Skip to content

Fix CG Form-data for AzureFunctionOnKubernetesV0 #21216

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 7 commits into
base: master
Choose a base branch
from

Conversation

Deekshitha981
Copy link
Collaborator

@Deekshitha981 Deekshitha981 commented Aug 13, 2025

Context

Update the package version of form-data from 4.0.0 to 4.0.4 to resolve vulnerability issue.
📌 ADO Work Item


Task Name

AzureFunctionOnKubernetesV0


Description

This override is applied to force the usage of form-data@^4.0.4 across all dependencies


Risk Assessment (Low / Medium / High)

Low


Change Behind Feature Flag (Yes / No)

No


Documentation Changes Required (Yes/No)

No


Unit Tests Added or Updated (Yes / No)

No

Rollback Scenario and Process (Yes/No)

Revert the package version


Checklist

  • Related issue linked (if applicable)
  • Task version was bumped — see versioning guide
  • Verified the task behaves as expected

@Deekshitha981 Deekshitha981 requested review from manolerazvan and a team as code owners August 13, 2025 06:17
@Deekshitha981
Copy link
Collaborator Author

/azp run

Copy link

Azure Pipelines successfully started running 3 pipeline(s).

@@ -24,5 +24,8 @@
"azure-pipelines-tasks-docker-common": "^2.242.0",
"azure-pipelines-tasks-kubernetes-common": "^2.212.0",
"js-yaml": "3.13.1"
},
"overrides": {
"form-data": "^2.5.4"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please update form-data package to latest version 4.0.4
https://www.npmjs.com/package/form-data?activeTab=versions

@@ -14,8 +14,8 @@
"author": "Microsoft Corporation",
"version": {
"Major": 0,
"Minor": 247,
"Patch": 1
"Minor": 261,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Deekshitha981
Copy link
Collaborator Author

/azp run

Copy link

Azure Pipelines successfully started running 3 pipeline(s).

@sanjays-ms
Copy link
Contributor

/azp run

Copy link

Azure Pipelines successfully started running 3 pipeline(s).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants