Skip to content

chore(web): upgrade axios fast-xml-parser lodash-es to security version #161

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ZTongci wants to merge 7 commits into
base: main
Choose a base branch
from
Open

chore(web): upgrade axios fast-xml-parser lodash-es to security version #161

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
e43afb5
chore(web): upgrade axios fast-xml-parser lodash-es to security version
ZTongci Jun 9, 2026
5489d62
Potential fix for pull request finding
ZTongci Jun 11, 2026
6990d37
Potential fix for pull request finding
ZTongci Jun 11, 2026
9ce0a20
Merge branch 'main' into chore/upgradeSecurityVer
airslice Jun 23, 2026
eba0e4f
Potential fix for pull request finding
ZTongci Jun 23, 2026
6bfc147
chore: update yarn lock
ZTongci Jun 23, 2026
83a9542
Merge branch 'main' into chore/upgradeSecurityVer
ZTongci Jun 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions web/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -140,7 +140,7 @@
"apollo-upload-client": "17.0.0",
"array-move": "4.0.0",
"aws-amplify": "6.15.8",
"axios": "1.12.0",
"axios": "1.15.2",
"cesium": "1.116.0",
"cesium-dnd": "1.1.0",
"cesium-mvt-imagery-provider": "1.4.0",
Expand All @@ -152,7 +152,7 @@
"dayjs": "1.11.10",
"detect-browser": "5.3.0",
"escape-string-regexp": "5.0.0",
"fast-xml-parser": "4.3.2",
"fast-xml-parser": "5",
Comment thread
ZTongci marked this conversation as resolved.
Outdated
"formik": "2.4.5",
"framer-motion": "10.18.0",
"github-markdown-css": "5.4.0",
Expand All @@ -170,7 +170,7 @@
"leaflet": "1.9.4",
"lexical": "0.12.2",
"localforage": "1.10.0",
"lodash-es": "4.17.21",
"lodash-es": "4.18.1",
"lru-cache": "8.0.4",
"mini-svg-data-uri": "1.4.4",
"moment-timezone": "0.5.43",
Expand Down
4 changes: 2 additions & 2 deletions web/src/classic/core/mantle/data/georss.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
import { XMLParser, X2jOptionsOptional } from "fast-xml-parser";
import { XMLParser, X2jOptions } from "fast-xml-parser";
Comment thread
Copilot marked this conversation as resolved.
Outdated

import type { Data, DataRange, Feature, Geometry } from "../types";

Expand Down Expand Up @@ -28,7 +28,7 @@ function handler(xmlDataStr: string) {
}

function parseBuffer(xmlDataStr: string) {
const options: X2jOptionsOptional = {
const options: Partial<X2jOptions> = {
ignoreAttributes: false,
attributeNamePrefix: "",
};
Expand Down
4 changes: 2 additions & 2 deletions web/src/classic/core/mantle/data/gml.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
import { XMLParser, X2jOptionsOptional } from "fast-xml-parser";
import { XMLParser, X2jOptions } from "fast-xml-parser";
Comment thread
Copilot marked this conversation as resolved.
Outdated

import type { Data, DataRange, Feature, Geometry } from "../types";

Expand All @@ -21,7 +21,7 @@ function handler(xmlDataStr: string) {
}

function parseBuffer(xmlDataStr: string) {
const options: X2jOptionsOptional = {
const options: Partial<X2jOptions> = {
ignoreAttributes: false,
attributeNamePrefix: "",
};
Expand Down
99 changes: 83 additions & 16 deletions web/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4999,6 +4999,13 @@ __metadata:
languageName: node
linkType: hard

"@nodable/entities@npm:^2.1.0":
version: 2.1.1
resolution: "@nodable/entities@npm:2.1.1"
checksum: 10c0/d295c148a3a4a30dbcbb453d464ff93b28301d72c8f6f3a2f138f8a2bc1ad9f8c5210a70d857e7133f44468c3d8e90d3026e1aecee5a632d6c3f74898c14e5b9
languageName: node
linkType: hard

"@nodelib/fs.scandir@npm:2.1.5":
version: 2.1.5
resolution: "@nodelib/fs.scandir@npm:2.1.5"
Expand Down Expand Up @@ -6588,7 +6595,7 @@ __metadata:
apollo-upload-client: "npm:17.0.0"
array-move: "npm:4.0.0"
aws-amplify: "npm:6.15.8"
axios: "npm:1.12.0"
axios: "npm:1.15.2"
cesium: "npm:1.116.0"
cesium-dnd: "npm:1.1.0"
cesium-mvt-imagery-provider: "npm:1.4.0"
Expand All @@ -6606,7 +6613,7 @@ __metadata:
eslint-config-reearth: "npm:0.2.2"
eslint-plugin-playwright: "npm:0.12.0"
eslint-plugin-storybook: "npm:0.6.15"
fast-xml-parser: "npm:4.3.2"
fast-xml-parser: "npm:5"
formik: "npm:2.4.5"
framer-motion: "npm:10.18.0"
github-markdown-css: "npm:5.4.0"
Expand All @@ -6628,7 +6635,7 @@ __metadata:
lexical: "npm:0.12.2"
lint-staged: "npm:13.2.2"
localforage: "npm:1.10.0"
lodash-es: "npm:4.17.21"
lodash-es: "npm:4.18.1"
lru-cache: "npm:8.0.4"
mini-svg-data-uri: "npm:1.4.4"
moment-timezone: "npm:0.5.43"
Expand Down Expand Up @@ -12739,14 +12746,14 @@ __metadata:
languageName: node
linkType: hard

"axios@npm:1.12.0":
version: 1.12.0
resolution: "axios@npm:1.12.0"
"axios@npm:1.15.2":
version: 1.15.2
resolution: "axios@npm:1.15.2"
dependencies:
follow-redirects: "npm:^1.15.6"
form-data: "npm:^4.0.4"
proxy-from-env: "npm:^1.1.0"
checksum: 10c0/44a1e4cfb69a2d59aa12bbc441a336e5c18e87c02b904c509fd33607d94e8cb8cc221c17e9d53f67841a4efe13abf1aa1497c85df390cdb8681ee723998d11b0
follow-redirects: "npm:^1.15.11"
form-data: "npm:^4.0.5"
proxy-from-env: "npm:^2.1.0"
checksum: 10c0/4eeae0feeaa7fdc1ef24f81f8b378fdadedf4aebdd6bf224484675160f8744cf17b9b0d1c215279979940f7e8ce463beffa2f713099612e428eac238515c81d5
languageName: node
linkType: hard

Expand Down Expand Up @@ -16449,6 +16456,16 @@ __metadata:
languageName: node
linkType: hard

"fast-xml-builder@npm:^1.2.0":
version: 1.2.0
resolution: "fast-xml-builder@npm:1.2.0"
dependencies:
path-expression-matcher: "npm:^1.5.0"
xml-naming: "npm:^0.1.0"
checksum: 10c0/84bb105cd04e91d6dcb746c4dbaeb12903b510e7ab9a06ffde55b5a582e005559a87d84467f18a655c6c4baf098f696fd74cee3cbe1aea9d01385907768ba32d
languageName: node
linkType: hard

"fast-xml-parser@npm:4.3.2":
version: 4.3.2
resolution: "fast-xml-parser@npm:4.3.2"
Expand All @@ -16471,6 +16488,21 @@ __metadata:
languageName: node
linkType: hard

"fast-xml-parser@npm:5":
version: 5.8.0
resolution: "fast-xml-parser@npm:5.8.0"
dependencies:
"@nodable/entities": "npm:^2.1.0"
fast-xml-builder: "npm:^1.2.0"
path-expression-matcher: "npm:^1.5.0"
strnum: "npm:^2.3.0"
xml-naming: "npm:^0.1.0"
bin:
fxparser: src/cli/cli.js
checksum: 10c0/cd0828b7daf3f683c64d0d6a0c719f1476d4f02f1089cf345a9bc0b886e7d5fa18c11da025d480ea67a41765be63135cbd952051942c9d0b422a5d4dde11814e
languageName: node
linkType: hard

"fast-xml-parser@npm:^4.4.1":
version: 4.5.3
resolution: "fast-xml-parser@npm:4.5.3"
Expand Down Expand Up @@ -16734,13 +16766,13 @@ __metadata:
languageName: node
linkType: hard

"follow-redirects@npm:^1.15.6":
version: 1.15.11
resolution: "follow-redirects@npm:1.15.11"
"follow-redirects@npm:^1.15.11":
version: 1.16.0
resolution: "follow-redirects@npm:1.16.0"
peerDependenciesMeta:
debug:
optional: true
checksum: 10c0/d301f430542520a54058d4aeeb453233c564aaccac835d29d15e050beb33f339ad67d9bddbce01739c5dc46a6716dbe3d9d0d5134b1ca203effa11a7ef092343
checksum: 10c0/a1e2900163e6f1b4d1ed5c221b607f41decbab65534c63fe7e287e40a5d552a6496e7d9d7d976fa4ba77b4c51c11e5e9f683f10b43011ea11e442ff128d0e181
languageName: node
linkType: hard

