Skip to content

CCM-13539: Address dependendabot issues#1032

Merged
simonlabarere merged 4 commits into
releasefrom
feature/CCM-13539_dependabot_updates
Jan 6, 2026
Merged

CCM-13539: Address dependendabot issues#1032
simonlabarere merged 4 commits into
releasefrom
feature/CCM-13539_dependabot_updates

Conversation

@simonlabarere
Copy link
Copy Markdown
Contributor

@simonlabarere simonlabarere commented Jan 5, 2026

Summary

Should fix the issues raised by dependabot: https://github.com/NHSDigital/communications-manager-api/security/dependabot
Mainly the vulnerabilities in:

  • urllib3
  • qs
  • node-forge
  • authlib
  • glob
  • filelock
  • body-parser
  • js-yaml
  • cryptography

This should make the following PRs obsolete:

Reviews Required

  • Dev
  • Test
  • Tech Author
  • Product Owner

Checklist

  • Brief description of work completed, and any technical decisions made as part of the PR
  • PR link added as a comment to the relevant JIRA ticket
  • PR link shared on Slack and/or Teams
  • 2 reviews received
  • Tester approval

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jan 5, 2026

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-13539

Comment thread package.json Outdated
@simonlabarere simonlabarere added the dependencies Pull requests that update a dependency file label Jan 5, 2026
@lapenna-bjss lapenna-bjss self-assigned this Jan 5, 2026
lapenna-bjss
lapenna-bjss previously approved these changes Jan 5, 2026
Comment thread .tool-versions Outdated
Comment thread package.json Outdated
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jan 5, 2026

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-13539

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jan 5, 2026

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-13539

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jan 5, 2026

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-13539

@simonlabarere simonlabarere merged commit c864c22 into release Jan 6, 2026
6 checks passed
@simonlabarere simonlabarere deleted the feature/CCM-13539_dependabot_updates branch January 6, 2026 15:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants