Skip to content

override form-data (from jsdom dependency) to address CVE-2025-7783#20

Merged
alexluck-sift merged 2 commits into
mainfrom
fix/security-cve-2025-7783
Aug 3, 2025
Merged

override form-data (from jsdom dependency) to address CVE-2025-7783#20
alexluck-sift merged 2 commits into
mainfrom
fix/security-cve-2025-7783

Conversation

@alexluck-sift

@alexluck-sift alexluck-sift commented Aug 2, 2025

Copy link
Copy Markdown
Contributor

Pull Request

Description

Address CVE-2025-7783 to enable release. Also adds the plugin-validator step used during release to avoid missing vulnerabilities in future releases.

Fixed by: GHSA-fjxv-7rqg-78g4

See failed job: https://github.com/sift-stack/sift-grafana-datasource/actions/runs/16687623214/job/47239976437

Type of change

Please check the boxes that apply to this pull request.

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

How Has This Been Tested?

Please describe the tests that you ran to verify your changes.

  • Test A
  • Test B

Checklist

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • Any dependent changes have been merged and published in downstream modules

Screenshots (if applicable)

Please add screenshots to help explain your changes if applicable.

@alexluck-sift alexluck-sift merged commit 5dcef2f into main Aug 3, 2025
11 checks passed
@alexluck-sift alexluck-sift deleted the fix/security-cve-2025-7783 branch August 3, 2025 23:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants