Merge pull request #150 from secvisogram/chore/dependency-updates

update dependencies

Author: domachine

backend/package-lock.json

@@ -19,7 +19,7 @@
     "@types/chai": "^4.3.5",
     "@types/config": "^3.3.0",
     "@types/mocha": "^10.0.1",
-    "@types/node": "^18.16.16",
+    "@types/node": "^20.17.43",
     "ajv": "^8.11.2",
     "chai": "^4.3.7",
     "mocha": "^11.1.0",

backend/package.json

@@ -1,3 +1,2 @@
 //registry.npmjs.org/:_authToken=${NPM_TOKEN}
 @secvisogram:registry=https://registry.npmjs.org/
-always-auth=true

csaf-validator-lib/.npmrc

@@ -304,7 +304,7 @@ export default async function informativeTest_6_3_8(
         `${prefix}${branchIndex}/product/name`,
         branch.product?.name
       )
-      checkBranches(
+      await checkBranches(
         `${prefix}${branchIndex}/branches/`,
         Array.isArray(branch.branches) ? branch.branches : []
       )

csaf-validator-lib/lib/informativeTests/informativeTest_6_3_8.js

@@ -25,7 +25,7 @@ export default /** @type {const} */ ({
     { id: 'CWE-1038', name: 'Insecure Automated Optimizations' },
     {
       id: 'CWE-1039',
-      name: 'Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations',
+      name: 'Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism',
     },
     {
       id: 'CWE-104',
@@ -739,7 +739,16 @@ export default /** @type {const} */ ({
       id: 'CWE-1427',
       name: 'Improper Neutralization of Input Used for LLM Prompting',
     },
+    { id: 'CWE-1428', name: 'Reliance on HTTP instead of HTTPS' },
+    {
+      id: 'CWE-1429',
+      name: 'Missing Security-Relevant Feedback for Unexecuted Operations in Hardware Interface',
+    },
     { id: 'CWE-143', name: 'Improper Neutralization of Record Delimiters' },
+    {
+      id: 'CWE-1431',
+      name: 'Driving Intermediate Cryptographic State/Results to Hardware Module Outputs',
+    },
     { id: 'CWE-144', name: 'Improper Neutralization of Line Delimiters' },
     { id: 'CWE-145', name: 'Improper Neutralization of Section Delimiters' },
     {