Expand All @@ -16763,7 +16795,7 @@ __metadata:
languageName: node
linkType: hard

"form-data@npm:^4.0.0, form-data@npm:^4.0.4":
"form-data@npm:^4.0.0, form-data@npm:^4.0.4, form-data@npm:^4.0.5":
version: 4.0.5
resolution: "form-data@npm:4.0.5"
dependencies:
Expand Down Expand Up @@ -19375,6 +19407,13 @@ __metadata:
languageName: node
linkType: hard

"lodash-es@npm:4.18.1":
version: 4.18.1
resolution: "lodash-es@npm:4.18.1"
checksum: 10c0/35d4dcf87ef07f8d090f409447575800108057e360b445f590d0d25d09e3d1e33a163d2fc100d4d072b0f901d5e2fc533cd7c4bfd8eeb38a06abec693823c8b8
languageName: node
linkType: hard

"lodash.debounce@npm:^4.0.8":
version: 4.0.8
resolution: "lodash.debounce@npm:4.0.8"
Expand Down Expand Up @@ -21442,6 +21481,13 @@ __metadata:
languageName: node
linkType: hard

"path-expression-matcher@npm:^1.5.0":
version: 1.5.0
resolution: "path-expression-matcher@npm:1.5.0"
checksum: 10c0/646cb5bc66cd7d809a52288336f3ac1e6223f156fd8e912936e490e590f7f93e8056d4fd25fcbcc7da61bb698fa520112cb050372a3f65e7b79bd4afa0f77610
languageName: node
linkType: hard

"path-key@npm:^2.0.1":
version: 2.0.1
resolution: "path-key@npm:2.0.1"
Expand Down Expand Up @@ -22046,13 +22092,20 @@ __metadata:
languageName: node
linkType: hard

"proxy-from-env@npm:^1.0.0, proxy-from-env@npm:^1.1.0":
"proxy-from-env@npm:^1.0.0":
version: 1.1.0
resolution: "proxy-from-env@npm:1.1.0"
checksum: 10c0/fe7dd8b1bdbbbea18d1459107729c3e4a2243ca870d26d34c2c1bcd3e4425b7bcc5112362df2d93cc7fb9746f6142b5e272fd1cc5c86ddf8580175186f6ad42b
languageName: node
linkType: hard

"proxy-from-env@npm:^2.1.0":
version: 2.1.0
resolution: "proxy-from-env@npm:2.1.0"
checksum: 10c0/ed01729fd4d094eab619cd7e17ce3698b3413b31eb102c4904f9875e677cd207392795d5b4adee9cec359dfd31c44d5ad7595a3a3ad51c40250e141512281c58
languageName: node
linkType: hard

"psl@npm:^1.1.33":
version: 1.15.0
resolution: "psl@npm:1.15.0"
Expand Down Expand Up @@ -24793,6 +24846,13 @@ __metadata:
languageName: node
linkType: hard

"strnum@npm:^2.3.0":
version: 2.3.0
resolution: "strnum@npm:2.3.0"
checksum: 10c0/8d29ea0789df22dfa6101153573c76ce12fb065ed0807eb99cc64624cd7f3d67a5aa0db507e75ab985ca23908cc4f02c65f3359ad762cb3659e3d6456e76e143
languageName: node
linkType: hard

"style-loader@npm:^3.3.2":
version: 3.3.4
resolution: "style-loader@npm:3.3.4"
Expand Down Expand Up @@ -26970,6 +27030,13 @@ __metadata:
languageName: node
linkType: hard

"xml-naming@npm:^0.1.0":
version: 0.1.0
resolution: "xml-naming@npm:0.1.0"
checksum: 10c0/8c7614865361bcb7e53e3e091dac21c567e2b92d447919b2f072775aa9dcfc94a5255bd52fbaa0fd53c93513e53a23a6a835218ad2af512451dbc678392f85fe
languageName: node
linkType: hard

"xmlchars@npm:^2.2.0":
version: 2.2.0
resolution: "xmlchars@npm:2.2.0"
Expand Down
Loading