rudderlabs
diff --git a/‎.github/dependabot.yml‎
Lines changed: 12 additions & 4 deletions b/‎.github/dependabot.yml‎
Lines changed: 12 additions & 4 deletions
diff --git a/‎.github/workflows/deploy-npm.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/deploy-npm.yml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/workflows/test.yml‎
Lines changed: 2 additions & 2 deletions b/‎.github/workflows/test.yml‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎CHANGELOG.md‎
Lines changed: 7 additions & 0 deletions b/‎CHANGELOG.md‎
Lines changed: 7 additions & 0 deletions
diff --git a/‎__tests__/index.test.js‎
Lines changed: 40 additions & 7 deletions b/‎__tests__/index.test.js‎
Lines changed: 40 additions & 7 deletions
@@ -3,17 +3,25 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/" 
     schedule:
-      interval: "daily"
+      interval: "weekly"
     target-branch: "develop"
   - package-ecosystem: "npm"
     directory: "/" 
     schedule:
-      interval: "daily"
+      interval: "weekly"
+    target-branch: "develop"
     groups:
-      npm-deps:
+      npm-prod-deps:
         patterns:
           - "*"
         update-types:
           - "minor"
           - "patch"
-    target-branch: "develop"
+        dependency-type: "production"
+      npm-dev-deps:
+        patterns:
+          - "*"
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
@@ -52,7 +52,7 @@ jobs:
       - name: Send message to Slack channel
         id: slack
         continue-on-error: true
-        uses: slackapi/slack-github-action@485a9d42d3a73031f12ec201c457e2162c45d02d  # v2.0.0
+        uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a  # v2.1.1
         env:
           PROJECT_NAME: 'Node.js SDK'
           NPM_PACKAGE_URL: 'https://www.npmjs.com/package/@rudderstack/rudder-sdk-node'
 
@@ -38,13 +38,13 @@ jobs:
           ./scripts/fix-reports-path-in-github-runner.sh
 
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@0303d6b62e310685c0e34d0b9cde218036885c4d  # v5.0.0
+        uses: SonarSource/sonarqube-scan-action@2500896589ef8f7247069a56136f8dc177c27ccf  # v5.2.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574  # v5.4.0
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24  # v5.4.3
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
         with:
 
@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [2.1.5](https://github.com/rudderlabs/rudder-sdk-node/compare/v2.1.4...v2.1.5) (2025-07-22)
+
+
+### Bug Fixes
+
+* package.json & package-lock.json to reduce vulnerabilities ([#169](https://github.com/rudderlabs/rudder-sdk-node/issues/169)) ([23d9be9](https://github.com/rudderlabs/rudder-sdk-node/commit/23d9be94b352b9dea885cc74d2c22f67fda24d10))
+
 ### [2.1.4](https://github.com/rudderlabs/rudder-sdk-node/compare/v2.1.3...v2.1.4) (2025-03-24)
 
 
 
@@ -28,6 +28,12 @@ const port = 4063;
 const separateAxiosClientPort = 4064;
 const retryCount = 2;
 
+let server;
+// Track active timeouts to clear them during cleanup
+let activeTimeouts = [];
+// Track all created clients to clean up their timers
+let createdClients = [];
+
 const createClient = async (options) => {
   const newOptions = { ...options, logLevel: 'error', gzip: false };
   if (!newOptions.host && !newOptions.dataPlaneUrl) {
@@ -40,11 +46,12 @@ const createClient = async (options) => {
   client.flush = pify(client.flush.bind(client));
   client.flushed = true;
 
+  // Track the client for cleanup
+  createdClients.push(client);
+
   return client;
 };
 
-let server;
-
 test.before((t) => {
   let count = 0;
   server = express()
@@ -73,14 +80,17 @@ test.before((t) => {
       }
 
       if (batch[0] === 'timeout') {
-        return globalThis.setTimeout(() => res.end(), 5000);
+        // Store the timeout ID so we can clear it during cleanup
+        const timeoutId = globalThis.setTimeout(() => res.end(), 5000);
+        activeTimeouts.push(timeoutId);
+        return timeoutId;
       }
 
       // console.log("=== response===", JSON.stringify(req.body));
       // res.json(req.body);
       if (batch[0] === 'axios-retry') {
         count += 1;
-        if (count === retryCount) return res.json({});
+        if (count === retryCount) return res.status(200).json({});
         return res.status(503).json({
           error: { message: 'Service Unavailable' },
         });
@@ -92,13 +102,36 @@ test.before((t) => {
         });
       }
 
-      return res.json({});
+      return res.status(200).json({});
     })
     .listen(port, t.end);
 });
 
-test.after(() => {
-  server.close();
+test.after.always(async () => {
+  // Clear any active timeouts before closing the server
+  activeTimeouts.forEach((timeoutId) => {
+    globalThis.clearTimeout(timeoutId);
+  });
+  activeTimeouts = [];
+
+  // Clean up all Analytics clients by clearing their timers
+  createdClients.forEach((client) => {
+    if (client.timer) {
+      clearTimeout(client.timer);
+    }
+    if (client.flushTimer) {
+      clearTimeout(client.flushTimer);
+    }
+  });
+  createdClients = [];
+
+  // Properly close the server and wait for it to finish
+  if (server) {
+    await new Promise((resolve) => {
+      server.close(resolve);
+    });
+  }
+
   Sinon.restore();
 });