Skip to content

Conversation

@simonlabarere
Copy link
Contributor

@simonlabarere simonlabarere commented Jan 5, 2026

Summary

Should fix the issues raised by dependabot: https://github.com/NHSDigital/communications-manager-api/security/dependabot
Mainly the vulnerabilities in:

  • urllib3
  • qs
  • node-forge
  • authlib
  • glob
  • filelock
  • body-parser
  • js-yaml
  • cryptography

This should make the following PRs obsolete:

Reviews Required

  • Dev
  • Test
  • Tech Author
  • Product Owner

Checklist

  • Brief description of work completed, and any technical decisions made as part of the PR
  • PR link added as a comment to the relevant JIRA ticket
  • PR link shared on Slack and/or Teams
  • 2 reviews received
  • Tester approval

@github-actions
Copy link

github-actions bot commented Jan 5, 2026

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-13539

@simonlabarere simonlabarere added the dependencies Pull requests that update a dependency file label Jan 5, 2026
@lapenna-bjss lapenna-bjss self-assigned this Jan 5, 2026
lapenna-bjss
lapenna-bjss previously approved these changes Jan 5, 2026
@github-actions
Copy link

github-actions bot commented Jan 5, 2026

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-13539

@github-actions
Copy link

github-actions bot commented Jan 5, 2026

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-13539

@github-actions
Copy link

github-actions bot commented Jan 5, 2026

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-13539

@simonlabarere simonlabarere merged commit c864c22 into release Jan 6, 2026
6 checks passed
@simonlabarere simonlabarere deleted the feature/CCM-13539_dependabot_updates branch January 6, 2026 15:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants