Merge pull request #2263 from abilpraju-aot/security-fix-v.7.0.0-alpha

updated security fix

forms-flow-api/Dockerfile

@@ -1,5 +1,5 @@
 #Author: Kurian Benoy
-FROM python:3.12.1-slim-bullseye
+FROM python:3.12.6-slim
 
 # set label for image
 LABEL Name="formsflow"

forms-flow-documents/Dockerfile

@@ -1,5 +1,5 @@
 #Author: Kurian Benoy
-FROM python:3.12.1-slim-bullseye
+FROM python:3.12.6-slim
 
 # set label for image
 LABEL Name="formsflow"

forms-flow-documents/Dockerfile-ARM64

@@ -1,5 +1,5 @@
 #Author: Kurian Benoy
-FROM python:3.12.1-slim-bullseye
+FROM python:python:3.12.6-slim
 
 WORKDIR /forms-flow-documents/app
 

forms-flow-idm/keycloak/idp-selector/pom.xml

@@ -9,7 +9,7 @@
 	<name>idp-selector</name>
 	<url>http://maven.apache.org</url>
 	<properties>
-		<keycloak.version>23.0.7</keycloak.version>
+		<keycloak.version>25.0.4</keycloak.version>
 	</properties>
 	<dependencies>
 		<dependency>
@@ -45,7 +45,7 @@
 		<dependency>
 			<groupId>ch.qos.logback</groupId>
 			<artifactId>logback-classic</artifactId>
-			<version>1.2.10</version>
+			<version>1.2.13</version>
 		</dependency>
 		<dependency>
 			<groupId>junit</groupId>

forms-flow-web-root-config/Dockerfile

@@ -46,7 +46,7 @@ RUN if [ $NODE_ENV == "development" ]; then \
 
 
 # Production stage
-FROM nginx:1.25.4-alpine as production-stage
+FROM nginx:1.27-alpine as production-stage
 
 # Set label for image
 LABEL Name="formsflow"

forms-flow-web-root-config/package.json

@@ -8,8 +8,7 @@
     "check-format": "prettier --check .",
     "build": "concurrently npm:build:*",
     "build:webpack": "webpack --mode=production",
-    "build-dev:webpack": "webpack --env isLocal --mode=development",
-    "preinstall": "npm install --package-lock-only --ignore-scripts && npx npm-force-resolutions"
+    "build-dev:webpack": "webpack --env isLocal --mode=development"
   },
   "devDependencies": {
     "concurrently": "^6.2.1",
@@ -21,8 +20,8 @@
     "jest-cli": "^27.0.6",
     "prettier": "^2.3.2",
     "pretty-quick": "^3.1.1",
-    "serve": "^12.0.0",
-    "webpack-dev-server": "^4.0.0"
+    "serve": "^14.2.3",
+    "webpack-dev-server": "^4.15.2"
   },
   "dependencies": {
     "@types/jest": "^27.0.1",
@@ -34,7 +33,7 @@
     "copy-webpack-plugin": "^11.0.0",
     "html-webpack-plugin": "^5.3.2",
     "jest": "^27.0.6",
-    "webpack": "^5.75.0",
+    "webpack": "^5.94.0",
     "webpack-cli": "^4.8.0",
     "webpack-config-single-spa": "^5.0.0",
     "webpack-merge": "^5.8.0",
@@ -43,13 +42,5 @@
     "@babel/plugin-transform-runtime": "^7.15.0",
     "@babel/preset-env": "^7.15.0",
     "@babel/runtime": "^7.15.3"
-  },
-  "resolutions": {
-    "semver": "7.5.3",
-    "minimatch": "3.0.5",
-    "webpack": "5.76.0",
-    "tough-cookie": "4.1.3",
-    "word-wrap": "1.2.4",
-    "postcss": "8.4.31"
   }
 }

forms-flow-web-root-config/src/index.ejs

@@ -6,8 +6,7 @@
   <meta http-equiv="X-UA-Compatible" content="ie=edge">
   <title>formsflow.ai</title>
   <script src="/config/config.js"></script>
-  <link rel="stylesheet" href="https://unpkg.com/[email protected]/dist/assets/element-templates.css">
-  <link rel="stylesheet" href="https://unpkg.com/[email protected]/dist/assets/properties-panel.css">
+  <link rel="stylesheet" href="https://unpkg.com/@bpmn-io/properties-panel/dist/assets/properties-panel.css">
   <!-- required dmn modeler styles -->
   <link rel="stylesheet" href="https://unpkg.com/[email protected]/dist/assets/diagram-js.css">
   <link rel="stylesheet" href="https://unpkg.com/[email protected]/dist/assets/dmn-js-shared.css">

forms-flow-web/.eslintrc

@@ -16,24 +16,27 @@
       "version": "detect"
     }
   },
-  "parser": "babel-eslint",
+  "parser": "@babel/eslint-parser",
   "parserOptions": {
     "sourceType": "module",
-    "allowImportExportEverywhere": true
+    "allowImportExportEverywhere": true,
+    "requireConfigFile": false,
+    "babelOptions": {
+      "plugins": ["@babel/plugin-syntax-jsx"]
+    }
   },
   "rules": {
-    "react/react-in-jsx-scope":"off",
-    "no-alert":"warn",
-    "no-console":"off",
-    "react/display-name":"off",
-    "react/prop-types":"off",
-    "max-len": ["error", {"code": 100, "ignoreUrls": true, "ignoreStrings": true, "ignoreComments": true}],
+    "react/react-in-jsx-scope": "off",
+    "no-alert": "warn",
+    "no-console": "off",
+    "react/display-name": "off",
+    "react/prop-types": "off",
+    "max-len": ["error", { "code": 100, "ignoreUrls": true, "ignoreStrings": true, "ignoreComments": true }],
     "no-mixed-operators": "error",
-    "no-tabs": ["error", {"allowIndentationTabs": true}],
-    "semi":"error",
+    "no-tabs": ["error", { "allowIndentationTabs": true }],
+    "semi": "error",
     "semi-style": ["error", "last"],
     "space-infix-ops": ["error", { "int32Hint": false }],
-    "no-useless-concat":"error"
-
+    "no-useless-concat": "error"
   }
-}
+}

forms-flow-web/Dockerfile

@@ -19,7 +19,7 @@ COPY . /forms-flow-web/app/
 RUN npm run build
 
 # Production stage
-FROM nginx:1.25.4-alpine as production-stage
+FROM nginx:1.27-alpine as production-stage
 
 # Copy built files from build stage
 COPY --from=build-stage /forms-flow-web/app/build /usr/share/nginx/html

forms-flow-web/craco.config.js

@@ -1,4 +1,4 @@
-const SingleSpaAppcracoPlugin = require("craco-plugin-single-spa-app-aot");
+const SingleSpaAppcracoPlugin = require("craco-plugin-single-spa-app-aot-test");
 
 const shouldMinimize = process.env.NODE_ENV == "production";
 
@@ -18,10 +18,21 @@ const singleSpaAppPlugin = {
 // Keep any other configuration you are exporting from CRACO and add the plugin to the plugins array
 module.exports = {
   plugins: [singleSpaAppPlugin],
+  webpack: {
+    configure: {
+      resolve: {
+        fallback: {
+          stream: require.resolve("stream-browserify"),
+          buffer: require.resolve("buffer/"),
+          net: false,  // Unfortunately, net can't be polyfilled easily in the browser.
+        },
+      },
+    },
+  },
   devServer: {
     port: 3004,
     headers: {
       "Access-Control-Allow-Origin": "*",
     },
   },
-};
+};