Skip to content

Conversation

@Pratham1812
Copy link

Proposed changes

Solves #5336

Types of changes

What types of changes does your code introduce to Litmus? Put an x in the boxes that apply

  • New feature (non-breaking change which adds functionality)
  • Bugfix (non-breaking change which fixes an issue)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation Update (if none of the other choices applies)

Checklist

Put an x in the boxes that apply. You can also fill these out after creating the PR. If you're unsure about any of them, don't hesitate to ask. We're here to help! This is simply a reminder of what we are going to look for before merging your code.

  • I have read the CONTRIBUTING doc
  • I have signed the commit for DCO to be passed.
  • Lint and unit tests pass locally with my changes
  • I have added tests that prove my fix is effective or that my feature works (if appropriate)
  • I have added necessary documentation (if appropriate)

Dependency

  • Please add the links to the dependent PR need to be merged before this (if any).

Special notes for your reviewer:

All the packages with critical vulnerabilities have been upgraded.

It was tested by running trivy fs . --severity HIGH,CRITICAL

ispeakc0de and others added 2 commits December 7, 2025 15:10
…uschaos#5331)

Signed-off-by: Shubham Chaudhary <shubham.chaudhary@harness.io>
Signed-off-by: Pratham Agarwal <agarwalpratham1812@gmail.com>
Signed-off-by: Pratham Agarwal <agarwalpratham1812@gmail.com>
@SarthakJain26
Copy link
Contributor

Hi @Pratham1812, have you tried building the code after these changes? Please cross check if there are any breaking changes with the package upgrades

@PriteshKiri
Copy link
Contributor

PriteshKiri commented Dec 15, 2025

Hey @Pratham1812

Any updates on this?

Pratham1812 and others added 3 commits December 17, 2025 10:03
Signed-off-by: Pratham Agarwal <agarwalpratham1812@gmail.com>
Signed-off-by: Pratham Agarwal <agarwalpratham1812@gmail.com>
@Pratham1812
Copy link
Author

Hey @PriteshKiri and @SarthakJain26 have upgraded the dependencies and also fixed all the failing tests in the repo.

@Pratham1812
Copy link
Author

Interestingly this vulnerability is not identified when I build the image locally (for graphql server) ->
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants