⬆️ upgrade dependency tree to solve CVE-2023-42282 (#378)

actualbudget · Jun 29, 2024 · 167522d · 167522d
1 parent f5307e4
commit 167522d
Show file tree

Hide file tree

Showing 3 changed files with 1,695 additions and 1,425 deletions.
diff --git a/package.json b/package.json
@@ -17,7 +17,7 @@
   "dependencies": {
     "@actual-app/crdt": "2.1.0",
     "@actual-app/web": "24.6.0",
-    "bcrypt": "^5.1.0",
+    "bcrypt": "^5.1.1",
     "better-sqlite3": "^9.6.0",
     "body-parser": "^1.20.1",
     "cors": "^2.8.5",
@@ -34,7 +34,7 @@
   },
   "devDependencies": {
     "@babel/preset-typescript": "^7.20.2",
-    "@types/bcrypt": "^5.0.0",
+    "@types/bcrypt": "^5.0.2",
     "@types/better-sqlite3": "^7.6.7",
     "@types/cors": "^2.8.13",
     "@types/express": "^4.17.17",

diff --git a/upcoming-release-notes/378.md b/upcoming-release-notes/378.md
@@ -0,0 +1,6 @@
+---
+category: Maintenance
+authors: [MatissJanis]
+---
+
+Security: upgrade dependency tree to solve CVE-2023-42282.