Skip to content

Conversation

@gary-archer
Copy link
Collaborator

@gary-archer gary-archer commented Jan 2, 2026

  • Update to Node.js 22 and use its built-in fetch library rather than node-fetch
  • Update to Express 5 and we no longer need to use asyncCatch
  • Remove base64url and url-parse libraries which both have security vulnerabilities
  • Tested integration tests, end-to-end tests and SPA integration

@gary-archer gary-archer changed the title Dependency updates and security fixes Fix security warnings and update dependency versions Jan 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants