Update dependencies to fix CVE-2024-28103

sul-dlss / sdr-api

HTTP API for the Stanford Digital Repository

https://sul-dlss.github.io/sdr-api/

3 stars 0 forks source link

Update dependencies to fix CVE-2024-28103 #682

Closed aaron-collier closed 5 months ago

aaron-collier commented 5 months ago

Why was this change made? 🤔

Fixes CVE-2024-28103 and avoids the need for `SKIP_BUNDLE_AUDIT=true' on deploy

How was this change tested? 🤨

⚡ ⚠ If this change has cross service impact, including writes to shared file systems, run integration tests (e.g. create_object_h2_spec) and/or test in [stage|qa] environment, in addition to specs. ⚡