Skip to content

Conversation

@Harmanpreet-Microsoft
Copy link
Contributor

@Harmanpreet-Microsoft Harmanpreet-Microsoft commented Dec 15, 2025

Purpose

merge dev into main

  • This pull request primarily updates dependencies across both the backend (ContentProcessorAPI) and frontend (ContentProcessorWeb) projects to address security, compatibility, and feature improvements. The most significant changes are the upgrades to key libraries such as urllib3, express, and node-forge, as well as several other dependency version bumps in the frontend's lock file.

Backend Dependency Updates:

  • Upgraded urllib3 from version 2.3.0 to 2.6.0 in both pyproject.toml and requirements.txt for improved security and compatibility. [1] [2]

Frontend Dependency Updates:

  • Added and upgraded node-forge to version >=1.3.2 in both package.json and package-lock.json to ensure cryptographic library is up-to-date. [1] [2] [3] [4]
  • Upgraded express from 4.21.2 to 4.22.1 in package-lock.json, along with related dependency updates such as qs to 6.14.0 and other sub-dependencies, for improved stability and security. [1] [2]

Other Frontend Dependency Version Bumps:

  • Upgraded js-yaml to 3.14.2 and 4.1.1 in multiple places and glob to 10.5.0 in package-lock.json to address vulnerabilities and maintain compatibility. [1] [2] [3] [4]

Does this introduce a breaking change?

  • Yes
  • No

Golden Path Validation

  • I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

  • I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

  • ...

Other Information

chore: fixed security vulnerability
@Roopan-Microsoft Roopan-Microsoft merged commit e4187b2 into main Dec 15, 2025
11 of 12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants