Merge pull request #893 from sasjs/dep-vulnerabilities

fix(deps): resolve npm audit vulnerabilities

.github/vpn/config.ovpn

@@ -14,6 +14,11 @@ script-security 2
 keepalive 10 120
 remote-cert-tls server
 
+# Route ALL traffic through the VPN (full tunnel)
+redirect-gateway def1
+# Send DNS through the tunnel so it doesn't leak to your local ISP
+dhcp-option DNS 1.1.1.1
+
 # Keys
 ca ca.crt
 cert user.crt

.github/workflows/server-tests.yml

@@ -86,8 +86,30 @@ jobs:
       - name: install pm2
         run: npm i -g pm2
 
+      - name: Diagnose VPN connectivity
+        run: |
+          echo "--- openvpn3 sessions-list ---"
+          openvpn3 sessions-list
+          echo "--- openvpn3 session-stats ---"
+          openvpn3 session-stats --config .github/vpn/config.ovpn
+          echo "--- ip addr (tun interface) ---"
+          ip addr show tun0 || echo "no tun0 interface found"
+          echo "--- ip route ---"
+          ip route
+          echo "--- DNS resolution check for target host (host/IP not printed) ---"
+          TARGET_HOST="$(echo '${{ secrets.SASJS_SERVER_URL }}' | sed -E 's#^[a-z]+://##; s#[:/].*##')"
+          if getent hosts "$TARGET_HOST" > /dev/null; then
+            echo "DNS resolution: OK"
+          else
+            echo "DNS resolution: FAILED"
+          fi
+        shell: bash
+
       - name: Fetch SASJS server
-        run: curl ${{ secrets.SASJS_SERVER_URL }}/SASjsApi/info
+        run: |
+          curl -sS --retry 5 --retry-delay 5 --retry-all-errors --connect-timeout 15 --max-time 30 \
+            -o /dev/null -w "HTTP status: %{http_code}\n" \
+            "${{ secrets.SASJS_SERVER_URL }}/SASjsApi/info"
 
       - name: Deploy sasjs-tests
         run: |

package.json

@@ -69,17 +69,17 @@
     "cp": "0.2.0",
     "cypress": "^15.7.1",
     "dotenv": "16.0.0",
-    "express": "4.17.3",
+    "express": "4.22.2",
     "jest": "29.7.0",
     "jest-environment-jsdom": "^29.7.0",
     "jest-extended": "4.0.2",
-    "node-polyfill-webpack-plugin": "1.1.4",
+    "node-polyfill-webpack-plugin": "4.1.0",
     "path": "0.12.7",
     "pem": "1.14.5",
     "prettier": "3.8.2",
     "process": "0.11.10",
-    "semantic-release": "19.0.3",
-    "terser-webpack-plugin": "5.3.6",
+    "semantic-release": "25.0.8",
+    "terser-webpack-plugin": "5.6.1",
     "ts-jest": "29.2.6",
     "ts-loader": "9.4.0",
     "tslint": "6.1.3",
@@ -87,13 +87,13 @@
     "typedoc": "0.23.24",
     "typedoc-plugin-rename-defaults": "0.6.4",
     "typescript": "4.9.5",
-    "webpack": "5.76.2",
+    "webpack": "5.108.4",
     "webpack-cli": "4.9.2"
   },
   "main": "index.js",
   "dependencies": {
     "@sasjs/utils": "^3.5.6",
-    "axios": "1.16.0",
+    "axios": "1.18.1",
     "axios-cookiejar-support": "5.0.5",
     "form-data": "4.0.6",
     "https": "1.0.0",