Release: Merge back 2.44.3 into bugfix from: master-into-bugfix/2.44.3-2.45.0-dev

[github-actions]

Release triggered by rossops

[dryrunsecurity]

DryRun Security Summary

Comprehensive update to GitHub Actions workflow, package dependencies, DefectDojo version, and Helm chart configuration with a focus on version updates, security improvements, and dependency management.

Expand for full summary

1. Summary: Updated GitHub Actions workflow, package dependencies, DefectDojo version, and Helm chart version across multiple files, focusing on version updates and configuration improvements.

2. Security Findings:

• In .github/workflows/validate_docs_build.yml:

  • Workflow uses pinned action versions, which helps prevent unexpected behavior
  • Production environment variables ensure secure configuration
  • Build process uses minification to reduce potential information disclosure

• In docs/package-lock.json and docs/package.json:

  • Removed version range specifiers, which could potentially reduce risk of unexpected updates
  • Node.js version update to 22.14.0 might include security patches
  • Potential dependency update risks require thorough testing

• In dojo/__init__.py:

  • Version update to 2.44.3 with no direct security implications
  • Uses HTTPS for GitHub and documentation URLs

• In helm/defectdojo/Chart.yaml:

  • Uses HTTPS for icon URL
  • No sensitive information exposed
  • Secure dependency repositories

View PR in the DryRun Dashboard.