Skip to content

Dependency hygiene: execute Phase 1/2 + latest web-nodejs upgrade#30

Draft
mcouliba wants to merge 3 commits into
cursor/development-environment-setup-23d1from
cursor/dependency-updates-plan-f5b2
Draft

Dependency hygiene: execute Phase 1/2 + latest web-nodejs upgrade#30
mcouliba wants to merge 3 commits into
cursor/development-environment-setup-23d1from
cursor/dependency-updates-plan-f5b2

Conversation

@mcouliba
Copy link
Copy Markdown
Owner

@mcouliba mcouliba commented Mar 30, 2026

Summary

This branch now includes:

  1. Phase 1 web security updates
  2. Phase 2 Java patch-level updates
  3. Additional request: upgrade labs/web-nodejs dependencies to latest available versions

Latest web-nodejs upgrades applied

Runtime dependencies

  • @patternfly/patternfly -> ^6.4.0
  • angular -> ^1.8.3
  • angular-route -> ^1.8.3
  • body-parser -> ^2.2.2
  • cors -> ^2.8.6
  • debug -> ^4.4.3
  • express -> ^5.2.1
  • gulp -> ^5.0.1
  • gulp-ng-config -> ^1.5.1
  • kube-probe -> ^1.0.3
  • license-reporter -> ^1.5.0
  • webpack -> ^5.105.4

Dev dependencies

  • js-yaml -> ^4.1.1
  • nodeshift -> ^13.0.0
  • nyc -> ^18.0.0
  • proxyquire -> ^2.1.3
  • rhoaster -> ^0.4.1
  • standard-version -> ^9.5.0
  • supertest -> ^7.2.2
  • tap-spec -> ^5.0.0
  • xo -> ^2.0.2

package-lock.json regenerated accordingly.

Validation

  • App process starts with latest deps: npm run start -> HTTP Server running on http://0.0.0.0:8080
  • HTTP probes while running:
    • GET / -> 200
    • GET /api/health/readiness -> 200 (OK)
    • GET /api/health/liveness -> 200 (OK)
  • Production audit after latest upgrade:
    • npm audit --omit=dev --json
    • Remaining: total=9 (high=6, moderate=3, critical=0)
    • Direct remaining highs are legacy ecosystem constraints (angular EOL, license-reporter line)

Commit history (newest first)

  • 816c443 chore(web-nodejs): upgrade dependencies to latest available versions
  • c692db6 chore(services): apply phase-2 patch-level Java dependency updates
  • d60b32a chore(web-nodejs): apply phase-1 secure non-breaking dependency updates
Open in Web Open in Cursor 

cursoragent and others added 2 commits March 30, 2026 22:06
Co-authored-by: Madou <mcouliba@users.noreply.github.com>
Co-authored-by: Madou <mcouliba@users.noreply.github.com>
@cursor cursor Bot changed the title Dependency hygiene: Phase 1 web updates + Phase 2 service patches Dependency hygiene: execute Phase 1 and Phase 2 updates Mar 30, 2026
Co-authored-by: Madou <mcouliba@users.noreply.github.com>
@cursor cursor Bot changed the title Dependency hygiene: execute Phase 1 and Phase 2 updates Dependency hygiene: execute Phase 1/2 + latest web-nodejs upgrade Mar 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants