Skip to content

Commit 8f3fd8e

Browse files
authored
chore: fix CVE warnings (#733)
* fix: upgrade `uuid` to v14 to resolve CVE in v3/v5/v6 buffer bounds check * fix(e2e): assert on `mythical-server` in breakdown test The `mythical-requester` service doesn't reliably produce enough root span data in the short CI startup window, so its breakdown panel gets filtered out (zero-sum skip in `ByFrameRepeater`). `mythical-server` is consistently present.
1 parent ee3778b commit 8f3fd8e

3 files changed

Lines changed: 13 additions & 23 deletions

File tree

e2e/components.spec.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ test.describe('components', () => {
6565
const breakdownPanelSearch = page.locator('#searchFieldInput');
6666
await expect(breakdownPanelSearch).toBeVisible({ timeout: 20000 });
6767
await breakdownPanelSearch.fill('mythical');
68-
await expect(page.locator('#trace-exploration').getByText('mythical-requester', { exact: true })).toBeVisible({
68+
await expect(page.locator('#trace-exploration').getByText('mythical-server', { exact: true })).toBeVisible({
6969
timeout: 20000,
7070
});
7171
});

package.json

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -117,7 +117,7 @@
117117
"react-use": "^17.6.0",
118118
"rxjs": "7.8.2",
119119
"uplot": "^1.6.32",
120-
"uuid": "^13.0.0"
120+
"uuid": "^14.0.0"
121121
},
122122
"pnpm": {
123123
"overrides": {
@@ -138,7 +138,8 @@
138138
"brace-expansion@^1": "^1.1.13",
139139
"brace-expansion@^5": "^5.0.5",
140140
"@types/react": "^18.3.28",
141-
"@types/react-dom": "^18.3.7"
141+
"@types/react-dom": "^18.3.7",
142+
"uuid": "^14.0.0"
142143
}
143144
},
144145
"packageManager": "pnpm@10.33.1+sha512.05ba3c1d5d1c18f68df06470d74055e62d41fc110a0c660db1b2dfb2785327f04cf0f68345d4609bc52089e7fa0343c31593b2f9594e2c5d5da426230acc9820"

pnpm-lock.yaml

Lines changed: 9 additions & 20 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)