diff --git a/.github/workflows/ndc-nodejs-lambda-connector.yaml b/.github/workflows/ndc-nodejs-lambda-connector.yaml index 6cd96fd..ac9fdea 100644 --- a/.github/workflows/ndc-nodejs-lambda-connector.yaml +++ b/.github/workflows/ndc-nodejs-lambda-connector.yaml @@ -129,7 +129,7 @@ jobs: tags: ${{ env.DOCKER_REGISTRY }}/${{ env.DOCKER_IMAGE_NAME }}:scan - name: Run Trivy vulnerability scanner (json output) - uses: aquasecurity/trivy-action@0.32.0 + uses: aquasecurity/trivy-action@0.34.2 with: image-ref: ${{ env.DOCKER_REGISTRY }}/${{ env.DOCKER_IMAGE_NAME }}:scan format: json @@ -152,7 +152,7 @@ jobs: team=engine - name: Fail build on High/Critical Vulnerabilities - uses: aquasecurity/trivy-action@0.32.0 + uses: aquasecurity/trivy-action@0.34.2 with: skip-setup-trivy: true image-ref: ${{ env.DOCKER_REGISTRY }}/${{ env.DOCKER_IMAGE_NAME }}:scan diff --git a/CHANGELOG.md b/CHANGELOG.md index c3d6fbb..f24a6c3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,10 @@ This changelog documents the changes between release versions. Changes to be included in the next upcoming release +## [1.20.3] - 2026-03-06 + +- Updated ndc-sdk-typescript to v8.5.0 + ## [1.20.2] - 2026-02-07 - Updated ndc-sdk-typescript to v8.4.0 to address CVE-2026-25223 ([#66](https://github.com/hasura/ndc-nodejs-lambda/pull/66)) diff --git a/ndc-lambda-sdk/package-lock.json b/ndc-lambda-sdk/package-lock.json index 8d8bb51..df9486c 100644 --- a/ndc-lambda-sdk/package-lock.json +++ b/ndc-lambda-sdk/package-lock.json @@ -1,15 +1,15 @@ { "name": "@hasura/ndc-lambda-sdk", - "version": "1.20.2", + "version": "1.20.3", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@hasura/ndc-lambda-sdk", - "version": "1.20.2", + "version": "1.20.3", "license": "Apache-2.0", "dependencies": { - "@hasura/ndc-sdk-typescript": "^8.4.0", + "@hasura/ndc-sdk-typescript": "^8.5.0", "@hasura/ts-node-dev": "^2.1.0", "@tsconfig/node20": "^20.1.4", "commander": "^11.1.0", @@ -270,9 +270,9 @@ } }, "node_modules/@hasura/ndc-sdk-typescript": { - "version": "8.4.0", - "resolved": "https://registry.npmjs.org/@hasura/ndc-sdk-typescript/-/ndc-sdk-typescript-8.4.0.tgz", - "integrity": "sha512-k7WNxpyOS3z4ozmEg9P/tg/s6CqvimK1gaZ9Nx+z0MHjhR9gmVKcUy4tnPrHILgXVOOTNFao4XDilUbN3Y9Luw==", + "version": "8.5.0", + "resolved": "https://registry.npmjs.org/@hasura/ndc-sdk-typescript/-/ndc-sdk-typescript-8.5.0.tgz", + "integrity": "sha512-HFAoIQxL8KanLhVdCtSLku0p0KDxpzzptbWKC2DovOJM54q8AHJoDynC9ahQ5IQzE1J8v2bl+s+mRwTLmu9evw==", "license": "Apache-2.0", "dependencies": { "@fastify/compress": "^8.0.1", @@ -557,6 +557,7 @@ "resolved": "https://registry.npmjs.org/@opentelemetry/api/-/api-1.9.0.tgz", "integrity": "sha512-3giAOQvZiH5F9bMlMiv8+GSPMeqg0dbaeo58/0SlA9sxSqZhnUtxzX9/2FzyhS9sWQf5S0GJE0AKBrFqjpeYcg==", "license": "Apache-2.0", + "peer": true, "engines": { "node": ">=8.0.0" } @@ -1255,44 +1256,6 @@ "url": "https://github.com/sindresorhus/is?sponsor=1" } }, - "node_modules/@swc/core": { - "version": "1.3.100", - "resolved": "https://registry.npmjs.org/@swc/core/-/core-1.3.100.tgz", - "integrity": "sha512-7dKgTyxJjlrMwFZYb1auj3Xq0D8ZBe+5oeIgfMlRU05doXZypYJe0LAk0yjj3WdbwYzpF+T1PLxwTWizI0pckw==", - "hasInstallScript": true, - "optional": true, - "peer": true, - "dependencies": { - "@swc/counter": "^0.1.1", - "@swc/types": "^0.1.5" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/swc" - }, - "optionalDependencies": { - "@swc/core-darwin-arm64": "1.3.100", - "@swc/core-darwin-x64": "1.3.100", - "@swc/core-linux-arm64-gnu": "1.3.100", - "@swc/core-linux-arm64-musl": "1.3.100", - "@swc/core-linux-x64-gnu": "1.3.100", - "@swc/core-linux-x64-musl": "1.3.100", - "@swc/core-win32-arm64-msvc": "1.3.100", - "@swc/core-win32-ia32-msvc": "1.3.100", - "@swc/core-win32-x64-msvc": "1.3.100" - }, - "peerDependencies": { - "@swc/helpers": "^0.5.0" - }, - "peerDependenciesMeta": { - "@swc/helpers": { - "optional": true - } - } - }, "node_modules/@swc/core-darwin-arm64": { "version": "1.3.100", "resolved": "https://registry.npmjs.org/@swc/core-darwin-arm64/-/core-darwin-arm64-1.3.100.tgz", @@ -1304,7 +1267,6 @@ "os": [ "darwin" ], - "peer": true, "engines": { "node": ">=10" } @@ -1320,7 +1282,6 @@ "os": [ "darwin" ], - "peer": true, "engines": { "node": ">=10" } @@ -1336,7 +1297,6 @@ "os": [ "linux" ], - "peer": true, "engines": { "node": ">=10" } @@ -1352,7 +1312,6 @@ "os": [ "linux" ], - "peer": true, "engines": { "node": ">=10" } @@ -1368,7 +1327,6 @@ "os": [ "linux" ], - "peer": true, "engines": { "node": ">=10" } @@ -1384,7 +1342,6 @@ "os": [ "linux" ], - "peer": true, "engines": { "node": ">=10" } @@ -1400,7 +1357,6 @@ "os": [ "win32" ], - "peer": true, "engines": { "node": ">=10" } @@ -1416,7 +1372,6 @@ "os": [ "win32" ], - "peer": true, "engines": { "node": ">=10" } @@ -1432,7 +1387,6 @@ "os": [ "win32" ], - "peer": true, "engines": { "node": ">=10" } @@ -1441,15 +1395,13 @@ "version": "0.1.2", "resolved": "https://registry.npmjs.org/@swc/counter/-/counter-0.1.2.tgz", "integrity": "sha512-9F4ys4C74eSTEUNndnER3VJ15oru2NumfQxS8geE+f3eB5xvfxpWyqE5XlVnxb/R14uoXi6SLbBwwiDSkv+XEw==", - "optional": true, - "peer": true + "optional": true }, "node_modules/@swc/types": { "version": "0.1.5", "resolved": "https://registry.npmjs.org/@swc/types/-/types-0.1.5.tgz", "integrity": "sha512-myfUej5naTBWnqOCc/MdVOLVjXUXtIA+NpDrDBKJtLLg2shUjBu3cZmB/85RyitKc55+lUUyl7oRfLOvkr2hsw==", - "optional": true, - "peer": true + "optional": true }, "node_modules/@tsconfig/node10": { "version": "1.0.9", @@ -1501,6 +1453,7 @@ "version": "20.10.4", "resolved": "https://registry.npmjs.org/@types/node/-/node-20.10.4.tgz", "integrity": "sha512-D08YG6rr8X90YB56tSIuBaddy/UXAA9RKJoFvrsnogAum/0pmjkgi4+2nx96A330FmioegBWmEYQ+syqCFaveg==", + "peer": true, "dependencies": { "undici-types": "~5.26.4" } @@ -1537,6 +1490,7 @@ "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz", "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==", "license": "MIT", + "peer": true, "bin": { "acorn": "bin/acorn" }, @@ -1784,6 +1738,7 @@ "resolved": "https://registry.npmjs.org/chai/-/chai-4.3.10.tgz", "integrity": "sha512-0UXG04VuVbruMUYbJ6JctvH0YnC/4q3/AkT18q4NaITo91CUm0liMS9VqzT9vZhVQ/1eqPanMWjBM+Juhfb/9g==", "dev": true, + "peer": true, "dependencies": { "assertion-error": "^1.1.0", "check-error": "^1.0.3", @@ -3781,6 +3736,7 @@ "version": "5.8.3", "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.8.3.tgz", "integrity": "sha512-p1diW6TqL9L07nNxvRMM7hMMw4c5XOo/1ibL4aAIGmSAt9slTE1Xgw5KWuof2uTOvCg9BY7ZRi+GaF+7sfgPeQ==", + "peer": true, "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" diff --git a/ndc-lambda-sdk/package.json b/ndc-lambda-sdk/package.json index a46d735..16cd4c8 100644 --- a/ndc-lambda-sdk/package.json +++ b/ndc-lambda-sdk/package.json @@ -1,6 +1,6 @@ { "name": "@hasura/ndc-lambda-sdk", - "version": "1.20.2", + "version": "1.20.3", "description": "SDK that can automatically expose TypeScript functions as Hasura NDC functions/procedures", "author": "Hasura", "license": "Apache-2.0", @@ -31,7 +31,7 @@ "url": "git+https://github.com/hasura/ndc-nodejs-lambda.git" }, "dependencies": { - "@hasura/ndc-sdk-typescript": "^8.4.0", + "@hasura/ndc-sdk-typescript": "^8.5.0", "@hasura/ts-node-dev": "^2.1.0", "@tsconfig/node20": "^20.1.4", "commander": "^11.1.0",