Skip to content

Conversation

@piyushsinghgaur1
Copy link
Contributor

Description

fix audit vulnerability

Fixes #231
GH-231

image

@sonarqubecloud
Copy link

SonarQube reviewer guide

Summary: Dependency version updates across multiple packages including npm, body-parser, glob, js-yaml, and validator.

Review Focus: The body-parser upgrade (2.2.0→2.2.1) includes a major iconv-lite version bump (0.6→0.7) which could affect character encoding handling. The npm package update (11.6.2→11.7.0) is extensive with many internal dependency changes. Verify no breaking changes in encoding behavior and test critical paths.

Start review at: node_modules/body-parser section (lines 4527-4566). This is a production dependency with significant internal changes including a major version bump of iconv-lite, which could impact request body parsing behavior in your application.

💬 Please send your feedback

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@yeshamavani yeshamavani merged commit 095f1a5 into master Dec 16, 2025
7 checks passed
@yeshamavani yeshamavani deleted the GH-231 branch December 16, 2025 14:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix audit vulnerability scan issues

3 participants