4 Commits

Include renames

Author	SHA1	Message	Date
marcos-silva-rodrigues	0369f10b5c	FIX: preventing the axios vulnerability	2026-03-31 14:52:52 -03:00
RafaelandClaude Opus 4.5	3b8310fdca	CHORE: simplify Dockerfile.local to use npm ci only ... Remove protospack tarball fallback logic Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-07 19:04:07 -03:00
RafaelandClaude Opus 4.5	8e0182aa50	FEAT: add TOTP support for change password and local build support ... - Pass TOTP code to DUC for Keycloak users with MFA - Add Dockerfile.local for local protospack builds - Add .dockerignore to exclude node_modules from Docker context 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-24 19:03:50 -03:00
RafaelandClaude	b27298501d	FIX: resolve HIGH security vulnerabilities (18 → 0) ... Upgraded Node.js and dependencies to address critical vulnerabilities: **Infrastructure:** - Upgrade Node.js from 18.17-alpine to 20-alpine (Alpine 3.18 → 3.23) - Upgrade npm to 11.7.0 (includes glob 13.0.0 fix) - Replace npm ci with npm install, then back to npm ci with npm 11 lock **Dependencies:** - Update axios: 0.27.2 → 0.30.2 (fixes 2 CVEs) - Update body-parser: 1.20.1/1.20.2 → 1.20.3 - Update cross-spawn: 7.0.3 → 7.0.6 (hoisted) - Update glob: 10.2.4 → 10.5.0 (hoisted) - Update path-to-regexp: 3.2.0 → 3.3.0 (maintains @nestjs/swagger compatibility) - Update semver: 7.5.1 → 7.5.2 **Results:** - HIGH vulnerabilities: 18 → 0 (100% reduction) - Alpine OS vulnerabilities: 6 → 0 (fixed by Alpine 3.23) - Node.js vulnerabilities: 12 → 0 - All tests passing - Production verified working 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-12-23 13:48:02 -03:00