Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AUDIT FIX: crypto-js for connected test app #566

Merged
merged 1 commit into from
Oct 30, 2023

Conversation

raplemie
Copy link
Contributor

Changes

Updated crypto-js to 4.2.0 to fix GHSA-xwcq-pm8m-c4vf

Crypto-Js was used in our connected test app only, so this is not a user issue.

Testing

N/A

@raplemie raplemie requested a review from a team as a code owner October 30, 2023 13:16
@raplemie raplemie enabled auto-merge (squash) October 30, 2023 13:16
@raplemie raplemie added the internal No change in this PR have impact on the public package features. label Oct 30, 2023
@raplemie raplemie merged commit 7e35929 into master Oct 30, 2023
@raplemie raplemie deleted the raplemie/fixAuditCryptoJs branch October 30, 2023 15:04
@joehenry9498
Copy link
Contributor

@Mergifyio backport release/4.6.x

Copy link
Contributor

mergify bot commented Nov 17, 2023

backport release/4.6.x

✅ Backports have been created

mergify bot pushed a commit that referenced this pull request Nov 17, 2023
(cherry picked from commit 7e35929)

# Conflicts:
#	common/config/rush/pnpm-lock.yaml
#	common/config/rush/variants/core-3x/pnpm-lock.yaml
joehenry9498 pushed a commit that referenced this pull request Nov 17, 2023
(cherry picked from commit 7e35929)

# Conflicts:
#	common/config/rush/pnpm-lock.yaml
#	common/config/rush/variants/core-3x/pnpm-lock.yaml

Co-authored-by: Raphaël LEMIEUX <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
internal No change in this PR have impact on the public package features.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants