You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by ma...@apache.org on 2025/01/29 07:30:22 UTC
(superset) branch npm-audit-with-force created (now be920dacbd)
This is an automated email from the ASF dual-hosted git repository.
maximebeauchemin pushed a change to branch npm-audit-with-force
in repository https://gitbox.apache.org/repos/asf/superset.git
at be920dacbd fix: attempt at fixing d3-color related vuln
This branch includes the following new commits:
new 113a3096be fix: update d3-scale dependency to version 4.0.2
new 2b066577b9 feat: Replace d3-color with tinycolor2 for color conversion
new 4fba5d655b chore: Override d3-color and d3-scale versions in package.json
new cd6a712269 fix: Update d3-color version in package.json to resolve conflict
new be920dacbd fix: attempt at fixing d3-color related vuln
The 5 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(superset) 05/05: fix: attempt at fixing d3-color related vuln
Posted by ma...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
maximebeauchemin pushed a commit to branch npm-audit-with-force
in repository https://gitbox.apache.org/repos/asf/superset.git
commit be920dacbd3064f0bfd853bfeb5537bb02df7018
Author: Maxime Beauchemin <ma...@gmail.com>
AuthorDate: Tue Jan 28 23:27:18 2025 -0800
fix: attempt at fixing d3-color related vuln
Just trying to see if this one is going to be easy
---
.gitignore | 1 +
superset-frontend/package-lock.json | 291 ++-------------------
.../packages/superset-ui-core/package.json | 5 +-
.../legacy-plugin-chart-horizon/package.json | 2 +-
.../legacy-preset-chart-deckgl/package.json | 5 +-
.../plugins/plugin-chart-word-cloud/package.json | 2 +-
6 files changed, 28 insertions(+), 278 deletions(-)
diff --git a/.gitignore b/.gitignore
index 2652502a02..67bc771f84 100644
--- a/.gitignore
+++ b/.gitignore
@@ -124,3 +124,4 @@ docker/*local*
# Jest test report
test-report.html
superset/static/stats/statistics.html
+.aider*
diff --git a/superset-frontend/package-lock.json b/superset-frontend/package-lock.json
index 8e09981990..d637214583 100644
--- a/superset-frontend/package-lock.json
+++ b/superset-frontend/package-lock.json
@@ -63,8 +63,8 @@
"chrono-node": "^2.7.6",
"classnames": "^2.2.5",
"core-js": "^3.38.1",
- "d3-color": "^3.1.0",
- "d3-scale": "^2.1.2",
+ "d3-color": "3.1.0",
+ "d3-scale": "4.0.2",
"dayjs": "^1.11.13",
"dom-to-image-more": "^3.2.0",
"dom-to-pdf": "^0.3.2",
@@ -13407,22 +13407,6 @@
"node": ">=12"
}
},
- "node_modules/@visx/vendor/node_modules/d3-scale": {
- "version": "4.0.2",
- "resolved": "https://registry.npmjs.org/d3-scale/-/d3-scale-4.0.2.tgz",
- "integrity": "sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ==",
- "license": "ISC",
- "dependencies": {
- "d3-array": "2.10.0 - 3",
- "d3-format": "1 - 3",
- "d3-interpolate": "1.2.0 - 3",
- "d3-time": "2.1.1 - 3",
- "d3-time-format": "2 - 4"
- },
- "engines": {
- "node": ">=12"
- }
- },
"node_modules/@visx/voronoi": {
"version": "3.12.0",
"resolved": "https://registry.npmjs.org/@visx/voronoi/-/voronoi-3.12.0.tgz",
@@ -19806,17 +19790,19 @@
"license": "BSD-3-Clause"
},
"node_modules/d3-scale": {
- "version": "2.2.2",
- "resolved": "https://registry.npmjs.org/d3-scale/-/d3-scale-2.2.2.tgz",
- "integrity": "sha512-LbeEvGgIb8UMcAa0EATLNX0lelKWGYDQiPdHj+gLblGVhGLyNbaCn3EvrJf0A3Y/uOOU5aD6MTh5ZFCdEwGiCw==",
- "license": "BSD-3-Clause",
+ "version": "4.0.2",
+ "resolved": "https://registry.npmjs.org/d3-scale/-/d3-scale-4.0.2.tgz",
+ "integrity": "sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ==",
+ "license": "ISC",
"dependencies": {
- "d3-array": "^1.2.0",
- "d3-collection": "1",
- "d3-format": "1",
- "d3-interpolate": "1",
- "d3-time": "1",
- "d3-time-format": "2"
+ "d3-array": "2.10.0 - 3",
+ "d3-format": "1 - 3",
+ "d3-interpolate": "1.2.0 - 3",
+ "d3-time": "2.1.1 - 3",
+ "d3-time-format": "2 - 4"
+ },
+ "engines": {
+ "node": ">=12"
}
},
"node_modules/d3-scale-chromatic": {
@@ -19838,36 +19824,6 @@
"d3-color": "1 - 2"
}
},
- "node_modules/d3-scale/node_modules/d3-array": {
- "version": "1.2.4",
- "resolved": "https://registry.npmjs.org/d3-array/-/d3-array-1.2.4.tgz",
- "integrity": "sha512-KHW6M86R+FUPYGb3R5XiYjXPq7VzwxZ22buHhAEVG5ztoEcZZMLov530mmccaqA1GghZArjQV46fuc8kUqhhHw==",
- "license": "BSD-3-Clause"
- },
- "node_modules/d3-scale/node_modules/d3-interpolate": {
- "version": "1.4.0",
- "resolved": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-1.4.0.tgz",
- "integrity": "sha512-V9znK0zc3jOPV4VD2zZn0sDhZU3WAE2bmlxdIwwQPPzPjvyLkd8B3JUVdS1IDUFDkWZ72c9qnv1GK2ZagTZ8EA==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-color": "1"
- }
- },
- "node_modules/d3-scale/node_modules/d3-time": {
- "version": "1.1.0",
- "resolved": "https://registry.npmjs.org/d3-time/-/d3-time-1.1.0.tgz",
- "integrity": "sha512-Xh0isrZ5rPYYdqhAVk8VLnMEidhz5aP7htAADH6MfzgmmicPkTo8LhkLxci61/lCB7n7UmE3bN0leRt+qvkLxA==",
- "license": "BSD-3-Clause"
- },
- "node_modules/d3-scale/node_modules/d3-time-format": {
- "version": "2.3.0",
- "resolved": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-2.3.0.tgz",
- "integrity": "sha512-guv6b2H37s2Uq/GefleCDtbe0XZAuy7Wa49VGkPVPMfLL9qObgBST3lEHJBMUp8S7NdLQAGIvr2KXk8Hc98iKQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-time": "1"
- }
- },
"node_modules/d3-selection": {
"version": "1.4.2",
"resolved": "https://registry.npmjs.org/d3-selection/-/d3-selection-1.4.2.tgz",
@@ -52193,9 +52149,10 @@
"@types/json-bigint": "^1.0.4",
"@visx/responsive": "^3.12.0",
"csstype": "^3.1.3",
+ "d3-color": "3.1.0",
"d3-format": "^1.3.2",
"d3-interpolate": "^3.0.1",
- "d3-scale": "^3.0.0",
+ "d3-scale": "^4.0.2",
"d3-time": "^3.1.0",
"d3-time-format": "^4.1.0",
"fetch-retry": "^6.0.0",
@@ -52251,52 +52208,6 @@
"tinycolor2": "*"
}
},
- "packages/superset-ui-core/node_modules/d3-color": {
- "version": "2.0.0",
- "resolved": "https://registry.npmjs.org/d3-color/-/d3-color-2.0.0.tgz",
- "integrity": "sha512-SPXi0TSKPD4g9tw0NMZFnR95XVgUZiBH+uUTqQuDu1OsE2zomHU7ho0FISciaPvosimixwHFl3WHLGabv6dDgQ==",
- "license": "BSD-3-Clause"
- },
- "packages/superset-ui-core/node_modules/d3-scale": {
- "version": "3.3.0",
- "resolved": "https://registry.npmjs.org/d3-scale/-/d3-scale-3.3.0.tgz",
- "integrity": "sha512-1JGp44NQCt5d1g+Yy+GeOnZP7xHo0ii8zsQp6PGzd+C1/dl0KGsp9A7Mxwp+1D1o4unbTTxVdU/ZOIEBoeZPbQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-array": "^2.3.0",
- "d3-format": "1 - 2",
- "d3-interpolate": "1.2.0 - 2",
- "d3-time": "^2.1.1",
- "d3-time-format": "2 - 3"
- }
- },
- "packages/superset-ui-core/node_modules/d3-scale/node_modules/d3-interpolate": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-2.0.1.tgz",
- "integrity": "sha512-c5UhwwTs/yybcmTpAVqwSFl6vrQ8JZJoT5F7xNFK9pymv5C0Ymcc9/LIJHtYIggg/yS9YHw8i8O8tgb9pupjeQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-color": "1 - 2"
- }
- },
- "packages/superset-ui-core/node_modules/d3-scale/node_modules/d3-time": {
- "version": "2.1.1",
- "resolved": "https://registry.npmjs.org/d3-time/-/d3-time-2.1.1.tgz",
- "integrity": "sha512-/eIQe/eR4kCQwq7yxi7z4c6qEXf2IYGcjoWB5OOQy4Tq9Uv39/947qlDcN2TLkiTzQWzvnsuYPB9TrWaNfipKQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-array": "2"
- }
- },
- "packages/superset-ui-core/node_modules/d3-scale/node_modules/d3-time-format": {
- "version": "3.0.0",
- "resolved": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-3.0.0.tgz",
- "integrity": "sha512-UXJh6EKsHBTjopVqZBhFysQcoXSv/5yLONZvkQ5Kk3qbwiUYkdX17Xa1PT6U1ZWXGGfB1ey5L8dKMlFq2DO0Ag==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-time": "1 - 2"
- }
- },
"packages/superset-ui-core/node_modules/fetch-mock": {
"version": "11.1.5",
"resolved": "https://registry.npmjs.org/fetch-mock/-/fetch-mock-11.1.5.tgz",
@@ -52981,7 +52892,7 @@
"license": "Apache-2.0",
"dependencies": {
"d3-array": "^2.0.3",
- "d3-scale": "^3.0.1",
+ "d3-scale": "^4.0.2",
"prop-types": "^15.8.1"
},
"peerDependencies": {
@@ -52990,52 +52901,6 @@
"react": "^17.0.2"
}
},
- "plugins/legacy-plugin-chart-horizon/node_modules/d3-color": {
- "version": "2.0.0",
- "resolved": "https://registry.npmjs.org/d3-color/-/d3-color-2.0.0.tgz",
- "integrity": "sha512-SPXi0TSKPD4g9tw0NMZFnR95XVgUZiBH+uUTqQuDu1OsE2zomHU7ho0FISciaPvosimixwHFl3WHLGabv6dDgQ==",
- "license": "BSD-3-Clause"
- },
- "plugins/legacy-plugin-chart-horizon/node_modules/d3-interpolate": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-2.0.1.tgz",
- "integrity": "sha512-c5UhwwTs/yybcmTpAVqwSFl6vrQ8JZJoT5F7xNFK9pymv5C0Ymcc9/LIJHtYIggg/yS9YHw8i8O8tgb9pupjeQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-color": "1 - 2"
- }
- },
- "plugins/legacy-plugin-chart-horizon/node_modules/d3-scale": {
- "version": "3.3.0",
- "resolved": "https://registry.npmjs.org/d3-scale/-/d3-scale-3.3.0.tgz",
- "integrity": "sha512-1JGp44NQCt5d1g+Yy+GeOnZP7xHo0ii8zsQp6PGzd+C1/dl0KGsp9A7Mxwp+1D1o4unbTTxVdU/ZOIEBoeZPbQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-array": "^2.3.0",
- "d3-format": "1 - 2",
- "d3-interpolate": "1.2.0 - 2",
- "d3-time": "^2.1.1",
- "d3-time-format": "2 - 3"
- }
- },
- "plugins/legacy-plugin-chart-horizon/node_modules/d3-time": {
- "version": "2.1.1",
- "resolved": "https://registry.npmjs.org/d3-time/-/d3-time-2.1.1.tgz",
- "integrity": "sha512-/eIQe/eR4kCQwq7yxi7z4c6qEXf2IYGcjoWB5OOQy4Tq9Uv39/947qlDcN2TLkiTzQWzvnsuYPB9TrWaNfipKQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-array": "2"
- }
- },
- "plugins/legacy-plugin-chart-horizon/node_modules/d3-time-format": {
- "version": "3.0.0",
- "resolved": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-3.0.0.tgz",
- "integrity": "sha512-UXJh6EKsHBTjopVqZBhFysQcoXSv/5yLONZvkQ5Kk3qbwiUYkdX17Xa1PT6U1ZWXGGfB1ey5L8dKMlFq2DO0Ag==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-time": "1 - 2"
- }
- },
"plugins/legacy-plugin-chart-map-box": {
"name": "@superset-ui/legacy-plugin-chart-map-box",
"version": "0.20.3",
@@ -53148,11 +53013,11 @@
"@types/geojson": "^7946.0.15",
"bootstrap-slider": "^11.0.2",
"d3-array": "^1.2.4",
- "d3-color": "^1.4.1",
- "d3-scale": "^3.0.0",
+ "d3-scale": "^4.0.2",
"lodash": "^4.17.21",
"mousetrap": "^1.6.5",
"prop-types": "^15.8.1",
+ "tinycolor2": "^1.4.2",
"underscore": "^1.13.7",
"urijs": "^1.19.11",
"xss": "^1.0.15"
@@ -53177,76 +53042,6 @@
"integrity": "sha512-KHW6M86R+FUPYGb3R5XiYjXPq7VzwxZ22buHhAEVG5ztoEcZZMLov530mmccaqA1GghZArjQV46fuc8kUqhhHw==",
"license": "BSD-3-Clause"
},
- "plugins/legacy-preset-chart-deckgl/node_modules/d3-color": {
- "version": "1.4.1",
- "resolved": "https://registry.npmjs.org/d3-color/-/d3-color-1.4.1.tgz",
- "integrity": "sha512-p2sTHSLCJI2QKunbGb7ocOh7DgTAn8IrLx21QRc/BSnodXM4sv6aLQlnfpvehFMLZEfBc6g9pH9SWQccFYfJ9Q==",
- "license": "BSD-3-Clause"
- },
- "plugins/legacy-preset-chart-deckgl/node_modules/d3-interpolate": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-2.0.1.tgz",
- "integrity": "sha512-c5UhwwTs/yybcmTpAVqwSFl6vrQ8JZJoT5F7xNFK9pymv5C0Ymcc9/LIJHtYIggg/yS9YHw8i8O8tgb9pupjeQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-color": "1 - 2"
- }
- },
- "plugins/legacy-preset-chart-deckgl/node_modules/d3-scale": {
- "version": "3.3.0",
- "resolved": "https://registry.npmjs.org/d3-scale/-/d3-scale-3.3.0.tgz",
- "integrity": "sha512-1JGp44NQCt5d1g+Yy+GeOnZP7xHo0ii8zsQp6PGzd+C1/dl0KGsp9A7Mxwp+1D1o4unbTTxVdU/ZOIEBoeZPbQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-array": "^2.3.0",
- "d3-format": "1 - 2",
- "d3-interpolate": "1.2.0 - 2",
- "d3-time": "^2.1.1",
- "d3-time-format": "2 - 3"
- }
- },
- "plugins/legacy-preset-chart-deckgl/node_modules/d3-scale/node_modules/d3-array": {
- "version": "2.12.1",
- "resolved": "https://registry.npmjs.org/d3-array/-/d3-array-2.12.1.tgz",
- "integrity": "sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "internmap": "^1.0.0"
- }
- },
- "plugins/legacy-preset-chart-deckgl/node_modules/d3-time": {
- "version": "2.1.1",
- "resolved": "https://registry.npmjs.org/d3-time/-/d3-time-2.1.1.tgz",
- "integrity": "sha512-/eIQe/eR4kCQwq7yxi7z4c6qEXf2IYGcjoWB5OOQy4Tq9Uv39/947qlDcN2TLkiTzQWzvnsuYPB9TrWaNfipKQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-array": "2"
- }
- },
- "plugins/legacy-preset-chart-deckgl/node_modules/d3-time-format": {
- "version": "3.0.0",
- "resolved": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-3.0.0.tgz",
- "integrity": "sha512-UXJh6EKsHBTjopVqZBhFysQcoXSv/5yLONZvkQ5Kk3qbwiUYkdX17Xa1PT6U1ZWXGGfB1ey5L8dKMlFq2DO0Ag==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-time": "1 - 2"
- }
- },
- "plugins/legacy-preset-chart-deckgl/node_modules/d3-time/node_modules/d3-array": {
- "version": "2.12.1",
- "resolved": "https://registry.npmjs.org/d3-array/-/d3-array-2.12.1.tgz",
- "integrity": "sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "internmap": "^1.0.0"
- }
- },
- "plugins/legacy-preset-chart-deckgl/node_modules/internmap": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/internmap/-/internmap-1.0.1.tgz",
- "integrity": "sha512-lDB5YccMydFBtasVtxnZ3MRBHuaoE8GKsppq+EchKL2U4nK/DmEpPHNH8MZe5HkMtpSiTSOZwfN0tzYjO/lJEw==",
- "license": "ISC"
- },
"plugins/legacy-preset-chart-nvd3": {
"name": "@superset-ui/legacy-preset-chart-nvd3",
"version": "0.20.3",
@@ -53427,7 +53222,7 @@
"dependencies": {
"@types/d3-scale": "^4.0.8",
"d3-cloud": "^1.2.7",
- "d3-scale": "^3.0.1",
+ "d3-scale": "^4.0.2",
"encodable": "^0.7.8"
},
"devDependencies": {
@@ -53450,52 +53245,6 @@
"@types/d3-time": "*"
}
},
- "plugins/plugin-chart-word-cloud/node_modules/d3-color": {
- "version": "2.0.0",
- "resolved": "https://registry.npmjs.org/d3-color/-/d3-color-2.0.0.tgz",
- "integrity": "sha512-SPXi0TSKPD4g9tw0NMZFnR95XVgUZiBH+uUTqQuDu1OsE2zomHU7ho0FISciaPvosimixwHFl3WHLGabv6dDgQ==",
- "license": "BSD-3-Clause"
- },
- "plugins/plugin-chart-word-cloud/node_modules/d3-interpolate": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-2.0.1.tgz",
- "integrity": "sha512-c5UhwwTs/yybcmTpAVqwSFl6vrQ8JZJoT5F7xNFK9pymv5C0Ymcc9/LIJHtYIggg/yS9YHw8i8O8tgb9pupjeQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-color": "1 - 2"
- }
- },
- "plugins/plugin-chart-word-cloud/node_modules/d3-scale": {
- "version": "3.3.0",
- "resolved": "https://registry.npmjs.org/d3-scale/-/d3-scale-3.3.0.tgz",
- "integrity": "sha512-1JGp44NQCt5d1g+Yy+GeOnZP7xHo0ii8zsQp6PGzd+C1/dl0KGsp9A7Mxwp+1D1o4unbTTxVdU/ZOIEBoeZPbQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-array": "^2.3.0",
- "d3-format": "1 - 2",
- "d3-interpolate": "1.2.0 - 2",
- "d3-time": "^2.1.1",
- "d3-time-format": "2 - 3"
- }
- },
- "plugins/plugin-chart-word-cloud/node_modules/d3-time": {
- "version": "2.1.1",
- "resolved": "https://registry.npmjs.org/d3-time/-/d3-time-2.1.1.tgz",
- "integrity": "sha512-/eIQe/eR4kCQwq7yxi7z4c6qEXf2IYGcjoWB5OOQy4Tq9Uv39/947qlDcN2TLkiTzQWzvnsuYPB9TrWaNfipKQ==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-array": "2"
- }
- },
- "plugins/plugin-chart-word-cloud/node_modules/d3-time-format": {
- "version": "3.0.0",
- "resolved": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-3.0.0.tgz",
- "integrity": "sha512-UXJh6EKsHBTjopVqZBhFysQcoXSv/5yLONZvkQ5Kk3qbwiUYkdX17Xa1PT6U1ZWXGGfB1ey5L8dKMlFq2DO0Ag==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "d3-time": "1 - 2"
- }
- },
"tools/eslint-plugin-theme-colors": {
"version": "1.0.0",
"dev": true,
diff --git a/superset-frontend/packages/superset-ui-core/package.json b/superset-frontend/packages/superset-ui-core/package.json
index 9240c7287a..68136a2d12 100644
--- a/superset-frontend/packages/superset-ui-core/package.json
+++ b/superset-frontend/packages/superset-ui-core/package.json
@@ -26,10 +26,12 @@
"dependencies": {
"@babel/runtime": "^7.25.6",
"@types/json-bigint": "^1.0.4",
+ "@visx/responsive": "^3.12.0",
"csstype": "^3.1.3",
+ "d3-color": "3.1.0",
"d3-format": "^1.3.2",
"d3-interpolate": "^3.0.1",
- "d3-scale": "^3.0.0",
+ "d3-scale": "^4.0.2",
"d3-time": "^3.1.0",
"d3-time-format": "^4.1.0",
"fetch-retry": "^6.0.0",
@@ -45,7 +47,6 @@
"reselect": "^4.0.0",
"rison": "^0.1.1",
"seedrandom": "^3.0.5",
- "@visx/responsive": "^3.12.0",
"whatwg-fetch": "^3.6.20",
"xss": "^1.0.14"
},
diff --git a/superset-frontend/plugins/legacy-plugin-chart-horizon/package.json b/superset-frontend/plugins/legacy-plugin-chart-horizon/package.json
index 22eb16060f..12eb01b782 100644
--- a/superset-frontend/plugins/legacy-plugin-chart-horizon/package.json
+++ b/superset-frontend/plugins/legacy-plugin-chart-horizon/package.json
@@ -24,7 +24,7 @@
],
"dependencies": {
"d3-array": "^2.0.3",
- "d3-scale": "^3.0.1",
+ "d3-scale": "^4.0.2",
"prop-types": "^15.8.1"
},
"peerDependencies": {
diff --git a/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json b/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json
index 16dfb88794..2190970b41 100644
--- a/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json
+++ b/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json
@@ -34,15 +34,14 @@
"@types/geojson": "^7946.0.15",
"bootstrap-slider": "^11.0.2",
"d3-array": "^1.2.4",
- "d3-color": "^1.4.1",
"d3-scale": "^4.0.2",
"lodash": "^4.17.21",
"mousetrap": "^1.6.5",
"prop-types": "^15.8.1",
+ "tinycolor2": "^1.4.2",
"underscore": "^1.13.7",
"urijs": "^1.19.11",
- "xss": "^1.0.15",
- "tinycolor2": "^1.4.2"
+ "xss": "^1.0.15"
},
"devDependencies": {
"@types/mapbox__geojson-extent": "^1.0.3",
diff --git a/superset-frontend/plugins/plugin-chart-word-cloud/package.json b/superset-frontend/plugins/plugin-chart-word-cloud/package.json
index aadd91264e..79dc316ea9 100644
--- a/superset-frontend/plugins/plugin-chart-word-cloud/package.json
+++ b/superset-frontend/plugins/plugin-chart-word-cloud/package.json
@@ -31,7 +31,7 @@
"dependencies": {
"@types/d3-scale": "^4.0.8",
"d3-cloud": "^1.2.7",
- "d3-scale": "^3.0.1",
+ "d3-scale": "^4.0.2",
"encodable": "^0.7.8"
},
"peerDependencies": {
(superset) 04/05: fix: Update d3-color version in package.json to resolve conflict
Posted by ma...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
maximebeauchemin pushed a commit to branch npm-audit-with-force
in repository https://gitbox.apache.org/repos/asf/superset.git
commit cd6a712269382485cde55609f004f03268d28c13
Author: Maxime Beauchemin (aider) <ma...@gmail.com>
AuthorDate: Tue Jan 28 23:24:13 2025 -0800
fix: Update d3-color version in package.json to resolve conflict
---
superset-frontend/package.json | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/superset-frontend/package.json b/superset-frontend/package.json
index 9603c56110..e7f71aaf06 100644
--- a/superset-frontend/package.json
+++ b/superset-frontend/package.json
@@ -373,7 +373,7 @@
},
"overrides": {
"core-js": "^3.38.1",
- "d3-color": "^3.1.0",
+ "d3-color": "3.1.0",
"yosay": {
"ansi-regex": "^4.1.1"
},
(superset) 03/05: chore: Override d3-color and d3-scale versions in package.json
Posted by ma...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
maximebeauchemin pushed a commit to branch npm-audit-with-force
in repository https://gitbox.apache.org/repos/asf/superset.git
commit 4fba5d655b80784074a8c7bc0ec34f08224cc6e1
Author: Maxime Beauchemin (aider) <ma...@gmail.com>
AuthorDate: Tue Jan 28 23:22:29 2025 -0800
chore: Override d3-color and d3-scale versions in package.json
---
superset-frontend/package.json | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/superset-frontend/package.json b/superset-frontend/package.json
index 7fe0b30908..9603c56110 100644
--- a/superset-frontend/package.json
+++ b/superset-frontend/package.json
@@ -130,8 +130,8 @@
"chrono-node": "^2.7.6",
"classnames": "^2.2.5",
"core-js": "^3.38.1",
- "d3-color": "^3.1.0",
- "d3-scale": "^2.1.2",
+ "d3-color": "3.1.0",
+ "d3-scale": "4.0.2",
"dayjs": "^1.11.13",
"dom-to-image-more": "^3.2.0",
"dom-to-pdf": "^0.3.2",
(superset) 02/05: feat: Replace d3-color with tinycolor2 for color conversion
Posted by ma...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
maximebeauchemin pushed a commit to branch npm-audit-with-force
in repository https://gitbox.apache.org/repos/asf/superset.git
commit 2b066577b979a8fd0af4e71b90655d4fa3a88752
Author: Maxime Beauchemin (aider) <ma...@gmail.com>
AuthorDate: Tue Jan 28 23:07:39 2025 -0800
feat: Replace d3-color with tinycolor2 for color conversion
---
superset-frontend/plugins/legacy-preset-chart-deckgl/package.json | 3 ++-
.../plugins/legacy-preset-chart-deckgl/src/utils/colors.ts | 4 ++--
2 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json b/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json
index 03ba0dc88c..16dfb88794 100644
--- a/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json
+++ b/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json
@@ -41,7 +41,8 @@
"prop-types": "^15.8.1",
"underscore": "^1.13.7",
"urijs": "^1.19.11",
- "xss": "^1.0.15"
+ "xss": "^1.0.15",
+ "tinycolor2": "^1.4.2"
},
"devDependencies": {
"@types/mapbox__geojson-extent": "^1.0.3",
diff --git a/superset-frontend/plugins/legacy-preset-chart-deckgl/src/utils/colors.ts b/superset-frontend/plugins/legacy-preset-chart-deckgl/src/utils/colors.ts
index 7f562dbca2..4673de4cfa 100644
--- a/superset-frontend/plugins/legacy-preset-chart-deckgl/src/utils/colors.ts
+++ b/superset-frontend/plugins/legacy-preset-chart-deckgl/src/utils/colors.ts
@@ -16,7 +16,7 @@
* specific language governing permissions and limitations
* under the License.
*/
-import { rgb } from 'd3-color';
+import tinycolor from 'tinycolor2';
// eslint-disable-next-line import/prefer-default-export
export function hexToRGB(
@@ -26,7 +26,7 @@ export function hexToRGB(
if (!hex) {
return [0, 0, 0, alpha];
}
- const { r, g, b } = rgb(hex);
+ const { r, g, b } = tinycolor(hex).toRgb();
return [r, g, b, alpha];
}
(superset) 01/05: fix: update d3-scale dependency to version 4.0.2
Posted by ma...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
maximebeauchemin pushed a commit to branch npm-audit-with-force
in repository https://gitbox.apache.org/repos/asf/superset.git
commit 113a3096be179c41a4ff013722927f36b7257ac3
Author: Maxime Beauchemin <ma...@gmail.com>
AuthorDate: Tue Jan 28 23:07:37 2025 -0800
fix: update d3-scale dependency to version 4.0.2
---
superset-frontend/plugins/legacy-preset-chart-deckgl/package.json | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json b/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json
index ffaf582ed9..03ba0dc88c 100644
--- a/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json
+++ b/superset-frontend/plugins/legacy-preset-chart-deckgl/package.json
@@ -35,7 +35,7 @@
"bootstrap-slider": "^11.0.2",
"d3-array": "^1.2.4",
"d3-color": "^1.4.1",
- "d3-scale": "^3.0.0",
+ "d3-scale": "^4.0.2",
"lodash": "^4.17.21",
"mousetrap": "^1.6.5",
"prop-types": "^15.8.1",