Skip to content

BB2-5195 and 5196: Update packages - #127

Merged
bwang-icf merged 1 commit into
mainfrom
jamesdemery/bb2-5196-update-proxy-addr
Sep 15, 2026
Merged

bwang-icf merged 1 commit into
mainfrom
jamesdemery/bb2-5196-update-proxy-addr

Conversation

@JamesDemeryNava

Copy link
Copy Markdown
Contributor

JIRA Ticket:
BB2-5195
BB2-5196

What Does This PR Do?

Updates moment and proxy-addr to address security vulnerabilities.

@bwang-icf I am planning to run npm login and npm publish from this branch after getting approval, will need a re-approval after that and then this can be merged.

What Should Reviewers Watch For?

If you're reviewing this PR, please check for these things in particular:

Validation

  • Run npm ls moment, confirm you see 2.31.0
  • Run npm ls proxy-addr, confirm you see 2.0.8
  • Go through the build steps in README-sdk-dev.md -> Consuming SDK section, using the bluebutton-sample-client-nodejs-react repository, to confirm the SDK still works as expected. Once the SDK is injected into the sample client, go through an auth flow.

What Security Implications Does This PR Have?

Please indicate if this PR does any of the following:

  • Adds any new software dependencies
  • Modifies any security controls
  • Adds new transmission or storage of data
  • Any other changes that could possibly affect security?
  • Yes, one or more of the above security implications apply. This PR must not be merged without the ISSO or team security engineer's approval.

@bwang-icf bwang-icf left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

was able to verify locally

@sb-DarenDean

Copy link
Copy Markdown

LGTM! No concerns here

@bwang-icf
bwang-icf merged commit 77b6d93 into main Sep 15, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants