ml-testing-toolkit 18.16.5 → 18.17.0-snapshot.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. package/.grype.yaml +16 -8
  2. package/.nvmrc +1 -1
  3. package/CHANGELOG.md +8 -0
  4. package/audit-ci.jsonc +1 -1
  5. package/package.json +19 -19
  6. package/{sbom-v18.16.4.csv → sbom-v18.16.5.csv} +92 -92
  7. package/src/lib/db/adapters/dbAdapter.js +1 -4
  8. package/src/lib/mocking/middleware-functions/ilpModel.js +17 -1
  9. package/src/lib/mocking/openApiMockHandler.js +17 -0
package/.grype.yaml CHANGED
@@ -1,12 +1,20 @@
1
1
  ignore:
2
- # Ignore cross-spawn vulnerabilities by CVE ID due to false positive
3
- # as grype looks at package-lock.json where it shows versions with
4
- # vulnerabilities, npm ls shows only 7.0.6 verion is used
5
- - vulnerability: CVE-2025-9230
6
- - vulnerability: CVE-2025-9232
7
- - vulnerability: CVE-2025-9231
8
- - vulnerability: GHSA-3xgq-45jj-v275
9
- - vulnerability: GHSA-5j98-mcp5-4vw2 # false positive report for glob 10.4.5, not found in package-lock.json
2
+ # Remove this ignore after verifying CI builds fresh image
3
+ - vulnerability: GHSA-5j98-mcp5-4vw2
4
+ include-aliases: true
5
+ - vulnerability: CVE-2025-60876
6
+ reason: "No fixes available as of 2026-01-14 on Dockerfile base image 22.21.1-alpine3.23"
7
+ - vulnerability: CVE-2026-22184
8
+ reason: "No fixes available as of 2026-01-16 on Dockerfile base image 22.21.1-alpine3.23"
9
+ - vulnerability: CVE-2026-28309
10
+ - vulnerability: CVE-2025-59465
11
+ - vulnerability: CVE-2025-55131
12
+ - vulnerability: GHSA-r6q2-hw4h-h46w
13
+ - vulnerability: GHSA-8qq5-rm4j-mr97
14
+ - vulnerability: CVE-2025-55130
15
+ - vulnerability: CVE-2026-21637
16
+ - vulnerability: CVE-2025-59466
17
+ - vulnerability: GHSA-xxjr-mmjv-4gpg
10
18
 
11
19
  # Set output format defaults
12
20
  output:
package/.nvmrc CHANGED
@@ -1 +1 @@
1
- 22.15.1
1
+ 22.21.1
package/CHANGELOG.md CHANGED
@@ -1,4 +1,12 @@
1
1
  # Changelog: [mojaloop/thirdparty-api-svc](https://github.com/mojaloop/thirdparty-api-svc)
2
+ ### [18.16.6](https://github.com/mojaloop/ml-testing-toolkit/compare/v18.16.5...v18.16.6) (2026-01-08)
3
+
4
+
5
+ ### Chore
6
+
7
+ * **sbom:** update sbom [skip ci] ([f555028](https://github.com/mojaloop/ml-testing-toolkit/commit/f555028ff231b8554b78ae76d1ce228298e849b3))
8
+ * update deps ([#359](https://github.com/mojaloop/ml-testing-toolkit/issues/359)) ([18ea189](https://github.com/mojaloop/ml-testing-toolkit/commit/18ea189eef7c15f01e20679b6aec2c33f9194b41))
9
+
2
10
  ### [18.16.5](https://github.com/mojaloop/ml-testing-toolkit/compare/v18.16.4...v18.16.5) (2025-11-18)
3
11
 
4
12
 
package/audit-ci.jsonc CHANGED
@@ -4,6 +4,6 @@
4
4
  // Only use one of ["low": true, "moderate": true, "high": true, "critical": true]
5
5
  "moderate": true,
6
6
  "allowlist": [
7
-
7
+ "GHSA-xxjr-mmjv-4gpg"
8
8
  ]
9
9
  }
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "ml-testing-toolkit",
3
3
  "description": "Testing Toolkit for Mojaloop implementations",
4
- "version": "18.16.5",
4
+ "version": "18.17.0-snapshot.2",
5
5
  "license": "Apache-2.0",
6
6
  "author": "Vijaya Kumar Guthi, ModusBox Inc. ",
7
7
  "contributors": [
@@ -78,11 +78,11 @@
78
78
  "@hapi/hapi": "21.4.4",
79
79
  "@hapi/inert": "7.1.0",
80
80
  "@hapi/vision": "7.0.3",
81
- "@mojaloop/central-services-logger": "11.10.1",
82
- "@mojaloop/central-services-metrics": "12.8.1",
83
- "@mojaloop/ml-schema-transformer-lib": "2.7.8",
84
- "@mojaloop/ml-testing-toolkit-shared-lib": "14.3.1",
85
- "@mojaloop/sdk-standard-components": "19.18.0",
81
+ "@mojaloop/central-services-logger": "11.10.3",
82
+ "@mojaloop/central-services-metrics": "12.8.3",
83
+ "@mojaloop/ml-schema-transformer-lib": "2.7.13",
84
+ "@mojaloop/ml-testing-toolkit-shared-lib": "14.3.2",
85
+ "@mojaloop/sdk-standard-components": "19.18.4",
86
86
  "@now-ims/hapi-now-auth": "2.1.0",
87
87
  "@types/socket.io": "3.0.2",
88
88
  "adm-zip": "0.5.16",
@@ -93,10 +93,10 @@
93
93
  "connection-string": "^5.0.0",
94
94
  "cookie-parser": "1.4.7",
95
95
  "cookies": "0.9.1",
96
- "cors": "2.8.5",
96
+ "cors": "2.8.6",
97
97
  "dotenv": "17.2.3",
98
- "express": "5.1.0",
99
- "express-validator": "7.3.0",
98
+ "express": "5.2.1",
99
+ "express-validator": "7.3.1",
100
100
  "fs": "0.0.1-security",
101
101
  "handlebars": "4.7.8",
102
102
  "hapi-auth-bearer-token": "8.0.0",
@@ -106,9 +106,9 @@
106
106
  "js-yaml": "4.1.1",
107
107
  "json-refs": "3.0.15",
108
108
  "json-rules-engine": "7.3.1",
109
- "jsonwebtoken": "9.0.2",
110
- "lodash": "4.17.21",
111
- "mongoose": "8.20.0",
109
+ "jsonwebtoken": "9.0.3",
110
+ "lodash": "4.17.23",
111
+ "mongoose": "9.1.5",
112
112
  "multer": "2.0.2",
113
113
  "mustache": "4.2.0",
114
114
  "mv": "2.1.1",
@@ -124,11 +124,11 @@
124
124
  "rc": "1.2.8",
125
125
  "request-to-curl": "0.1.6",
126
126
  "selectn": "1.3.0",
127
- "socket.io": "4.8.1",
128
- "socket.io-client": "4.8.1",
127
+ "socket.io": "4.8.3",
128
+ "socket.io-client": "4.8.3",
129
129
  "ulidx": "2.4.1",
130
130
  "uuid": "11.1.0",
131
- "ws": "8.18.3"
131
+ "ws": "8.19.0"
132
132
  },
133
133
  "devDependencies": {
134
134
  "@types/jest": "29.5.14",
@@ -138,16 +138,16 @@
138
138
  "jest": "29.7.0",
139
139
  "jest-junit": "16.0.0",
140
140
  "nodemon": "3.1.11",
141
- "npm-check-updates": "19.1.2",
141
+ "npm-check-updates": "19.3.1",
142
142
  "nyc": "17.1.0",
143
143
  "parse-strings-in-object": "1.6.0",
144
144
  "pre-commit": "1.2.2",
145
145
  "proxyquire": "2.1.3",
146
146
  "replace": "1.2.2",
147
- "sinon": "21.0.0",
147
+ "sinon": "21.0.1",
148
148
  "standard": "17.1.2",
149
149
  "standard-version": "9.5.0",
150
- "supertest": "7.1.4",
150
+ "supertest": "7.2.2",
151
151
  "tap-xunit": "2.4.1"
152
152
  },
153
153
  "imports": {
@@ -190,7 +190,7 @@
190
190
  },
191
191
  "cross-spawn": "7.0.6",
192
192
  "markdown-it": "14.1.0",
193
- "jsonwebtoken": "9.0.2",
193
+ "jsonwebtoken": "9.0.3",
194
194
  "yargs-parser": "21.1.1",
195
195
  "oas-validator": {
196
196
  "ajv": "6.12.3"