bugfix: allow editServiceSubscription without overwriting tags (razee…

…-io#1334) * bugfix: allow editServiceSubscription without overwriting tags * fix package-lock
redhat-marketplace · Jun 22, 2023 · 59039fd · 59039fd
1 parent 266402f
commit 59039fd
Show file tree

Hide file tree

Showing 3 changed files with 884 additions and 831 deletions.
diff --git a/app/apollo/resolvers/serviceSubscription.js b/app/apollo/resolvers/serviceSubscription.js
@@ -250,7 +250,7 @@ const serviceResolvers = {
         validateName( 'name', name );
         validateString( 'channelUuid', channelUuid );
         validateString( 'versionUuid', versionUuid );
-        tags.forEach( value => { validateString( 'tags', value ); } );
+        if( tags ) tags.forEach( value => { validateString( 'tags', value ); } );
 
         const serviceSubscription = await models.ServiceSubscription.findOne({ _id: ssid, org_id: orgId }).lean({ virtuals: true });
         if (!serviceSubscription) {

diff --git a/audit-ci.json b/audit-ci.json
@@ -2,6 +2,20 @@
   "low": true,
   "_allowlistInfo": "none",
   "allowlist": [
+    {
+      "GHSA-gpv5-7x3g-ghjv": {
+        "active": true,
+        "notes": "no fix available as of 20230622",
+        "expiry": "2023-06-26"
+      }
+    },
+    {
+      "GHSA-c2qf-rxjj-qqgw": {
+        "active": true,
+        "notes": "no fix available as of 20230622",
+        "expiry": "2023-06-26"
+      }
+    }
   ],
   "skip-dev": true
 }