Merge pull request #126 from codefresh-io/CR-20460

CR-20460 security fix

Author: vadim-kharin-codefresh

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:14.21.3-alpine
+FROM node:16.20.2-alpine
 
 WORKDIR /cf-k8s-agent
 
@@ -11,6 +11,7 @@ COPY yarn.lock ./
 RUN apk add --no-cache --virtual deps python3 make g++ krb5-dev git && \
     yarn install --forzen-lockfile --production && \
     yarn cache clean && \
+    npm update -g npm && \
     apk del deps && \
     rm -rf /tmp/*
 

codefresh.yml

@@ -19,14 +19,14 @@ steps:
   install_dependencies:
     title: 'Installing testing dependencies'
     stage: preparation
-    image: node:14.21.1
+    image: node:16.20.2
     commands:
     - yarn install --frozen-lockfile
 
   lint:
     title: 'lint code'
     stage: preparation
-    image: node:14.21.1
+    image: node:16.20.2
     commands:
     - yarn lint
 

package.json

@@ -1,28 +1,24 @@
 {
   "name": "cf-k8s-agent",
-  "version": "1.3.14",
+  "version": "1.3.15",
   "private": true,
   "scripts": {
     "start": "node ./src/index.js",
     "test": "jest --coverage --detectOpenHandles --silent",
     "lint": "eslint ."
   },
   "resolutions": {
-    "**/openid-client": "^4.9.0",
+    "**/openid-client": "5.1.6",
     "lodash": "4.17.21",
-    "node-forge": "1.3.0",
-    "normalize-url": "4.5.1",
     "underscore": "1.12.1",
-    "newrelic": "^8.0.0",
-    "mongoose": "6.4.6",
     "http-cache-semantics": "4.1.1",
-    "jsonwebtoken": "9.0.0",
-    "xml2js": "0.5.0",
     "semver": "7.5.2",
-    "protobufjs": "7.2.4"
+    "ajv": "6.12.3",
+    "word-wrap": "1.2.4",
+    "tough-cookie": "4.1.3"
   },
   "dependencies": {
-    "@codefresh-io/kube-integration": "1.26.3",
+    "@codefresh-io/kube-integration": "1.30.6",
     "bluebird": "^3.5.4",
     "cookie-parser": "~1.4.3",
     "debug": "~2.6.9",