From c7e2e1dabab3511e8dc511558610bb766ec67ceb Mon Sep 17 00:00:00 2001 From: Marcel Raschke <42359664+MarcelRaschke@users.noreply.github.com> Date: Sun, 2 May 2021 22:27:29 +0200 Subject: [PATCH 1/2] Create SECURITY.md --- SECURITY.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..034e848032 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +## Supported Versions + +Use this section to tell people about which versions of your project are +currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 5.1.x | :white_check_mark: | +| 5.0.x | :x: | +| 4.0.x | :white_check_mark: | +| < 4.0 | :x: | + +## Reporting a Vulnerability + +Use this section to tell people how to report a vulnerability. + +Tell them where to go, how often they can expect to get an update on a +reported vulnerability, what to expect if the vulnerability is accepted or +declined, etc. From 9a520884f39272d4f6d8941ec7da3fdfc477ee1a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 22 Oct 2022 23:54:25 +0000 Subject: [PATCH 2/2] fix: upgrade botbuilder from 4.12.0-rc3 to 4.17.1 Snyk has created this PR to upgrade botbuilder from 4.12.0-rc3 to 4.17.1. See this package in npm: https://www.npmjs.com/package/botbuilder See this project in Snyk: https://app.snyk.io/org/marcelraschke/project/f93810f7-2e2e-405e-ab09-08928fac7953?utm_source=github&utm_medium=referral&page=upgrade-pr --- runtime/node/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/runtime/node/package.json b/runtime/node/package.json index 723f9da6c7..3cf0f2cb41 100644 --- a/runtime/node/package.json +++ b/runtime/node/package.json @@ -17,7 +17,7 @@ "dependencies": { "@azure/functions": "^1.2.2", "adaptive-expressions": "4.12.0-rc3", - "botbuilder": "4.12.0-rc3", + "botbuilder": "4.17.1", "botbuilder-ai": "4.12.0-rc3", "botbuilder-dialogs": "4.12.0-rc3", "botbuilder-dialogs-adaptive": "4.12.0-rc3-preview",