Skip to content

Commit 4079b1b

Browse files
chore(deps): update hono from v4.11.3 to fix high severity (#2393)
* chore(deps): update hono from v4.11.3 to fix high severity CVE-2026-22818 update hono from v4.11.3 to fix high severity CVE-2026-22818 GH-2392 * fix(cli): upgrade typescript-eslint to support Node 22 upgrade typescript-eslint to support Node 22 GH-2392 * docs(cli): added dummy commit added dummy commit GH-2392 * fix(workflows): fix audit workflows fix audit workflows GH-2392
1 parent 369cc2f commit 4079b1b

File tree

11 files changed

+11383
-15136
lines changed

11 files changed

+11383
-15136
lines changed

.github/workflows/audit.yml

Lines changed: 34 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -7,27 +7,49 @@ on:
77
branches:
88
- master
99
jobs:
10-
npm_audit:
10+
node_matrix_audit:
1111
runs-on: ubuntu-latest
12+
strategy:
13+
matrix:
14+
node-version: [20, 22, 24]
1215
steps:
13-
# Checks-out your repository under $GITHUB_WORKSPACE
1416
- uses: actions/checkout@v3
1517
- uses: actions/setup-node@v3
1618
with:
17-
node-version: 20.x
19+
node-version: ${{ matrix.node-version }}
1820

1921
- name: Install Monorepo Deps
2022
run: npm ci --ignore-scripts
21-
- name: Run After Install Script
22-
run: npm run afterinstall
23+
- name: Run After Install Script
24+
run: npm run afterinstall
2325

2426
- name: Run npm audit
25-
run: >
26-
npm audit --json |
27-
node -e '
27+
run: |
28+
npm audit --json | node -e '
2829
const fs = require("fs");
29-
const auditLevel = (process.argv[1] || "critical").toLowerCase();
30-
const { vulnerabilities } = JSON.parse(fs.readFileSync(0).toString("utf-8"));
31-
const result = Object.values(vulnerabilities).filter((i) => i.severity.toLowerCase() === auditLevel);
32-
console.table(JSON.stringify(result, null, 2));
30+
const auditLevel = (process.argv[2] || "critical").toLowerCase();
31+
const raw = fs.readFileSync(0).toString("utf-8");
32+
let vulnerabilities = {};
33+
try {
34+
const parsed = JSON.parse(raw || "{}");
35+
vulnerabilities = parsed.vulnerabilities || {};
36+
} catch (e) {
37+
console.error("Failed to parse npm audit output:", e.message || e);
38+
process.exit(2);
39+
}
40+
const result = Object.values(vulnerabilities).filter((i) => i && i.severity && i.severity.toLowerCase() === auditLevel);
41+
if (result.length) {
42+
console.log(JSON.stringify(result, null, 2));
43+
process.exit(1);
44+
} else {
45+
console.log('[]');
46+
}
3347
' high
48+
49+
npm_audit:
50+
runs-on: ubuntu-latest
51+
needs: node_matrix_audit
52+
if: success()
53+
steps:
54+
- name: Final status
55+
run: echo "✅ npm audit passed for Node.js 20, 22 and 24"

.github/workflows/main.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
node-version: ${{ matrix.node-version }}
2020
- name: Install Monorepo Deps
2121
run: npm ci --ignore-scripts
22-
- name: Run After Install Script
22+
- name: Run After Install Script
2323
run: npm run afterinstall
2424
- name: Run Test Cases
2525
run: npm run test --workspaces --if-present

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
<p align="center">
22
<a href="https://sourcefuse.github.io/arc-docs/arc-api-docs" target="blank"><img src="https://github.com/sourcefuse/loopback4-microservice-catalog/blob/master/docs/assets/logo-dark-bg.png?raw=true" width="180" alt="ARC Logo" /></a>
3-
</p>
3+
</p>
44

55
<p align="center">
66
ARC by SourceFuse is an open-source Rapid Application Development framework for developing cloud-native enterprise applications, utilizing prebuilt microservices and standardized architectures for deployment on private and public clouds.

0 commit comments

Comments
 (0)