From f50fde2f0875b073edc1988a5bd28bde381a293c Mon Sep 17 00:00:00 2001 From: SameeraPriyathamTadikonda Date: Wed, 8 Apr 2026 18:24:58 -0700 Subject: [PATCH 1/3] PDP-1182: Remove per-repo pr-workflow.yaml --- .github/workflows/pr-workflow.yaml | 23 ----------------------- 1 file changed, 23 deletions(-) delete mode 100644 .github/workflows/pr-workflow.yaml diff --git a/.github/workflows/pr-workflow.yaml b/.github/workflows/pr-workflow.yaml deleted file mode 100644 index 9165227c..00000000 --- a/.github/workflows/pr-workflow.yaml +++ /dev/null @@ -1,23 +0,0 @@ -name: PR Workflow - -on: - # Using pull_request_target instead of pull_request to handle PRs from forks - pull_request_target: - types: [opened, edited, reopened, synchronize] - # No branch filtering - will run on all PRs - -jobs: - jira-pr-check: - name: 🏷️ Validate JIRA ticket ID - # Use the reusable workflow from the central repository - uses: marklogic/pr-workflows/.github/workflows/jira-id-check.yml@main - with: - # Pass the PR title from the event context - pr-title: ${{ github.event.pull_request.title }} - copyright-validation: - name: © Validate Copyright Headers - uses: marklogic/pr-workflows/.github/workflows/copyright-check.yml@main - permissions: - contents: read - pull-requests: write - issues: write From c587309ad8c284d62198e8b6493fca3d74d28ff4 Mon Sep 17 00:00:00 2001 From: Ryan Dew Date: Tue, 1 Sep 2026 20:43:37 -0700 Subject: [PATCH 2/3] MLE-31994 Update version to 4.2.0 --- README.md | 2 +- package-lock.json | 4 ++-- package.json | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 2c9df2eb..db9e2331 100644 --- a/README.md +++ b/README.md @@ -19,7 +19,7 @@ The Progress® MarkLogic® Node Client API provides access to the MarkLogic data ## System Requirements -The Node Client 4.1.0 release requires Node.js 22 or higher. Testing has verified that the client will +The Node Client 4.2.0 release requires Node.js 22 or higher. Testing has verified that the client will run successfully on Node 20, but we recommend 22 or higher based on [the Node.js release roadmap](https://nodejs.org/en/about/previous-releases), as Node 20 enters end-of-life in April 2026 while Node 22 is supported through April 2027. diff --git a/package-lock.json b/package-lock.json index df94e097..716ceaac 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "marklogic", - "version": "4.1.0", + "version": "4.2.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "marklogic", - "version": "4.1.0", + "version": "4.2.0", "license": "Apache-2.0", "dependencies": { "@fastify/busboy": "3.2.0", diff --git a/package.json b/package.json index faa5b9c1..0dbc515d 100644 --- a/package.json +++ b/package.json @@ -3,7 +3,7 @@ "name": "marklogic", "description": "The official MarkLogic Node.js client API.", "homepage": "https://github.com/marklogic/node-client-api", - "version": "4.1.0", + "version": "4.2.0", "license": "Apache-2.0", "main": "./lib/marklogic.js", "types": "marklogic.d.ts", From 0a958834dbf0a0840961e6069239126c7d4c9490 Mon Sep 17 00:00:00 2001 From: anupamme Date: Thu, 3 Sep 2026 17:22:35 +0000 Subject: [PATCH 3/3] fix: javascript.lang.security.detect-child-process.detect-child-process security vulnerability Automated security fix generated by OrbisAI Security --- test-basic/ssl-min-allow-tls-test.js | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/test-basic/ssl-min-allow-tls-test.js b/test-basic/ssl-min-allow-tls-test.js index 5e795732..90d0d0c0 100644 --- a/test-basic/ssl-min-allow-tls-test.js +++ b/test-basic/ssl-min-allow-tls-test.js @@ -5,7 +5,7 @@ let testconfig = require('../etc/test-config.js'); let should = require('should'); let marklogic = require('../'); -const { exec } = require('child_process'); +const { execFile } = require('child_process'); const testlib = require("../etc/test-lib"); let db = marklogic.createDatabaseClient(testconfig.restConnectionForTls); let serverConfiguration = {}; @@ -141,12 +141,13 @@ describe('document write and read using min tls', function () { function updateTlsVersion(tlsVersion) { return new Promise((resolve, reject) => { - const curlCommand = ` - curl --anyauth --user admin:admin -X PUT -H "Content-Type: application/json" \ --d '{"ssl-min-allow-tls": "${tlsVersion}"}' \ -'http://${host}:8002/manage/v2/servers/unittest-nodeapi-ssl/properties?group-id=Default' - `; - exec(curlCommand, (error, stdout, stderr) => { + const curlArgs = [ + '--anyauth', '--user', 'admin:admin', '-X', 'PUT', + '-H', 'Content-Type: application/json', + '-d', JSON.stringify({'ssl-min-allow-tls': tlsVersion}), + `http://${host}:8002/manage/v2/servers/unittest-nodeapi-ssl/properties?group-id=Default` + ]; + execFile('curl', curlArgs, (error, stdout, stderr) => { if (error) { throw new Error(`Error executing curl: ${stderr}`); }