From 70c73355cb27868e2dfd48699a858a3011e53278 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 17 Mar 2024 05:18:27 +0000 Subject: [PATCH 1/3] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6032459 - https://snyk.io/vuln/SNYK-JS-AXIOS-6124857 - https://snyk.io/vuln/SNYK-JS-AXIOS-6144788 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-JSONATA-6371513 - https://snyk.io/vuln/SNYK-JS-NODEMAILER-6219989 --- package.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index 894079cf..9b4ac99c 100644 --- a/package.json +++ b/package.json @@ -79,8 +79,8 @@ "@louislam/sqlite3": "15.1.6", "@vvo/tzdb": "^6.125.0", "args-parser": "~1.3.0", - "axios": "~0.28.0", - "axios-ntlm": "1.3.0", + "axios": "~1.6.4", + "axios-ntlm": "1.3.1", "badge-maker": "~3.3.1", "bcryptjs": "~2.4.3", "chardet": "~1.4.0", @@ -106,7 +106,7 @@ "iconv-lite": "~0.6.3", "isomorphic-ws": "^5.0.0", "jsesc": "~3.0.2", - "jsonata": "^2.0.3", + "jsonata": "^2.0.4", "jsonwebtoken": "~9.0.0", "jwt-decode": "~3.1.2", "kafkajs": "^2.2.4", @@ -115,13 +115,13 @@ "liquidjs": "^10.7.0", "mitt": "~3.0.1", "mongodb": "~4.17.1", - "mqtt": "~4.3.7", + "mqtt": "~5.3.5", "mssql": "~8.1.4", "mysql2": "~3.6.2", "nanoid": "~3.3.4", "node-cloudflared-tunnel": "~1.0.9", "node-radius-client": "~1.0.0", - "nodemailer": "~6.6.5", + "nodemailer": "~6.9.9", "nostr-tools": "^1.13.1", "notp": "~2.0.3", "openid-client": "^5.4.2", @@ -186,7 +186,7 @@ "qrcode": "~1.5.0", "rollup-plugin-visualizer": "^5.6.0", "sass": "~1.42.1", - "stylelint": "^15.10.1", + "stylelint": "^16.1.0", "stylelint-config-standard": "~25.0.0", "terser": "~5.15.0", "test": "~3.3.0", From 59c8706b518caf83c599d20a77f4c7090a6d621b Mon Sep 17 00:00:00 2001 From: bruhwhyamisobad <124473366+bruhwhyamisobad@users.noreply.github.com> Date: Sat, 16 Mar 2024 22:27:46 -0700 Subject: [PATCH 2/3] Update builder-go.dockerfile --- docker/builder-go.dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/builder-go.dockerfile b/docker/builder-go.dockerfile index 1d25843b..23c1d907 100644 --- a/docker/builder-go.dockerfile +++ b/docker/builder-go.dockerfile @@ -2,7 +2,7 @@ # Build in Golang # Run npm run build-healthcheck-armv7 in the host first, another it will be super slow where it is building the armv7 healthcheck ############################################ -FROM golang:1.19-buster +FROM golang:bookworm WORKDIR /app ARG TARGETPLATFORM COPY ./extra/ ./extra/ From 69f48ac9fb2ebb8d51d9b5acbfc3e979f4f63d08 Mon Sep 17 00:00:00 2001 From: bruhwhyamisobad <124473366+bruhwhyamisobad@users.noreply.github.com> Date: Sat, 16 Mar 2024 22:27:59 -0700 Subject: [PATCH 3/3] Update debian-base.dockerfile --- docker/debian-base.dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/debian-base.dockerfile b/docker/debian-base.dockerfile index 77b7d37f..71a84b18 100644 --- a/docker/debian-base.dockerfile +++ b/docker/debian-base.dockerfile @@ -1,5 +1,5 @@ # If the image changed, the second stage image should be changed too -FROM node:20-bookworm-slim AS base2-slim +FROM node:bookworm-slim AS base2-slim ARG TARGETPLATFORM # Specify --no-install-recommends to skip unused dependencies, make the base much smaller!