1
0
mirror of https://github.com/Unleash/unleash.git synced 2024-10-18 20:09:08 +02:00
Commit Graph

8980 Commits

Author SHA1 Message Date
Nuno Góis
b4ef343d22
refactor: clean up some unused imports (#4597)
Should help cleaning up some of these:


![image](https://github.com/Unleash/unleash/assets/14320932/f0bcee80-1ec8-4935-b167-dc8e8b92cda2)
2023-09-01 15:32:15 +01:00
Gastón Fournier
ea00ea9d56
docs: troubleshooting guides (#4592)
## About the changes
Adds troubleshooting guides for some common problems under the how-to
area (following the [diataxis framework](https://diataxis.fr/)).

This is part of Unleash 2023 offsite challenge

---------

Co-authored-by: Drew Gorton <drew.gorton@getunleash.io>
Co-authored-by: Diego Susa <diego@getunleash.io>
Co-authored-by: Michael Vittiglio <michael.vittiglio@getunleash.io>
Co-authored-by: Thomas Heartman <thomas@getunleash.ai>
2023-09-01 15:39:23 +02:00
Thomas Heartman
1799086deb
openapi: sort tags file (#4595)
This change sorts the tags in the tags file and tests that the list is
sorted alphabetically. This makes it easier to
find tags in the file. 

#4580 already introduced a test to check that we have no duplicate
tags, so this isn't as necessary anymore, but it's still nice to have.

It also removes the previous auto-sorting before exporting. This is to
ensure that entries are sorted in the source list. This might seem like
a regression, but it makes it easier to spot near-duplicate tags:

> Despite having the test that validates there are no duplicates, you
can always have Notifications and Notification API by mistake (tags that
mean the same but are different). Keeping the list alphabetically sorted
might help to prevent this before pushing the change to prod. In this
case, we will eventually find out and fix it, so this could be a good
reason to have the list sorted.
2023-09-01 10:15:12 +00:00
Tymoteusz Czech
063a4f7875
fix: config snapshot (#4593) 2023-08-30 15:07:08 +02:00
Tymoteusz Czech
0d5f33f8ba
Feat/instance health (#4586)
Hackathon

---------

Co-authored-by: chriswk <chriswk@getunleash.io>
2023-08-30 12:51:46 +00:00
Fredrik Strand Oseberg
3b2d6a4cbf
feat: DORA metrics lead time to production (#4589)
* Adds initial support for estimating dora metric lead time for changes
per feature toggle
2023-08-30 14:39:43 +02:00
David Leek
ff346adb94
chore: return 404 when projectid not found (#4581)
## About the changes
Returns Not Found on create and get project api tokens when given a
project id that doesn't exist

## Discussion points
- This is an extra lookup per execution of the endpoint
2023-08-30 10:24:20 +02:00
Gastón Fournier
ae18c3d6c1
chore: Remove duplicated tags (#4580)
## About the changes
At https://github.com/Unleash/unleash/pull/4432 we've introduced the
same tags twice which causes issues when generating the api clients.

Closes #2-1350-fix-openapi-duplicated-tags
2023-08-28 14:03:58 +02:00
David Leek
95be24996e
Fixes hangs when sending incorrect parameters to deleteProjectApiToken endpoint (#4579)
## About the changes
Returns either 400 or 404 when token isn't found or doesn't match single
project must be provided projectId criteria

<!-- Does it close an issue? Multiple? -->
Closes #
Linear 2-1003

## Discussion points
<!-- Anything about the PR you'd like to discuss before it gets merged?
Got any questions or doubts? -->
Is projects.length > 1 a 400?
2023-08-28 13:53:32 +02:00
Jaanus Sellin
873c00a566
feat: update breakpoint from 1260 to 1280 (#4575) 2023-08-27 20:36:02 +03:00
Jaanus Sellin
b2aa3ea049
feat: change request ui updates (#4574) 2023-08-27 20:35:27 +03:00
Mateusz Kwasniewski
cc62db46fb
feat: archive toggles in change request UI (#4563) 2023-08-25 13:38:57 +02:00
David Leek
63e052bafe
feat: add a setting for toggling requesting additional scopes (#4551)
Adds a setting to OIDC SSO configuration that controls whether or not
additional scopes are to be requested during login

<img width="944" alt="Skjermbilde 2023-08-24 kl 09 00 54"
src="https://github.com/Unleash/unleash/assets/707867/8cf06fb4-aefd-48cd-b09b-99d35a2a10ed">

---------

Co-authored-by: Nuno Góis <github@nunogois.com>
2023-08-25 12:51:23 +02:00
Jaanus Sellin
5d43a92243
feat: close dialog when esc is pressed (#4567) 2023-08-25 13:31:34 +03:00
Jaanus Sellin
35fe575d0d
feat: application usage feature flag and cleanup (#4568) 2023-08-25 13:26:44 +03:00
Mateusz Kwasniewski
01e1ffd0c1
chore: deps update unleash client (#4571) 2023-08-25 11:24:45 +02:00
Fredrik Strand Oseberg
f220f216d6
Fix/legal values deletion (#4564)
This PR fixes a bug reported from a customer where deleting a legal
value that was used in a strategy constraint would make it impossible to
edit the constraint.

