From c3de14082985e91a8ac352100479133a6d36d360 Mon Sep 17 00:00:00 2001 From: Tomasz Kania Date: Tue, 23 Jun 2026 12:14:25 +0200 Subject: [PATCH 1/6] chore(deps): hono 4.12.25 Signed-off-by: Tomasz Kania --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 331a602c8959..073f231a735a 100644 --- a/yarn.lock +++ b/yarn.lock @@ -12648,9 +12648,9 @@ hoist-non-react-statics@^3.0.0, hoist-non-react-statics@^3.1.0, hoist-non-react- react-is "^16.7.0" hono@^4.11.4: - version "4.12.23" - resolved "https://registry.yarnpkg.com/hono/-/hono-4.12.23.tgz#998b91651686149f0e6edbb8564d604da04f3cf8" - integrity sha512-eIaZ9qDgu7XV0pxOCrg7/WhnQ6Ivm22UcxhXx/A3dcbqbbYgBEkc6e/J/s7j2tS96zoB0S9VBdLwQNCWwUo4LA== + version "4.12.25" + resolved "https://registry.yarnpkg.com/hono/-/hono-4.12.25.tgz#f2d9996a54e8c9c0c5f5de1c8f3a962e43a98c4e" + integrity sha512-2NFaIyNVgJmBs/ecmtGzlmluTFs5cHEWGTdu0t1HBwYzoGXOL5nUQBRMXsXWla5i4KkG//QMzVP88m1+I3fdAQ== hosted-git-info@^2.1.4: version "2.8.9" From e0ba602c1740537262b4725309afde93b0912b4f Mon Sep 17 00:00:00 2001 From: Tomasz Kania Date: Tue, 23 Jun 2026 12:15:04 +0200 Subject: [PATCH 2/6] chore(deps): markdown-it 14.2.0 Signed-off-by: Tomasz Kania --- package.json | 2 +- yarn.lock | 18 +++++++++--------- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/package.json b/package.json index 8b1d6ee50985..be788707a38a 100644 --- a/package.json +++ b/package.json @@ -495,7 +495,7 @@ "listr": "^0.14.1", "load-json-file": "^6.2.0", "luxon": "^3.2.1", - "markdown-it": "^14.1.1", + "markdown-it": "^14.2.0", "mocha": "^10.1.0", "mock-fs": "^4.12.0", "monaco-editor": "^0.52.0", diff --git a/yarn.lock b/yarn.lock index 073f231a735a..5f2e4cc6c8e7 100644 --- a/yarn.lock +++ b/yarn.lock @@ -14976,10 +14976,10 @@ lines-and-columns@^1.1.6: resolved "https://registry.yarnpkg.com/lines-and-columns/-/lines-and-columns-1.2.4.tgz#eca284f75d2965079309dc0ad9255abb2ebc1632" integrity sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg== -linkify-it@^5.0.0: - version "5.0.0" - resolved "https://registry.yarnpkg.com/linkify-it/-/linkify-it-5.0.0.tgz#9ef238bfa6dc70bd8e7f9572b52d369af569b421" - integrity sha512-5aHCbzQRADcdP+ATqnDuhhJ/MRIqDkZX5pyjFHRRysS8vZ5AbqGEoFIb6pYHPZ+L/OC2Lc+xT8uHVVR5CAK/wQ== +linkify-it@^5.0.1: + version "5.0.1" + resolved "https://registry.yarnpkg.com/linkify-it/-/linkify-it-5.0.1.tgz#10c4cecbb5c6828eabf81d3c801adc4a542dfb55" + integrity sha512-wVoTjP4Q6R0NW5hiZkVJaFZPWgtXfoGF+6LucL3/FtiNjmcHhYjEr5f1Kqjirc1nBW07J/ZuRFumqr2oqccEWg== dependencies: uc.micro "^2.0.0" @@ -15434,14 +15434,14 @@ markdown-escapes@^1.0.0: resolved "https://registry.yarnpkg.com/markdown-escapes/-/markdown-escapes-1.0.4.tgz#c95415ef451499d7602b91095f3c8e8975f78535" integrity sha512-8z4efJYk43E0upd0NbVXwgSTQs6cT3T06etieCMEg7dRbzCbxUCK/GHlX8mhHRDcp+OLlHkPKsvqQTCvsRl2cg== -markdown-it@^14.1.1: - version "14.1.1" - resolved "https://registry.yarnpkg.com/markdown-it/-/markdown-it-14.1.1.tgz#856f90b66fc39ae70affd25c1b18b581d7deee1f" - integrity sha512-BuU2qnTti9YKgK5N+IeMubp14ZUKUUw7yeJbkjtosvHiP0AZ5c8IAgEMk79D0eC8F23r4Ac/q8cAIFdm2FtyoA== +markdown-it@^14.2.0: + version "14.2.0" + resolved "https://registry.yarnpkg.com/markdown-it/-/markdown-it-14.2.0.tgz#06d48d9035e77d5b1c85adb315482fc8240289ef" + integrity sha512-1TGiQiJVRQ3NPmZH6sx5Cfnmg6GQm9jvC1ch4TK511NjSJvjzKLzn5pPfZRNZkRPZP0HqCioSndqH8v2nRaWVQ== dependencies: argparse "^2.0.1" entities "^4.4.0" - linkify-it "^5.0.0" + linkify-it "^5.0.1" mdurl "^2.0.0" punycode.js "^2.3.1" uc.micro "^2.1.0" From 5e69f51d642752810f94a6c6f5473e3a82a9a534 Mon Sep 17 00:00:00 2001 From: Tomasz Kania Date: Tue, 23 Jun 2026 12:19:27 +0200 Subject: [PATCH 3/6] chore(deps): js-yaml 4.2.0 Signed-off-by: Tomasz Kania --- package.json | 6 +++--- packages/osd-agents/package.json | 4 ++-- packages/osd-apm-config-loader/package.json | 2 +- packages/osd-config/package.json | 2 +- packages/osd-optimizer/package.json | 2 +- yarn.lock | 16 ++++++++-------- 6 files changed, 16 insertions(+), 16 deletions(-) diff --git a/package.json b/package.json index be788707a38a..c33187466c5f 100644 --- a/package.json +++ b/package.json @@ -158,7 +158,7 @@ "**/json5": "^2.2.3", "**/mime": "^3.0.0", "**/prismjs": "^1.30.0", - "**/js-yaml": "^4.1.1", + "**/js-yaml": "^4.2.0", "**/qs": "^6.15.2", "**/lodash-es": "^4.18.0", "**/lodash": "^4.18.0", @@ -264,7 +264,7 @@ "http-proxy-agent": "^2.1.0", "https-proxy-agent": "^5.0.0", "joi": "^18.2.1", - "js-yaml": "^4.1.1", + "js-yaml": "^4.2.0", "json-stable-stringify": "^1.0.1", "json-stringify-safe": "5.0.1", "json5": "^2.2.3", @@ -384,7 +384,7 @@ "@types/hjson": "^2.4.2", "@types/jest": "^28.1.8", "@types/jquery": "^3.3.31", - "@types/js-yaml": "^4.0.5", + "@types/js-yaml": "^4.0.9", "@types/json-stable-stringify": "^1.0.32", "@types/json5": "^0.0.30", "@types/license-checker": "^25.0.6", diff --git a/packages/osd-agents/package.json b/packages/osd-agents/package.json index c31c5108f1d1..75072968ca7c 100644 --- a/packages/osd-agents/package.json +++ b/packages/osd-agents/package.json @@ -23,13 +23,13 @@ "@opensearch-project/opensearch": "^2.13.0", "@types/cors": "^2.8.19", "@types/express": "^5.0.3", - "@types/js-yaml": "^4.0.5", + "@types/js-yaml": "^4.0.9", "@types/uuid": "^3.4.4", "cors": "^2.8.5", "date-fns": "^4.1.0", "dotenv": "^17.2.1", "express": "^5.1.0", - "js-yaml": "^4.1.1", + "js-yaml": "^4.2.0", "node-fetch": "^2.6.7", "ts-node": "^10.9.2", "uuid": "3.3.2", diff --git a/packages/osd-apm-config-loader/package.json b/packages/osd-apm-config-loader/package.json index f61342d70bf6..59a1cc6b64fe 100644 --- a/packages/osd-apm-config-loader/package.json +++ b/packages/osd-apm-config-loader/package.json @@ -13,7 +13,7 @@ "dependencies": { "@elastic/safer-lodash-set": "0.0.0", "@osd/utils": "1.0.0", - "js-yaml": "^4.1.1", + "js-yaml": "^4.2.0", "lodash": "^4.18.0" }, "devDependencies": { diff --git a/packages/osd-config/package.json b/packages/osd-config/package.json index 2b94b9efa1f0..89dc3d67a173 100644 --- a/packages/osd-config/package.json +++ b/packages/osd-config/package.json @@ -14,7 +14,7 @@ "@osd/config-schema": "1.0.0", "@osd/logging": "1.0.0", "@osd/std": "1.0.0", - "js-yaml": "^4.1.1", + "js-yaml": "^4.2.0", "load-json-file": "^6.2.0", "lodash": "^4.18.0", "moment": "^2.24.0", diff --git a/packages/osd-optimizer/package.json b/packages/osd-optimizer/package.json index 0135951c3262..cd51a53200ed 100644 --- a/packages/osd-optimizer/package.json +++ b/packages/osd-optimizer/package.json @@ -26,7 +26,7 @@ "del": "^6.1.1", "execa": "^4.0.2", "jest-diff": "^27.5.1", - "js-yaml": "^4.1.1", + "js-yaml": "^4.2.0", "json-stable-stringify": "^1.0.1", "lmdb": "^2.8.0", "normalize-path": "^3.0.0", diff --git a/yarn.lock b/yarn.lock index 5f2e4cc6c8e7..7c4d01bd7204 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5871,10 +5871,10 @@ resolved "https://registry.yarnpkg.com/@types/js-cookie/-/js-cookie-3.0.6.tgz#a04ca19e877687bd449f5ad37d33b104b71fdf95" integrity sha512-wkw9yd1kEXOPnvEeEV1Go1MmxtBJL0RR79aOTAApecWFVu7w0NNXNqhcWgvw2YgZDYadliXkl14pa3WXw5jlCQ== -"@types/js-yaml@^4.0.5": - version "4.0.5" - resolved "https://registry.yarnpkg.com/@types/js-yaml/-/js-yaml-4.0.5.tgz#738dd390a6ecc5442f35e7f03fa1431353f7e138" - integrity sha512-FhpRzf927MNQdRZP0J5DLIdTXhjLYzeUTmLAu69mnVksLH9CJY3IuSeEgbKUki7GQZm0WqDkGzyxju2EZGD2wA== +"@types/js-yaml@^4.0.9": + version "4.0.9" + resolved "https://registry.yarnpkg.com/@types/js-yaml/-/js-yaml-4.0.9.tgz#cd82382c4f902fed9691a2ed79ec68c5898af4c2" + integrity sha512-k4MGaQl5TGo/iipqb2UDG2UwjXziSWkh0uysQelTlJpX1qGlpUZYm8PnO4DxG1qBomtJUdYJ6qR6xdIah10JLg== "@types/json-schema@*", "@types/json-schema@^7.0.15", "@types/json-schema@^7.0.5", "@types/json-schema@^7.0.8", "@types/json-schema@^7.0.9": version "7.0.15" @@ -14550,10 +14550,10 @@ js-tiktoken@^1.0.12: resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499" integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ== -js-yaml@^3.13.1, js-yaml@^4.1.0, js-yaml@^4.1.1, js-yaml@~4.1.0: - version "4.1.1" - resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.1.1.tgz#854c292467705b699476e1a2decc0c8a3458806b" - integrity sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA== +js-yaml@^3.13.1, js-yaml@^4.1.0, js-yaml@^4.2.0, js-yaml@~4.1.0: + version "4.2.0" + resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.2.0.tgz#2bd9e85682dd91bd469afb809d816043b3d49524" + integrity sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw== dependencies: argparse "^2.0.1" From 3b251919594a0aff7fc48e5cb238972eccafdf54 Mon Sep 17 00:00:00 2001 From: Tomasz Kania Date: Tue, 23 Jun 2026 12:24:44 +0200 Subject: [PATCH 4/6] chore(deps): ws 8.21.0, 7.5.11 Signed-off-by: Tomasz Kania --- packages/osd-agents/package.json | 2 +- yarn.lock | 16 ++++++++-------- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/packages/osd-agents/package.json b/packages/osd-agents/package.json index 75072968ca7c..138a92b73455 100644 --- a/packages/osd-agents/package.json +++ b/packages/osd-agents/package.json @@ -33,7 +33,7 @@ "node-fetch": "^2.6.7", "ts-node": "^10.9.2", "uuid": "3.3.2", - "ws": "^8.20.1", + "ws": "^8.21.0", "zod": "^3.22.0" }, "devDependencies": { diff --git a/yarn.lock b/yarn.lock index 7c4d01bd7204..d2335231cdef 100644 --- a/yarn.lock +++ b/yarn.lock @@ -22205,14 +22205,14 @@ write-pkg@^4.0.0: write-json-file "^3.2.0" ws@^7.3.1, ws@^7.4.6: - version "7.5.10" - resolved "https://registry.yarnpkg.com/ws/-/ws-7.5.10.tgz#58b5c20dc281633f6c19113f39b349bd8bd558d9" - integrity sha512-+dbF1tHwZpXcbOJdVOkzLDxZP1ailvSxM6ZweXTegylPny803bFhA+vqBYw4s31NSAk4S2Qz+AKXK9a4wkdjcQ== - -ws@^8.18.0, ws@^8.18.3, ws@^8.20.1, ws@~8.18.3: - version "8.20.1" - resolved "https://registry.yarnpkg.com/ws/-/ws-8.20.1.tgz#91a9ae2b312ccf98e0a85ec499b48cef45ab0ddb" - integrity sha512-It4dO0K5v//JtTXuPkfEOaI3uUN87iYPnqo/ZzqCoG3g8uhA66QUMs/SrM0YK7/NAu+r4LMh/9dq2A7k+rHs+w== + version "7.5.11" + resolved "https://registry.yarnpkg.com/ws/-/ws-7.5.11.tgz#9460daf1812bb81a423c5b9eac746941a86310fa" + integrity sha512-zS54Oen9bITtp7kp2XM3AydrCIq1D+HwJOuH+c+e4LfpL/lotP5osijd+UoMnxwAam1GN8R4KtLAyIrIcBNpiA== + +ws@^8.18.0, ws@^8.18.3, ws@^8.20.1, ws@^8.21.0, ws@~8.18.3: + version "8.21.0" + resolved "https://registry.yarnpkg.com/ws/-/ws-8.21.0.tgz#012e413fc07429945121b0c153158c4343086951" + integrity sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g== wsl-utils@^0.1.0: version "0.1.0" From 3c0e54012730e1aaeb8c1df60fe96014cb0b4279 Mon Sep 17 00:00:00 2001 From: Tomasz Kania Date: Tue, 23 Jun 2026 12:30:36 +0200 Subject: [PATCH 5/6] chore(deps): form-data 4.0.6 Signed-off-by: Tomasz Kania --- package.json | 2 +- yarn.lock | 22 +++++++++++----------- 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/package.json b/package.json index c33187466c5f..fe8ad7d102ee 100644 --- a/package.json +++ b/package.json @@ -140,7 +140,7 @@ "**/elasticsearch/agentkeepalive": "^4.5.0", "**/es5-ext": "^0.10.63", "**/fetch-mock/path-to-regexp": "^3.3.0", - "**/form-data": "^4.0.4", + "**/form-data": "^4.0.6", "**/glob-parent": "^6.0.0", "**/jest-config": "npm:@amoo-miki/jest-config@27.5.1", "**/jest-jasmine2": "npm:@amoo-miki/jest-jasmine2@27.5.1", diff --git a/yarn.lock b/yarn.lock index d2335231cdef..db51c1bdcabb 100644 --- a/yarn.lock +++ b/yarn.lock @@ -11857,16 +11857,16 @@ forever-agent@~0.6.1: resolved "https://registry.yarnpkg.com/forever-agent/-/forever-agent-0.6.1.tgz#fbc71f0c41adeb37f96c577ad1ed42d8fdacca91" integrity sha512-j0KLYPhm6zeac4lz3oJ3o65qvgQCcPubiyotZrXqEaG4hNagNYO8qdlUrX5vwqv9ohqeT/Z3j6+yW067yWWdUw== -form-data@^3.0.0, form-data@^4.0.0, form-data@^4.0.4, form-data@^4.0.5, form-data@~4.0.4: - version "4.0.5" - resolved "https://registry.yarnpkg.com/form-data/-/form-data-4.0.5.tgz#b49e48858045ff4cbf6b03e1805cebcad3679053" - integrity sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w== +form-data@^3.0.0, form-data@^4.0.0, form-data@^4.0.4, form-data@^4.0.5, form-data@^4.0.6, form-data@~4.0.4: + version "4.0.6" + resolved "https://registry.yarnpkg.com/form-data/-/form-data-4.0.6.tgz#28e864e1b786dbebb68db1f452f9635278665827" + integrity sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ== dependencies: asynckit "^0.4.0" combined-stream "^1.0.8" es-set-tostringtag "^2.1.0" - hasown "^2.0.2" - mime-types "^2.1.12" + hasown "^2.0.4" + mime-types "^2.1.35" formidable@^2.1.2: version "2.1.5" @@ -12532,10 +12532,10 @@ hasha@^5.0.0: is-stream "^2.0.0" type-fest "^0.8.0" -hasown@^2.0.0, hasown@^2.0.2: - version "2.0.2" - resolved "https://registry.yarnpkg.com/hasown/-/hasown-2.0.2.tgz#003eaf91be7adc372e84ec59dc37252cedb80003" - integrity sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ== +hasown@^2.0.0, hasown@^2.0.2, hasown@^2.0.4: + version "2.0.4" + resolved "https://registry.yarnpkg.com/hasown/-/hasown-2.0.4.tgz#8c62d8cb90beb2aad5d0a5b67581ad9854c3f003" + integrity sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A== dependencies: function-bind "^1.1.2" @@ -15679,7 +15679,7 @@ mime-db@1.52.0, "mime-db@>= 1.43.0 < 2", mime-db@^1.52.0, mime-db@^1.54.0: resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.54.0.tgz#cddb3ee4f9c64530dff640236661d42cb6a314f5" integrity sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ== -mime-types@^2.1.12, mime-types@^2.1.27, mime-types@~2.1.17, mime-types@~2.1.19, mime-types@~2.1.24, mime-types@~2.1.34: +mime-types@^2.1.27, mime-types@^2.1.35, mime-types@~2.1.17, mime-types@~2.1.19, mime-types@~2.1.24, mime-types@~2.1.34: version "2.1.35" resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.35.tgz#381a871b62a734450660ae3deee44813f70d959a" integrity sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw== From d43f3f026deb6daa9a3d60ebf38d3f137f27ce93 Mon Sep 17 00:00:00 2001 From: Tomasz Kania Date: Tue, 23 Jun 2026 12:32:57 +0200 Subject: [PATCH 6/6] chore(deps): tar 7.5.16 Signed-off-by: Tomasz Kania --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index fe8ad7d102ee..b38f80ee21c0 100644 --- a/package.json +++ b/package.json @@ -298,7 +298,7 @@ "set-value": "^4.1.0", "source-map-support": "^0.5.19", "symbol-observable": "^1.2.0", - "tar": "^7.5.10", + "tar": "^7.5.16", "tinygradient": "^1.1.5", "tslib": "^2.0.0", "type-detect": "^4.0.8", diff --git a/yarn.lock b/yarn.lock index db51c1bdcabb..74b68bf5335c 100644 --- a/yarn.lock +++ b/yarn.lock @@ -20219,10 +20219,10 @@ tar-stream@^3.1.5: fast-fifo "^1.2.0" streamx "^2.15.0" -tar@^7.5.10: - version "7.5.11" - resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.11.tgz#1250fae45d98806b36d703b30973fa8e0a6d8868" - integrity sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ== +tar@^7.5.16: + version "7.5.16" + resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.16.tgz#f11e063afed4554f758049d082909e37d6b53ced" + integrity sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w== dependencies: "@isaacs/fs-minipass" "^4.0.0" chownr "^3.0.0"