chore: upgrading all apk packages to solve CVE-2024-2511 (#173)

* chore: upgrading all apk packages to solve CVE-2024-2511

* fix import

Dockerfile

@@ -12,9 +12,9 @@ RUN yarn install --production --frozen-lockfile --ignore-scripts --prefer-offlin
 
 FROM node:18-alpine
 
-# Update OpenSSL to address CVE-2023-6237
+# Upgrade (addresses OpenSSL CVE-2023-6237 && CVE-2024-2511)
 RUN apk update && \
-    apk upgrade openssl && \
+    apk upgrade && \
     apk add tini && \
     rm -rf /var/cache/apk/*
 

package.json

@@ -44,12 +44,13 @@
     "express": "^4.18.2",
     "json-schema-to-ts": "^2.3.0",
     "openapi-types": "^11.0.0",
+    "qs": "^6.9.7",
     "type-is": "^1.6.18",
     "unleash-client": "^5.5.2"
   },
   "devDependencies": {
     "@apidevtools/swagger-parser": "10.1.0",
-    "@babel/core": "^7.17.10",
+    "@babel/core": "^7.24.4",
     "@types/compression": "^1.7.2",
     "@types/cors": "^2.8.12",
     "@types/express": "^4.17.13",

src/openapi/openapi-types.ts

@@ -1,12 +1,12 @@
-import type { FromSchema } from 'json-schema-to-ts';
+import type { FromSchema, JSONSchema7 } from 'json-schema-to-ts';
 
 // Recursively remove readonly modifiers from properties.
 type DeepMutable<T> = {
     -readonly [P in keyof T]: DeepMutable<T[P]>;
 };
 
 // Create a type from a const schema object.
-export type CreateSchemaType<T> = FromSchema<T>;
+export type CreateSchemaType<T extends JSONSchema7> = FromSchema<T>;
 
 // Create an OpenAPIV3.SchemaObject from a const schema object.
 export const createSchemaObject = <T>(schema: T): DeepMutable<T> => schema;