[The bug was introduced
here](https://github.com/Unleash/unleash/pull/4473)

The core of the problem introduced was that the values used to calculate
illegal values was based on changing state. On the first render it would
display correct state as it would match the legal values coming from the
context definition with the legal values currently used in the
constraint as values. However, when you triggered the onClick method for
the checkboxes the state would be changed because we would remove the
illegal values from the valueset and only insert current legal values in
the state. This would trigger a re-render of the component, and now the
data used to identify the illegal values would no longer be correct,
because the bad values had been cleaned from the state. This would cause
the UI for constraints to display incorrectly.

Changed the flow to now give you a warning if you have illegal values,
and that if you make changes and save the strategy these values will be
removed from the constraint:

<img width="726" alt="Skjermbilde 2023-08-25 kl 08 56 02"
src="https://github.com/Unleash/unleash/assets/16081982/78e9875d-d864-4e21-bfb7-a530247a07eb">

Also amended this to apply to the single legal value constraints.

<img width="721" alt="Skjermbilde 2023-08-25 kl 08 57 40"
src="https://github.com/Unleash/unleash/assets/16081982/237a11d0-5c05-445c-9e99-b79cab0bff94">
2023-08-25 10:44:00 +02:00
Christopher Kolstad
21b4ada577
feat: multiple project roles (#4512)
https://linear.app/unleash/issue/2-1128/change-the-api-to-support-adding-multiple-roles-to-a-usergroup-on-a

https://linear.app/unleash/issue/2-1125/be-able-to-fetch-all-roles-for-a-user-in-a-project

https://linear.app/unleash/issue/2-1127/adapt-the-ui-to-be-able-to-do-a-multi-select-on-role-permissions-for

- Allows assigning project roles to groups with root roles
- Implements new methods that support assigning, editing, removing and
retrieving multiple project roles in project access, along with other
auxiliary methods
- Adds new events for updating and removing assigned roles
- Adapts `useProjectApi` to new methods that use new endpoints that
support multiple roles
- Adds the `multipleRoles` feature flag that controls the possibility of
selecting multiple roles on the UI
- Adapts `ProjectAccessAssign` to support multiple role, using the new
methods
- Adds a new `MultipleRoleSelect` component that allows you to select
multiple roles based on the `RoleSelect` component
- Adapts the `RoleCell` component to support either a single role or
multiple roles
- Updates the `access.spec.ts` Cypress e2e test to reflect our new logic
- Updates `access-service.e2e.test.ts` with tests covering the multiple
roles logic and covering some corner cases
- Updates `project-service.e2e.test.ts` to adapt to the new logic,
adding a test that covers adding access with `[roles], [groups],
[users]`
- Misc refactors and boy scouting


![image](https://github.com/Unleash/unleash/assets/14320932/d1cc7626-9387-4ab8-9860-cd293a0d4f62)

---------

Co-authored-by: David Leek <david@getunleash.io>
Co-authored-by: Mateusz Kwasniewski <kwasniewski.mateusz@gmail.com>
Co-authored-by: Nuno Góis <github@nunogois.com>
2023-08-25 09:31:37 +01:00
Jaanus Sellin
1f96c1646c
chore: remove configurableFeatureTypeLifetimes flag (#4569) 2023-08-25 09:19:08 +02:00
Mateusz Kwasniewski
3ebeea4d64
docs: strategy variants ruby and dotnet sdk versions (#4570) 2023-08-25 08:28:47 +02:00
Jaanus Sellin
a97fabd415
feat: application usage frontend (#4561) 2023-08-24 13:13:02 +03:00
Mateusz Kwasniewski
2c3514954c
feat: import service validate duplicates (#4558) 2023-08-24 10:05:21 +02:00
Jaanus Sellin
0fb078d4c5
fix: do not allow creation/update of feature toggle with invalid strategy name (#4555) 2023-08-23 16:56:22 +03:00
Shreyans Gandhi
604ec5a9ef
fix: multiline textarea resizing for json input (#4463) 2023-08-23 15:53:12 +02:00
David Leek
6501c2e33b
chore: prepare 5.4 release (#4554)
sets package.json version to 5.4
2023-08-23 13:05:13 +02:00
David Leek
122613befa
chore: prepare next release 2023-08-23 12:36:24 +02:00
Mateusz Kwasniewski
f881103701
fix: diff component for ordering (#4552) 2023-08-23 12:17:59 +02:00
Tymoteusz Czech
31e2260c46
Remove frontendNavigationUpdate flag (#4547)
https://linear.app/unleash/issue/1-1275/remove-frontendnavigationupdate-feature-flag

Shipping new navigation by default to everyone
2023-08-23 11:42:20 +02:00
Mateusz Kwasniewski
65e62c64b8
fix: import duplicate features (#4550) 2023-08-23 11:11:16 +02:00
Jaanus Sellin
1fbd8b6ef8
feat: applicaton usage endpoint (#4548) 2023-08-23 12:00:22 +03:00
Mateusz Kwasniewski
0e162362e6
feat: Change request advanced search and filter (#4544) 2023-08-23 09:38:10 +02:00
Mateusz Kwasniewski
ed2c2ec27c
fix: highlighter casing (#4543) 2023-08-22 16:00:21 +02:00
Tymoteusz Czech
573518e48d
Integrations - frontend adjustments (#4527)
## About the changes
  - [x] Create a feature flag
  - [x] Rename page title
  - [x] Rename menu item
  - [x] Update frontend URL (add redirect from old one)


https://linear.app/unleash/issue/1-1263/integrations-frontend-adjustments
2023-08-22 14:40:38 +02:00
Mateusz Kwasniewski
8a3889d570
feat: more powerful project search (#4542) 2023-08-22 11:32:25 +02:00
andreas-unleash
3acff3e6d9
Feat: last seen toggle list (#4541)
Closes #
[1-1279](https://linear.app/unleash/issue/1-1279/update-the-feature-toggle-page-with-the-new-design)

![Screenshot 2023-08-21 at 15 39
54](https://github.com/Unleash/unleash/assets/104830839/bddf85b8-efd5-4bb3-8422-8682ceb96514)

---------

Signed-off-by: andreas-unleash <andreas@getunleash.ai>
2023-08-21 15:49:33 +03:00
andreas-unleash
6250064183
feat: Last seen per environment archive (#4540)
Closes #
[1-1280](https://linear.app/unleash/issue/1-1280/update-the-archive-toggle-page-with-the-new-design)

![Screenshot 2023-08-21 at 14 53
10](https://github.com/Unleash/unleash/assets/104830839/f7c9fcc2-ef60-4415-bf9a-605fdebd92ed)

---------

Signed-off-by: andreas-unleash <andreas@getunleash.ai>
2023-08-21 15:37:44 +03:00
andreas-unleash
4857f7f4bc
feat: Last seen per environment health (#4539)
Closes # [1-1277]
(https://linear.app/unleash/issue/1-1277/update-health-page-with-the-new-designlogic-for-last-seen)

![Screenshot 2023-08-21 at 14 50
20](https://github.com/Unleash/unleash/assets/104830839/bbe7a80b-1dcd-4dd0-9446-42486963b4f1)

---------

Signed-off-by: andreas-unleash <andreas@getunleash.ai>
2023-08-21 15:12:50 +03:00
andreas-unleash
10c21461bd
feat: Last seen for toggles that have an old usage reported (#4538)
Last seen for toggles that have an old usage reported and no environment

Closes: # [1-1276]
(https://linear.app/unleash/issue/1-1276/last-seen-for-toggles-that-have-an-old-usage-reported-and-that-are)

![Screenshot 2023-08-21 at 14 40
42](https://github.com/Unleash/unleash/assets/104830839/bfa20993-3d52-4c34-959d-f3e34b5c5b47)

Signed-off-by: andreas-unleash <andreas@getunleash.ai>
2023-08-21 14:52:32 +03:00
andreas-unleash
d19d97cf18
feat: persist client application usage (#4534)
Closes #
[1-1256](https://linear.app/unleash/issue/1-1256/backend-to-save-application-usage)

