TAMULib / SAGE

Search Aggregation Engine

MIT License

6 stars 2 forks source link

Issue 468: Security fixes for: minimatch and qs. #472

Closed kaladay closed 1 year ago

kaladay commented 1 year ago

Description

Fix child dependencies that are coming in with insecure versions. This is based on the npm list --depth=100 and considers what is reported by dependabot for Sage.

see: https://github.com/TAMULib/SAGE/security/dependabot/37 see: https://github.com/TAMULib/SAGE/security/dependabot/34

Fixes #468

Type of change

Please delete options that are not relevant.

[x] Security related.

How Has This Been Tested?

[X] Not tested, Needs QA.

Checklist:

[x] My code follows the style guidelines of this project
[x] I have performed a self-review of my code
[x] My changes generate no new warnings

coveralls commented 1 year ago

Coverage remained the same at 45.202% when pulling 5b83e2a9708d368bc2a59e5a4ddc01d9ac72c383 on 2022_dec-security into b125a3fafb9d5f51c369ea93a69d91f322de2fad on staging.