Merge pull request #280 from Cox-Automotive/audit

Updates npm dependencies according to npm audit

.github/workflows/build-and-test.yml

@@ -20,15 +20,20 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [16.x, 18.x]
+        node-version: [20.x, 22.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:
     - uses: actions/checkout@v2
     - name: Setup Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v2
+      uses: actions/setup-node@v4
       with:
         node-version: ${{ matrix.node-version }}
+
+    # Note: if this step is failing due to authentication errors, it is likely because you regenerated the npm-shrinkwrap.json 
+    #   file while your local NPM was set to use the coxauto artifactory NPM registry. To fix this, locally delete your node_modules
+    #   folder and npm-shrinkwrap.json file, then run `npm i --registry=https://registry.npmjs.org/` to reinstall using public NPM
+    #   and then `npm shrinkwrap` to regenerate the npm-shrinkwrap.json file.
     - name: Install dependencies
       run: npm ci
     - run: npm run build --if-present

changelog.txt

@@ -3,8 +3,7 @@
 
 Thanks for upgrading to the latest version of the ALKS CLI!
 
-* Fixes duration flag for alks sessions open
-
+* Updates dependencies to mitigate vulnerabilities
 
 Have feedback? https://github.com/Cox-Automotive/ALKS-CLI/issues
 

dist/changelog.txt

@@ -3,8 +3,7 @@
 
 Thanks for upgrading to the latest version of the ALKS CLI!
 
-* Fixes duration flag for alks sessions open
-
+* Updates dependencies to mitigate vulnerabilities
 
 Have feedback? https://github.com/Cox-Automotive/ALKS-CLI/issues
 

dist/package.json

@@ -103,7 +103,7 @@
     "optionalDependencies": {
         "express": "^4.17.1",
         "express-list-endpoints": "^3.0.1",
-        "forever": "^4.0.3",
+        "forever": "^1.0.1",
         "keytar": "^7.7.0"
     },
     "lint-staged": {