Skip to content

Commit a44dc3e

Browse files
marwen-abidmarwen-abid
authored
Chore: React, SDS and Node upgrades for CVE-2025-66478 and CVE-2025-55182 (#968)
### What Update React to 19.2.1 Update SDS to 3.2.6 Update Node to 22 (for SDS) ### Why * CVE-2025-66478 * CVE-2025-55182
1 parent 4bc4e30 commit a44dc3e

File tree

10 files changed

+320
-327
lines changed

10 files changed

+320
-327
lines changed

‎.github/workflows/ci.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -105,7 +105,7 @@ jobs:
105105
- name: Install NodeJs
106106
uses: actions/setup-node@v6
107107
with:
108-
node-version: 20
108+
node-version: 22
109109

110110
- name: Install dependencies
111111
working-directory: internal/serve/sep24frontend/app

‎CHANGELOG.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
3333

3434
### Security and Dependencies
3535

36+
- Upgrade React to 19.2.1 in SEP-24 frontend to address CVE-2025-66478 and CVE-2025-55182 [#968](https://github.com/stellar/stellar-disbursement-platform-backend/pull/968)
3637
- Bump the minor-and-patch group with 5 updates [#961](https://github.com/stellar/stellar-disbursement-platform-backend/pull/961)
3738
- Bump the minor-and-patch group across 1 directory with 12 updates [#955](https://github.com/stellar/stellar-disbursement-platform-backend/pull/955)
3839
- Bump actions/checkout from 5 to 6 in the all-actions group [#954](https://github.com/stellar/stellar-disbursement-platform-backend/pull/954)

‎internal/serve/sep24frontend/app/dist/assets/index-Cfd4b108.js‎

Lines changed: 84 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎internal/serve/sep24frontend/app/dist/assets/index-Csz1twjs.js‎

Lines changed: 0 additions & 84 deletions
This file was deleted.

‎internal/serve/sep24frontend/app/dist/assets/style-BlSDgptY.css‎

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎internal/serve/sep24frontend/app/dist/assets/style-DDVqI4I1.css‎

Lines changed: 0 additions & 1 deletion
This file was deleted.

‎internal/serve/sep24frontend/app/dist/index.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,8 +22,8 @@
2222
/>
2323

2424
<title>Receiver Registration</title>
25-
<script type="module" crossorigin src="/wallet-registration/assets/index-Csz1twjs.js"></script>
26-
<link rel="stylesheet" crossorigin href="/wallet-registration/assets/style-DDVqI4I1.css">
25+
<script type="module" crossorigin src="/wallet-registration/assets/index-Cfd4b108.js"></script>
26+
<link rel="stylesheet" crossorigin href="/wallet-registration/assets/style-BlSDgptY.css">
2727
</head>
2828
<body>
2929
<div id="root"></div>

‎internal/serve/sep24frontend/app/package-lock.json‎

Lines changed: 50 additions & 51 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎internal/serve/sep24frontend/app/package.json‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
"version": "0.1.0",
55
"type": "module",
66
"engines": {
7-
"node": ">=20.x"
7+
"node": ">=22.x"
88
},
99
"scripts": {
1010
"dev": "vite",
@@ -13,13 +13,13 @@
1313
"preview": "vite preview"
1414
},
1515
"dependencies": {
16-
"@stellar/design-system": "^3.0.0",
16+
"@stellar/design-system": "^3.2.6",
1717
"@tanstack/react-query": "^5.67.3",
1818
"i18next": "^24.2.2",
1919
"immer": "^10.1.1",
2020
"intl-tel-input": "^25.3.0",
21-
"react": "^19.0.0",
22-
"react-dom": "^19.0.0",
21+
"react": "^19.2.1",
22+
"react-dom": "^19.2.1",
2323
"react-google-recaptcha": "^3.1.0",
2424
"react-i18next": "^15.4.1",
2525
"react-router-dom": "^7.5.2",

0 commit comments

Comments
 (0)