ml-testing-toolkit 18.19.2 → 18.20.0-infitx.1

package/.grype.yaml

@@ -1,17 +1,16 @@
 scan-type: source
 
 ignore:
-  - vulnerability: GHSA-37qj-frw5-hhjh
-  - vulnerability: GHSA-xxjr-mmjv-4gpg
-  - vulnerability: GHSA-7h2j-956f-4vf2
   - vulnerability: CVE-2025-60876
   - vulnerability: GHSA-5j98-mcp5-4vw2
   - vulnerability: GHSA-34x7-hfp2-rc4v
-  - vulnerability: GHSA-r6q2-hw4h-h46w
+  - vulnerability: GHSA-83g3-92jg-28cx
   - vulnerability: GHSA-8qq5-rm4j-mr97
-  - vulnerability: GHSA-29xp-372q-xqph
   - vulnerability: GHSA-73rr-hh4g-fpgx
-  - vulnerability: GHSA-3966-f6p6-2qr9
+  - vulnerability: GHSA-7r86-cg39-jmmj
+  - vulnerability: GHSA-23c5-xmqv-rm74
+  - vulnerability: GHSA-fj3w-jwp8-x2g3
+  - vulnerability: GHSA-r6q2-hw4h-h46w
   - vulnerability: GHSA-3ppc-4f35-3m26
     include-aliases: true
     reason: >-
@@ -25,15 +24,9 @@ ignore:
   - vulnerability: CVE-2026-27171
     include-aliases: true
     reason: "Alpine base image package (apk): zlib - no npm fix available as of 2026-02-25 (moderate severity)"
-  - vulnerability: GHSA-m7jm-9gc2-mpf2
-    include-aliases: true
-    reason: "Unfixable npm transitive vulnerability: fast-xml-parser (critical severity) as of 2026-02-25"
   - vulnerability: GHSA-2g4f-4pwh-qvx6
     include-aliases: true
     reason: "Unfixable npm transitive vulnerability: ajv (high severity) as of 2026-02-25"
-  - vulnerability: GHSA-jmr7-xgp7-cmfj
-    include-aliases: true
-    reason: "Unfixable npm transitive vulnerability: fast-xml-parser (high severity) as of 2026-02-25"
 output:
   - table
   - json

package/Dockerfile

@@ -1,11 +1,12 @@
 # Arguments
-ARG NODE_VERSION="22.22.0-alpine3.23"
+ARG NODE_VERSION=lts-alpine
+
 # NOTE: Ensure you set NODE_VERSION Build Argument as follows...
 #
 #  export NODE_VERSION="$(cat .nvmrc)-alpine" \
 #  docker build \
 #    --build-arg NODE_VERSION=$NODE_VERSION \
-#    -t mojaloop/sdk-scheme-adapter:local \
+#    -t mojaloop/ml-testing-toolkit:local \
 #    . \
 #
 

package/audit-ci.jsonc

@@ -4,8 +4,7 @@
   // Only use one of ["low": true, "moderate": true, "high": true, "critical": true]
   "moderate": true,
   "allowlist": [ // NOTE: Please add as much information as possible to any items added to the allowList
-    "GHSA-m7jm-9gc2-mpf2",
-    "GHSA-2g4f-4pwh-qvx6",
-    "GHSA-jmr7-xgp7-cmfj"
+    "GHSA-23c5-xmqv-rm74",
+    "GHSA-2g4f-4pwh-qvx6"
   ]
 }

