Security Review November

[lewisdaly]

Tasks:

• review dependabot alerts

• merge in existing PRS

• create new prs for fixes where applicable

• created any follow up tickets where applicable

• apply to the following repos (as identified by dependabot):

  • ml-number
  • mojaloop-simulator
  • template-typescript-public
  • central-services-health
  • event-stream-processor
  • account-lookup-service
  • central-services-metrics
  • central-event-processor
    - [ ] central-settlement

Done

• Acceptance Criteria pass
• Designs are up-to date
• Unit Tests pass
• Integration Tests pass

Pull Requests:

• feat(security): November security review ml-number#8
• feat(dependencies): update dependencies event-stream-processor#30
• feat(security): November security review account-lookup-service#374
• chore(package): bump package to 11.2.2 mojaloop-simulator#83
  - [ ] chore(security): security review November central-settlement#327

Follow-up:

• central-settlement dependency upgrades #1842 central-settlement dependency and test fixes

Dependencies:

• N/A

Accountability:

• Owner: TBC
• QA/Review: TBC

[lewisdaly]

Central-settlement has a bunch of other issues with integration tests. I think we should address that in a separate follow up.