DFR-4713: Resolve working build and fix CVE's#252
Merged
joe-wilko-hmcts merged 17 commits intomasterfrom Apr 10, 2026
Merged
Conversation
# Upgrade to yarn 4 # Add .yarnrc.yml and yarn-4.10.0.cjs # Upgrade to node v20.20.2 and update .nvmrc
# Conflicts: # .github/workflows/cd.yml
# Refactor eslint configuration and remove old deprecated config # Eslint fixes and tweaks across several files # Regenerate yarn-audit-known-issues # Update dependencies: - @hapi/cryptiles v6.0.3 -> added - @hapi/hoek v11.0.7 -> added - connect-redis v3.4.2 -> v9.0.0 - cryptiles v4.1.3 -> removed - glob v8.1.0 -> v13.0.6 - hoek v6.1.3 -> removed - router v1.3.8 -> v2.2.0 # Update dev dependencies - @eslint/eslintrc v3.3.5 -> added - @eslint/js v10.0.1 -> added - @hmcts/eslint-config v1.4.0 -> v1.0.5 - @hmcts/tech-docs v0.4.0 -> removed - eslint v8.57.1 -> v10.0.2 - eslint-plugin-mocha v11.2.0 -> added - globals v17.4.0 -> added
# Refactor of fs.js to use v13 glob api # In BaseStep.js check for if the class name is null and if so, use a default of 'BaseStep' # In expectImplemented.js return parent class constructor name if the object's class name is null
# Update supertest.js to use absolute paths instead of relative
# Add pipeline debug statement
…res in supertest.js
al-hmcts
approved these changes
Apr 9, 2026
# Update new version in package.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
https://tools.hmcts.net/jira/browse/DFR-4713
Change description
Changes are required so that CVE's within old-divorce frontend services can be properly resolved
Testing done
Security Vulnerability Assessment
CVE Suppression: Are there any CVEs present in the codebase (either newly introduced or pre-existing) that are being intentionally suppressed or ignored by this commit?
Checklist