Skip to content

Update dependencies and enhance security measures#77

Merged
DMJoh merged 47 commits intomainfrom
develop
Mar 29, 2026
Merged

Update dependencies and enhance security measures#77
DMJoh merged 47 commits intomainfrom
develop

Conversation

@DMJoh
Copy link
Copy Markdown
Owner

@DMJoh DMJoh commented Mar 15, 2026

No description provided.

dependabot bot and others added 28 commits March 14, 2026 18:57
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v3...v4)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v3...v4)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v6...v7)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the dev-dependencies group in /backend with 1 update: [nodemon](https://github.com/remy/nodemon).


Updates `nodemon` from 3.1.11 to 3.1.14
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v3.1.11...v3.1.14)

---
updated-dependencies:
- dependency-name: nodemon
  dependency-version: 3.1.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
fix: handle ignored exceptions in file deletion handlers (S2486)
security: use crypto.randomBytes for file upload name generation (S2245)
fix: prevent ReDoS in lab report regex patterns (S5852)
Fix regex patterns to prevent ReDoS vulnerabilities
DMJoh added 18 commits March 15, 2026 12:42
ci: restrict GITHUB_TOKEN permissions in sonar scan workflow
Add diagnostic studies feature and update documentation links
Add SonarQube and security badges to documentation
docs: remove SonarQube badges, keep static and CI badges only
Add Jest configuration and unit tests with coverage integration
test: ignore frontend for coverage
fix: switch base image from node:24-alpine to node:24-slim for broade…
@DMJoh DMJoh merged commit 872769d into main Mar 29, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants