loopback4-microservice-catalog

loopback4-microservice-catalog copied to clipboard

build(deps): bump eventsource from 1.1.0 to 1.1.2 in /sandbox/oauth-example/frontend

1

Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.1.0 to 1.1.2. Changelog Sourced from eventsource's changelog. 1.1.2 Inline origin resolution, drops original dependency (#281 Espen Hovlandsdal) 1.1.1 Do not include authorization and cookie headers on...

dependabot[bot]

build(deps): bump ansi-regex from 4.1.0 to 5.0.1 in /sandbox/oauth-example/frontend

1

Bumps [ansi-regex](https://github.com/chalk/ansi-regex) from 4.1.0 to 5.0.1. Release notes Sourced from ansi-regex's releases. v5.0.1 Fixes (backport of 6.0.1 to v5) This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1,...

dependabot[bot]

build(deps): bump async from 2.6.3 to 2.6.4 in /sandbox/oauth-example/frontend

1

Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4. Changelog Sourced from async's changelog. v2.6.4 Fix potential prototype pollution exploit (#1828) Commits c6bdaca Version 2.6.4 8870da9 Update built files 4df6754 update changelog 8f7f903...

dependabot[bot]

build(deps): bump parse-url from 7.0.2 to 8.1.0

1

Bumps [parse-url](https://github.com/IonicaBizau/parse-url) from 7.0.2 to 8.1.0. Release notes Sourced from parse-url's releases. 8.1.0 [email protected] fix: cjs to load normalize-url /cc #58 fix: Include index.d.ts in package.json /cc #63 feat: support...

dependabot[bot]

**Describe the bug** error while copying migration if doesnot exist in base service **To Reproduce** Steps to reproduce the behavior: 1) select yes for base service 2) select a base...

yeshamavani

**Is your feature request related to a problem? Please describe.** Sonar code smells in packages and services. **Describe the solution you'd like** Fixing sonar code smells in packages and services.

Surbhi-sharma1

[Snyk] Upgrade @sourceloop/core from 7.1.1 to 7.2.4

1

Snyk has created this PR to upgrade @sourceloop/core from 7.1.1 to 7.2.4.  :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more...

snyk-bot

[Snyk] Upgrade loopback4-soft-delete from 5.2.1 to 5.3.3

1

Snyk has created this PR to upgrade loopback4-soft-delete from 5.2.1 to 5.3.3.  :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more...

snyk-bot

Any Help for? Make this Dynamic, Use RSA instead of AES.

6

https://github.com/sourcefuse/loopback4-microservice-catalog/blob/2c9c8d8e1915db85b1c4dc8c7b48db0e4a1cadf8/services/authentication-service/src/modules/auth/login.controller.ts#L472 ```so that microservices cross communication becomes easy. instead of bouncing the actual secret, bounce the PUB key.```

souravahmed1

build(deps): bump vm2 from 3.9.10 to 3.9.11 in /sandbox/chat-notification-pubnub-example/services/notifications-service

1

Bumps [vm2](https://github.com/patriksimek/vm2) from 3.9.10 to 3.9.11. Release notes Sourced from vm2's releases. 3.9.11 New Features https://github.com/patriksimek/vm2/commit/58478a58c6f4af3c54faf4117ed5ab72d2cc8cd5: Add option require.strict to allow to load required modules in non strict mode. Fixes...

dependabot[bot]