Skip to content

BB2-4989: Apply version updates for security - #117

Merged
JamesDemeryNava merged 1 commit into
mainfrom
jamesdemery/bb2-4989-security-updates
Jul 28, 2026
Merged

BB2-4989: Apply version updates for security#117
JamesDemeryNava merged 1 commit into
mainfrom
jamesdemery/bb2-4989-security-updates

Conversation

@JamesDemeryNava

Copy link
Copy Markdown
Contributor

JIRA Ticket:
BB2-4989

What Does This PR Do?

Updates different libraries used by this project to address security vulnerabilities. Other libraries were also updated so they would be compatible with the libraries that needed to be updated for security vulnerabilities.

What Should Reviewers Watch For?

If you're reviewing this PR, please check for these things in particular:

Validation

  • Pull the branch down, run an npm install, then:
    • Run npm ls js-yaml: Should see a version 3.15.0 and a version 4.3.0
    • Run npm ls typedoc: Should see version 0.28.20
    • Run npm ls brace-expansion: Should see version 5.0.8
    • Run npm ls fast-uri: Should see version 3.1.4
  • I validated this by adding the node-sdk directory to the node sample client, then going through an auth flow

What Security Implications Does This PR Have?

Please indicate if this PR does any of the following:

  • Adds any new software dependencies
  • Modifies any security controls
  • Adds new transmission or storage of data
  • Any other changes that could possibly affect security?
  • Yes, one or more of the above security implications apply. This PR must not be merged without the ISSO or team security engineer's approval.

@annamontare-nava annamontare-nava left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

@sb-DarenDean

Copy link
Copy Markdown

LGTM! We couldn't go higher with the fast uri? Good in any case though. Thanks.

@JamesDemeryNava

Copy link
Copy Markdown
Contributor Author

LGTM! We couldn't go higher with the fast uri? Good in any case though. Thanks.

Went with 3.1.4 as it was released 9 days ago and has the most recent downloads of the three recent versions 🤷 happy to update it to 4.1.1 if that is preferred.

@JamesDemeryNava
JamesDemeryNava merged commit 4185ee9 into main Jul 28, 2026
4 checks passed
@sb-DarenDean

Copy link
Copy Markdown

LGTM! We couldn't go higher with the fast uri? Good in any case though. Thanks.

Went with 3.1.4 as it was released 9 days ago and has the most recent downloads of the three recent versions 🤷 happy to update it to 4.1.1 if that is preferred.

That's fine. This (3.1.4) works. Thanks!!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants