Merge pull request #179 from secvisogram/chore/dependency-updates

Chore/dependency updates

Author: christopher-exx

backend/package-lock.json

@@ -320,7 +320,6 @@ The following tests are not yet implemented and therefore missing:
 - Mandatory Test 6.1.48
 - Mandatory Test 6.1.49
 - Mandatory Test 6.1.50
-- Mandatory Test 6.1.51
 - Mandatory Test 6.1.53
 - Mandatory Test 6.1.54
 - Mandatory Test 6.1.55
@@ -332,7 +331,6 @@ The following tests are not yet implemented and therefore missing:
 - Recommended Test 6.2.20
 - Recommended Test 6.2.21
 - Recommended Test 6.2.24
-- Recommended Test 6.2.25
 - Recommended Test 6.2.26
 - Recommended Test 6.2.27
 - Recommended Test 6.2.28
@@ -350,7 +348,6 @@ The following tests are not yet implemented and therefore missing:
 - Recommended Test 6.2.40
 - Recommended Test 6.2.41
 - Recommended Test 6.2.42
-- Recommended Test 6.2.43
 - Recommended Test 6.2.44
 - Recommended Test 6.2.45
 - Recommended Test 6.2.46
@@ -434,6 +431,7 @@ export const mandatoryTest_6_1_40: DocumentTest
 export const mandatoryTest_6_1_41: DocumentTest
 export const mandatoryTest_6_1_43: DocumentTest
 export const mandatoryTest_6_1_45: DocumentTest
+export const mandatoryTest_6_1_51: DocumentTest
 export const mandatoryTest_6_1_52: DocumentTest
 ```
 
@@ -461,6 +459,8 @@ export const recommendedTest_6_2_17: DocumentTest
 export const recommendedTest_6_2_18: DocumentTest
 export const recommendedTest_6_2_22: DocumentTest
 export const recommendedTest_6_2_23: DocumentTest
+export const recommendedTest_6_2_25: DocumentTest
+export const recommendedTest_6_2_43: DocumentTest
 ```
 
 [(back to top)](#bsi-csaf-validator-lib)

csaf-validator-lib/README.md

@@ -3,19 +3,23 @@ import Ajv2020 from 'ajv/dist/2020.js'
 import cvss_v2_0 from '../schemas/cvss-v2.0.js'
 import cvss_v3_0 from '../schemas/cvss-v3.0.js'
 import cvss_v3_1 from '../schemas/cvss-v3.1.js'
-import cvss_v4_0 from './csafAjv/cvss-v4.0.js'
+import cvss_v4_0_1 from './csafAjv/cvss-v4.0.1.js'
 import meta from './csafAjv/meta.js'
+import draft_07_schema from './csafAjv/draft-07-schema.js'
 import formatAssertion from './csafAjv/format-assertion.js'
-import ssvcDecisionPointValueSelection from './csafAjv/Decision_Point_Value_Selection-1-0-1.js'
-import ssvcDecisionPoint from './csafAjv/Decision_Point-1-0-1.js'
+import ssvcDecisionPointValueSelection from './csafAjv/Decision_Point_Value_Selection-2-0-0.js'
 import { timestampRegex, validateTimestamp } from './dateHelper.js'
 
 const csafAjv = new Ajv2020({ strict: false, allErrors: true })
 addFormats(csafAjv)
+csafAjv.addMetaSchema(
+  draft_07_schema,
+  'http://json-schema.org/draft-07/schema#'
+)
 csafAjv.addSchema(cvss_v2_0, 'https://www.first.org/cvss/cvss-v2.0.json')
 csafAjv.addSchema(cvss_v3_0, 'https://www.first.org/cvss/cvss-v3.0.json')
 csafAjv.addSchema(cvss_v3_1, 'https://www.first.org/cvss/cvss-v3.1.json')
-csafAjv.addSchema(cvss_v4_0, 'https://www.first.org/cvss/cvss-v4.0.json')
+csafAjv.addSchema(cvss_v4_0_1, 'https://www.first.org/cvss/cvss-v4.0.1.json')
 csafAjv.addSchema(
   meta,
   'https://docs.oasis-open.org/csaf/csaf/v2.1/schema/meta.json'
@@ -26,11 +30,7 @@ csafAjv.addSchema(
 )
 csafAjv.addSchema(
   ssvcDecisionPointValueSelection,
-  'https://certcc.github.io/SSVC/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json'
-)
-csafAjv.addSchema(
-  ssvcDecisionPoint,
-  'https://certcc.github.io/SSVC/data/schema/v1/Decision_Point-1-0-1.schema.json'
+  'https://certcc.github.io/SSVC/data/schema/v2/Decision_Point_Value_Selection-2-0-0.schema.json'
 )
 
 csafAjv.addFormat('date-time', {