Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump Babel, PostCSS, and Vite to latest #210

Merged
merged 2 commits into from
Oct 19, 2023
Merged

Conversation

michaelnchin
Copy link
Member

Issue #, if available: CVE-2023-44270, CVE-2023-45133

Description of changes:

  • Bumped all @babel/* packages to latest version, postcss to 8.4.31, and vite to 4.5.0 for security fixes.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@codecov
Copy link

codecov bot commented Oct 19, 2023

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (b169cc8) 9.99% compared to head (7ce65ca) 9.99%.

Additional details and impacted files
@@          Coverage Diff          @@
##            main    #210   +/-   ##
=====================================
  Coverage   9.99%   9.99%           
=====================================
  Files        406     406           
  Lines      30143   30143           
  Branches     654     654           
=====================================
  Hits        3014    3014           
  Misses     26795   26795           
  Partials     334     334           
Flag Coverage Δ
unittests 9.99% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Contributor

@cubeddu cubeddu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, @michaelnchin
LGTM

@michaelnchin michaelnchin merged commit 0e30cf7 into main Oct 19, 2023
3 checks passed
@michaelnchin michaelnchin deleted the sec-fixes-9192023 branch October 19, 2023 22:37
cubeddu pushed a commit to cubeddu/graph-explorer that referenced this pull request Nov 6, 2023
* Bump Babel and PostCSS versions

* update changelog
michaelnchin added a commit that referenced this pull request Jan 5, 2024
* updating fetch for templated queries to be POST

* fix linter and pre commit issues

* fix linter SelectListBox node.value can be null

* changelog

* removed method get from fetch as it's defaults to get

* Bump Babel, PostCSS, and Vite to latest (#210)

* Bump Babel and PostCSS versions

* update changelog

* Bump crypto-js to 4.2.0 (#214)

* Bump crypto-js to 4.2.0

* update changelog

* merge

* Bye abstract class hello React hooks, test passing

* Fix error messages on schema fetch

* server does post calls instead of gets calls to neptune

* Fix type imports and update schema state

* Fix headers in useGEFetch and useSPARQL, and add
GET method to useOpenCypher and useGremlin

* Add body-parser middleware, created middleware to sign headers

* Refactor ConnectorProvider

* Add new connection configuration options

* Refactor useOpenCypher, useGremlin, useSPARQL, and useGEFetch

This commit refactors the `useOpenCypher`, `useGremlin`, `useSPARQL`, and `useGEFetch` functions. It updates the imports to include the `useConfiguration` function from the `core` module. It also modifies the function signatures to remove the `connection` parameter and instead retrieves the connection configuration using `useConfiguration`.

* Update fetch request timeout value

* Remove unused import in ConnectorProvider.tsx

* Add compression middleware to node-server.js

* Refactor aws4SigningMiddleware to use async/await

* adjusting header signature

* update

* IAM api call works for POST

* GET call return undefined

* Update IAM headers and fix query parameter in useGremlin

---------

Co-authored-by: Michael Chin <chnmch@amazon.com>
Co-authored-by: Michael Chin <mchin188@yahoo.com>
Co-authored-by: Juan Cubeddu <vcubjuan@amzon.com>
cubeddu added a commit to cubeddu/graph-explorer that referenced this pull request Jan 8, 2024
* updating fetch for templated queries to be POST

* fix linter and pre commit issues

* fix linter SelectListBox node.value can be null

* changelog

* removed method get from fetch as it's defaults to get

* Bump Babel, PostCSS, and Vite to latest (aws#210)

* Bump Babel and PostCSS versions

* update changelog

* Bump crypto-js to 4.2.0 (aws#214)

* Bump crypto-js to 4.2.0

* update changelog

* merge

* Bye abstract class hello React hooks, test passing

* Fix error messages on schema fetch

* server does post calls instead of gets calls to neptune

* Fix type imports and update schema state

* Fix headers in useGEFetch and useSPARQL, and add
GET method to useOpenCypher and useGremlin

* Add body-parser middleware, created middleware to sign headers

* Refactor ConnectorProvider

* Add new connection configuration options

* Refactor useOpenCypher, useGremlin, useSPARQL, and useGEFetch

This commit refactors the `useOpenCypher`, `useGremlin`, `useSPARQL`, and `useGEFetch` functions. It updates the imports to include the `useConfiguration` function from the `core` module. It also modifies the function signatures to remove the `connection` parameter and instead retrieves the connection configuration using `useConfiguration`.

* Update fetch request timeout value

* Remove unused import in ConnectorProvider.tsx

* Add compression middleware to node-server.js

* Refactor aws4SigningMiddleware to use async/await

* adjusting header signature

* update

* IAM api call works for POST

* GET call return undefined

* Update IAM headers and fix query parameter in useGremlin

---------

Co-authored-by: Michael Chin <chnmch@amazon.com>
Co-authored-by: Michael Chin <mchin188@yahoo.com>
Co-authored-by: Juan Cubeddu <vcubjuan@amzon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
No open projects
Status: ✅ Done
Development

Successfully merging this pull request may close these issues.

2 participants