Skip to content

Commit e3b49af

Browse files
authored
update packages to avoid vulnerabilties (#57)
1 parent 0bed1aa commit e3b49af

6 files changed

Lines changed: 23 additions & 17 deletions

File tree

.github/workflows/release.yaml

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,23 @@ jobs:
1515
runs-on: ubuntu-latest
1616
steps:
1717
- uses: actions/checkout@v4
18+
19+
- name: Set up Go 1.26
20+
uses: actions/setup-go@v5
21+
with:
22+
# Use '1.26' to get the latest patch (e.g., 1.26.3) automatically
23+
go-version: '1.26'
24+
# Optional: ensures the action checks for the latest patch available
25+
check-latest: true
26+
27+
- name: Verify Go version
28+
run: go version
1829

1930
- uses: grafana/plugin-actions/build-plugin@main
2031
with:
2132
# refer to https://grafana.com/developers/plugin-tools/publish-a-plugin/sign-a-plugin#generate-an-access-policy-token to generate it
2233
# save the value in your repository secrets
2334
policy_token: ${{ secrets.GRAFANA_ACCESS_POLICY_TOKEN }}
2435
attestation: true
25-
use_changelog_generator: true # Enable automatic changelog generation
36+
use_changelog_generator: true # Enable automatic changelog generation
37+

package.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,9 @@
6464
"engines": {
6565
"node": ">=18"
6666
},
67+
"resolutions": {
68+
"serialize-javascript": "7.0.5"
69+
},
6770
"dependencies": {
6871
"@emotion/css": "11.13.5",
6972
"@grafana/data": "12.4.2",
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
ded3bc86057cc474aefe85b9c3e41d6bcd7cd3b6
1+
e173c425ed452e6fdfbb5477fbf779c25968a63a
-339 KB
Binary file not shown.

src/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ This data source plugin allows you to query, search and visualize telemetry data
44

55
## Pre-requisites
66

7-
[Parseable server](https://github.com/parseablehq/parseable) setup and receiving telemetry data from your application. Read more on [Parseable documentation](https://www.parseable.io/docs/quick-start).
7+
[Parseable server](https://github.com/parseablehq/parseable) setup and receiving telemetry data from your application. Read more on [Parseable documentation](https://www.parseable.com/docs/get-started).
88

99
## Installation
1010

yarn.lock

Lines changed: 5 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -6807,13 +6807,6 @@ raf@^3.1.0:
68076807
dependencies:
68086808
performance-now "^2.1.0"
68096809

6810-
randombytes@^2.1.0:
6811-
version "2.1.0"
6812-
resolved "https://registry.yarnpkg.com/randombytes/-/randombytes-2.1.0.tgz#df6f84372f0270dc65cdf6291349ab7a473d4f2a"
6813-
integrity sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==
6814-
dependencies:
6815-
safe-buffer "^5.1.0"
6816-
68176810
raw-body@~1.1.0:
68186811
version "1.1.7"
68196812
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-1.1.7.tgz#1d027c2bfa116acc6623bca8f00016572a87d425"
@@ -7321,7 +7314,7 @@ safe-array-concat@^1.1.3:
73217314
has-symbols "^1.1.0"
73227315
isarray "^2.0.5"
73237316

7324-
safe-buffer@>=5.1.0, safe-buffer@^5.1.0:
7317+
safe-buffer@>=5.1.0:
73257318
version "5.2.1"
73267319
resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.1.tgz#1eaf9fa9bdb1fdd4ec75f58f9cdb4e6b7827eec6"
73277320
integrity sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==
@@ -7424,12 +7417,10 @@ semver@^7.3.5, semver@^7.5.3, semver@^7.5.4, semver@^7.6.0, semver@^7.6.3, semve
74247417
resolved "https://registry.yarnpkg.com/semver/-/semver-7.8.0.tgz#ed0661039fcbcda2ce71f01fa6adbefaa77040df"
74257418
integrity sha512-AcM7dV/5ul4EekoQ29Agm5vri8JNqRyj39o0qpX6vDF2GZrtutZl5RwgD1XnZjiTAfncsJhMI48QQH3sN87YNA==
74267419

7427-
serialize-javascript@^6.0.2:
7428-
version "6.0.2"
7429-
resolved "https://registry.yarnpkg.com/serialize-javascript/-/serialize-javascript-6.0.2.tgz#defa1e055c83bf6d59ea805d8da862254eb6a6c2"
7430-
integrity sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==
7431-
dependencies:
7432-
randombytes "^2.1.0"
7420+
serialize-javascript@7.0.5, serialize-javascript@^6.0.2:
7421+
version "7.0.5"
7422+
resolved "https://registry.yarnpkg.com/serialize-javascript/-/serialize-javascript-7.0.5.tgz#c798cc0552ffbb08981914a42a8756e339d0d5b1"
7423+
integrity sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==
74337424

74347425
set-function-length@^1.2.2:
74357426
version "1.2.2"

0 commit comments

Comments
 (0)