Skip to content

feat: bump swagger-client version to latest to fix form-data vulnerability#107

Merged
dthampy merged 1 commit intomasterfrom
bump-swagger-client
Sep 3, 2025
Merged

feat: bump swagger-client version to latest to fix form-data vulnerability#107
dthampy merged 1 commit intomasterfrom
bump-swagger-client

Conversation

@dthampy
Copy link
Copy Markdown
Contributor

@dthampy dthampy commented Sep 3, 2025

Description

bump the swagger client version to latest( 3.35.6) to take care of this vulnerability path
@adobe/aio-sdk@6.0.0 › @adobe/aio-lib-target@4.0.1 › swagger-client@3.34.0 › @swagger-api/apidom-reference@1.0.0-beta.11 › axios@1.7.9 › form-data@4.0.0

Related Issue

IOEXT-1435

Motivation and Context

vulnerability detected in earlier versions of form data( for example versions 4.0.1) .Security advisories (including Snyk and npm audit) list 4.0.4 and above as the patched versions, along with 3.0.4 and 2.5.4 for older major lines.

How Has This Been Tested?

npm run test
After npm install, verified that form-data version updated to recommended patch version
└─┬ swagger-client@3.35.6
└─┬ @swagger-api/apidom-reference@1.0.0-beta.47
└─┬ axios@1.11.0
└── form-data@4.0.4

Screenshots (if appropriate):

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

  • I have signed the Adobe Open Source CLA.
  • My code follows the code style of this project.
  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.
  • I have read the CONTRIBUTING document.
  • I have added tests to cover my changes.
  • All new and existing tests passed.

@codecov
Copy link
Copy Markdown

codecov bot commented Sep 3, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dthampy dthampy merged commit 7a840fb into master Sep 3, 2025
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants