From fbc21150edf42772317c0b7d53c4735119fdf2ba Mon Sep 17 00:00:00 2001 From: Mike McDougall Date: Sat, 8 Aug 2026 08:45:58 -1000 Subject: [PATCH 1/2] fix(test): update DOMPurify security patch --- tests/js-browser/cesium/package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tests/js-browser/cesium/package-lock.json b/tests/js-browser/cesium/package-lock.json index 4dda6c0270..49eb9426ae 100644 --- a/tests/js-browser/cesium/package-lock.json +++ b/tests/js-browser/cesium/package-lock.json @@ -173,9 +173,9 @@ "license": "MIT" }, "node_modules/dompurify": { - "version": "3.4.12", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz", - "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==", + "version": "3.4.13", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.13.tgz", + "integrity": "sha512-2vmYIoqjze2d+kakP8S/nS5shfsl587kzwEjcGlTdiksUVgFHnFCsLYDVj/JNqJVOQZGSYBTmuycv0PodwmnMQ==", "license": "(MPL-2.0 OR Apache-2.0)", "optionalDependencies": { "@types/trusted-types": "^2.0.7" From 5fc55d072398d6648f90ea10e81e9e73c99152c7 Mon Sep 17 00:00:00 2001 From: Mike McDougall Date: Sat, 8 Aug 2026 08:48:16 -1000 Subject: [PATCH 2/2] fix(lambda): refresh Amazon Linux package metadata --- docker/Dockerfile.lambda | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/Dockerfile.lambda b/docker/Dockerfile.lambda index 3fe66d9614..eb0a3c4ad0 100644 --- a/docker/Dockerfile.lambda +++ b/docker/Dockerfile.lambda @@ -138,7 +138,7 @@ COPY docker/cloud/lambda/bootstrap.sh /var/runtime/bootstrap # The Lambda base can lag Amazon Linux security repositories. Resolve compatible # distro updates at build time so newly published fixes do not wait for a base refresh. # hadolint ignore=DL3041 -RUN dnf upgrade -y && \ +RUN dnf upgrade --refresh -y && \ dnf install -y krb5-libs libicu fontconfig freetype && \ dnf clean all && \ chmod +x /var/runtime/bootstrap /var/task/Honua.Server