Skip to content

Fix audit issues - #4

Closed
bexsoft wants to merge 67 commits into
Alevsk:masterfrom
miniohq:fix-audit-issues
Closed

bexsoft wants to merge 67 commits into
Alevsk:masterfrom
miniohq:fix-audit-issues

Conversation

@bexsoft

@bexsoft bexsoft commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

What does this do?

Updated available dependencies to latest versions.

NOTE: React Router cannot be updated as latest patched version is v7 and this implies a complete rewrite of the routing paths that is not required as this is a deprecated project.

cesnietor and others added 30 commits October 16, 2024 09:00
update minio/pkg (to disable downloading public key)
Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) from 2.0.6 to 2.0.7.
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.7/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v2.0.6...v2.0.7)

---
updated-dependencies:
- dependency-name: http-proxy-middleware
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Fix join slack button

* run prettier on changes
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.1)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Removed Menu links for Support tools
- Removed support in UI for registering cluster
- Removed Subnet support
- Removed Websockets for tools support
- Removed Support endpoint
- Removed Subnet support endpoints

Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
* Deprecated Sire Replication in UI

Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>

* fix-workflow-issue

---------

Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Co-authored-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Co-authored-by: Benjamin Perez <benjamin@bexsoft.net>
upgrade to MDS v1.0.4
When the openid login page sends the refresh token in 
the login redirection url, the code will get it. This is
helpful to support refresh openid user claims routine.

Co-authored-by: Anis Eleuch <anis@min.io>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from 7.0.3 to 7.0.6.
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Release v1.7.5

Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>

* Update CHANGELOG.md

Co-authored-by: Victor Bayas <victorsbayas@gmail.com>

---------

Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Co-authored-by: Benjamin Perez <benjamin@bexsoft.net>
Co-authored-by: Cesar N. <11819101+cesnietor@users.noreply.github.com>
Co-authored-by: Victor Bayas <victorsbayas@gmail.com>
Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.7 to 3.3.8.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.8)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Prakash Senthil Vel <23444145+prakashsvmx@users.noreply.github.com>
…d (#3496)

* trim whitespaces for login request
* simplify trimspace calls
bexsoft and others added 29 commits May 5, 2025 13:50
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Co-authored-by: Benjamin Perez <benjamin@bexsoft.net>
* License Comparisson updates

Signed-off-by: Daniel Valdivia <hola@danielvaldivia.com>

* Prettier

---------

Signed-off-by: Daniel Valdivia <hola@danielvaldivia.com>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
* Remove more unused APIs

* prettier

* Fix Test

* Fix tests

* Remove SSO Integreation

* fix tests

* lint
- This change doesn't include the new logo for Object Store, this needs to be addressed on MDS

Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Co-authored-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Co-authored-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Added Privacy Policy link

Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Co-authored-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
- Removed stats call
- Avoid show modal on every load as initially planned

Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Co-authored-by: Alex <33497058+bexsoft@users.noreply.github.com>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Resolves stdlib vulnerabilities (GO-2026-4601/4602/4603/4865/4870/4946/4947)
by moving to Go 1.25.9, and clears the remaining transitive vulns by
bumping golang.org/x/crypto to v0.46.0, golang.org/x/net to v0.48.0, and
google.golang.org/grpc to v1.79.3.

Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>
@bexsoft bexsoft closed this Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.