Merge pull request #181 from swrlab/dev/sec-ansi-regex

EventHub: Security-Update

.github/workflows/ingest-pull.yml

@@ -25,7 +25,7 @@ jobs:
       matrix:
         STAGES: [dev]
     steps:
-    - uses: actions/setup-node@v2.3.0
+    - uses: actions/setup-node@v2.4.0
       with:
         node-version: ${{ env.NODE_VERSION }}
 
@@ -66,7 +66,7 @@ jobs:
     needs: security
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/setup-node@v2.3.0
+    - uses: actions/setup-node@v2.4.0
       with:
         node-version: ${{ env.NODE_VERSION }}
 

.github/workflows/ingest-push.yml

@@ -30,7 +30,7 @@ jobs:
       matrix:
         STAGES: [dev]
     steps:
-    - uses: actions/setup-node@v2.3.0
+    - uses: actions/setup-node@v2.4.0
       with:
         node-version: ${{ env.NODE_VERSION }}
 

CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.1.5] - 2021-09-27
+
+### Changed
+
+- Fix for SNYK-JS-ANSIREGEX-1583908
+- Update project dependencies
+- Update github actions
+
 ## [1.1.4] - 2021-09-13
 
 ### Changed

openapi.json

@@ -11,7 +11,7 @@
       "name": "European Union Public License 1.2",
       "url": "https://spdx.org/licenses/EUPL-1.2.html"
     },
-    "version": "1.1.4"
+    "version": "1.1.5"
   },
   "externalDocs": {
     "description": "ARD-Eventhub Documentation",

openapi.yaml

@@ -10,7 +10,7 @@ info:
   license:
     name: European Union Public License 1.2
     url: 'https://spdx.org/licenses/EUPL-1.2.html'
-  version: 1.1.4
+  version: 1.1.5
 externalDocs:
   description: ARD-Eventhub Documentation
   url: 'https://swrlab.github.io/ard-eventhub/'

package.json

@@ -1,8 +1,11 @@
 {
 	"name": "ard-eventhub",
-	"version": "1.1.4",
+	"version": "1.1.5",
 	"description": "ARD system to distribute real-time (live) metadata for primarily radio broadcasts.",
 	"main": "./src/ingest/index.js",
+	"engines": {
+		"node": ">=14.0.0"
+	},
 	"scripts": {
 		"docs:serve": "docsify serve . --port 3000",
 		"coreId": "node ./src/coreId/index.js",
@@ -28,7 +31,7 @@
 		"express": "4.17.1",
 		"express-openapi-validator": "^4.13.1",
 		"firebase-admin": "^9.11.1",
-		"google-auth-library": "^7.9.1",
+		"google-auth-library": "^7.9.2",
 		"jsonwebtoken": "^8.5.1",
 		"moment": "^2.29.1",
 		"node-crc": "^1.3.2",
@@ -49,12 +52,13 @@
 		"eslint-plugin-chai-friendly": "^0.7.2",
 		"eslint-plugin-swr": "0.0.5",
 		"license-compliance": "^1.2.2",
-		"mocha": "^9.1.1",
-		"nodemon": "^2.0.12",
-		"prettier": "^2.4.0"
+		"mocha": "^9.1.2",
+		"nodemon": "^2.0.13",
+		"prettier": "^2.4.1"
 	},
-	"engines": {
-		"node": ">=14.0.0"
+	"resolutions": {
+		"ansi-regex": "^5.0.1",
+		"strip-ansi": "^6.0.1"
 	},
 	"prettier": "@swrlab/swr-prettier-config"
 }