Package vulnerability audit dec 2024

[SeriousHorncat]

Checklist before requesting a review

• I have performed a self-review of my code.
• My code follows the style guidelines enforced by static analysis tools.
• If it is a core feature, I have added thorough tests.
• My changes generate no new warnings.
• New and existing unit tests pass locally with my changes.
• Will this be part of a product update? If yes, please write one phrase about this update.

Pull Request Details

Wrike Ticket - Issue Title

Changes made:

Upgrading package dependencies to avoid the following vulnerabilities:

• https://github.com/uab-cgds-worthey/rosalution/security/dependabot/38
• https://github.com/uab-cgds-worthey/rosalution/security/dependabot/40
• https://github.com/uab-cgds-worthey/rosalution/security/dependabot/47
• https://github.com/uab-cgds-worthey/rosalution/security/dependabot/41
• https://github.com/uab-cgds-worthey/rosalution/security/dependabot/44
• https://github.com/uab-cgds-worthey/rosalution/security/dependabot/45
• https://github.com/uab-cgds-worthey/rosalution/security/dependabot/46
• https://github.com/uab-cgds-worthey/rosalution/security/dependabot/43

To Review:

• Static Analysis by Reviewer

• Packages have updated versions and for packages that couldn't upgrade away from the vulnerability, are forced to resolve to the fixed package.
  To check this run the following commands:

  ./setup.sh clean
  
  cd frontend
  yarn audit
  
  yarn test:coverage
  yarn lint

  

  ./setup.sh clean
  
  cd system-tests
  yarn audit

  

• The changes made to micro service dependencies are working as intended/rendered correctly.
  To check this run the following commands:

  docker compose down
  
  docker system prune -a --volumes
  docker compose up -d

  Visit any analysis and attach a file with the '.gb' file extension.

  

• All Github Actions checks have passed.

[fatimarabab]

Packages Audited:
Frontend -

System Tests -

[fatimarabab]

Able to attach .gb files!

[fatimarabab]

Approved!