Skip to content

Commit

Permalink
Upgrade dwn-server version
Browse files Browse the repository at this point in the history
- Update `dwn-server` dev dependency to `0.1.16` which addresses [CVE-2024-29041](GHSA-rv95-896h-c2vc) - Express.js Open Redirect in malformed URLs
- Add `DWN_SERVER_PACKAGE_JSON` path to `dwn-server` script so that `/info` endpoint can populate the appropriate version info.
  • Loading branch information
LiranCohen authored Apr 1, 2024
1 parent 3e79652 commit 30eae0f
Show file tree
Hide file tree
Showing 3 changed files with 7 additions and 6 deletions.
1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@
**/EVENTLOG/
**/INDEX/
**/MESSAGESTORE/
**/RESOLVERCACHE/
data
compiled

Expand Down
4 changes: 2 additions & 2 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
"scripts": {
"clean": "pnpm npkill -d $(pwd)/packages -t dist && pnpm npkill -d $(pwd) -t node_modules",
"build": "pnpm --recursive --stream build",
"dwn-server": "node node_modules/@web5/dwn-server/dist/esm/src/main.js || true",
"dwn-server": "DWN_SERVER_PACKAGE_JSON=node_modules/@web5/dwn-server/package.json node node_modules/@web5/dwn-server/dist/esm/src/main.js || true",
"test:node": "pnpm --recursive test:node"
},
"repository": {
Expand All @@ -28,7 +28,7 @@
"devDependencies": {
"@npmcli/package-json": "5.0.0",
"@typescript-eslint/eslint-plugin": "6.4.0",
"@web5/dwn-server": "0.1.15",
"@web5/dwn-server": "0.1.16",
"eslint-plugin-mocha": "10.1.0",
"npkill": "0.11.3"
},
Expand Down
8 changes: 4 additions & 4 deletions pnpm-lock.yaml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

0 comments on commit 30eae0f

Please sign in to comment.