taylanbakircioglu 613ed0bf99 fix(security): patch CRITICAL Dependabot findings (python-jose 3.4.0, jspdf 4.2.1) ...

- python-jose[cryptography] 3.3.0 -> 3.4.0 (CVE-2024-33663 algorithm
  confusion) in backend + api-gateway. App uses HS256 only; encode/decode
  API unchanged; 3.3.0<->3.4.0 tokens cross-verifiable (rolling-deploy safe).
- jspdf 4.0.0 -> 4.2.1 (CVE-2026-31938 HTML injection in new-window paths)
  in frontend; @babel/runtime bumped 7.28.4 -> 7.28.6 (required by jspdf
  4.2.1). App uses only new jsPDF()/autoTable()/doc.save() — vulnerable
  output path not used.

Verified: jose roundtrip + cross-version, frontend npm build, backend &
frontend docker images, and Kubernetes (kind) jose 3.4.0 + frontend serve.
No feature/UI behavior change; backward compatible.

2026-06-03 01:35:06 +03:00

..

public

feat: Flowfish - eBPF-powered multi-cluster Kubernetes observability platform

2026-03-29 21:43:20 +03:00

src

feat: sync v2.7.0 per-path L7 + v2.8.0 (rabbitmq resilience, version bump)

2026-06-02 23:49:10 +03:00

.build-marker

feat: Flowfish - eBPF-powered multi-cluster Kubernetes observability platform

2026-03-29 21:43:20 +03:00

Dockerfile

fix(nginx): pin all nginx images to patched 1.31.1-alpine (poolslip advisory)

2026-06-02 15:07:05 +03:00

Dockerfile.production

fix(nginx): pin all nginx images to patched 1.31.1-alpine (poolslip advisory)

2026-06-02 15:07:05 +03:00

Dockerfile.simple

fix(nginx): pin all nginx images to patched 1.31.1-alpine (poolslip advisory)

2026-06-02 15:07:05 +03:00

nginx.conf

fix: add API reverse proxy to nginx config for Docker Compose deployments

2026-03-29 22:59:13 +03:00

package-lock.json

fix(security): patch CRITICAL Dependabot findings (python-jose 3.4.0, jspdf 4.2.1)

2026-06-03 01:35:06 +03:00

package.json

fix(security): patch CRITICAL Dependabot findings (python-jose 3.4.0, jspdf 4.2.1)

2026-06-03 01:35:06 +03:00

tsconfig.json

feat: Flowfish - eBPF-powered multi-cluster Kubernetes observability platform

2026-03-29 21:43:20 +03:00