package/examples/collections/dfsp/p2p_fx_happy_path.json

@@ -159,13 +159,6 @@
                   "expect(callback.headers['Content-Length']).to.not.equal('0')"
                 ]
               },
-              {
-                "id": 4,
-                "description": "Callback FSP Destination equal to request FSP Source",
-                "exec": [
-                  "expect(callback.headers['fspiop-destination']).to.equal('{$request.headers['FSPIOP-Source']}')"
-                ]
-              },
               {
                 "id": 5,
                 "description": "Callback body should contain conversionTerms",
@@ -211,8 +204,8 @@
           "operationPath": "/quotes",
           "method": "post",
           "headers": {
-            "Accept": "application/vnd.interoperability.quotes+json;version=1.0",
-            "Content-Type": "application/vnd.interoperability.quotes+json;version=1.0",
+            "Accept": "{$inputs.acceptQuotes}",
+            "Content-Type": "{$inputs.contentTypeQuotes}",
             "Date": "{$function.generic.curDate}",
             "FSPIOP-Source": "{$inputs.fromFspId}",
             "FSPIOP-Destination": "{$prev.1.callback.body.party.partyIdInfo.fspId}"
@@ -276,13 +269,6 @@
                   "expect(callback.headers['Content-Length']).to.not.equal('0')"
                 ]
               },
-              {
-                "id": 4,
-                "description": "Callback FSP Destination equal to request FSP Source",
-                "exec": [
-                  "expect(callback.headers['fspiop-destination']).to.equal('{$request.headers['FSPIOP-Source']}')"
-                ]
-              },
               {
                 "id": 5,
                 "description": "Callback body should contain transferAmount",
@@ -348,8 +334,8 @@
           "path": "/fxTransfers",
           "method": "post",
           "headers": {
-            "Accept": "application/vnd.interoperability.fxTransfers+json;version=1.0",
-            "Content-Type": "application/vnd.interoperability.fxTransfers+json;version=1.0",
+            "Accept": "application/vnd.interoperability.fxTransfers+json;version=2.0",
+            "Content-Type": "application/vnd.interoperability.fxTransfers+json;version=2.0",
             "Date": "{$function.generic.curDate}",
             "FSPIOP-Source": "{$inputs.fromFspId}"
           },
@@ -392,13 +378,6 @@
                 "exec": [
                   "expect(callback.headers['Content-Length']).to.not.equal('0')"
                 ]
-              },
-              {
-                "id": 4,
-                "description": "Callback FSP Destination equal to request FSP Source",
-                "exec": [
-                  "expect(callback.headers['fspiop-destination']).to.equal('{$request.headers['FSPIOP-Source']}')"
-                ]
               }
             ]
           },
@@ -416,8 +395,8 @@
           "operationPath": "/transfers",
           "method": "post",
           "headers": {
-            "Accept": "application/vnd.interoperability.transfers+json;version=1.0",
-            "Content-Type": "application/vnd.interoperability.transfers+json;version=1.0",
+            "Accept": "{$inputs.acceptTransfers}",
+            "Content-Type": "{$inputs.contentTransfers}",
             "Date": "{$function.generic.curDate}",
             "FSPIOP-Source": "{$inputs.fromFspId}"
           },
@@ -456,13 +435,6 @@
                   "expect(callback.headers['Content-Length']).to.not.equal('0')"
                 ]
               },
-              {
-                "id": 4,
-                "description": "Callback FSP Destination equal to request FSP Source",
-                "exec": [
-                  "expect(callback.headers['fspiop-destination']).to.equal('{$request.headers['FSPIOP-Source']}')"
-                ]
-              },
               {
                 "id": 5,
                 "description": "Callback transferState to be COMMITTED",

package/examples/collections/dfsp/p2p_happy_path.json

@@ -1,26 +1,5 @@
 {
   "name": "dfsp-p2p-tests",
-  "inputValues": {
-    "fromIdType": "MSISDN",
-    "fromIdValue": "44123456789",
-    "fromFirstName": "Firstname-Test",
-    "fromLastName": "Lastname-Test",
-    "fromDOB": "1984-01-01",
-    "note": "Test Payment",
-    "currency": "USD",
-    "amount": "100",
-    "homeTransactionId": "123ABC",
-    "fromFspId": "testingtoolkitdfsp",
-    "accept": "application/vnd.interoperability.parties+json;version=1.0",
-    "contentType": "application/vnd.interoperability.parties+json;version=1.0",
-    "toIdValue": "9876543210",
-    "toIdType": "MSISDN",
-    "toFspId": "userdfsp",
-    "acceptQuotes": "application/vnd.interoperability.quotes+json;version=1.0",
-    "contentTypeQuotes": "application/vnd.interoperability.quotes+json;version=1.0",
-    "acceptTransfers": "application/vnd.interoperability.transfers+json;version=1.0",
-    "contentTransfers": "application/vnd.interoperability.transfers+json;version=1.0"
-  },
   "test_cases": [
     {
       "id": 1,
@@ -121,8 +100,8 @@
           "operationPath": "/quotes",
           "method": "post",
           "headers": {
-            "Accept": "application/vnd.interoperability.quotes+json;version=1.0",
-            "Content-Type": "application/vnd.interoperability.quotes+json;version=1.0",
+            "Accept": "{$inputs.acceptQuotes}",
+            "Content-Type": "{$inputs.contentTypeQuotes}",
             "Date": "{$function.generic.curDate}",
             "FSPIOP-Source": "{$inputs.fromFspId}",
             "FSPIOP-Destination": "{$prev.1.callback.body.party.partyIdInfo.fspId}"
@@ -208,13 +187,6 @@
                   "expect(callback.body.transferAmount.currency).to.equal('{$request.body.amount.currency}')"
                 ]
               },
-              {
-                "id": 7,
-                "description": "Callback content-type to be quotes",
-                "exec": [
-                  "expect(callback.headers['content-type']).to.equal('application/vnd.interoperability.quotes+json;version=1.0')"
-                ]
-              },
               {
                 "id": 8,
                 "description": "Request amountType to be SEND",
@@ -258,8 +230,8 @@
           "operationPath": "/transfers",
           "method": "post",
           "headers": {
-            "Accept": "application/vnd.interoperability.transfers+json;version=1.0",
-            "Content-Type": "application/vnd.interoperability.transfers+json;version=1.0",
+            "Accept": "{$inputs.acceptTransfers}",
+            "Content-Type": "{$inputs.contentTransfers}",
             "Date": "{$function.generic.curDate}",
             "FSPIOP-Source": "{$inputs.fromFspId}"
           },
@@ -312,13 +284,6 @@
                   "expect(callback.body.transferState).to.equal('COMMITTED')"
                 ]
               },
-              {
-                "id": 6,
-                "description": "Callback content-type to be transfers",
-                "exec": [
-                  "expect(callback.headers['content-type']).to.equal('application/vnd.interoperability.transfers+json;version=1.0')"
-                ]
-              },
               {
                 "id": 7,
                 "description": "Request transferId same as quote request transferId",

package/examples/environments/dfsp_local_environment.json

@@ -9,15 +9,15 @@
     "HOST_SIMULATOR": "http://moja-simulator.local",
     "HOST_TRANSACTION_REQUESTS_SERVICE": "http://transaction-request-service.local",
     "HUB_OPERATOR_BEARER_TOKEN": "NOT_APPLICABLE",
-    "accept": "application/vnd.interoperability.parties+json;version=1.0",
-    "acceptQuotes": "application/vnd.interoperability.quotes+json;version=1.0",
-    "acceptTransfers": "application/vnd.interoperability.transfers+json;version=1.0",
+    "accept": "application/vnd.interoperability.parties+json;version=2.0",
+    "acceptQuotes": "application/vnd.interoperability.quotes+json;version=2.0",
+    "acceptTransfers": "application/vnd.interoperability.transfers+json;version=2.0",
     "accountId": "6",
     "amount": "100",
     "condition": "HOr22-H3AfTDHrSkPjJtVPRdKouuMkDXTR4ejlQa8Ks",
-    "contentTransfers": "application/vnd.interoperability.transfers+json;version=1.0",
-    "contentType": "application/vnd.interoperability.parties+json;version=1.0",
-    "contentTypeQuotes": "application/vnd.interoperability.quotes+json;version=1.0",
+    "contentTransfers": "application/vnd.interoperability.transfers+json;version=2.0",
+    "contentType": "application/vnd.interoperability.parties+json;version=2.0",
+    "contentTypeQuotes": "application/vnd.interoperability.quotes+json;version=2.0",
     "currency": "USD",
     "fromDOB": "1984-01-01",
     "fromFirstName": "Firstname-Test",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ml-testing-toolkit",
   "description": "Testing Toolkit for Mojaloop implementations",
-  "version": "18.19.2",
+  "version": "18.20.0-infitx.1",
   "license": "Apache-2.0",
   "author": "Vijaya Kumar Guthi, ModusBox Inc. ",
   "contributors": [
@@ -89,7 +89,7 @@
     "adm-zip": "0.5.16",
     "ajv-formats": "3.0.1",
     "atob": "2.1.2",
-    "axios": "1.13.5",
+    "axios": "1.13.6",
     "chai": "4.4.1",
     "connection-string": "^5.0.0",
     "cookie-parser": "1.4.7",
@@ -108,8 +108,8 @@
     "json-rules-engine": "7.3.1",
     "jsonwebtoken": "9.0.3",
     "lodash": "4.17.23",
-    "mongoose": "9.2.2",
-    "multer": "2.0.2",
+    "mongoose": "9.2.3",
+    "multer": "2.1.0",
     "mustache": "4.2.0",
     "mv": "2.1.1",
     "node-dir": "0.1.17",
@@ -138,7 +138,7 @@
     "jest": "29.7.0",
     "jest-junit": "16.0.0",
     "nodemon": "3.1.14",
-    "npm-check-updates": "19.5.0",
+    "npm-check-updates": "19.6.3",
     "nyc": "18.0.0",
     "parse-strings-in-object": "1.6.0",
     "pre-commit": "1.2.2",
@@ -169,7 +169,7 @@
     }
   },
   "overrides": {
-    "axios": "1.13.5",
+    "axios": "1.13.6",
     "form-data": "4.0.5",
     "brace-expansion": "1.1.12",
     "npm-check-updates": {