julian.baeume authored 1 year ago and julian.baeume committed 1 year ago

Changelog:
- introduce two separate roles for middleware deployments:
    - ui-middleware: read from redis only, listen to version updates, can easily be scaled
    - updater: split out all code that writes to redis, no need to scale > 1

scriptuser authored 1 year ago and julian.baeume committed 1 year ago

Bumps [bull](https://github.com/OptimalBits/bull) from 4.10.4 to 4.11.3.
- [Release notes](https://github.com/OptimalBits/bull/releases)
- [Changelog](https://github.com/OptimalBits/bull/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/OptimalBits/bull/compare/v4.10.4...v4.11.3)

Just another use case to test. This is supposed to be the desired
mode for core-middleware, so we should at least have this tested as
chances are high that admins want to align on the redis deployment.

UI Middleware instance for prefix deployments was not restarted, so deployment could be "old".
Online help was broken for prefix deployments, adjusted virtualservice to match deployment

- semver vulnerable to Regular Expression Denial of Service
- debug Inefficient Regular Expression Complexity vulnerability
- Prototype Pollution in JSON5 via Parse Method