Skip to content

CAAS-3827: Address critical vulnerability#31

Merged
JamesYoungNHS merged 4 commits into
mainfrom
feature/CAAS-3827_address_vulnerabilities
Jun 9, 2026
Merged

CAAS-3827: Address critical vulnerability#31
JamesYoungNHS merged 4 commits into
mainfrom
feature/CAAS-3827_address_vulnerabilities

Conversation

@JamesYoungNHS

@JamesYoungNHS JamesYoungNHS commented May 28, 2026

Copy link
Copy Markdown
Contributor

Description

Address critical fast-xml-parser vulnerability

Dev test evidence. Updating the caas repo to use the latest CI pipeline results in a successful monorepo CI run: https://github.com/NHSDigital/caas/actions/runs/26878604790

Branch: feature/CAAS-3827_update_transfer_artifact

Significant Changes

  • upgrade dependencies to address critical fast-xml-parser vulnerability

Checklist

  • Ensure your branch name matches one of the patterns that will trigger the CI checks (feature/** or bugfix/**).
  • Brief description of work completed, and any technical decisions made as part of the PR
  • PR link added as a comment to the relevant JIRA ticket
  • PR Labels have been applied to the Pull Request
  • Reviewers have been assigned (only if specific named reviewers are necessary)
  • PR link shared on Slack and Teams
  • 2 reviews received

@JamesYoungNHS JamesYoungNHS requested a review from a team as a code owner May 28, 2026 17:27
@JamesYoungNHS JamesYoungNHS added the dependencies Pull requests that update a dependency file label May 28, 2026
@JamesYoungNHS JamesYoungNHS changed the title CAAS-3827 - Address critical vulnerability CAAS-3827: Address critical vulnerability May 28, 2026
gabriel-pq
gabriel-pq previously approved these changes May 29, 2026
Comment thread package.json Outdated
@sonarqubecloud

sonarqubecloud Bot commented Jun 2, 2026

Copy link
Copy Markdown

@JamesYoungNHS

Copy link
Copy Markdown
Contributor Author

Dev test evidence. Updating the caas repo to use the latest CI pipeline results in a successful monorepo CI run: https://github.com/NHSDigital/caas/actions/runs/26878604790

Branch: feature/CAAS-3827_update_transfer_artifact

@JamesYoungNHS JamesYoungNHS merged commit 80aa07c into main Jun 9, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants