minor v1.12.0 #42

Merged

jkeffects merged 15 commits from develop into main 2026-10-02 06:18:10 +00:00

Conversation 1 Commits 15 Files changed 44 +1744 -220

jkeffects commented 2026-10-02 06:07:01 +00:00

Owner

Copy link

package update and cve close
Merge pull request 'feature/#39-statistical-evaluation' (#41) from feature/#39-statistical-evaluation into develop
Merge pull request 'feature/#37-Minimize-Permission-Eroding-Caused-by-Cross-Module-SearchSelects' (#40) from feature/#37-Minimize-Permission-Eroding-Caused-by-Cross-Module-SearchSelects into develop

package update and cve close Merge pull request 'feature/#39-statistical-evaluation' (#41) from feature/#39-statistical-evaluation into develop Merge pull request 'feature/#37-Minimize-Permission-Eroding-Caused-by-Cross-Module-SearchSelects' (#40) from feature/#37-Minimize-Permission-Eroding-Caused-by-Cross-Module-SearchSelects into develop

jkeffects self-assigned this 2026-10-02 06:07:01 +00:00

jkeffects added 13 commits 2026-10-02 06:07:01 +00:00

base statistical evaluation 801cd5602e

extend calc 206e12e886

cleanup code 929763d259

lookups for configuration content 0eb6754954

lookups for operation available content cfe0f38deb

Merge pull request 'feature/#37-Minimize-Permission-Eroding-Caused-by-Cross-Module-SearchSelects' (#40) from feature/#37-Minimize-Permission-Eroding-Caused-by-Cross-Module-SearchSelects into develop ... b280d5b657

Reviewed-on: #40

show every day of range in distribution 0765f5272c

grouping with year and types 09dd0fafe6

cleanup 2bf77a385f

Merge branch 'develop' into feature/#39-statistical-evaluation ... e236f0b8ac

# Conflicts:
#	src/routes/admin/index.ts

update mission name calc 30b01d29f5

Merge pull request 'feature/#39-statistical-evaluation' (#41) from feature/#39-statistical-evaluation into develop ... 774b2b36a1

Reviewed-on: #41

package update and cve close ... a2a7f247a1

axios  1.0.0 - 1.19.0
Severity: high
Axios: Prototype pollution gadget in fetch adapter can alter outbound requests - https://github.com/advisories/GHSA-vh66-26gq-q6x8
Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method - https://github.com/advisories/GHSA-9fr6-4gfg-395g
Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS) - https://github.com/advisories/GHSA-c29m-xwm3-cm6r
Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location - https://github.com/advisories/GHSA-mghh-pgcx-3jjj
Axios: Prototype Pollution Gadget in axios toFormData Options - https://github.com/advisories/GHSA-x97p-jq2g-jp4f
Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls - https://github.com/advisories/GHSA-3pq3-5fj3-cg6v
Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization - https://github.com/advisories/GHSA-542g-h47m-68v8
Axios: Header Injection via Inherited headers After Minimal Interceptor - https://github.com/advisories/GHSA-j8rh-479h-cp32
Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders - https://github.com/advisories/GHSA-4hqw-qxg8-jxx2
Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection - https://github.com/advisories/GHSA-m8m8-qj5v-23w3
Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges -https://github.com/advisories/GHSA-44g4-m2mj-wpvx
Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF - https://github.com/advisories/GHSA-r4gj-5m52-g5wh

engine.io  6.6.0 - 6.6.9
Severity: high
Socket.IO: Engine.IO Protocol Revision Mismatch DoS - https://github.com/advisories/GHSA-2gc4-cqfq-p2gv

jkeffects added 1 commit 2026-10-02 06:08:18 +00:00

Merge branch 'main' into develop 47893fcf22

jkeffects added 1 commit 2026-10-02 06:11:53 +00:00

fix: add lookup from core package 6c7b8dafbf

forgejo-actions commented 2026-10-02 06:13:27 +00:00

Copy link

✅ CI-Prüfung

Prüfung	Ergebnis
Lint	✅ bestanden
Build	✅ bestanden
Docker-Build	✅ bestanden

Details und Logs: CI-Lauf

<!-- ci-status --> ### ✅ CI-Prüfung | Prüfung | Ergebnis | |---|---| | Lint | ✅ bestanden | | Build | ✅ bestanden | | Docker-Build | ✅ bestanden | Details und Logs: [CI-Lauf](https://code.jk-effects.cloud/FF-Admin/ff-operation-server/actions/runs/557)

jkeffects merged commit e8f074a022 into main 2026-10-02 06:18:10 +00:00

jkeffects referenced this pull request from a commit 2026-10-02 06:18:11 +00:00

Merge pull request 'minor v1.12.0' (#42) from develop into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

bug

  

feature

No labels

bug

feature

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

jkeffects

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

FF-Admin/ff-operation-server!42

No description provided.