .github/workflows/code-review.yml | 10 +++++++++ .github/workflows/codeql-analysis.yml | 5 +++++ .github/workflows/nodejs.yml | 30 +++++++++++++++++++++++++++ 3 files changed, 45 insertions(+) diff --git a/.github/workflows/code-review.yml b/.github/workflows/code-review.yml index baf3f577a..d3327e148 100644 --- a/.github/workflows/code-review.yml +++ b/.github/workflows/code-review.yml @@ -10,6 +10,11 @@ jobs: runs-on: ubuntu-latest steps: + - name: Harden GitHub Actions Runner + uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + with: + egress-policy: audit + - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 @@ -24,6 +29,11 @@ jobs: runs-on: ubuntu-latest steps: + - name: Harden GitHub Actions Runner + uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + with: + egress-policy: audit + - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index a92e675c5..b6a0f310d 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -31,6 +31,11 @@ jobs: contents: read steps: + - name: Harden GitHub Actions Runner + uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + with: + egress-policy: audit + - name: Checkout repository uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index b6336c780..0ceb34d04 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -15,6 +15,11 @@ jobs: mongodb: ['5.0'] steps: + - name: Harden GitHub Actions Runner + uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + with: + egress-policy: audit + - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 @@ -49,6 +54,11 @@ jobs: needs: tests steps: + - name: Harden GitHub Actions Runner + uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + with: + egress-policy: audit + - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 @@ -72,6 +82,11 @@ jobs: # needs: tests # steps: + # - name: Harden GitHub Actions Runner + # uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + # with: + # egress-policy: audit + # - name: Checkout # uses: actions/checkout@v2 @@ -102,6 +117,11 @@ jobs: if: (github.actor != 'dependabot[bot]') steps: + - name: Harden GitHub Actions Runner + uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + with: + egress-policy: audit + - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 @@ -128,6 +148,11 @@ jobs: if: github.ref == 'refs/heads/master' steps: + - name: Harden GitHub Actions Runner + uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + with: + egress-policy: audit + - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 @@ -144,6 +169,11 @@ jobs: if: github.ref == 'refs/heads/master' steps: + - name: Harden GitHub Actions Runner + uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + with: + egress-policy: audit + - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 From b7cdb3c5949c4ce00ff2932770b68a328c319df8 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 25 May 2022 11:56:37 +0000 Subject: [PATCH 20/62] chore(deps): update step-security/harden-runner digest to dd5681a --- .github/workflows/code-review.yml | 4 ++-- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/nodejs.yml | 10 +++++----- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/code-review.yml b/.github/workflows/code-review.yml index d3327e148..8d7966574 100644 --- a/.github/workflows/code-review.yml +++ b/.github/workflows/code-review.yml @@ -11,7 +11,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: egress-policy: audit @@ -30,7 +30,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: egress-policy: audit diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index b6a0f310d..b4a75b80e 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -32,7 +32,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: egress-policy: audit diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 0ceb34d04..20ffc53d2 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -16,7 +16,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: egress-policy: audit @@ -55,7 +55,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: egress-policy: audit @@ -118,7 +118,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: egress-policy: audit @@ -149,7 +149,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: egress-policy: audit @@ -170,7 +170,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 + uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: egress-policy: audit From 43a35c364583d530b95a68c3a842b45ecef0e30e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 25 May 2022 14:28:43 +0000 Subject: [PATCH 21/62] fix(deps): update dependency @snyk/protect to v1.925.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9c0dc8f7c..e306d2f79 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.924.0", + "@snyk/protect": "1.925.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.924.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.924.0.tgz", - "integrity": "sha512-Eez00DuA2uGOvvzDf/k+fcRJbQvdhtK+jSXWBJt/eusUqO/VPnidIIktSuSISMB7oGkD65qI0+fBJv/FW9ncUw==", + "version": "1.925.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.925.0.tgz", + "integrity": "sha512-2a/FZKQ8S629z4Ildd4ASdhm4iH2vH+2xK0kphs87QQFmjrqhNJwNsnoEip5z+fe6eTYmXbKtH/IpLrgCKi7eA==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.924.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.924.0.tgz", - "integrity": "sha512-Eez00DuA2uGOvvzDf/k+fcRJbQvdhtK+jSXWBJt/eusUqO/VPnidIIktSuSISMB7oGkD65qI0+fBJv/FW9ncUw==" + "version": "1.925.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.925.0.tgz", + "integrity": "sha512-2a/FZKQ8S629z4Ildd4ASdhm4iH2vH+2xK0kphs87QQFmjrqhNJwNsnoEip5z+fe6eTYmXbKtH/IpLrgCKi7eA==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 81d6115b1..0313a01fd 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.924.0", + "@snyk/protect": "1.925.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 3a397cd7cbe87e64c331086c40cd38855c5db9ef Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 25 May 2022 17:47:22 +0000 Subject: [PATCH 22/62] fix(deps): update dependency @fastify/helmet to v8.0.1 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index e306d2f79..48e540359 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14,7 +14,7 @@ "darwin" ], "dependencies": { - "@fastify/helmet": "8.0.0", + "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", "@snyk/protect": "1.925.0", "fastify": "3.29.0", @@ -497,9 +497,9 @@ "integrity": "sha512-wI3fpfDT0t7p8E6dA2eTECzzOd+bZsZCJ2Hcv+Onn2b7ZwK3RwD27uW2QDaMtQhAfWQQP+WNK7nKf0twLsBf9w==" }, "node_modules/@fastify/helmet": { - "version": "8.0.0", - "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-8.0.0.tgz", - "integrity": "sha512-ZH44iLUmXNfYDyfHDbTTbewKrrGG/SBAkgju5RiIYVbOfyKfXGzxq1Om9RyXTSn5fKvNT//Ew71dPdiKg0fjoQ==", + "version": "8.0.1", + "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-8.0.1.tgz", + "integrity": "sha512-bHGcbHofY6i1w/Gh7ll2yFZygeaakSn230w4NB6s135yE5n5h5nE7+UjlQAMAt7GRslaW3/3e3u58pKHCtsH7g==", "dependencies": { "fastify-plugin": "^3.0.0", "helmet": "^5.0.1" @@ -6687,9 +6687,9 @@ "integrity": "sha512-wI3fpfDT0t7p8E6dA2eTECzzOd+bZsZCJ2Hcv+Onn2b7ZwK3RwD27uW2QDaMtQhAfWQQP+WNK7nKf0twLsBf9w==" }, "@fastify/helmet": { - "version": "8.0.0", - "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-8.0.0.tgz", - "integrity": "sha512-ZH44iLUmXNfYDyfHDbTTbewKrrGG/SBAkgju5RiIYVbOfyKfXGzxq1Om9RyXTSn5fKvNT//Ew71dPdiKg0fjoQ==", + "version": "8.0.1", + "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-8.0.1.tgz", + "integrity": "sha512-bHGcbHofY6i1w/Gh7ll2yFZygeaakSn230w4NB6s135yE5n5h5nE7+UjlQAMAt7GRslaW3/3e3u58pKHCtsH7g==", "requires": { "fastify-plugin": "^3.0.0", "helmet": "^5.0.1" diff --git a/package.json b/package.json index 0313a01fd..8b27e2ce3 100644 --- a/package.json +++ b/package.json @@ -37,7 +37,7 @@ }, "homepage": "https://github.com/timoa/nodejs-encryption-api-example#readme", "dependencies": { - "@fastify/helmet": "8.0.0", + "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", "@snyk/protect": "1.925.0", "fastify": "3.29.0", From 6c7c9af3dad957b93849cf526d24f1b2737b0f03 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 26 May 2022 14:46:10 +0000 Subject: [PATCH 23/62] fix(deps): update dependency @snyk/protect to v1.927.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 48e540359..65db83976 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.925.0", + "@snyk/protect": "1.927.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.925.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.925.0.tgz", - "integrity": "sha512-2a/FZKQ8S629z4Ildd4ASdhm4iH2vH+2xK0kphs87QQFmjrqhNJwNsnoEip5z+fe6eTYmXbKtH/IpLrgCKi7eA==", + "version": "1.927.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.927.0.tgz", + "integrity": "sha512-Z9gxBRe7g0yxr62P20hF9FqCxyTSJ36lIaKbIf2I4vMcXj6T/OoYHCbFHmSNvj3k4kjP7KG99M0Ik0oDXy9yXw==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.925.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.925.0.tgz", - "integrity": "sha512-2a/FZKQ8S629z4Ildd4ASdhm4iH2vH+2xK0kphs87QQFmjrqhNJwNsnoEip5z+fe6eTYmXbKtH/IpLrgCKi7eA==" + "version": "1.927.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.927.0.tgz", + "integrity": "sha512-Z9gxBRe7g0yxr62P20hF9FqCxyTSJ36lIaKbIf2I4vMcXj6T/OoYHCbFHmSNvj3k4kjP7KG99M0Ik0oDXy9yXw==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 8b27e2ce3..42c8322cd 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.925.0", + "@snyk/protect": "1.927.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From eed31d8136277b024f79d144430096cdfc0a2147 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 27 May 2022 13:51:34 +0000 Subject: [PATCH 24/62] fix(deps): update dependency @snyk/protect to v1.928.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 65db83976..356fa3b58 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.927.0", + "@snyk/protect": "1.928.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.927.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.927.0.tgz", - "integrity": "sha512-Z9gxBRe7g0yxr62P20hF9FqCxyTSJ36lIaKbIf2I4vMcXj6T/OoYHCbFHmSNvj3k4kjP7KG99M0Ik0oDXy9yXw==", + "version": "1.928.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.928.0.tgz", + "integrity": "sha512-NDiZnVl7b8V7NnVchB0+GTcxrZngb3GcVb/bsq2orbOdsgZmTSaoqCJF2CrMwCVBTDYiW5aNkADSGf6RTmvFTw==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.927.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.927.0.tgz", - "integrity": "sha512-Z9gxBRe7g0yxr62P20hF9FqCxyTSJ36lIaKbIf2I4vMcXj6T/OoYHCbFHmSNvj3k4kjP7KG99M0Ik0oDXy9yXw==" + "version": "1.928.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.928.0.tgz", + "integrity": "sha512-NDiZnVl7b8V7NnVchB0+GTcxrZngb3GcVb/bsq2orbOdsgZmTSaoqCJF2CrMwCVBTDYiW5aNkADSGf6RTmvFTw==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 42c8322cd..8b72deea8 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.927.0", + "@snyk/protect": "1.928.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 4776543adcf17a42a3328072794e831cfa9d3448 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 28 May 2022 10:59:55 +0000 Subject: [PATCH 25/62] fix(deps): update dependency @snyk/protect to v1.929.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 356fa3b58..d4f583650 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.928.0", + "@snyk/protect": "1.929.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.928.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.928.0.tgz", - "integrity": "sha512-NDiZnVl7b8V7NnVchB0+GTcxrZngb3GcVb/bsq2orbOdsgZmTSaoqCJF2CrMwCVBTDYiW5aNkADSGf6RTmvFTw==", + "version": "1.929.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.929.0.tgz", + "integrity": "sha512-0vlxaVpa2+LpT323GtZPRy603dwGPZ5/WdP+dVR63jwFdMSpruEG/pr+Ke/UWJenMXDnqzd6f/ZIi3jWktBsYQ==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.928.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.928.0.tgz", - "integrity": "sha512-NDiZnVl7b8V7NnVchB0+GTcxrZngb3GcVb/bsq2orbOdsgZmTSaoqCJF2CrMwCVBTDYiW5aNkADSGf6RTmvFTw==" + "version": "1.929.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.929.0.tgz", + "integrity": "sha512-0vlxaVpa2+LpT323GtZPRy603dwGPZ5/WdP+dVR63jwFdMSpruEG/pr+Ke/UWJenMXDnqzd6f/ZIi3jWktBsYQ==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 8b72deea8..a1c97ca68 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.928.0", + "@snyk/protect": "1.929.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 8a7e37d1f13fd3262fda4caccee4dfc61d608778 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 28 May 2022 17:54:09 +0000 Subject: [PATCH 26/62] fix(deps): update dependency @snyk/protect to v1.931.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index d4f583650..70e4c5699 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.929.0", + "@snyk/protect": "1.931.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.929.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.929.0.tgz", - "integrity": "sha512-0vlxaVpa2+LpT323GtZPRy603dwGPZ5/WdP+dVR63jwFdMSpruEG/pr+Ke/UWJenMXDnqzd6f/ZIi3jWktBsYQ==", + "version": "1.931.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.931.0.tgz", + "integrity": "sha512-FNgtMWsAbQGpmAw8UX+HOfLcGupXEGDDKWYMQRlgZYy+DIPHb4WUYw6unt1bJCupMC/FS2rXVqqRgCMhoVgcfA==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.929.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.929.0.tgz", - "integrity": "sha512-0vlxaVpa2+LpT323GtZPRy603dwGPZ5/WdP+dVR63jwFdMSpruEG/pr+Ke/UWJenMXDnqzd6f/ZIi3jWktBsYQ==" + "version": "1.931.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.931.0.tgz", + "integrity": "sha512-FNgtMWsAbQGpmAw8UX+HOfLcGupXEGDDKWYMQRlgZYy+DIPHb4WUYw6unt1bJCupMC/FS2rXVqqRgCMhoVgcfA==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index a1c97ca68..36cac7adf 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.929.0", + "@snyk/protect": "1.931.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 38771ade46410da15e905c7b551a52e40d9fe788 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 31 May 2022 12:22:32 +0000 Subject: [PATCH 27/62] chore(deps): update actions/setup-node action to v3.2.0 --- .github/workflows/nodejs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 20ffc53d2..293db3c48 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -24,7 +24,7 @@ jobs: uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: Setup Node.js ${{ matrix.node }} - uses: actions/setup-node@56337c425554a6be30cdef71bf441f15be286854 # tag=v3.1.1 + uses: actions/setup-node@17f8bd926464a1afa4c6a11669539e9c1ba77048 # tag=v3.2.0 with: node-version: ${{ matrix.node }} check-latest: true From 099574c1cdd74c0e262626fd66817d536d838645 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 1 Jun 2022 19:00:22 +0000 Subject: [PATCH 28/62] chore(deps): update github/codeql-action action to v2.1.12 --- .github/workflows/codeql-analysis.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index b4a75b80e..2e73e08c2 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -41,7 +41,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@a3a6c128d771b6b9bdebb1c9d0583ebd2728a108 # tag=v2.1.11 + uses: github/codeql-action/init@27ea8f8fe5977c00f5b37e076ab846c5bd783b96 # tag=v2.1.12 # Override language selection by uncommenting this and choosing your languages # with: # languages: go, javascript, csharp, python, cpp, java @@ -49,7 +49,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below). - name: Autobuild - uses: github/codeql-action/autobuild@a3a6c128d771b6b9bdebb1c9d0583ebd2728a108 # tag=v2.1.11 + uses: github/codeql-action/autobuild@27ea8f8fe5977c00f5b37e076ab846c5bd783b96 # tag=v2.1.12 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -63,4 +63,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@a3a6c128d771b6b9bdebb1c9d0583ebd2728a108 # tag=v2.1.11 + uses: github/codeql-action/analyze@27ea8f8fe5977c00f5b37e076ab846c5bd783b96 # tag=v2.1.12 From 4706f3c25200f464f1632eb093f3d7cdf50454ca Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 2 Jun 2022 20:27:30 +0000 Subject: [PATCH 29/62] chore(deps): update mongo digest to d8f4897 --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index a8284d86c..0d3111619 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -17,7 +17,7 @@ services: - mongo mongo: container_name: mongo - image: mongo@sha256:50d8918de7b076feceb9ba1ee264afd5f67fb4baaff07949f3b9de92cdca79c2 + image: mongo@sha256:d8f48972427a3d62bbb7e953bd5afb609ab6e9b69f347c01c7cfda133cf15b9c volumes: - ./data:/data/db ports: From 58297fc2dcc739cbcb74ba7fa717142c4a471310 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 2 Jun 2022 23:28:54 +0000 Subject: [PATCH 30/62] chore(deps): update dependency eslint-plugin-react to v7.30.0 --- package-lock.json | 70 +++++++++++++++++++++++------------------------ package.json | 2 +- 2 files changed, 36 insertions(+), 36 deletions(-) diff --git a/package-lock.json b/package-lock.json index 70e4c5699..a2638d9c4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -35,7 +35,7 @@ "eslint-config-airbnb": "19.0.4", "eslint-plugin-import": "2.26.0", "eslint-plugin-jsx-a11y": "6.5.1", - "eslint-plugin-react": "7.29.4", + "eslint-plugin-react": "7.30.0", "espree": "9.3.2", "mocha": "10.0.0", "npm-run-all": "4.1.5", @@ -883,14 +883,14 @@ } }, "node_modules/array-includes": { - "version": "3.1.4", - "resolved": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.4.tgz", - "integrity": "sha512-ZTNSQkmWumEbiHO2GF4GmWxYVTiQyJy2XOTa15sdQSrvKn7l+180egQMqlrMOUMCyLMD7pmyQe4mMDUT6Behrw==", + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.5.tgz", + "integrity": "sha512-iSDYZMMyTPkiFasVqfuAQnWAYcvO/SeBSCGKePoEthjp4LEMTe4uLc7b025o4jAZpHhihh8xPo99TNWUWWkGDQ==", "dev": true, "dependencies": { "call-bind": "^1.0.2", - "define-properties": "^1.1.3", - "es-abstract": "^1.19.1", + "define-properties": "^1.1.4", + "es-abstract": "^1.19.5", "get-intrinsic": "^1.1.1", "is-string": "^1.0.7" }, @@ -2031,25 +2031,25 @@ } }, "node_modules/eslint-plugin-react": { - "version": "7.29.4", - "resolved": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.29.4.tgz", - "integrity": "sha512-CVCXajliVh509PcZYRFyu/BoUEz452+jtQJq2b3Bae4v3xBUWPLCmtmBM+ZinG4MzwmxJgJ2M5rMqhqLVn7MtQ==", + "version": "7.30.0", + "resolved": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.30.0.tgz", + "integrity": "sha512-RgwH7hjW48BleKsYyHK5vUAvxtE9SMPDKmcPRQgtRCYaZA0XQPt5FSkrU3nhz5ifzMZcA8opwmRJ2cmOO8tr5A==", "dev": true, "dependencies": { - "array-includes": "^3.1.4", - "array.prototype.flatmap": "^1.2.5", + "array-includes": "^3.1.5", + "array.prototype.flatmap": "^1.3.0", "doctrine": "^2.1.0", "estraverse": "^5.3.0", "jsx-ast-utils": "^2.4.1 || ^3.0.0", "minimatch": "^3.1.2", "object.entries": "^1.1.5", "object.fromentries": "^2.0.5", - "object.hasown": "^1.1.0", + "object.hasown": "^1.1.1", "object.values": "^1.1.5", "prop-types": "^15.8.1", "resolve": "^2.0.0-next.3", "semver": "^6.3.0", - "string.prototype.matchall": "^4.0.6" + "string.prototype.matchall": "^4.0.7" }, "engines": { "node": ">=4" @@ -4576,13 +4576,13 @@ } }, "node_modules/object.hasown": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/object.hasown/-/object.hasown-1.1.0.tgz", - "integrity": "sha512-MhjYRfj3GBlhSkDHo6QmvgjRLXQ2zndabdf3nX0yTyZK9rPfxb6uRpAac8HXNLy1GpqWtZ81Qh4v3uOls2sRAg==", + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/object.hasown/-/object.hasown-1.1.1.tgz", + "integrity": "sha512-LYLe4tivNQzq4JdaWW6WO3HMZZJWzkkH8fnI6EebWl0VZth2wL2Lovm74ep2/gZzlaTdV62JZHEqHQ2yVn8Q/A==", "dev": true, "dependencies": { - "define-properties": "^1.1.3", - "es-abstract": "^1.19.1" + "define-properties": "^1.1.4", + "es-abstract": "^1.19.5" }, "funding": { "url": "https://github.com/sponsors/ljharb" @@ -6997,14 +6997,14 @@ } }, "array-includes": { - "version": "3.1.4", - "resolved": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.4.tgz", - "integrity": "sha512-ZTNSQkmWumEbiHO2GF4GmWxYVTiQyJy2XOTa15sdQSrvKn7l+180egQMqlrMOUMCyLMD7pmyQe4mMDUT6Behrw==", + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.5.tgz", + "integrity": "sha512-iSDYZMMyTPkiFasVqfuAQnWAYcvO/SeBSCGKePoEthjp4LEMTe4uLc7b025o4jAZpHhihh8xPo99TNWUWWkGDQ==", "dev": true, "requires": { "call-bind": "^1.0.2", - "define-properties": "^1.1.3", - "es-abstract": "^1.19.1", + "define-properties": "^1.1.4", + "es-abstract": "^1.19.5", "get-intrinsic": "^1.1.1", "is-string": "^1.0.7" } @@ -7909,25 +7909,25 @@ } }, "eslint-plugin-react": { - "version": "7.29.4", - "resolved": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.29.4.tgz", - "integrity": "sha512-CVCXajliVh509PcZYRFyu/BoUEz452+jtQJq2b3Bae4v3xBUWPLCmtmBM+ZinG4MzwmxJgJ2M5rMqhqLVn7MtQ==", + "version": "7.30.0", + "resolved": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.30.0.tgz", + "integrity": "sha512-RgwH7hjW48BleKsYyHK5vUAvxtE9SMPDKmcPRQgtRCYaZA0XQPt5FSkrU3nhz5ifzMZcA8opwmRJ2cmOO8tr5A==", "dev": true, "requires": { - "array-includes": "^3.1.4", - "array.prototype.flatmap": "^1.2.5", + "array-includes": "^3.1.5", + "array.prototype.flatmap": "^1.3.0", "doctrine": "^2.1.0", "estraverse": "^5.3.0", "jsx-ast-utils": "^2.4.1 || ^3.0.0", "minimatch": "^3.1.2", "object.entries": "^1.1.5", "object.fromentries": "^2.0.5", - "object.hasown": "^1.1.0", + "object.hasown": "^1.1.1", "object.values": "^1.1.5", "prop-types": "^15.8.1", "resolve": "^2.0.0-next.3", "semver": "^6.3.0", - "string.prototype.matchall": "^4.0.6" + "string.prototype.matchall": "^4.0.7" }, "dependencies": { "doctrine": { @@ -9817,13 +9817,13 @@ } }, "object.hasown": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/object.hasown/-/object.hasown-1.1.0.tgz", - "integrity": "sha512-MhjYRfj3GBlhSkDHo6QmvgjRLXQ2zndabdf3nX0yTyZK9rPfxb6uRpAac8HXNLy1GpqWtZ81Qh4v3uOls2sRAg==", + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/object.hasown/-/object.hasown-1.1.1.tgz", + "integrity": "sha512-LYLe4tivNQzq4JdaWW6WO3HMZZJWzkkH8fnI6EebWl0VZth2wL2Lovm74ep2/gZzlaTdV62JZHEqHQ2yVn8Q/A==", "dev": true, "requires": { - "define-properties": "^1.1.3", - "es-abstract": "^1.19.1" + "define-properties": "^1.1.4", + "es-abstract": "^1.19.5" } }, "object.values": { diff --git a/package.json b/package.json index 36cac7adf..866eb941e 100644 --- a/package.json +++ b/package.json @@ -67,7 +67,7 @@ "eslint-config-airbnb": "19.0.4", "eslint-plugin-import": "2.26.0", "eslint-plugin-jsx-a11y": "6.5.1", - "eslint-plugin-react": "7.29.4", + "eslint-plugin-react": "7.30.0", "espree": "9.3.2", "mocha": "10.0.0", "npm-run-all": "4.1.5", From 7879982e52c6ea81e20cde55783edb6a3a1c46cb Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 3 Jun 2022 02:09:53 +0000 Subject: [PATCH 31/62] fix(deps): update dependency @snyk/protect to v1.932.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index a2638d9c4..11e83c1f1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.931.0", + "@snyk/protect": "1.932.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.931.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.931.0.tgz", - "integrity": "sha512-FNgtMWsAbQGpmAw8UX+HOfLcGupXEGDDKWYMQRlgZYy+DIPHb4WUYw6unt1bJCupMC/FS2rXVqqRgCMhoVgcfA==", + "version": "1.932.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.932.0.tgz", + "integrity": "sha512-fDU/soZ/o5ykQtaoZNh7qdPolDKL94nVxmmO66Wf0Emu1y9J+kAw98VAacaf8/gKtZc7HtzwsFW5K9SBqm/qcg==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.931.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.931.0.tgz", - "integrity": "sha512-FNgtMWsAbQGpmAw8UX+HOfLcGupXEGDDKWYMQRlgZYy+DIPHb4WUYw6unt1bJCupMC/FS2rXVqqRgCMhoVgcfA==" + "version": "1.932.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.932.0.tgz", + "integrity": "sha512-fDU/soZ/o5ykQtaoZNh7qdPolDKL94nVxmmO66Wf0Emu1y9J+kAw98VAacaf8/gKtZc7HtzwsFW5K9SBqm/qcg==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 866eb941e..de07b63f1 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.931.0", + "@snyk/protect": "1.932.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 3c4b86d63e04ee040b266d2c1cfd185fe759c36a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 3 Jun 2022 11:04:53 +0000 Subject: [PATCH 32/62] fix(deps): update dependency @snyk/protect to v1.933.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 11e83c1f1..267d40d04 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.932.0", + "@snyk/protect": "1.933.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.932.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.932.0.tgz", - "integrity": "sha512-fDU/soZ/o5ykQtaoZNh7qdPolDKL94nVxmmO66Wf0Emu1y9J+kAw98VAacaf8/gKtZc7HtzwsFW5K9SBqm/qcg==", + "version": "1.933.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.933.0.tgz", + "integrity": "sha512-pfCkt9rf+9M2nqaH4d7kZHBDEchL8dWt5xPL9uRbv/UKE2xH58S3+TUyFO06v6jQLma67yc1yJnrm7sUs9e/nQ==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.932.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.932.0.tgz", - "integrity": "sha512-fDU/soZ/o5ykQtaoZNh7qdPolDKL94nVxmmO66Wf0Emu1y9J+kAw98VAacaf8/gKtZc7HtzwsFW5K9SBqm/qcg==" + "version": "1.933.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.933.0.tgz", + "integrity": "sha512-pfCkt9rf+9M2nqaH4d7kZHBDEchL8dWt5xPL9uRbv/UKE2xH58S3+TUyFO06v6jQLma67yc1yJnrm7sUs9e/nQ==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index de07b63f1..c7fa8a4d4 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.932.0", + "@snyk/protect": "1.933.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From a4e81d0a1dd674fc051311ba6de3c1581a7e1b35 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 3 Jun 2022 15:50:44 +0000 Subject: [PATCH 33/62] fix(deps): update dependency @snyk/protect to v1.934.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 267d40d04..d3b79f531 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.933.0", + "@snyk/protect": "1.934.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.933.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.933.0.tgz", - "integrity": "sha512-pfCkt9rf+9M2nqaH4d7kZHBDEchL8dWt5xPL9uRbv/UKE2xH58S3+TUyFO06v6jQLma67yc1yJnrm7sUs9e/nQ==", + "version": "1.934.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.934.0.tgz", + "integrity": "sha512-GnD1b8XayWgRMgVxxP7Kh4g8NW9mPJpEOsY/lm4jtq4AT/gktwSAHZ1nvsvkEGCgL6OdrMRF0Z0gU4wkWiGzag==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.933.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.933.0.tgz", - "integrity": "sha512-pfCkt9rf+9M2nqaH4d7kZHBDEchL8dWt5xPL9uRbv/UKE2xH58S3+TUyFO06v6jQLma67yc1yJnrm7sUs9e/nQ==" + "version": "1.934.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.934.0.tgz", + "integrity": "sha512-GnD1b8XayWgRMgVxxP7Kh4g8NW9mPJpEOsY/lm4jtq4AT/gktwSAHZ1nvsvkEGCgL6OdrMRF0Z0gU4wkWiGzag==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index c7fa8a4d4..190edd8a3 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.933.0", + "@snyk/protect": "1.934.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 1de671ae29b22de9768513a0fbf25d8ddc62971f Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 4 Jun 2022 14:37:11 +0000 Subject: [PATCH 34/62] fix(deps): update dependency @snyk/protect to v1.935.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index d3b79f531..53cb1b645 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.934.0", + "@snyk/protect": "1.935.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.934.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.934.0.tgz", - "integrity": "sha512-GnD1b8XayWgRMgVxxP7Kh4g8NW9mPJpEOsY/lm4jtq4AT/gktwSAHZ1nvsvkEGCgL6OdrMRF0Z0gU4wkWiGzag==", + "version": "1.935.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.935.0.tgz", + "integrity": "sha512-dgHj6qIoq7iSeUOyCKv1XyOJjbmiQV/aJggORKN3eG76kuiQFE1UuL2zyK00kiS9aPA0ZxRXSekWuJEp5FC1SQ==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.934.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.934.0.tgz", - "integrity": "sha512-GnD1b8XayWgRMgVxxP7Kh4g8NW9mPJpEOsY/lm4jtq4AT/gktwSAHZ1nvsvkEGCgL6OdrMRF0Z0gU4wkWiGzag==" + "version": "1.935.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.935.0.tgz", + "integrity": "sha512-dgHj6qIoq7iSeUOyCKv1XyOJjbmiQV/aJggORKN3eG76kuiQFE1UuL2zyK00kiS9aPA0ZxRXSekWuJEp5FC1SQ==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 190edd8a3..6562a7b27 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.0.1", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.934.0", + "@snyk/protect": "1.935.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From c7f4e21ee44c1983b74172bf04c7346355a67837 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 4 Jun 2022 16:25:54 +0000 Subject: [PATCH 35/62] chore(deps): update actions/upload-artifact action to v3.1.0 --- .github/workflows/nodejs.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 293db3c48..96de127ba 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -42,7 +42,7 @@ jobs: run: npm run test:coverage - name: Save Code Coverage - uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 # tag=v3.0.0 + uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3.1.0 with: name: code-coverage path: coverage @@ -133,7 +133,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SCAN_ANNOTATE_PR: true - - uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 # tag=v3.0.0 + - uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3.1.0 with: name: reports path: reports From a526e6dd6ceaf006cfe0b117a49a56de0769183e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 4 Jun 2022 22:53:47 +0000 Subject: [PATCH 36/62] chore(deps): update dependency eslint to v8.16.0 --- package-lock.json | 50 +++++++++++++++++++++++------------------------ package.json | 2 +- 2 files changed, 26 insertions(+), 26 deletions(-) diff --git a/package-lock.json b/package-lock.json index 53cb1b645..4f50aec3a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -31,7 +31,7 @@ "chai": "4.3.6", "chai-as-promised": "7.1.1", "chai-http": "4.3.0", - "eslint": "8.15.0", + "eslint": "8.16.0", "eslint-config-airbnb": "19.0.4", "eslint-plugin-import": "2.26.0", "eslint-plugin-jsx-a11y": "6.5.1", @@ -464,15 +464,15 @@ } }, "node_modules/@eslint/eslintrc": { - "version": "1.2.3", - "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-1.2.3.tgz", - "integrity": "sha512-uGo44hIwoLGNyduRpjdEpovcbMdd+Nv7amtmJxnKmI8xj6yd5LncmSwDa5NgX/41lIFJtkjD6YdVfgEzPfJ5UA==", + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-1.3.0.tgz", + "integrity": "sha512-UWW0TMTmk2d7hLcWD1/e2g5HDM/HQ3csaLSqXCfqwh4uNDuNqlaKWXmEsL4Cs41Z0KnILNvwbHAah3C2yt06kw==", "dev": true, "dependencies": { "ajv": "^6.12.4", "debug": "^4.3.2", "espree": "^9.3.2", - "globals": "^13.9.0", + "globals": "^13.15.0", "ignore": "^5.2.0", "import-fresh": "^3.2.1", "js-yaml": "^4.1.0", @@ -1818,12 +1818,12 @@ } }, "node_modules/eslint": { - "version": "8.15.0", - "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.15.0.tgz", - "integrity": "sha512-GG5USZ1jhCu8HJkzGgeK8/+RGnHaNYZGrGDzUtigK3BsGESW/rs2az23XqE0WVwDxy1VRvvjSSGu5nB0Bu+6SA==", + "version": "8.16.0", + "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.16.0.tgz", + "integrity": "sha512-MBndsoXY/PeVTDJeWsYj7kLZ5hQpJOfMYLsF6LicLHQWbRDG19lK5jOix4DPl8yY4SUFcE3txy86OzFLWT+yoA==", "dev": true, "dependencies": { - "@eslint/eslintrc": "^1.2.3", + "@eslint/eslintrc": "^1.3.0", "@humanwhocodes/config-array": "^0.9.2", "ajv": "^6.10.0", "chalk": "^4.0.0", @@ -1841,7 +1841,7 @@ "file-entry-cache": "^6.0.1", "functional-red-black-tree": "^1.0.1", "glob-parent": "^6.0.1", - "globals": "^13.6.0", + "globals": "^13.15.0", "ignore": "^5.2.0", "import-fresh": "^3.0.0", "imurmurhash": "^0.1.4", @@ -2726,9 +2726,9 @@ } }, "node_modules/globals": { - "version": "13.13.0", - "resolved": "https://registry.npmjs.org/globals/-/globals-13.13.0.tgz", - "integrity": "sha512-EQ7Q18AJlPwp3vUDL4mKA0KXrXyNIQyWon6T6XQiBQF0XHvRsiCSrWmmeATpUzdJN2HhWZU6Pdl0a9zdep5p6A==", + "version": "13.15.0", + "resolved": "https://registry.npmjs.org/globals/-/globals-13.15.0.tgz", + "integrity": "sha512-bpzcOlgDhMG070Av0Vy5Owklpv1I6+j96GhUI7Rh7IzDCKLzboflLrrfqMu8NquDbiR4EOQk7XzJwqVJxicxog==", "dev": true, "dependencies": { "type-fest": "^0.20.2" @@ -6657,15 +6657,15 @@ } }, "@eslint/eslintrc": { - "version": "1.2.3", - "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-1.2.3.tgz", - "integrity": "sha512-uGo44hIwoLGNyduRpjdEpovcbMdd+Nv7amtmJxnKmI8xj6yd5LncmSwDa5NgX/41lIFJtkjD6YdVfgEzPfJ5UA==", + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-1.3.0.tgz", + "integrity": "sha512-UWW0TMTmk2d7hLcWD1/e2g5HDM/HQ3csaLSqXCfqwh4uNDuNqlaKWXmEsL4Cs41Z0KnILNvwbHAah3C2yt06kw==", "dev": true, "requires": { "ajv": "^6.12.4", "debug": "^4.3.2", "espree": "^9.3.2", - "globals": "^13.9.0", + "globals": "^13.15.0", "ignore": "^5.2.0", "import-fresh": "^3.2.1", "js-yaml": "^4.1.0", @@ -7734,12 +7734,12 @@ "dev": true }, "eslint": { - "version": "8.15.0", - "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.15.0.tgz", - "integrity": "sha512-GG5USZ1jhCu8HJkzGgeK8/+RGnHaNYZGrGDzUtigK3BsGESW/rs2az23XqE0WVwDxy1VRvvjSSGu5nB0Bu+6SA==", + "version": "8.16.0", + "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.16.0.tgz", + "integrity": "sha512-MBndsoXY/PeVTDJeWsYj7kLZ5hQpJOfMYLsF6LicLHQWbRDG19lK5jOix4DPl8yY4SUFcE3txy86OzFLWT+yoA==", "dev": true, "requires": { - "@eslint/eslintrc": "^1.2.3", + "@eslint/eslintrc": "^1.3.0", "@humanwhocodes/config-array": "^0.9.2", "ajv": "^6.10.0", "chalk": "^4.0.0", @@ -7757,7 +7757,7 @@ "file-entry-cache": "^6.0.1", "functional-red-black-tree": "^1.0.1", "glob-parent": "^6.0.1", - "globals": "^13.6.0", + "globals": "^13.15.0", "ignore": "^5.2.0", "import-fresh": "^3.0.0", "imurmurhash": "^0.1.4", @@ -8434,9 +8434,9 @@ } }, "globals": { - "version": "13.13.0", - "resolved": "https://registry.npmjs.org/globals/-/globals-13.13.0.tgz", - "integrity": "sha512-EQ7Q18AJlPwp3vUDL4mKA0KXrXyNIQyWon6T6XQiBQF0XHvRsiCSrWmmeATpUzdJN2HhWZU6Pdl0a9zdep5p6A==", + "version": "13.15.0", + "resolved": "https://registry.npmjs.org/globals/-/globals-13.15.0.tgz", + "integrity": "sha512-bpzcOlgDhMG070Av0Vy5Owklpv1I6+j96GhUI7Rh7IzDCKLzboflLrrfqMu8NquDbiR4EOQk7XzJwqVJxicxog==", "dev": true, "requires": { "type-fest": "^0.20.2" diff --git a/package.json b/package.json index 6562a7b27..aca254984 100644 --- a/package.json +++ b/package.json @@ -63,7 +63,7 @@ "chai": "4.3.6", "chai-as-promised": "7.1.1", "chai-http": "4.3.0", - "eslint": "8.15.0", + "eslint": "8.16.0", "eslint-config-airbnb": "19.0.4", "eslint-plugin-import": "2.26.0", "eslint-plugin-jsx-a11y": "6.5.1", From 7ddf5991cd9c66beba3e2436294ec2703e8ca6c2 Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 5 Jun 2022 14:02:13 +0200 Subject: [PATCH 37/62] chore(cicd): update Harden GitHub Actions config after 1st audit --- .github/workflows/code-review.yml | 15 +++++++++++++-- .github/workflows/codeql-analysis.yml | 5 ++++- .github/workflows/nodejs.yml | 24 +++++++++++++++++++++--- 3 files changed, 38 insertions(+), 6 deletions(-) diff --git a/.github/workflows/code-review.yml b/.github/workflows/code-review.yml index 8d7966574..e4ec46a4d 100644 --- a/.github/workflows/code-review.yml +++ b/.github/workflows/code-review.yml @@ -13,7 +13,14 @@ jobs: - name: Harden GitHub Actions Runner uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: - egress-policy: audit + egress-policy: block + allowed-endpoints: > + api.github.com:443 + github.com:443 + objects.githubusercontent.com:443 + raw.githubusercontent.com:443 + registry.npmjs.org:443 + snyk.io:443 - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 @@ -32,7 +39,11 @@ jobs: - name: Harden GitHub Actions Runner uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: - egress-policy: audit + egress-policy: block + allowed-endpoints: > + api.github.com:443 + github.com:443 + objects.githubusercontent.com:443 - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 2e73e08c2..924b9b600 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -34,7 +34,10 @@ jobs: - name: Harden GitHub Actions Runner uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: - egress-policy: audit + egress-policy: block + allowed-endpoints: > + api.github.com:443 + github.com:443 - name: Checkout repository uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 96de127ba..b12735fd4 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -18,7 +18,17 @@ jobs: - name: Harden GitHub Actions Runner uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: - egress-policy: audit + egress-policy: block + allowed-endpoints: > + api.github.com:443 + auth.docker.io:443 + github.com:443 + objects.githubusercontent.com:443 + pipelines.actions.githubusercontent.com:443 + production.cloudflare.docker.com:443 + registry-1.docker.io:443 + registry.npmjs.org:443 + snyk.io:443 - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 @@ -57,7 +67,12 @@ jobs: - name: Harden GitHub Actions Runner uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: - egress-policy: audit + egress-policy: block + allowed-endpoints: > + api.github.com:443 + github.com:443 + pipelines.actions.githubusercontent.com:443 + sonarcloud.io:443 - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 @@ -120,7 +135,10 @@ jobs: - name: Harden GitHub Actions Runner uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: - egress-policy: audit + egress-policy: block + allowed-endpoints: > + github.com:443 + pipelines.actions.githubusercontent.com:443 - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 From c7ecce062f5d74a8bec7c0ef9528c7ba61c293a8 Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 5 Jun 2022 16:58:58 +0200 Subject: [PATCH 38/62] chore(cicd): fix domain blocked --- .github/workflows/code-review.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/code-review.yml b/.github/workflows/code-review.yml index e4ec46a4d..c81fa5801 100644 --- a/.github/workflows/code-review.yml +++ b/.github/workflows/code-review.yml @@ -44,6 +44,7 @@ jobs: api.github.com:443 github.com:443 objects.githubusercontent.com:443 + raw.githubusercontent.com:443 - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 From bd87e54ffb57bf729185e3b5315804c7eba53c64 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 7 Jun 2022 02:47:45 +0000 Subject: [PATCH 39/62] chore(deps): update mongo digest to 94cd915 --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index 0d3111619..e840c833e 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -17,7 +17,7 @@ services: - mongo mongo: container_name: mongo - image: mongo@sha256:d8f48972427a3d62bbb7e953bd5afb609ab6e9b69f347c01c7cfda133cf15b9c + image: mongo@sha256:94cd91589ff66a7cc7eb6f794f254522c1587457d46f94e0cb1c460e73498255 volumes: - ./data:/data/db ports: From 20e0d9d062d4d57db11a3bbf0354345a47248fcb Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 7 Jun 2022 05:34:36 +0000 Subject: [PATCH 40/62] chore(deps): update node.js to v16.15.1 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 1fb6e8340..e16dd96fb 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM node:16.15.0-alpine3.15@sha256:1a9a71ea86aad332aa7740316d4111ee1bd4e890df47d3b5eff3e5bded3b3d10 +FROM node:16.15.1-alpine3.15@sha256:1fafca8cf41faf035192f5df1a5387656898bec6ac2f92f011d051ac2344f5c9 ARG appPort=3000 # ARG microScannerToken From 89b82067aefd1c440ef8f085a6d782eed87e72d8 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 7 Jun 2022 13:02:19 +0000 Subject: [PATCH 41/62] chore(deps): update mongo digest to fdd0492 --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index e840c833e..77a7d2745 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -17,7 +17,7 @@ services: - mongo mongo: container_name: mongo - image: mongo@sha256:94cd91589ff66a7cc7eb6f794f254522c1587457d46f94e0cb1c460e73498255 + image: mongo@sha256:fdd0492cda0d166e877cc9ec11040767dec2598a60c77f7f7730f9b04f06e19f volumes: - ./data:/data/db ports: From 074bcb7609548c653d2fcdcc6057eba4ded0c7d0 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 7 Jun 2022 16:49:45 +0000 Subject: [PATCH 42/62] fix(deps): update dependency @fastify/helmet to v8.1.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4f50aec3a..ce4284a35 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14,7 +14,7 @@ "darwin" ], "dependencies": { - "@fastify/helmet": "8.0.1", + "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", "@snyk/protect": "1.935.0", "fastify": "3.29.0", @@ -497,9 +497,9 @@ "integrity": "sha512-wI3fpfDT0t7p8E6dA2eTECzzOd+bZsZCJ2Hcv+Onn2b7ZwK3RwD27uW2QDaMtQhAfWQQP+WNK7nKf0twLsBf9w==" }, "node_modules/@fastify/helmet": { - "version": "8.0.1", - "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-8.0.1.tgz", - "integrity": "sha512-bHGcbHofY6i1w/Gh7ll2yFZygeaakSn230w4NB6s135yE5n5h5nE7+UjlQAMAt7GRslaW3/3e3u58pKHCtsH7g==", + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-8.1.0.tgz", + "integrity": "sha512-Y6bx95uKd3wYM8UE9sCfveW3nYTkbmOeAgZWqFuBd/FYgJu5SH3uMRM7NhmHFdiiqtzaLvIC6rId47l7783lTg==", "dependencies": { "fastify-plugin": "^3.0.0", "helmet": "^5.0.1" @@ -6687,9 +6687,9 @@ "integrity": "sha512-wI3fpfDT0t7p8E6dA2eTECzzOd+bZsZCJ2Hcv+Onn2b7ZwK3RwD27uW2QDaMtQhAfWQQP+WNK7nKf0twLsBf9w==" }, "@fastify/helmet": { - "version": "8.0.1", - "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-8.0.1.tgz", - "integrity": "sha512-bHGcbHofY6i1w/Gh7ll2yFZygeaakSn230w4NB6s135yE5n5h5nE7+UjlQAMAt7GRslaW3/3e3u58pKHCtsH7g==", + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-8.1.0.tgz", + "integrity": "sha512-Y6bx95uKd3wYM8UE9sCfveW3nYTkbmOeAgZWqFuBd/FYgJu5SH3uMRM7NhmHFdiiqtzaLvIC6rId47l7783lTg==", "requires": { "fastify-plugin": "^3.0.0", "helmet": "^5.0.1" diff --git a/package.json b/package.json index aca254984..754b4a88e 100644 --- a/package.json +++ b/package.json @@ -37,7 +37,7 @@ }, "homepage": "https://github.com/timoa/nodejs-encryption-api-example#readme", "dependencies": { - "@fastify/helmet": "8.0.1", + "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", "@snyk/protect": "1.935.0", "fastify": "3.29.0", From 4eb66c1c40e3fd63a29a039d383f66d43add242c Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 7 Jun 2022 20:36:31 +0000 Subject: [PATCH 43/62] fix(deps): update dependency @snyk/protect to v1.936.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index ce4284a35..e2ab77c00 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.935.0", + "@snyk/protect": "1.936.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.935.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.935.0.tgz", - "integrity": "sha512-dgHj6qIoq7iSeUOyCKv1XyOJjbmiQV/aJggORKN3eG76kuiQFE1UuL2zyK00kiS9aPA0ZxRXSekWuJEp5FC1SQ==", + "version": "1.936.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.936.0.tgz", + "integrity": "sha512-gH2JsMQGa/PJBr6ekRQi5IVUh6qFwhEI4yffEYQKiMNQvXaFJidbfyvJnGvRjEKO7ZuM3EnyvWErHXdnvm7Fhw==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.935.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.935.0.tgz", - "integrity": "sha512-dgHj6qIoq7iSeUOyCKv1XyOJjbmiQV/aJggORKN3eG76kuiQFE1UuL2zyK00kiS9aPA0ZxRXSekWuJEp5FC1SQ==" + "version": "1.936.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.936.0.tgz", + "integrity": "sha512-gH2JsMQGa/PJBr6ekRQi5IVUh6qFwhEI4yffEYQKiMNQvXaFJidbfyvJnGvRjEKO7ZuM3EnyvWErHXdnvm7Fhw==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 754b4a88e..faa209731 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.935.0", + "@snyk/protect": "1.936.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From caeeec9b3a10b99cf749443818551c976e02cfe4 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 9 Jun 2022 17:35:45 +0000 Subject: [PATCH 44/62] fix(deps): update dependency @snyk/protect to v1.939.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index e2ab77c00..65bee5268 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.936.0", + "@snyk/protect": "1.939.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.936.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.936.0.tgz", - "integrity": "sha512-gH2JsMQGa/PJBr6ekRQi5IVUh6qFwhEI4yffEYQKiMNQvXaFJidbfyvJnGvRjEKO7ZuM3EnyvWErHXdnvm7Fhw==", + "version": "1.939.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.939.0.tgz", + "integrity": "sha512-FZtkR3nLVTt+k2U289Zni65NmtzH8W37BWKPo1fvn4FCkiS0cSBmwrrNMFMFg+xS1LFEfcsv6B6kj+Q4ev+SQg==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.936.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.936.0.tgz", - "integrity": "sha512-gH2JsMQGa/PJBr6ekRQi5IVUh6qFwhEI4yffEYQKiMNQvXaFJidbfyvJnGvRjEKO7ZuM3EnyvWErHXdnvm7Fhw==" + "version": "1.939.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.939.0.tgz", + "integrity": "sha512-FZtkR3nLVTt+k2U289Zni65NmtzH8W37BWKPo1fvn4FCkiS0cSBmwrrNMFMFg+xS1LFEfcsv6B6kj+Q4ev+SQg==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index faa209731..7d14ef7f9 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.936.0", + "@snyk/protect": "1.939.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 9eb9994df02f6d8abf685d2daecf52a186d30058 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 10 Jun 2022 17:19:17 +0000 Subject: [PATCH 45/62] fix(deps): update dependency @snyk/protect to v1.940.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 65bee5268..b367b9aac 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.939.0", + "@snyk/protect": "1.940.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.939.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.939.0.tgz", - "integrity": "sha512-FZtkR3nLVTt+k2U289Zni65NmtzH8W37BWKPo1fvn4FCkiS0cSBmwrrNMFMFg+xS1LFEfcsv6B6kj+Q4ev+SQg==", + "version": "1.940.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.940.0.tgz", + "integrity": "sha512-vAhtQ0riui/948ce47WEB0FgJx3eKHMkkyU48MQJij49eLFKaCUiz/gzXiR4nm5O8najwjLa3q6dtLhqm8RI8A==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.939.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.939.0.tgz", - "integrity": "sha512-FZtkR3nLVTt+k2U289Zni65NmtzH8W37BWKPo1fvn4FCkiS0cSBmwrrNMFMFg+xS1LFEfcsv6B6kj+Q4ev+SQg==" + "version": "1.940.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.940.0.tgz", + "integrity": "sha512-vAhtQ0riui/948ce47WEB0FgJx3eKHMkkyU48MQJij49eLFKaCUiz/gzXiR4nm5O8najwjLa3q6dtLhqm8RI8A==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 7d14ef7f9..7d82786ec 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.939.0", + "@snyk/protect": "1.940.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 12d8398054429184e61bc780355eb995e32bc3fc Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 12 Jun 2022 03:15:00 +0000 Subject: [PATCH 46/62] chore(deps): update step-security/harden-runner digest to cdea734 --- .github/workflows/code-review.yml | 4 ++-- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/nodejs.yml | 10 +++++----- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/code-review.yml b/.github/workflows/code-review.yml index c81fa5801..f2d4b9333 100644 --- a/.github/workflows/code-review.yml +++ b/.github/workflows/code-review.yml @@ -11,7 +11,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 + uses: step-security/harden-runner@cdea734fa57747b9831aa9d6fcb274c5f9669557 with: egress-policy: block allowed-endpoints: > @@ -37,7 +37,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 + uses: step-security/harden-runner@cdea734fa57747b9831aa9d6fcb274c5f9669557 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 924b9b600..29f91d13c 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -32,7 +32,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 + uses: step-security/harden-runner@cdea734fa57747b9831aa9d6fcb274c5f9669557 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index b12735fd4..640282c8f 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -16,7 +16,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 + uses: step-security/harden-runner@cdea734fa57747b9831aa9d6fcb274c5f9669557 with: egress-policy: block allowed-endpoints: > @@ -65,7 +65,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 + uses: step-security/harden-runner@cdea734fa57747b9831aa9d6fcb274c5f9669557 with: egress-policy: block allowed-endpoints: > @@ -133,7 +133,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 + uses: step-security/harden-runner@cdea734fa57747b9831aa9d6fcb274c5f9669557 with: egress-policy: block allowed-endpoints: > @@ -167,7 +167,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 + uses: step-security/harden-runner@cdea734fa57747b9831aa9d6fcb274c5f9669557 with: egress-policy: audit @@ -188,7 +188,7 @@ jobs: steps: - name: Harden GitHub Actions Runner - uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 + uses: step-security/harden-runner@cdea734fa57747b9831aa9d6fcb274c5f9669557 with: egress-policy: audit From c12657ba8b56b8f664ca587a79daa48047e91b70 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 14 Jun 2022 01:33:42 +0000 Subject: [PATCH 47/62] chore(deps): update mongo digest to 3745209 --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index 77a7d2745..3972a8064 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -17,7 +17,7 @@ services: - mongo mongo: container_name: mongo - image: mongo@sha256:fdd0492cda0d166e877cc9ec11040767dec2598a60c77f7f7730f9b04f06e19f + image: mongo@sha256:3745209b24062a8ba670878bce47ad9c944682f550044721c4abc5b4daeb863d volumes: - ./data:/data/db ports: From 4f756e2c538e4f00b8f7caf2ddc28018fec50b9a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 14 Jun 2022 17:28:27 +0000 Subject: [PATCH 48/62] fix(deps): update dependency @snyk/protect to v1.942.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index b367b9aac..217a11210 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.940.0", + "@snyk/protect": "1.942.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.940.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.940.0.tgz", - "integrity": "sha512-vAhtQ0riui/948ce47WEB0FgJx3eKHMkkyU48MQJij49eLFKaCUiz/gzXiR4nm5O8najwjLa3q6dtLhqm8RI8A==", + "version": "1.942.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.942.0.tgz", + "integrity": "sha512-6v2zDKgibh8C9eFNQH2g/pGgDaGFpNfNqlA9hSppfkm8NXmUY/R0Veaap0CvtHro/mxQutnXh7sCHdeLmasfbA==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.940.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.940.0.tgz", - "integrity": "sha512-vAhtQ0riui/948ce47WEB0FgJx3eKHMkkyU48MQJij49eLFKaCUiz/gzXiR4nm5O8najwjLa3q6dtLhqm8RI8A==" + "version": "1.942.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.942.0.tgz", + "integrity": "sha512-6v2zDKgibh8C9eFNQH2g/pGgDaGFpNfNqlA9hSppfkm8NXmUY/R0Veaap0CvtHro/mxQutnXh7sCHdeLmasfbA==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 7d82786ec..7040bf3bb 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.940.0", + "@snyk/protect": "1.942.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From fa99afda165c145f124c762f5d1b850c280f0faa Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 15 Jun 2022 13:16:14 +0000 Subject: [PATCH 49/62] fix(deps): update dependency @snyk/protect to v1.945.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 217a11210..b1349158d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.942.0", + "@snyk/protect": "1.945.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.942.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.942.0.tgz", - "integrity": "sha512-6v2zDKgibh8C9eFNQH2g/pGgDaGFpNfNqlA9hSppfkm8NXmUY/R0Veaap0CvtHro/mxQutnXh7sCHdeLmasfbA==", + "version": "1.945.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.945.0.tgz", + "integrity": "sha512-9e0vY4DGjKLPzSxGwIBh0yypH3x5wQSGzDwxoRIWm+RDOnmOojhNn2j51lAd3/GF82Wdre2rdCMoIsvtPGDWzQ==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.942.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.942.0.tgz", - "integrity": "sha512-6v2zDKgibh8C9eFNQH2g/pGgDaGFpNfNqlA9hSppfkm8NXmUY/R0Veaap0CvtHro/mxQutnXh7sCHdeLmasfbA==" + "version": "1.945.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.945.0.tgz", + "integrity": "sha512-9e0vY4DGjKLPzSxGwIBh0yypH3x5wQSGzDwxoRIWm+RDOnmOojhNn2j51lAd3/GF82Wdre2rdCMoIsvtPGDWzQ==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index 7040bf3bb..ea1109305 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.942.0", + "@snyk/protect": "1.945.