Skip to content

Commit dbe7515

Browse files
authored
Fix dependabot alert in docs dependencies (openvinotoolkit#3450)
## Description This PR fixes [dependabot alert](https://github.com/openvinotoolkit/openvino.genai/security/dependabot/87) by overriding vulnerable `serialize-javascript` npm dependency to the patched version (`v^7.0.3`) and aligns `docusaurus` packages. ## Checklist: - [x] This PR follows [GenAI Contributing guidelines](https://github.com/openvinotoolkit/openvino.genai?tab=contributing-ov-file#contributing). <!-- Always follow them. If there are deviations, explain what and why. --> - [x] Tests have been updated or added to cover the new code - N/A - [x] This PR fully addresses the ticket - N/A - [x] I have made corresponding changes to the documentation - N/A
1 parent 9c52f3f commit dbe7515

File tree

4 files changed

+2333
-2631
lines changed

4 files changed

+2333
-2631
lines changed

.github/dependency_review.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,16 +3,19 @@ allow-licenses:
33
- "BSD-2-Clause"
44
- "BSD-3-Clause"
55
- "MIT"
6+
- "MIT-0"
67
- "Apache-2.0"
78
- "ISC"
89
- "BlueOak-1.0.0"
910
- "0BSD"
1011
- "Python-2.0"
1112
- "MIT-CMU" # Pillow's license
1213
- "CC-BY-NC-4.0"
14+
- "CC-BY-4.0"
1315
- "GPL-1.0-or-later"
1416
- "LGPL-2.0-or-later"
1517
- "LicenseRef-scancode-proprietary-license"
18+
- "LicenseRef-scancode-unicode"
1619
fail-on-scopes:
1720
- "runtime"
1821
- "development"
@@ -21,5 +24,6 @@ license-check: true
2124
vulnerability-check: true
2225
allow-dependencies-licenses:
2326
- "pkg:npm/thingies" # Docs site (dependency of dependency)
27+
- "pkg:npm/flatted" # Docs site (dependency of dependency)
2428
- "pkg:pypi/PyGithub" # Dependencies of the workflow rerunner script
2529
- "pkg:pypi/psycopg2-binary"

.github/workflows/deploy_gh_pages.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
- name: Setup Node.js
3030
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
3131
with:
32-
node-version: 20
32+
node-version: 22
3333

3434
- name: Install Node.js dependencies
3535
working-directory: ./site

0 commit comments

Comments
 (0)