Merge branch 'main' into mg/OPS-3123

Author: MarceloRGonc

.github/workflows/ci.yml

@@ -25,6 +25,21 @@ jobs:
       - name: Install dependencies
         if: steps.node-modules-cache.outputs.cache-hit != 'true'
         run: npm ci --no-audit --no-fund
+  audit:
+    name: Security Audit
+    needs: install
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5.0.1
+      - name: Restore node_modules cache
+        id: node-modules-cache
+        uses: actions/cache/restore@v4.3.0
+        with:
+          path: node_modules
+          key: node-modules-cache-${{ hashFiles('package-lock.json', '.npmrc') }}
+          fail-on-cache-miss: true
+      - name: Run npm audit
+        run: npm audit --audit-level=critical
   lint:
     name: Lint
     needs: install

THIRD_PARTY_LICENSES.txt

@@ -11834,7 +11834,7 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 The following npm package may be included in this product:
 
- - form-data@4.0.0
+ - form-data@4.0.5
 
 This package contains the following license:
 

package-lock.json

@@ -188,7 +188,7 @@
     "fastify-raw-body": "5.0.0",
     "fastify-socket.io": "5.1.0",
     "firebase-scrypt": "2.2.0",
-    "form-data": "4.0.0",
+    "form-data": "4.0.5",
     "fs-extra": "11.2.0",
     "fuse.js": "7.0.0",
     "http-status-codes": "2.2.0",

package.json

@@ -228,8 +228,12 @@ export const aiMCPChatController: FastifyPluginAsyncTypebox = async (app) => {
       // Flush traces to Langfuse (critical for Fastify)
       const spanProcessor = getLangfuseSpanProcessor();
       if (spanProcessor) {
-        await spanProcessor.forceFlush();
-        logger.debug('Flushed Langfuse traces');
+        try {
+          await spanProcessor.forceFlush();
+          logger.debug('Flushed Langfuse traces');
+        } catch (error) {
+          logger.error('Failed to flush Langfuse traces', { error });
+        }
       }
     }
   });