fix: Dockerfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-ALPINE316-ZLIB-2976176

Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=linux/amd64 node:18.6.0-alpine as base
+FROM --platform=linux/amd64 node:18-alpine as base
 
 RUN apk --update --no-cache add --virtual .builds-deps build-base python3
 

lib/session/call-session.js

@@ -410,7 +410,6 @@ class CallSession extends Emitter {
     try {
       const t = normalizeJambones(this.logger, [gather]);
       this.backgroundGatherTask = makeTask(this.logger, t[0]);
-      this._bargeInEnabled = true;
       this.backgroundGatherTask
         .once('dtmf', this._clearTasks.bind(this))
         .once('vad', this._clearTasks.bind(this))
@@ -427,7 +426,7 @@ class CallSession extends Emitter {
           this.backgroundGatherTask && this.backgroundGatherTask.removeAllListeners();
           this.backgroundGatherTask && this.backgroundGatherTask.span.end();
           this.backgroundGatherTask = null;
-          if (autoEnable && !this.callGone && !this._stopping && this._bargeInEnabled) {
+          if (autoEnable && !this.callGone && !this._stopping) {
             this.logger.info('CallSession:enableBotMode: restarting background gather');
             setImmediate(() => this.enableBotMode(gather, true));
           }
@@ -444,7 +443,6 @@ class CallSession extends Emitter {
     }
   }
   disableBotMode() {
-    this._bargeInEnabled = false;
     if (this.backgroundGatherTask) {
       try {
         this.backgroundGatherTask.removeAllListeners();

lib/tasks/config.js

@@ -93,7 +93,7 @@ class TaskConfig extends Task {
       }, 'Config: updated recognizer');
     }
     if ('enable' in this.bargeIn) {
-      if (this.bargeIn.enable === true && this.gatherOpts) {
+      if (this.gatherOpts) {
         this.gatherOpts.recognizer = this.hasRecognizer ?
           this.recognizer :
           {
@@ -103,7 +103,7 @@ class TaskConfig extends Task {
         this.logger.info({opts: this.gatherOpts}, 'Config: enabling bargeIn');
         cs.enableBotMode(this.gatherOpts, this.autoEnable);
       }
-      else if (this.bargeIn.enable === false) {
+      else {
         this.logger.info('Config: disabling bargeIn');
         cs.disableBotMode();
       }

lib/tasks/dial.js

@@ -376,8 +376,9 @@ class TaskDial extends Task {
   }
 
   async _initializeInbound(cs) {
-    const {ep} = await cs._evalEndpointPrecondition(this);
+    const ep = await cs._evalEndpointPrecondition(this);
     this.epOther = ep;
+    debug(`Dial:__initializeInbound allocated ep for incoming call: ${ep.uuid}`);
 
     /* send outbound legs back to the same SBC (to support static IP feature) */
     if (!this.proxy) this.proxy = `${cs.req.source_address}:${cs.req.source_port}`;

lib/utils/db-utils.js

@@ -30,7 +30,6 @@ const speechMapper = (cred) => {
     const o = JSON.parse(decrypt(credential));
     obj.access_key_id = o.access_key_id;
     obj.secret_access_key = o.secret_access_key;
-    obj.aws_region = o.aws_region;
   }
   else if ('microsoft' === obj.vendor) {
     const o = JSON.parse(decrypt(credential));

lib/utils/http-requestor.js

@@ -31,7 +31,6 @@ class HttpRequestor extends BaseRequestor {
     this._baseUrl = `${u.protocol}://${u.resource}`;
     this._resource = u.resource;
     this._protocol = u.protocol;
-    this._search = u.search;
     this._usePools = process.env.HTTP_POOL && parseInt(process.env.HTTP_POOL);
 
     if (this._usePools) {
@@ -84,11 +83,13 @@ class HttpRequestor extends BaseRequestor {
 
     assert.ok(url, 'HttpRequestor:request url was not provided');
     assert.ok, (['GET', 'POST'].includes(method), `HttpRequestor:request method must be 'GET' or 'POST' not ${method}`);
+    const {url: urlInfo = hook, method: methodInfo = 'POST'} = hook;  // mask user/pass
+    this.logger.debug({url: urlInfo, method: methodInfo, payload}, `HttpRequestor:request ${method} ${url}`);
     const startAt = process.hrtime();
 
     let newClient;
     try {
-      let client, path, query;
+      let client, path;
       if (this._isRelativeUrl(url)) {
         client = this.client;
         path = url;
@@ -98,12 +99,10 @@ class HttpRequestor extends BaseRequestor {
         if (u.resource === this._resource && u.protocol === this._protocol) {
           client = this.client;
           path = u.pathname;
-          query = u.query;
         }
         else {
           client = newClient = new Client(`${u.protocol}://${u.resource}`);
           path = u.pathname;
-          query = u.query;
         }
       }
       const sigHeader = this._generateSigHeader(payload, this.secret);
@@ -117,7 +116,6 @@ class HttpRequestor extends BaseRequestor {
       this.logger.debug({url, absUrl, hdrs}, 'send webhook');
       const {statusCode, headers, body} =  await client.request({
         path,
-        query,
         method,
         headers: hdrs,
         ...('POST' === method && {body: JSON.stringify(payload)}),