Adds client application usage persisting on upsert and bulkUpsert
functions

---------

Signed-off-by: andreas-unleash <andreas@getunleash.ai>
2023-08-21 14:36:31 +03:00
Jaanus Sellin
68273da213
chore: remove emitPotentiallyStaleEvents flag (#4537) 2023-08-21 14:35:35 +03:00
Jaanus Sellin
6cefb6021e
chore: remove newProjectLayout flag (#4536) 2023-08-21 13:55:04 +03:00
Mateusz Kwasniewski
2cfb99c768
feat: features overwrite warning (#4535) 2023-08-21 11:09:09 +02:00
Christopher Kolstad
f114aa401a
feat: slack-app can now post to both tagged and default channel (#4520)
Currently the slack-app addon only posts to either the tagged channel
for the feature or the default channels. This PR adds a new field that
will allow you to configure the addon to post to both the default
channels and the tagged channel (s)
2023-08-21 09:00:06 +02:00
Jaanus Sellin
dbae2d1153
feat: application usage new ui (#4528) 2023-08-18 14:55:23 +03:00
andreas-unleash
4ce6c96e04
feat: create client_applications_usage table migration (#4521)
Creates client_applications_usage table

---------

Signed-off-by: andreas-unleash <andreas@getunleash.ai>
2023-08-18 14:26:22 +03:00
Tymoteusz Czech
208ca05933
Update menu for billing page (#4525)
## About the changes

- [x] Show admin menu on billing page in cloud offering. Category menu
was not showing up because we have 2 different pages for billing (hosted
or not)
  - [x] Fix menu tab padding
 
https://linear.app/unleash/issue/1-1266/update-menu-for-billing-page
2023-08-18 10:40:35 +02:00
renovate[bot]
26e7267c5e
chore(deps): update react-router monorepo to v6.15.0 (#4532)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [react-router](https://togithub.com/remix-run/react-router) |
[`6.14.2` ->
`6.15.0`](https://renovatebot.com/diffs/npm/react-router/6.14.2/6.15.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/react-router/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/react-router/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/react-router/6.14.2/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/react-router/6.14.2/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [react-router-dom](https://togithub.com/remix-run/react-router) |
[`6.14.2` ->
`6.15.0`](https://renovatebot.com/diffs/npm/react-router-dom/6.14.2/6.15.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/react-router-dom/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/react-router-dom/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/react-router-dom/6.14.2/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/react-router-dom/6.14.2/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>remix-run/react-router (react-router)</summary>

###
[`v6.15.0`](https://togithub.com/remix-run/react-router/blob/HEAD/packages/react-router/CHANGELOG.md#6150)

[Compare
Source](https://togithub.com/remix-run/react-router/compare/react-router@6.14.2...react-router@6.15.0)

##### Minor Changes

- Add's a new `redirectDocument()` function which allows users to
specify that a redirect from a `loader`/`action` should trigger a
document reload (via `window.location`) instead of attempting to
navigate to the redirected location via React Router
([#&#8203;10705](https://togithub.com/remix-run/react-router/pull/10705))

##### Patch Changes

- Ensure `useRevalidator` is referentially stable across re-renders if
revalidations are not actively occurring
([#&#8203;10707](https://togithub.com/remix-run/react-router/pull/10707))
-   Updated dependencies:
    -   `@remix-run/router@1.8.0`

</details>

<details>
<summary>remix-run/react-router (react-router-dom)</summary>

###
[`v6.15.0`](https://togithub.com/remix-run/react-router/blob/HEAD/packages/react-router-dom/CHANGELOG.md#6150)

[Compare
Source](https://togithub.com/remix-run/react-router/compare/react-router-dom@6.14.2...react-router-dom@6.15.0)

##### Minor Changes

- Add's a new `redirectDocument()` function which allows users to
specify that a redirect from a `loader`/`action` should trigger a
document reload (via `window.location`) instead of attempting to
navigate to the redirected location via React Router
([#&#8203;10705](https://togithub.com/remix-run/react-router/pull/10705))

##### Patch Changes

- Fixes an edge-case affecting web extensions in Firefox that use
`URLSearchParams` and the `useSearchParams` hook.
([#&#8203;10620](https://togithub.com/remix-run/react-router/pull/10620))
- Do not include hash in `useFormAction()` for unspecified actions since
it cannot be determined on the server and causes hydration issues
([#&#8203;10758](https://togithub.com/remix-run/react-router/pull/10758))
- Reorder effects in `unstable_usePrompt` to avoid throwing an exception
if the prompt is unblocked and a navigation is performed synchronously
([#&#8203;10687](https://togithub.com/remix-run/react-router/pull/10687),
[#&#8203;10718](https://togithub.com/remix-run/react-router/pull/10718))
-   Updated dependencies:
    -   `@remix-run/router@1.8.0`
    -   `react-router@6.15.0`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/Unleash/unleash).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi40My4yIiwidXBkYXRlZEluVmVyIjoiMzYuNDMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-08-17 18:52:04 +00:00
renovate[bot]
808936d28a
chore(deps): update dependency sass to v1.65.1 (#4531)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [sass](https://togithub.com/sass/dart-sass) | [`1.64.2` ->
`1.65.1`](https://renovatebot.com/diffs/npm/sass/1.64.2/1.65.1) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/sass/1.65.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/sass/1.65.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/sass/1.64.2/1.65.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sass/1.64.2/1.65.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>sass/dart-sass (sass)</summary>

###
[`v1.65.1`](https://togithub.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1651)

[Compare
Source](https://togithub.com/sass/dart-sass/compare/1.65.0...1.65.1)

-   Update abs-percent deprecatedIn version to `1.65.0`.

###
[`v1.65.0`](https://togithub.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1650)

[Compare
Source](https://togithub.com/sass/dart-sass/compare/1.64.2...1.65.0)

- All functions defined in CSS Values and Units 4 are now parsed as
calculation
objects: `round()`, `mod()`, `rem()`, `sin()`, `cos()`, `tan()`,
`asin()`,
`acos()`, `atan()`, `atan2()`, `pow()`, `sqrt()`, `hypot()`, `log()`,
`exp()`,
    `abs()`, and `sign()`.

- Deprecate explicitly passing the `%` unit to the global `abs()`
function. In
future releases, this will emit a CSS abs() function to be resolved by
the
    browser. This deprecation is named `abs-percent`.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/Unleash/unleash).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi40My4yIiwidXBkYXRlZEluVmVyIjoiMzYuNDMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-08-17 15:43:54 +00:00
Drew Gorton
ebf35790fe
Update docs README.md to include yarn generate (#4519)
Add missing `yarn generate` command to docs
2023-08-17 10:32:57 -05:00
renovate[bot]
d263cbe6fb
chore(deps): update dependency node to v18.17.1 (#4530)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [node](https://togithub.com/nodejs/node) | patch | `18.17.0` ->
`18.17.1` |

---

### Release Notes

<details>
<summary>nodejs/node (node)</summary>

###
[`v18.17.1`](https://togithub.com/nodejs/node/releases/tag/v18.17.1):
2023-08-09, Version 18.17.1 &#x27;Hydrogen&#x27; (LTS),
@&#8203;RafaelGSS

[Compare
Source](https://togithub.com/nodejs/node/compare/v18.17.0...v18.17.1)

This is a security release.

##### Notable Changes

The following CVEs are fixed in this release:

-
[CVE-2023-32002](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32002):
Policies can be bypassed via Module.\_load (High)
-
[CVE-2023-32006](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32006):
Policies can be bypassed by module.constructor.createRequire (Medium)
-
[CVE-2023-32559](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32559):
Policies can be bypassed via process.binding (Medium)
-   OpenSSL Security Releases
- [OpenSSL security advisory 14th
July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000264.html).
- [OpenSSL security advisory 19th
July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000265.html).
- [OpenSSL security advisory 31st
July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000267.html)

More detailed information on each of the vulnerabilities can be found in
[August 2023 Security
Releases](https://nodejs.org/en/blog/vulnerability/august-2023-security-releases/)
blog post.

##### Commits

- \[[`fe3abdf82e`](https://togithub.com/nodejs/node/commit/fe3abdf82e)]
- **deps**: update archs files for openssl-3.0.10+quic1 (Node.js GitHub
Bot) [#&#8203;49036](https://togithub.com/nodejs/node/pull/49036)
- \[[`2c5a522d9c`](https://togithub.com/nodejs/node/commit/2c5a522d9c)]
- **deps**: upgrade openssl sources to quictls/openssl-3.0.10+quic1
(Node.js GitHub Bot)
[#&#8203;49036](https://togithub.com/nodejs/node/pull/49036)
- \[[`15bced0bde`](https://togithub.com/nodejs/node/commit/15bced0bde)]
- **policy**: handle Module.constructor and main.extensions bypass
(RafaelGSS)
[nodejs-private/node-private#417](https://togithub.com/nodejs-private/node-private/pull/417)
- \[[`d4570fae35`](https://togithub.com/nodejs/node/commit/d4570fae35)]
- **policy**: disable process.binding() when enabled (Tobias Nießen)
[nodejs-private/node-private#460](https://togithub.com/nodejs-private/node-private/pull/460)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/Unleash/unleash).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi40My4yIiwidXBkYXRlZEluVmVyIjoiMzYuNDMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-08-17 14:58:58 +00:00