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From bec4b03006a3831ed092ed5ed509a4a5cd095018 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 16 Jun 2022 00:16:54 +0000 Subject: [PATCH 50/62] chore(deps): update mongo digest to 37e84d3 --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index 3972a8064..8ac464522 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -17,7 +17,7 @@ services: - mongo mongo: container_name: mongo - image: mongo@sha256:3745209b24062a8ba670878bce47ad9c944682f550044721c4abc5b4daeb863d + image: mongo@sha256:37e84d3dd30cdfb5472ec42b8a6b4dc6ca7cacd91ebcfa0410a54528bbc5fa6d volumes: - ./data:/data/db ports: From eed221fd7c7b510ed72a3bc014789dfaa8e88387 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 17 Jun 2022 11:11:35 +0000 Subject: [PATCH 51/62] chore(deps): update actions/setup-node action to v3.3.0 --- .github/workflows/nodejs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 640282c8f..cd87f0ad0 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -34,7 +34,7 @@ jobs: uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 - name: Setup Node.js ${{ matrix.node }} - uses: actions/setup-node@17f8bd926464a1afa4c6a11669539e9c1ba77048 # tag=v3.2.0 + uses: actions/setup-node@eeb10cff27034e7acf239c5d29f62154018672fd # tag=v3.3.0 with: node-version: ${{ matrix.node }} check-latest: true From 4374b6a0000871ba5518fcd4ac103aad068b8f5c Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 17 Jun 2022 14:50:27 +0000 Subject: [PATCH 52/62] fix(deps): update dependency @snyk/protect to v1.946.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index b1349158d..c32c18c65 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.945.0", + "@snyk/protect": "1.946.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", @@ -681,9 +681,9 @@ } }, "node_modules/@snyk/protect": { - "version": "1.945.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.945.0.tgz", - "integrity": "sha512-9e0vY4DGjKLPzSxGwIBh0yypH3x5wQSGzDwxoRIWm+RDOnmOojhNn2j51lAd3/GF82Wdre2rdCMoIsvtPGDWzQ==", + "version": "1.946.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.946.0.tgz", + "integrity": "sha512-LdqVSuI3gFX87dLfZsUvlb5lp7XuURa22uY2oDuOyNxk4Z0gsSOoYxYrFXUW2RreH+mch1T6rU5HztQkoL38YQ==", "bin": { "snyk-protect": "bin/snyk-protect" }, @@ -6837,9 +6837,9 @@ } }, "@snyk/protect": { - "version": "1.945.0", - "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.945.0.tgz", - "integrity": "sha512-9e0vY4DGjKLPzSxGwIBh0yypH3x5wQSGzDwxoRIWm+RDOnmOojhNn2j51lAd3/GF82Wdre2rdCMoIsvtPGDWzQ==" + "version": "1.946.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.946.0.tgz", + "integrity": "sha512-LdqVSuI3gFX87dLfZsUvlb5lp7XuURa22uY2oDuOyNxk4Z0gsSOoYxYrFXUW2RreH+mch1T6rU5HztQkoL38YQ==" }, "@types/bson": { "version": "4.0.5", diff --git a/package.json b/package.json index ea1109305..8c98f6ffe 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "dependencies": { "@fastify/helmet": "8.1.0", "@hapi/boom": "9.1.4", - "@snyk/protect": "1.945.0", + "@snyk/protect": "1.946.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", "fastify-swagger": "5.2.0", From 0db1ccb128ddc65c043ff5fa881198a316c5c4e8 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 19 Jun 2022 02:23:30 +0000 Subject: [PATCH 53/62] chore(deps): update dependency eslint to v8.17.0 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index c32c18c65..e9538609f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -31,7 +31,7 @@ "chai": "4.3.6", "chai-as-promised": "7.1.1", "chai-http": "4.3.0", - "eslint": "8.16.0", + "eslint": "8.17.0", "eslint-config-airbnb": "19.0.4", "eslint-plugin-import": "2.26.0", "eslint-plugin-jsx-a11y": "6.5.1", @@ -1818,9 +1818,9 @@ } }, "node_modules/eslint": { - "version": "8.16.0", - "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.16.0.tgz", - "integrity": "sha512-MBndsoXY/PeVTDJeWsYj7kLZ5hQpJOfMYLsF6LicLHQWbRDG19lK5jOix4DPl8yY4SUFcE3txy86OzFLWT+yoA==", + "version": "8.17.0", + "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.17.0.tgz", + "integrity": "sha512-gq0m0BTJfci60Fz4nczYxNAlED+sMcihltndR8t9t1evnU/azx53x3t2UHXC/uRjcbvRw/XctpaNygSTcQD+Iw==", "dev": true, "dependencies": { "@eslint/eslintrc": "^1.3.0", @@ -7734,9 +7734,9 @@ "dev": true }, "eslint": { - "version": "8.16.0", - "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.16.0.tgz", - "integrity": "sha512-MBndsoXY/PeVTDJeWsYj7kLZ5hQpJOfMYLsF6LicLHQWbRDG19lK5jOix4DPl8yY4SUFcE3txy86OzFLWT+yoA==", + "version": "8.17.0", + "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.17.0.tgz", + "integrity": "sha512-gq0m0BTJfci60Fz4nczYxNAlED+sMcihltndR8t9t1evnU/azx53x3t2UHXC/uRjcbvRw/XctpaNygSTcQD+Iw==", "dev": true, "requires": { "@eslint/eslintrc": "^1.3.0", diff --git a/package.json b/package.json index 8c98f6ffe..12b1d934f 100644 --- a/package.json +++ b/package.json @@ -63,7 +63,7 @@ "chai": "4.3.6", "chai-as-promised": "7.1.1", "chai-http": "4.3.0", - "eslint": "8.16.0", + "eslint": "8.17.0", "eslint-config-airbnb": "19.0.4", "eslint-plugin-import": "2.26.0", "eslint-plugin-jsx-a11y": "6.5.1", From 6f4c6e829dd65ca823729d4df27b0505245ac7ae Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 19 Jun 2022 08:32:13 +0200 Subject: [PATCH 54/62] chore(cicd): add OWASP ZAP full scan --- .github/workflows/nodejs.yml | 78 +++++++++++++++++++++--------------- 1 file changed, 46 insertions(+), 32 deletions(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index cd87f0ad0..2b970b9d0 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -92,37 +92,6 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} - # functional-tests: - # runs-on: ubuntu-latest - # needs: tests - - # steps: - # - name: Harden GitHub Actions Runner - # uses: step-security/harden-runner@248ae51c2e8cc9622ecf50685c8bf7150c6e8813 - # with: - # egress-policy: audit - - # - name: Checkout - # uses: actions/checkout@v2 - - # - name: Build docker image - # run: docker build -t timoa/nodejs-encryption-api-example . - - # - name: Start Docker container - # run: docker-compose up -d - - # - name: Check Docker container status - # run: docker ps -a - - # - name: Install dependencies - # run: npm install - - # - name: Run Functional tests - # run: npm run test:functional - - # - name: Stop Docker container - # run: docker-compose down - # -- SAST SCAN -------------------------------------------------------------- code-security: name: Code Security @@ -145,7 +114,6 @@ jobs: - name: Perform Scan uses: ShiftLeftSecurity/scan-action@master - env: WORKSPACE: https://github.com/${{ github.repository }}/blob/${{ github.sha }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} @@ -156,6 +124,51 @@ jobs: name: reports path: reports + # -- ZAP Scan --------------------------------------------------------------- + api-security: + name: API Security + runs-on: ubuntu-latest + needs: tests + # Skip any PR created by dependabot to avoid permission issues + if: (github.actor != 'dependabot[bot]') + + strategy: + matrix: + node: ['16'] + mongodb: ['5.0'] + + steps: + - name: Harden GitHub Actions Runner + uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 + with: + egress-policy: audit + + - name: Checkout + uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 + + - name: Setup Node.js ${{ matrix.node }} + uses: actions/setup-node@17f8bd926464a1afa4c6a11669539e9c1ba77048 # tag=v3.2.0 + with: + node-version: ${{ matrix.node }} + check-latest: true + + - name: Install dependencies + run: npm install + + - name: Start MongoDB + uses: supercharge/mongodb-github-action@e815fd8a9dfede09fd6e6c144f2c9f4875e933df # tag=1.7.0 + with: + mongodb-version: ${{ matrix.mongodb }} + mongodb-db: encryptionAPI + + - name: Start the app + run: npm start + + - name: Run ZAP Scan + uses: zaproxy/action-full-scan@v0.4.0 + with: + target: http://localhost:3000 + # -- PRE-RELEASE ------------------------------------------------------------ pre-release: name: Prepare Release @@ -163,6 +176,7 @@ jobs: needs: - code-quality - code-security + - api-security if: github.ref == 'refs/heads/master' steps: From d1613bb1c4430c6af3e1c9675bd0667349af0aaf Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 19 Jun 2022 09:37:55 +0200 Subject: [PATCH 55/62] fix(cicd): add wait for the app to start --- .github/workflows/nodejs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 2b970b9d0..076c00eb6 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -162,7 +162,7 @@ jobs: mongodb-db: encryptionAPI - name: Start the app - run: npm start + run: npm start & npx wait-on http://localhost:3000 - name: Run ZAP Scan uses: zaproxy/action-full-scan@v0.4.0 From 345aa34f95bfdfe78d0c53730a6dfbe517c6aa3f Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 19 Jun 2022 11:20:10 +0200 Subject: [PATCH 56/62] fix(cicd): run the app in the background --- .github/workflows/nodejs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 076c00eb6..20fa15af2 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -162,7 +162,7 @@ jobs: mongodb-db: encryptionAPI - name: Start the app - run: npm start & npx wait-on http://localhost:3000 + run: npm start > /dev/null & - name: Run ZAP Scan uses: zaproxy/action-full-scan@v0.4.0 From 656eae4cdaa5809841ba7846c013264144dd0ee7 Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 19 Jun 2022 11:33:27 +0200 Subject: [PATCH 57/62] chore(cicd): save the ZAP reports --- .github/workflows/nodejs.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 20fa15af2..d2d1dd089 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -119,7 +119,8 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SCAN_ANNOTATE_PR: true - - uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3.1.0 + - name: Save the SCAN reports + uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3.1.0 with: name: reports path: reports @@ -169,6 +170,12 @@ jobs: with: target: http://localhost:3000 + - name: Save the ZAP reports + uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3.1.0 + with: + name: reports + path: report_*.* + # -- PRE-RELEASE ------------------------------------------------------------ pre-release: name: Prepare Release From abda46c4bb22c6abe4751a24859cd11108532400 Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 19 Jun 2022 11:34:08 +0200 Subject: [PATCH 58/62] chore(deps): update the Fastify Swagger dependency --- package-lock.json | 73 ++++++++++++++++++----------------------------- package.json | 2 +- 2 files changed, 28 insertions(+), 47 deletions(-) diff --git a/package-lock.json b/package-lock.json index e9538609f..169482b5a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -15,11 +15,11 @@ ], "dependencies": { "@fastify/helmet": "8.1.0", + "@fastify/swagger": "6.0.0", "@hapi/boom": "9.1.4", "@snyk/protect": "1.946.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", - "fastify-swagger": "5.2.0", "lodash": "4.17.21", "mongoose": "5.13.14", "uuid": "8.3.2", @@ -505,6 +505,19 @@ "helmet": "^5.0.1" } }, + "node_modules/@fastify/swagger": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/@fastify/swagger/-/swagger-6.0.0.tgz", + "integrity": "sha512-t8Bjxf3zY3B6YwASah/pUS4Xbq+Wa5Ol4ho0Y5HhQRR/fHPlF4xDxPExXVoT9rn7/NzjCwFkVo79kKUpds8hwA==", + "dependencies": { + "fastify-plugin": "^3.0.0", + "fastify-static": "^4.0.0", + "js-yaml": "^4.0.0", + "json-schema-resolver": "^1.3.0", + "openapi-types": "^10.0.0", + "rfdc": "^1.3.0" + } + }, "node_modules/@hapi/boom": { "version": "9.1.4", "resolved": "https://registry.npmjs.org/@hapi/boom/-/boom-9.1.4.tgz", @@ -2342,29 +2355,6 @@ "send": "^0.17.1" } }, - "node_modules/fastify-swagger": { - "version": "5.2.0", - "resolved": "https://registry.npmjs.org/fastify-swagger/-/fastify-swagger-5.2.0.tgz", - "integrity": "sha512-yKct50Mev9YIrhd2FRO4AChcJM9JwTBCziIjA4C+AI+hV2ystaIklgHVEwHoyqlaeQ+B4gZ1Z5rgOE87i4llLg==", - "dependencies": { - "fastify-swagger-deprecated": "npm:fastify-swagger@5.1.1", - "process-warning": "^1.0.0" - } - }, - "node_modules/fastify-swagger-deprecated": { - "name": "fastify-swagger", - "version": "5.1.1", - "resolved": "https://registry.npmjs.org/fastify-swagger/-/fastify-swagger-5.1.1.tgz", - "integrity": "sha512-7DA0zS8CCV5r+gbLgWdeeKEwLrVbbOxLMJVUfOl1H9+wSildSLD8hok2TLX7s3c28wOjF8+iZRxsz/hBDzfdIw==", - "dependencies": { - "fastify-plugin": "^3.0.0", - "fastify-static": "^4.0.0", - "js-yaml": "^4.0.0", - "json-schema-resolver": "^1.3.0", - "openapi-types": "^10.0.0", - "rfdc": "^1.3.0" - } - }, "node_modules/fastify/node_modules/semver": { "version": "7.3.7", "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.7.tgz", @@ -6695,6 +6685,19 @@ "helmet": "^5.0.1" } }, + "@fastify/swagger": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/@fastify/swagger/-/swagger-6.0.0.tgz", + "integrity": "sha512-t8Bjxf3zY3B6YwASah/pUS4Xbq+Wa5Ol4ho0Y5HhQRR/fHPlF4xDxPExXVoT9rn7/NzjCwFkVo79kKUpds8hwA==", + "requires": { + "fastify-plugin": "^3.0.0", + "fastify-static": "^4.0.0", + "js-yaml": "^4.0.0", + "json-schema-resolver": "^1.3.0", + "openapi-types": "^10.0.0", + "rfdc": "^1.3.0" + } + }, "@hapi/boom": { "version": "9.1.4", "resolved": "https://registry.npmjs.org/@hapi/boom/-/boom-9.1.4.tgz", @@ -8162,28 +8165,6 @@ "send": "^0.17.1" } }, - "fastify-swagger": { - "version": "5.2.0", - "resolved": "https://registry.npmjs.org/fastify-swagger/-/fastify-swagger-5.2.0.tgz", - "integrity": "sha512-yKct50Mev9YIrhd2FRO4AChcJM9JwTBCziIjA4C+AI+hV2ystaIklgHVEwHoyqlaeQ+B4gZ1Z5rgOE87i4llLg==", - "requires": { - "fastify-swagger-deprecated": "npm:fastify-swagger@5.1.1", - "process-warning": "^1.0.0" - } - }, - "fastify-swagger-deprecated": { - "version": "npm:fastify-swagger@5.1.1", - "resolved": "https://registry.npmjs.org/fastify-swagger/-/fastify-swagger-5.1.1.tgz", - "integrity": "sha512-7DA0zS8CCV5r+gbLgWdeeKEwLrVbbOxLMJVUfOl1H9+wSildSLD8hok2TLX7s3c28wOjF8+iZRxsz/hBDzfdIw==", - "requires": { - "fastify-plugin": "^3.0.0", - "fastify-static": "^4.0.0", - "js-yaml": "^4.0.0", - "json-schema-resolver": "^1.3.0", - "openapi-types": "^10.0.0", - "rfdc": "^1.3.0" - } - }, "fastq": { "version": "1.13.0", "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.13.0.tgz", diff --git a/package.json b/package.json index 12b1d934f..3219d1042 100644 --- a/package.json +++ b/package.json @@ -42,7 +42,7 @@ "@snyk/protect": "1.946.0", "fastify": "3.29.0", "fastify-healthcheck": "3.1.0", - "fastify-swagger": "5.2.0", + "@fastify/swagger": "6.0.0", "lodash": "4.17.21", "mongoose": "5.13.14", "uuid": "8.3.2", From 626aeaa94872e378a8faf2ef9f3ea2905868171e Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 19 Jun 2022 11:37:50 +0200 Subject: [PATCH 59/62] fix(swagger): fix package name for Fastify Swagger --- src/index.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/index.js b/src/index.js index d4507b661..0ef7a898f 100644 --- a/src/index.js +++ b/src/index.js @@ -1,7 +1,7 @@ const fastify = require('fastify')(); const fastifyHelmet = require('@fastify/helmet'); const fastifyHealthcheck = require('fastify-healthcheck'); -const fastifySwagger = require('fastify-swagger'); +const fastifySwagger = require('@fastify/swagger'); const logger = require('./lib/logger'); const config = require('./config/config.json'); From 49be62fc3e86167439eb1c0f6bbabd24456ae1c7 Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 19 Jun 2022 11:40:55 +0200 Subject: [PATCH 60/62] fix(cicd): add different names for the SAST and ZAP reports --- .github/workflows/nodejs.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index d2d1dd089..ff2bc7868 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -122,7 +122,7 @@ jobs: - name: Save the SCAN reports uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3.1.0 with: - name: reports + name: sast-reports path: reports # -- ZAP Scan --------------------------------------------------------------- @@ -173,7 +173,7 @@ jobs: - name: Save the ZAP reports uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3.1.0 with: - name: reports + name: zap-reports path: report_*.* # -- PRE-RELEASE ------------------------------------------------------------ From 8152e3d44194591ecd26e83e33e7544e92bb688e Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 19 Jun 2022 11:42:22 +0200 Subject: [PATCH 61/62] fix(cicd): unblocked domains from Harden GitHub Actions --- .github/workflows/nodejs.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index ff2bc7868..4d1687539 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -107,7 +107,11 @@ jobs: egress-policy: block allowed-endpoints: > github.com:443 + api.github.com:443 pipelines.actions.githubusercontent.com:443 + registry.npmjs.org:443 + pypi.org:443 + - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 From 2da9582ebbc459f5bc1b6f19cfc473308c1a08a2 Mon Sep 17 00:00:00 2001 From: Damien Laureaux Date: Sun, 19 Jun 2022 11:51:49 +0200 Subject: [PATCH 62/62] chore(cicd): update Harden Github Actions policy + remove unused ZAP artifact --- .github/workflows/nodejs.yml | 26 +++++++++++++++++++------- 1 file changed, 19 insertions(+), 7 deletions(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 4d1687539..3263de9f8 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -146,7 +146,25 @@ jobs: - name: Harden GitHub Actions Runner uses: step-security/harden-runner@dd5681a7d0c66fb362664d618ef4a90d656f6516 with: - egress-policy: audit + egress-policy: block + allowed-endpoints: > + api.github.com:443 + auth.docker.io:443 + bit.ly:443 + content-signature-2.cdn.mozilla.net:443 + firefox.settings.services.mozilla.com:443 + github.com:443 + news.zaproxy.org:443 + objects.githubusercontent.com:443 + pipelines.actions.githubusercontent.com:443 + production.cloudflare.docker.com:443 + raw.githubusercontent.com:443 + registry-1.docker.io:443 + registry.npmjs.org:443 + shavar.services.mozilla.com:443 + snyk.io:443 + tel.zaproxy.org:443 + tracking-protection.cdn.mozilla.net:443 - name: Checkout uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 @@ -174,12 +192,6 @@ jobs: with: target: http://localhost:3000 - - name: Save the ZAP reports - uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3.1.0 - with: - name: zap-reports - path: report_*.* - # -- PRE-RELEASE ------------------------------------------------------------ pre-release: name: Prepare Release