From c10dce81195e84702977421d24d691c96dcbb3ce Mon Sep 17 00:00:00 2001 From: Rishabh Gupta Date: Thu, 23 Jul 2026 11:12:40 +0530 Subject: [PATCH 1/2] fix sec vuln part 9 --- ui/package.json | 20 +- ...s-yaml@4.2.0.patch => js-yaml@4.3.0.patch} | 0 ui/pnpm-lock.yaml | 216 +++++++++--------- 3 files changed, 116 insertions(+), 120 deletions(-) rename ui/patches/{js-yaml@4.2.0.patch => js-yaml@4.3.0.patch} (100%) diff --git a/ui/package.json b/ui/package.json index c31ddcf3988..7ea16d5fe21 100644 --- a/ui/package.json +++ b/ui/package.json @@ -22,12 +22,12 @@ "overrides": { "clean-css@<4.1.11": ">=4.1.11", "markdown-it@<14.2.0": ">=14.2.0", - "js-yaml@<4.2.0": "4.2.0", - "shell-quote@<1.8.4": ">=1.8.4", + "js-yaml@<4.3.0": "4.3.0", + "shell-quote@<1.9.0": ">=1.9.0", "json5@<1.0.2": ">=1.0.2", "braces@<3.0.3": ">=3.0.3", "micromatch@<4.0.8": ">=4.0.8", - "body-parser@<2.2.1": ">=2.2.1", + "body-parser@<2.3.0": ">=2.3.0", "send@<0.19.0": ">=0.19.0", "serve-static@<1.16.0": ">=1.16.0", "path-to-regexp@<0.1.10": ">=0.1.10", @@ -43,15 +43,13 @@ "rollup@<2.80.0": ">=2.80.0", "qs": ">=6.15.2", "underscore": ">=1.13.8", - "immutable": ">=5.1.5", + "immutable": ">=5.1.8", "serialize-javascript@<=7.0.4": ">=7.0.5", "socket.io-parser@<4.2.6": ">=4.2.6", "handlebars@<4.7.9": ">=4.7.9", "yaml@>=2.0.0 <2.8.3": ">=2.8.3", "picomatch@<2.3.2": "^2.3.2", - "brace-expansion@>=5.0.0 <5.0.6": "^5.0.6", - "brace-expansion@>=2.0.0 <2.0.3": "^2.0.3", - "brace-expansion@<1.1.13": "^1.1.13", + "brace-expansion": ">=5.0.7", "ajv@<6.14.0": "^6.14.0", "ajv@>=7.0.0-alpha.0 <8.18.0": "^8.18.0", "lodash@>=4.0.0 <=4.17.22": "^4.18.0", @@ -69,14 +67,18 @@ "follow-redirects@<=1.15.11": ">=1.16.0", "uuid@<14.0.0": ">=14.0.0", "postcss@<8.5.10": ">=8.5.10", - "fast-uri@<=3.1.1": "^3.1.2", + "fast-uri@<3.1.4": ">=3.1.4", "@babel/plugin-transform-modules-systemjs@>=7.12.0 <=7.29.3": "^7.29.4", "ws@<8.21.0": ">=8.21.0", "@babel/core@<7.29.6": "^7.29.6", + "websocket-driver@<0.7.5": ">=0.7.5", + "engine.io@<6.6.7": ">=6.6.7", + "linkify-it@<=5.0.1": ">=5.0.2", + "morgan@<1.11.0": ">=1.11.0", "@ember/test-waiters": "3.1.0" }, "patchedDependencies": { - "js-yaml@4.2.0": "patches/js-yaml@4.2.0.patch" + "js-yaml@4.3.0": "patches/js-yaml@4.3.0.patch" } } } diff --git a/ui/patches/js-yaml@4.2.0.patch b/ui/patches/js-yaml@4.3.0.patch similarity index 100% rename from ui/patches/js-yaml@4.2.0.patch rename to ui/patches/js-yaml@4.3.0.patch diff --git a/ui/pnpm-lock.yaml b/ui/pnpm-lock.yaml index f20efb40e36..23511d051e6 100644 --- a/ui/pnpm-lock.yaml +++ b/ui/pnpm-lock.yaml @@ -7,12 +7,12 @@ settings: overrides: clean-css@<4.1.11: '>=4.1.11' markdown-it@<14.2.0: '>=14.2.0' - js-yaml@<4.2.0: 4.2.0 - shell-quote@<1.8.4: '>=1.8.4' + js-yaml@<4.3.0: 4.3.0 + shell-quote@<1.9.0: '>=1.9.0' json5@<1.0.2: '>=1.0.2' braces@<3.0.3: '>=3.0.3' micromatch@<4.0.8: '>=4.0.8' - body-parser@<2.2.1: '>=2.2.1' + body-parser@<2.3.0: '>=2.3.0' send@<0.19.0: '>=0.19.0' serve-static@<1.16.0: '>=1.16.0' path-to-regexp@<0.1.10: '>=0.1.10' @@ -28,15 +28,13 @@ overrides: rollup@<2.80.0: '>=2.80.0' qs: '>=6.15.2' underscore: '>=1.13.8' - immutable: '>=5.1.5' + immutable: '>=5.1.8' serialize-javascript@<=7.0.4: '>=7.0.5' socket.io-parser@<4.2.6: '>=4.2.6' handlebars@<4.7.9: '>=4.7.9' yaml@>=2.0.0 <2.8.3: '>=2.8.3' picomatch@<2.3.2: ^2.3.2 - brace-expansion@>=5.0.0 <5.0.6: ^5.0.6 - brace-expansion@>=2.0.0 <2.0.3: ^2.0.3 - brace-expansion@<1.1.13: ^1.1.13 + brace-expansion: '>=5.0.7' ajv@<6.14.0: ^6.14.0 ajv@>=7.0.0-alpha.0 <8.18.0: ^8.18.0 lodash@>=4.0.0 <=4.17.22: ^4.18.0 @@ -54,16 +52,20 @@ overrides: follow-redirects@<=1.15.11: '>=1.16.0' uuid@<14.0.0: '>=14.0.0' postcss@<8.5.10: '>=8.5.10' - fast-uri@<=3.1.1: ^3.1.2 + fast-uri@<3.1.4: '>=3.1.4' '@babel/plugin-transform-modules-systemjs@>=7.12.0 <=7.29.3': ^7.29.4 ws@<8.21.0: '>=8.21.0' '@babel/core@<7.29.6': ^7.29.6 + websocket-driver@<0.7.5: '>=0.7.5' + engine.io@<6.6.7: '>=6.6.7' + linkify-it@<=5.0.1: '>=5.0.2' + morgan@<1.11.0: '>=1.11.0' '@ember/test-waiters': 3.1.0 patchedDependencies: - js-yaml@4.2.0: + js-yaml@4.3.0: hash: 6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2 - path: patches/js-yaml@4.2.0.patch + path: patches/js-yaml@4.3.0.patch importers: @@ -187,8 +189,8 @@ importers: specifier: ^1.3.0 version: 1.5.1 body-parser: - specifier: '>=2.2.1' - version: 2.2.2 + specifier: '>=2.3.0' + version: 2.3.0 broccoli-asset-rev: specifier: ^3.0.0 version: 3.0.0 @@ -448,8 +450,8 @@ importers: specifier: ^9.1.7 version: 9.1.7 js-yaml: - specifier: 4.2.0 - version: 4.2.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) + specifier: 4.3.0 + version: 4.3.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) lint-staged: specifier: ^16.2.6 version: 16.2.6 @@ -2061,9 +2063,6 @@ packages: '@types/connect@3.4.38': resolution: {integrity: sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug==} - '@types/cookie@0.4.1': - resolution: {integrity: sha512-XW/Aa8APYr6jSVVA1y/DEIZX0/GMKLEVekNG727R8cs56ahETkRAy/3DR7+fJyh7oUgGwNQaRfXCun0+KbWY7Q==} - '@types/cors@2.8.17': resolution: {integrity: sha512-8CGDvrBj1zgo2qE+oS3pOCyYNqCPryMWY2bGfwA0dcfopWGgxs+78df0Rs3rc9THP4JkOhLsAa+15VdpAqkcUA==} @@ -2153,6 +2152,9 @@ packages: '@types/unist@2.0.10': resolution: {integrity: sha512-IfYcSBWE3hLpBg8+X2SEa8LVkJdJEkT2Ese2aaLs3ptGdVtABxndrMaxuFlQ1qdFf9Q5rDvDpxI3WwgvKFAsQA==} + '@types/ws@8.18.1': + resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==} + '@ungap/structured-clone@0.3.4': resolution: {integrity: sha512-TSVh8CpnwNAsPC5wXcIyh92Bv1gq6E9cNDeeLu7Z4h8V4/qWtXJp7y42qljRkqcpmsve1iozwv1wr+3BNdILCg==} @@ -2551,9 +2553,6 @@ packages: bail@1.0.5: resolution: {integrity: sha512-xFbRxM1tahm08yHBP16MMjVUAvDaBMD38zsM9EMAUN61omwLmKlOpB/Zku5QkjZ8TZ4vn53pj+t518cH0S03RQ==} - balanced-match@1.0.2: - resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==} - balanced-match@4.0.4: resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==} engines: {node: 18 || 20 || >=22} @@ -2594,21 +2593,15 @@ packages: bluebird@3.7.2: resolution: {integrity: sha512-XpNj6GDQzdfW+r2Wnn7xiSAd7TM3jzkxGXBGTtWKuSXv1xUV+azxAm8jdWZN06QTQk+2N2XB9jRDkvbmQmcRtg==} - body-parser@2.2.2: - resolution: {integrity: sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA==} + body-parser@2.3.0: + resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==} engines: {node: '>=18'} body@5.1.0: resolution: {integrity: sha512-chUsBxGRtuElD6fmw1gHLpvnKdVLK302peeFa9ZqAEk8TyzZ3fygLyUEDDPTJvL9+Bor0dIwn6ePOsRM2y0zQQ==} - brace-expansion@1.1.13: - resolution: {integrity: sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==} - - brace-expansion@2.0.3: - resolution: {integrity: sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==} - - brace-expansion@5.0.6: - resolution: {integrity: sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==} + brace-expansion@5.0.7: + resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==} engines: {node: 18 || 20 || >=22} braces@3.0.3: @@ -3032,9 +3025,6 @@ packages: resolution: {integrity: sha512-jaSIDzP9pZVS4ZfQ+TzvtiWhdpFhE2RDHz8QJkpX9SIpLq88VueF5jJw6t+6CUQcAoA6t+x89MLrWAqpfDE8iQ==} engines: {node: '>= 0.8.0'} - concat-map@0.0.1: - resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==} - configstore@5.0.1: resolution: {integrity: sha512-aMKprgk5YhBNyH25hj8wGt2+D52Sw1DRRIzqBwLp2Ya9mFmY8KPvvtvmna8SxVR9JMZ4kzMD68N22vlaRpkeFA==} engines: {node: '>=8'} @@ -3237,6 +3227,10 @@ packages: resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==} engines: {node: '>= 0.6'} + content-type@2.0.0: + resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==} + engines: {node: '>=18'} + continuable-cache@0.3.1: resolution: {integrity: sha512-TF30kpKhTH8AGCG3dut0rdd/19B7Z+qCnrMoBLpyQu/2drZdNrrpcjPEoJeSVsQM+8KmWG5O56oPDjSSUsuTyA==} @@ -3262,10 +3256,6 @@ packages: resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==} engines: {node: '>= 0.6'} - cookie@1.0.2: - resolution: {integrity: sha512-9Kr/j4O16ISv8zBBhJoi4bXOYNTkFLOqSL3UDB0njXxCXNezjeyVrJyGOWtgfs/q2km1gwBcfH8q1yEGoMYunA==} - engines: {node: '>=18'} - copy-dereference@1.0.0: resolution: {integrity: sha512-40TSLuhhbiKeszZhK9LfNdazC67Ue4kq/gGwN5sdxEUWPXTIMmKmGmgD9mPfNKVAeecEW+NfEIpBaZoACCQLLw==} @@ -4130,8 +4120,8 @@ packages: resolution: {integrity: sha512-RcyUFKA93/CXH20l4SoVvzZfrSDMOTUS3bWVpTt2FuFP+XYrL8i8oonHP7WInRyVHXh0n/ORtoeiE1os+8qkSw==} engines: {node: '>=10.0.0'} - engine.io@6.5.5: - resolution: {integrity: sha512-C5Pn8Wk+1vKBoHghJODM63yk8MvrO9EWZUfkAt5HAqIgPE4/8FF0PEGHXtEd40l223+cE5ABWuPzm38PHFXfMA==} + engine.io@6.6.9: + resolution: {integrity: sha512-clKkw4C7nJ22mGgoVcCg6V/W/TxdNyIOTr89k2ONZu81qqkddPFDF0LXcbAwhzPD8DjkiRCjzuiO6Y+fkpD4vg==} engines: {node: '>=10.2.0'} enhanced-resolve@5.20.1: @@ -4426,8 +4416,8 @@ packages: resolution: {integrity: sha512-7h9/x25c6AQwdU3mA8MZDUMR3UCy50f237egBrBkuwjnUZSmfu4ptCf91PZSKzON2Uh5VvIHozYKWcPPgcjxIw==} engines: {node: 10.* || >= 12.*} - fast-uri@3.1.2: - resolution: {integrity: sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==} + fast-uri@4.1.1: + resolution: {integrity: sha512-YPOs1zD5TG2+EZt+r88LwF6mclA7TPkpwMP7ZN3TO2HiHS8TXvq7QA/17iJsV9dubcLo/f8eEYqMBruyQV21hQ==} fastq@1.17.1: resolution: {integrity: sha512-sRVD3lWVIXWg6By68ZN7vho9a1pQcN/WBFaAAsDDFzlJjvoGx0P8z7V1t72grFJfJhu3YPZBuu25f7Kaw2jN1w==} @@ -4961,8 +4951,8 @@ packages: resolution: {integrity: sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==} engines: {node: '>= 4'} - immutable@5.1.5: - resolution: {integrity: sha512-t7xcm2siw+hlUM68I+UEOK+z84RzmN59as9DZ7P1l0994DKUWV7UXBMQZVxaoMSRQ+PBZbHCOoBt7a2wxOMt+A==} + immutable@5.1.9: + resolution: {integrity: sha512-m8nVez3rwrgmWxtLMt1ZYXB2Lv7OKYn/disyxAlSDYAlKSlFoPPfIAmAM/M5xqL4m4C/wAPw7S2/CNaUii1Hxg==} import-fresh@3.3.0: resolution: {integrity: sha512-veYYhQa+D1QBKznvhUHxb8faxlrwUnxseDAbAp457E0wLNio2bOSKnjYDhMj+YiAq61xrMGhQk9iXVk5FzgQMw==} @@ -5277,8 +5267,8 @@ packages: js-tokens@4.0.0: resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} - js-yaml@4.2.0: - resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==} + js-yaml@4.3.0: + resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==} hasBin: true jsesc@0.5.0: @@ -5361,8 +5351,8 @@ packages: line-column@1.0.2: resolution: {integrity: sha512-Ktrjk5noGYlHsVnYWh62FLVs4hTb8A3e+vucNZMgPeAOITdshMSgv4cCZQeRDjm7+goqmo6+liZwTXo+U3sVww==} - linkify-it@5.0.1: - resolution: {integrity: sha512-wVoTjP4Q6R0NW5hiZkVJaFZPWgtXfoGF+6LucL3/FtiNjmcHhYjEr5f1Kqjirc1nBW07J/ZuRFumqr2oqccEWg==} + linkify-it@6.1.0: + resolution: {integrity: sha512-wJ/TwpSDTLepCrQoYWYIExIKg5Zchex2Nn5yk2mFnB+6PtdkHtyLx742md9csRjjOnGkKIS/RrbY7l8D6gT9Vw==} lint-staged@16.2.6: resolution: {integrity: sha512-s1gphtDbV4bmW1eylXpVMk2u7is7YsrLl8hzrtvC70h4ByhcMLZFY01Fx05ZUDNuv1H8HO4E+e2zgejV1jVwNw==} @@ -5780,8 +5770,8 @@ packages: resolution: {integrity: sha512-2emPTb1reeLLYwHxyVx993iYyCHEiRRO+y8NFXFPL5kl5q14sgTK76cXyEKkeKCHeRw35SfdkUJ10Q1KfHuiIQ==} engines: {node: '>= 0.4'} - morgan@1.10.0: - resolution: {integrity: sha512-AbegBVI4sh6El+1gNwvD5YIck7nSA36weD7xvIxG4in80j/UoK8AEGaWnnz8v1GxonMCltmlNs5ZKbGvl9b1XQ==} + morgan@1.11.0: + resolution: {integrity: sha512-zSkVu3t18r39pw4ixfBKvfZi3y2UOqr7d4WYwcj3m8nXpEQK4rPO6GLzs/CExoRgmX3y9EjmmcXqv6jq0SK46g==} engines: {node: '>= 0.8.0'} ms@2.0.0: @@ -6750,8 +6740,8 @@ packages: resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==} engines: {node: '>=8'} - shell-quote@1.8.4: - resolution: {integrity: sha512-VsC6n6vz1ihYYyZZwX7YZSF5l5x36ca17OC+a69h94YqB7X6XLwf+5MOgynYir2SLFUbl8gIYvBo8K8RoNQ6bQ==} + shell-quote@1.10.0: + resolution: {integrity: sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA==} engines: {node: '>= 0.4'} shellwords@0.1.1: @@ -7232,6 +7222,10 @@ packages: resolution: {integrity: sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw==} engines: {node: '>= 0.6'} + type-is@2.1.0: + resolution: {integrity: sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==} + engines: {node: '>= 18'} + typed-array-buffer@1.0.3: resolution: {integrity: sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==} engines: {node: '>= 0.4'} @@ -7261,6 +7255,9 @@ packages: uc.micro@2.1.0: resolution: {integrity: sha512-ARDJmphmdvUk6Glw7y9DQ2bFkKBHwQHLi2lsaH6PPmz/Ka9sFOBsBluozhDltWmnv9u/cF6Rt87znRTPV+yp/A==} + uc.micro@3.0.0: + resolution: {integrity: sha512-U3PppEkleoTnIfi8BozMx3yju3qc/L6SwqWo2Sw+54PX+PX0q9I+r1Um5HCmqD7n9VDX5/v3vQH/AjA6deDdtw==} + uglify-js@3.18.0: resolution: {integrity: sha512-SyVVbcNBCk0dzr9XL/R/ySrmYf0s372K6/hFklzgcp2lBFyXtw4I7BOdDjlLhE1aVqaI/SHWXWmYdlZxuyF38A==} engines: {node: '>=0.8.0'} @@ -7453,8 +7450,8 @@ packages: webpack-cli: optional: true - websocket-driver@0.7.4: - resolution: {integrity: sha512-b17KeDIQVjvb0ssuSDF2cYXSg2iztliJ4B9WdsuB6J952qCPKmnVq4DyW5motImXHDC1cBT/1UezrJVsKw5zjg==} + websocket-driver@0.7.5: + resolution: {integrity: sha512-ZL2+3c7kMBdIRCMz6l8jQMHyGVxj+UL+xVk74Ombiciboca8rHa15L86B19E5oh1pL9Ii/uj54gtsIrZGMo6zA==} engines: {node: '>=0.8.0'} websocket-extensions@0.1.4: @@ -9239,7 +9236,7 @@ snapshots: globals: 13.24.0 ignore: 4.0.6 import-fresh: 3.3.0 - js-yaml: 4.2.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) + js-yaml: 4.3.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) minimatch: 3.1.5 strip-json-comments: 3.1.1 transitivePeerDependencies: @@ -9526,11 +9523,11 @@ snapshots: dependencies: array-range: 1.0.1 backtick-template: 0.2.0 - body-parser: 2.2.2 + body-parser: 2.3.0 cookie-parser: 1.4.7 express: 4.21.2 faker: 4.1.0 - js-yaml: 4.2.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) + js-yaml: 4.3.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) transitivePeerDependencies: - supports-color @@ -9657,7 +9654,7 @@ snapshots: camelcase: 5.3.1 find-up: 4.1.0 get-package-type: 0.1.0 - js-yaml: 4.2.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) + js-yaml: 4.3.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) resolve-from: 5.0.0 '@istanbuljs/schema@0.1.3': {} @@ -9931,8 +9928,6 @@ snapshots: dependencies: '@types/node': 24.5.2 - '@types/cookie@0.4.1': {} - '@types/cors@2.8.17': dependencies: '@types/node': 24.5.2 @@ -10040,6 +10035,10 @@ snapshots: '@types/unist@2.0.10': {} + '@types/ws@8.18.1': + dependencies: + '@types/node': 24.5.2 + '@ungap/structured-clone@0.3.4': {} '@webassemblyjs/ast@1.14.1': @@ -10177,7 +10176,7 @@ snapshots: ajv@8.18.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.2 + fast-uri: 4.1.1 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -10477,8 +10476,6 @@ snapshots: bail@1.0.5: {} - balanced-match@1.0.2: {} - balanced-match@4.0.4: {} base64-js@1.5.1: {} @@ -10509,17 +10506,17 @@ snapshots: bluebird@3.7.2: {} - body-parser@2.2.2: + body-parser@2.3.0: dependencies: bytes: 3.1.2 - content-type: 1.0.5 + content-type: 2.0.0 debug: 4.4.3 http-errors: 2.0.1 iconv-lite: 0.7.2 on-finished: 2.4.1 qs: 6.15.2 raw-body: 3.0.2 - type-is: 2.0.1 + type-is: 2.1.0 transitivePeerDependencies: - supports-color @@ -10530,16 +10527,7 @@ snapshots: raw-body: 1.1.7 safe-json-parse: 1.0.1 - brace-expansion@1.1.13: - dependencies: - balanced-match: 1.0.2 - concat-map: 0.0.1 - - brace-expansion@2.0.3: - dependencies: - balanced-match: 1.0.2 - - brace-expansion@5.0.6: + brace-expansion@5.0.7: dependencies: balanced-match: 4.0.4 @@ -11214,8 +11202,6 @@ snapshots: transitivePeerDependencies: - supports-color - concat-map@0.0.1: {} - configstore@5.0.1: dependencies: dot-prop: 5.3.0 @@ -11269,6 +11255,8 @@ snapshots: content-type@1.0.5: {} + content-type@2.0.0: {} + continuable-cache@0.3.1: {} convert-source-map@2.0.0: {} @@ -11286,8 +11274,6 @@ snapshots: cookie@0.7.2: {} - cookie@1.0.2: {} - copy-dereference@1.0.0: {} core-js-compat@3.37.1: @@ -11850,7 +11836,7 @@ snapshots: ember-cli-code-coverage@3.1.0: dependencies: babel-plugin-istanbul: 6.1.1 - body-parser: 2.2.2 + body-parser: 2.3.0 ember-cli-babel: 7.26.11 express: 4.21.2 fs-extra: 9.1.0 @@ -12193,7 +12179,7 @@ snapshots: markdown-it: 14.2.0 markdown-it-terminal: 0.4.0(markdown-it@14.2.0) minimatch: 7.4.9 - morgan: 1.10.0 + morgan: 1.11.0 nopt: 3.0.6 npm-package-arg: 10.1.0 os-locale: 5.0.0 @@ -12391,7 +12377,7 @@ snapshots: ember-source: 5.12.0(@glimmer/component@1.1.2(@babel/core@7.29.7))(@glint/template@1.5.2)(rsvp@4.8.5)(webpack@5.105.4) execa: 8.0.1 fs-extra: 11.3.2 - js-yaml: 4.2.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) + js-yaml: 4.3.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) npmlog: 7.0.1 qunit: 2.24.2 rimraf: 5.0.10 @@ -12450,7 +12436,7 @@ snapshots: ember-cli-typescript: 5.3.0 extend: 3.0.2 intl-messageformat: 10.7.18 - js-yaml: 4.2.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) + js-yaml: 4.3.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) json-stable-stringify: 1.3.0 optionalDependencies: '@ember/test-helpers': 5.4.1(@babel/core@7.29.7)(@glint/template@1.5.2) @@ -12908,16 +12894,16 @@ snapshots: engine.io-parser@5.2.2: {} - engine.io@6.5.5: + engine.io@6.6.9: dependencies: - '@types/cookie': 0.4.1 '@types/cors': 2.8.17 '@types/node': 24.5.2 + '@types/ws': 8.18.1 accepts: 1.3.8 base64id: 2.0.0 - cookie: 1.0.2 + cookie: 0.7.2 cors: 2.8.5 - debug: 4.3.7 + debug: 4.4.3 engine.io-parser: 5.2.2 ws: 8.21.0 transitivePeerDependencies: @@ -13146,7 +13132,7 @@ snapshots: import-fresh: 3.3.0 imurmurhash: 0.1.4 is-glob: 4.0.3 - js-yaml: 4.2.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) + js-yaml: 4.3.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) json-stable-stringify-without-jsonify: 1.0.1 levn: 0.4.1 lodash.merge: 4.6.2 @@ -13285,7 +13271,7 @@ snapshots: dependencies: accepts: 1.3.8 array-flatten: 1.1.1 - body-parser: 2.2.2 + body-parser: 2.3.0 content-disposition: 0.5.4 content-type: 1.0.5 cookie: 0.7.1 @@ -13320,7 +13306,7 @@ snapshots: express@5.1.0: dependencies: accepts: 2.0.0 - body-parser: 2.2.2 + body-parser: 2.3.0 content-disposition: 1.0.0 content-type: 1.0.5 cookie: 0.7.1 @@ -13397,7 +13383,7 @@ snapshots: transitivePeerDependencies: - supports-color - fast-uri@3.1.2: {} + fast-uri@4.1.1: {} fastq@1.17.1: dependencies: @@ -13409,7 +13395,7 @@ snapshots: faye-websocket@0.11.4: dependencies: - websocket-driver: 0.7.4 + websocket-driver: 0.7.5 fb-watchman@2.0.2: dependencies: @@ -14066,7 +14052,7 @@ snapshots: ignore@5.3.2: {} - immutable@5.1.5: {} + immutable@5.1.9: {} import-fresh@3.3.0: dependencies: @@ -14385,7 +14371,7 @@ snapshots: js-tokens@4.0.0: {} - js-yaml@4.2.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2): + js-yaml@4.3.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2): dependencies: argparse: 2.0.1 @@ -14488,9 +14474,9 @@ snapshots: isarray: 1.0.0 isobject: 2.1.0 - linkify-it@5.0.1: + linkify-it@6.1.0: dependencies: - uc.micro: 2.1.0 + uc.micro: 3.0.0 lint-staged@16.2.6: dependencies: @@ -14663,7 +14649,7 @@ snapshots: dependencies: argparse: 2.0.1 entities: 4.5.0 - linkify-it: 5.0.1 + linkify-it: 6.1.0 mdurl: 2.0.0 punycode.js: 2.3.1 uc.micro: 2.1.0 @@ -14919,23 +14905,23 @@ snapshots: minimatch@3.1.5: dependencies: - brace-expansion: 1.1.13 + brace-expansion: 5.0.7 minimatch@5.1.9: dependencies: - brace-expansion: 2.0.3 + brace-expansion: 5.0.7 minimatch@7.4.9: dependencies: - brace-expansion: 2.0.3 + brace-expansion: 5.0.7 minimatch@8.0.7: dependencies: - brace-expansion: 2.0.3 + brace-expansion: 5.0.7 minimatch@9.0.7: dependencies: - brace-expansion: 5.0.6 + brace-expansion: 5.0.7 minimist@1.2.8: {} @@ -14973,12 +14959,12 @@ snapshots: hasown: 2.0.2 isarray: 2.0.5 - morgan@1.10.0: + morgan@1.11.0: dependencies: basic-auth: 2.0.1 debug: 2.6.9 depd: 2.0.0 - on-finished: 2.3.0 + on-finished: 2.4.1 on-headers: 1.1.0 transitivePeerDependencies: - supports-color @@ -15090,7 +15076,7 @@ snapshots: minimatch: 3.1.5 pidtree: 0.3.1 read-pkg: 3.0.0 - shell-quote: 1.8.4 + shell-quote: 1.10.0 string.prototype.padend: 3.1.6 npm-run-path@2.0.2: @@ -15879,7 +15865,7 @@ snapshots: sass@1.89.2: dependencies: chokidar: 4.0.3 - immutable: 5.1.5 + immutable: 5.1.9 source-map-js: 1.2.0 optionalDependencies: '@parcel/watcher': 2.5.1 @@ -16000,7 +15986,7 @@ snapshots: shebang-regex@3.0.0: {} - shell-quote@1.8.4: {} + shell-quote@1.10.0: {} shellwords@0.1.1: {} @@ -16094,7 +16080,7 @@ snapshots: base64id: 2.0.0 cors: 2.8.5 debug: 4.3.7 - engine.io: 6.5.5 + engine.io: 6.6.9 socket.io-adapter: 2.5.5 socket.io-parser: 4.2.6 transitivePeerDependencies: @@ -16365,7 +16351,7 @@ snapshots: tap-parser@7.0.0: dependencies: events-to-array: 1.1.2 - js-yaml: 4.2.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) + js-yaml: 4.3.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) minipass: 2.9.0 tapable@2.2.1: {} @@ -16437,7 +16423,7 @@ snapshots: fireworm: 0.7.2 glob: 7.2.3 http-proxy: 1.18.1 - js-yaml: 4.2.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) + js-yaml: 4.3.0(patch_hash=6b54952aa3f509cb42ade844ea9fd31217552fb5cc9f293bb92fbdb6c9675ab2) lodash: 4.18.1 mkdirp: 3.0.1 mustache: 4.2.0 @@ -16652,6 +16638,12 @@ snapshots: media-typer: 1.1.0 mime-types: 3.0.2 + type-is@2.1.0: + dependencies: + content-type: 2.0.0 + media-typer: 1.1.0 + mime-types: 3.0.2 + typed-array-buffer@1.0.3: dependencies: call-bound: 1.0.4 @@ -16701,6 +16693,8 @@ snapshots: uc.micro@2.1.0: {} + uc.micro@3.0.0: {} + uglify-js@3.18.0: optional: true @@ -16932,7 +16926,7 @@ snapshots: - esbuild - uglify-js - websocket-driver@0.7.4: + websocket-driver@0.7.5: dependencies: http-parser-js: 0.5.8 safe-buffer: 5.2.1 From 218b41412edc507f2b8fd8cca0434544467cabdb Mon Sep 17 00:00:00 2001 From: Rishabh Gupta Date: Thu, 23 Jul 2026 11:21:58 +0530 Subject: [PATCH 2/2] fix brace expansion --- ui/package.json | 5 ++++- ui/pnpm-lock.yaml | 38 +++++++++++++++++++++++++++++++++----- 2 files changed, 37 insertions(+), 6 deletions(-) diff --git a/ui/package.json b/ui/package.json index 7ea16d5fe21..6358c2b418d 100644 --- a/ui/package.json +++ b/ui/package.json @@ -49,7 +49,10 @@ "handlebars@<4.7.9": ">=4.7.9", "yaml@>=2.0.0 <2.8.3": ">=2.8.3", "picomatch@<2.3.2": "^2.3.2", - "brace-expansion": ">=5.0.7", + "brace-expansion@>=5.0.0 <5.0.7": "^5.0.7", + "brace-expansion@5.0.6": "5.0.7", + "brace-expansion@>=2.0.0 <2.1.2": "^2.1.2", + "brace-expansion@<1.1.16": "^1.1.16", "ajv@<6.14.0": "^6.14.0", "ajv@>=7.0.0-alpha.0 <8.18.0": "^8.18.0", "lodash@>=4.0.0 <=4.17.22": "^4.18.0", diff --git a/ui/pnpm-lock.yaml b/ui/pnpm-lock.yaml index 23511d051e6..6f4625fcacf 100644 --- a/ui/pnpm-lock.yaml +++ b/ui/pnpm-lock.yaml @@ -34,7 +34,10 @@ overrides: handlebars@<4.7.9: '>=4.7.9' yaml@>=2.0.0 <2.8.3: '>=2.8.3' picomatch@<2.3.2: ^2.3.2 - brace-expansion: '>=5.0.7' + brace-expansion@>=5.0.0 <5.0.7: ^5.0.7 + brace-expansion@5.0.6: 5.0.7 + brace-expansion@>=2.0.0 <2.1.2: ^2.1.2 + brace-expansion@<1.1.16: ^1.1.16 ajv@<6.14.0: ^6.14.0 ajv@>=7.0.0-alpha.0 <8.18.0: ^8.18.0 lodash@>=4.0.0 <=4.17.22: ^4.18.0 @@ -2553,6 +2556,9 @@ packages: bail@1.0.5: resolution: {integrity: sha512-xFbRxM1tahm08yHBP16MMjVUAvDaBMD38zsM9EMAUN61omwLmKlOpB/Zku5QkjZ8TZ4vn53pj+t518cH0S03RQ==} + balanced-match@1.0.2: + resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==} + balanced-match@4.0.4: resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==} engines: {node: 18 || 20 || >=22} @@ -2600,6 +2606,12 @@ packages: body@5.1.0: resolution: {integrity: sha512-chUsBxGRtuElD6fmw1gHLpvnKdVLK302peeFa9ZqAEk8TyzZ3fygLyUEDDPTJvL9+Bor0dIwn6ePOsRM2y0zQQ==} + brace-expansion@1.1.16: + resolution: {integrity: sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==} + + brace-expansion@2.1.2: + resolution: {integrity: sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==} + brace-expansion@5.0.7: resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==} engines: {node: 18 || 20 || >=22} @@ -3025,6 +3037,9 @@ packages: resolution: {integrity: sha512-jaSIDzP9pZVS4ZfQ+TzvtiWhdpFhE2RDHz8QJkpX9SIpLq88VueF5jJw6t+6CUQcAoA6t+x89MLrWAqpfDE8iQ==} engines: {node: '>= 0.8.0'} + concat-map@0.0.1: + resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==} + configstore@5.0.1: resolution: {integrity: sha512-aMKprgk5YhBNyH25hj8wGt2+D52Sw1DRRIzqBwLp2Ya9mFmY8KPvvtvmna8SxVR9JMZ4kzMD68N22vlaRpkeFA==} engines: {node: '>=8'} @@ -10476,6 +10491,8 @@ snapshots: bail@1.0.5: {} + balanced-match@1.0.2: {} + balanced-match@4.0.4: {} base64-js@1.5.1: {} @@ -10527,6 +10544,15 @@ snapshots: raw-body: 1.1.7 safe-json-parse: 1.0.1 + brace-expansion@1.1.16: + dependencies: + balanced-match: 1.0.2 + concat-map: 0.0.1 + + brace-expansion@2.1.2: + dependencies: + balanced-match: 1.0.2 + brace-expansion@5.0.7: dependencies: balanced-match: 4.0.4 @@ -11202,6 +11228,8 @@ snapshots: transitivePeerDependencies: - supports-color + concat-map@0.0.1: {} + configstore@5.0.1: dependencies: dot-prop: 5.3.0 @@ -14905,19 +14933,19 @@ snapshots: minimatch@3.1.5: dependencies: - brace-expansion: 5.0.7 + brace-expansion: 1.1.16 minimatch@5.1.9: dependencies: - brace-expansion: 5.0.7 + brace-expansion: 2.1.2 minimatch@7.4.9: dependencies: - brace-expansion: 5.0.7 + brace-expansion: 2.1.2 minimatch@8.0.7: dependencies: - brace-expansion: 5.0.7 + brace-expansion: 2.1.2 minimatch@9.0.7: dependencies: