Skip to content

[FIX] Bump dependencies to latest safe versions#1088

Open
Che4ter wants to merge 5 commits into
dfir-iris:developfrom
baseVISION:contrib/dependency-updates
Open

[FIX] Bump dependencies to latest safe versions#1088
Che4ter wants to merge 5 commits into
dfir-iris:developfrom
baseVISION:contrib/dependency-updates

Conversation

@Che4ter

@Che4ter Che4ter commented Jun 11, 2026

Copy link
Copy Markdown

Summary

Updates dependencies to latest safe versions where possible, addressing security issues and improving compatibility.

Changes

  • Frontend: npm audit fixes, remove jqvmap (jQuery 1.11.3 XSS CVEs), upgrade Node build image to 24 LTS
  • Python: Bump to latest safe versions, replace pyminizip with pyzipper, fix marshmallow 4.x compatibility
  • Docker: Fix build warnings and improve Dockerfile

Security

  • Removes jqvmap which bundles vulnerable jQuery@1.11.3 with known XSS CVEs
  • Updates all Python and Node dependencies to latest secure versions

No breaking changes. But be aware there are more outdated dependencies, which will require more effort to upgrade.

@coderabbitai

coderabbitai Bot commented Jun 11, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review (1)
  • api_*

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 1d6810c9-f9c6-48fb-bdec-ec99ce5cd114

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant