Merge pull request #128 from codefresh-io/CR-22902-security

chore: fixed vulnerabilities

Author: vitalii-codefresh

.nvmrc

@@ -1 +1 @@
-v16.20.2
+v20.11.1

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:16.20.2-alpine
+FROM node:20.11.1-alpine3.19
 
 WORKDIR /cf-k8s-agent
 

package.json

@@ -1,14 +1,14 @@
 {
   "name": "cf-k8s-agent",
-  "version": "1.3.16",
+  "version": "1.3.17",
   "private": true,
   "scripts": {
     "start": "node ./src/index.js",
     "test": "jest --coverage --detectOpenHandles --silent --passWithNoTests",
     "lint": "eslint ."
   },
   "resolutions": {
-    "**/openid-client": "5.1.6",
+    "**/openid-client": "5.6.5",
     "lodash": "4.17.21",
     "underscore": "1.12.1",
     "http-cache-semantics": "4.1.1",
@@ -18,11 +18,10 @@
     "tough-cookie": "4.1.3"
   },
   "dependencies": {
-    "@codefresh-io/kube-integration": "1.30.6",
+    "@codefresh-io/kube-integration": "1.31.0",
     "bluebird": "^3.5.4",
     "cookie-parser": "~1.4.3",
     "debug": "~2.6.9",
-    "eslint-plugin-jest": "^22.3.0",
     "express": "4.17.3",
     "json-stream": "^1.0.0",
     "kubernetes-client": "9.0.0",
@@ -41,7 +40,8 @@
     "eslint-config-airbnb": "^17.1.0",
     "eslint-plugin-import": "^2.14.0",
     "eslint-plugin-jsx-a11y": "^6.1.2",
-    "eslint-plugin-react": "^7.11.1"
+    "eslint-plugin-react": "^7.11.1",
+    "eslint-plugin-jest": "^22.3.0"
   },
   "repository": {
     "type": "git",
@@ -55,4 +55,4 @@
   },
   "homepage": "https://github.com/codefresh-io/cf-k8s-agent#readme",
   "description": ""
-}
+}

yarn.lock

@@ -808,10 +808,10 @@
     request "^2.88.2"
     requestretry "^7.0.0"
 
-"@codefresh-io/kube-integration@1.30.6":
-  version "1.30.6"
-  resolved "https://registry.yarnpkg.com/@codefresh-io/kube-integration/-/kube-integration-1.30.6.tgz#f32c20fd18270bb857bef8a3a72bada29151e366"
-  integrity sha512-BY2gLf9CDIw9bTrFofU+Lo54mG6u41wetVVQRcQrXoJjX+dKgdBtOS+hG66+3BxnXKDRJ7iuyGm916o79+Xprg==
+"@codefresh-io/kube-integration@1.31.0":
+  version "1.31.0"
+  resolved "https://registry.yarnpkg.com/@codefresh-io/kube-integration/-/kube-integration-1.31.0.tgz#5c3262f2cc340df77d2d2cabfa0c6eaa89332e93"
+  integrity sha512-bZA5iwqPEA5JUYPyXldpKKc1M0uHGxkulekD4uHCZebqeHEMmrmumpjum+sw0WvPYj6TQnI3MaN1hlkYWhp9MA==
   dependencies:
     "@codefresh-io/cf-monitor" "0.0.29"
     "@codefresh-io/docker-reference" "^0.0.5"
@@ -3469,9 +3469,9 @@ [email protected]:
   integrity sha512-GRnmB5gPyJpAhTQdSZTSp9uaPSvl09KoYcMQtsB9rQoOmzs9dH6ffeccH+Z+cv6P68Hu5bC6JjRh4Ah/mHSNRw==
 
 follow-redirects@^1.14.0:
-  version "1.15.2"
-  resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.2.tgz#b460864144ba63f2681096f274c4e57026da2c13"
-  integrity sha512-VQLG33o04KaQ8uYi2tVNbdrWp1QWxNNea+nmIB4EVM28v0hmP17z7aG1+wAkNzVq4KeXTq3221ye5qTJP91JwA==
+  version "1.15.6"
+  resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.6.tgz#7f815c0cda4249c74ff09e95ef97c23b5fd0399b"
+  integrity sha512-wWN62YITEaOpSK584EZXJafH1AGpO8RVgElfkuXbTOrPX4fIfOyEpW/CsiNd8JdYrAoOvafRTOEnvsO++qCqFA==
 
 for-each@^0.3.3:
   version "0.3.3"
@@ -4611,10 +4611,10 @@ [email protected]:
   resolved "https://registry.yarnpkg.com/jmespath/-/jmespath-0.16.0.tgz#b15b0a85dfd4d930d43e69ed605943c802785076"
   integrity sha512-9FzQjJ7MATs1tSpnco1K6ayiYE3figslrXA72G2HQ/n76RzvYlofyi5QM+iX4YRs/pu3yzxlVQSST23+dMDknw==
 
-jose@^4.1.4:
-  version "4.14.6"
-  resolved "https://registry.yarnpkg.com/jose/-/jose-4.14.6.tgz#94dca1d04a0ad8c6bff0998cdb51220d473cc3af"
-  integrity sha512-EqJPEUlZD0/CSUMubKtMaYUOtWe91tZXTWMJZoKSbLk+KtdhNdcvppH8lA9XwVu2V4Ailvsj0GBZJ2ZwDjfesQ==
+jose@^4.15.5:
+  version "4.15.5"
+  resolved "https://registry.yarnpkg.com/jose/-/jose-4.15.5.tgz#6475d0f467ecd3c630a1b5dadd2735a7288df706"
+  integrity sha512-jc7BFxgKPKi94uOvEmzlSWFFe2+vASyXaKUpdQKatWAESU2MWjDfFf0fdfc83CDKcA5QecabZeNLyfhe3yKNkg==
 
 "js-tokens@^3.0.0 || ^4.0.0", js-tokens@^4.0.0:
   version "4.0.0"
@@ -5239,7 +5239,7 @@ object-hash@^1.2.0:
   resolved "https://registry.yarnpkg.com/object-hash/-/object-hash-1.3.1.tgz#fde452098a951cb145f039bb7d455449ddc126df"
   integrity sha512-OSuu/pU4ENM9kmREg0BdNrUDIl1heYa4mBZacJc+vVWz4GtAwu7jO8s4AIt2aGRUTqxykpWzI3Oqnsm13tTMDA==
 
-object-hash@^2.0.1:
+object-hash@^2.2.0:
   version "2.2.0"
   resolved "https://registry.yarnpkg.com/object-hash/-/object-hash-2.2.0.tgz#5ad518581eefc443bd763472b8ff2e9c2c0d54a5"
   integrity sha512-gScRMn0bS5fH+IuwyIFgnh9zBdo4DV+6GhygmWM9HyNJSgS0hScp1f5vjtm7oIIOiT9trXrShAkLFSc2IqKNgw==
@@ -5299,7 +5299,7 @@ object.values@^1.1.5:
     define-properties "^1.1.3"
     es-abstract "^1.19.1"
 
-oidc-token-hash@^5.0.1:
+oidc-token-hash@^5.0.3:
   version "5.0.3"
   resolved "https://registry.yarnpkg.com/oidc-token-hash/-/oidc-token-hash-5.0.3.tgz#9a229f0a1ce9d4fc89bcaee5478c97a889e7b7b6"
   integrity sha512-IF4PcGgzAr6XXSff26Sk/+P4KZFJVuHAJZj3wgO3vX2bMdNVp/QXTP3P7CEm9V1IdG8lDLY3HhiqpsE/nOwpPw==
@@ -5344,15 +5344,15 @@ onetime@^5.1.2:
   dependencies:
     mimic-fn "^2.1.0"
 
-openid-client@5.1.6, openid-client@^3.14.0, openid-client@^5.1.6:
-  version "5.1.6"
-  resolved "https://registry.yarnpkg.com/openid-client/-/openid-client-5.1.6.tgz#e5eb2032ecfdcfc108660b5c525910a14e352f11"
-  integrity sha512-HTFaXWdUHvLFw4GaEMgC0jXYBgpjgzQQNHW1pZsSqJorSgrXzxJ+4u/LWCGaClDEse5HLjXRV+zU5Bn3OefiZw==
+openid-client@5.6.5, openid-client@^3.14.0, openid-client@^5.1.6:
+  version "5.6.5"
+  resolved "https://registry.yarnpkg.com/openid-client/-/openid-client-5.6.5.tgz#c149ad07b9c399476dc347097e297bbe288b8b00"
+  integrity sha512-5P4qO9nGJzB5PI0LFlhj4Dzg3m4odt0qsJTfyEtZyOlkgpILwEioOhVVJOrS1iVH494S4Ee5OCjjg6Bf5WOj3w==
   dependencies:
-    jose "^4.1.4"
+    jose "^4.15.5"
     lru-cache "^6.0.0"
-    object-hash "^2.0.1"
-    oidc-token-hash "^5.0.1"
+    object-hash "^2.2.0"
+    oidc-token-hash "^5.0.3"
 
 optionator@^0.8.1, optionator@^0.8.2:
   version "0.8.3"