Skip to content

[APPS-7391] Dedupe and update packages to fix vulnerabilities #230

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 15, 2025
Merged

[APPS-7391] Dedupe and update packages to fix vulnerabilities #230

merged 1 commit into from
Apr 15, 2025

Conversation

@mmassaki
Copy link
Contributor

@mmassaki mmassaki commented Apr 11, 2025 •
edited
Loading

✌️

/cc @zendesk/wattle

Description

Fix CVE-2021-3807, CVE-2022-37601 and CVE-2022-37601.

Tasks

  • Include comments/inline docs where appropriate
  • Add unit tests
  • Update changelog here
  • Add label from one of 'patch'/'minor'/'major' if you want to create a release when merged

References

Risks

  • [low] What features does this touch? Update development packages.

Rollback Plan

  1. Quickly roll back to the prior release so that customers can refresh to resolve their issue.
  2. Revert this PR to restore the master branch to a deployable green state.
  3. Notify the author.

@mmassaki mmassaki changed the title Dedupe and update packages to fix vulnerabilities [APPS-7391] Dedupe and update packages to fix vulnerabilities Apr 13, 2025
@mmassaki mmassaki merged commit e8338f6 into master Apr 15, 2025
4 checks passed
@mmassaki mmassaki deleted the update-vulnerable-dependencies branch April 15, 2025 05:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@aishkan aishkan aishkan approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@mmassaki @aishkan