Skip to content

Janmooij/scc 3443#208

Closed
janmooij wants to merge 70 commits intoUnleash:mainfrom
checkout-anywhere:janmooij/SCC-3443
Closed

Janmooij/scc 3443#208
janmooij wants to merge 70 commits intoUnleash:mainfrom
checkout-anywhere:janmooij/SCC-3443

Conversation

@janmooij
Copy link
Copy Markdown

About the changes

Fixes https://github.com/checkout-anywhere/unleash-proxy/security/dependabot/5

Important files

Discussion points

robmonct and others added 26 commits October 2, 2024 13:21
fix(ci): path-to-regexp vulnerability
* fix: add resolutions for path-to-regexp for router (Unleash#198)

* task: resolve cookie to 1.0.0 release (Unleash#199)

* 1.4.8

* docs: add maintenance mode (Unleash#202)

* Remove duplicate note (plus broken link) (Unleash#203)

* Bumped express to version 4.21.2.  This was required to resolve CVE-2024-52798 on path-to-regexp package. (Unleash#205)

Co-authored-by: stefano <stefano@zebedee.io>

* 1.4.9

* fix: deps

---------

Co-authored-by: Christopher Kolstad <chriswk@getunleash.io>
Co-authored-by: Fredrik Strand Oseberg <fredrik.no@gmail.com>
Co-authored-by: Melinda Fekete <melinda.fekete@getunleash.io>
Co-authored-by: spirrello <spirrello@users.noreply.github.com>
Co-authored-by: stefano <stefano@zebedee.io>
Co-authored-by: Gastón Fournier <gaston@getunleash.io>
* chore(ci): workflow permissions

* chore(ci): workflow permissions
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.12.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants