You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kie.apache.org by ti...@apache.org on 2024/07/31 21:31:03 UTC
(incubator-kie-tools) branch main updated: NO-ISSUE: upgrade fast-xml-parser to version 4.4.1 (fixes CVE-2024-41818) (#2501)
This is an automated email from the ASF dual-hosted git repository.
tiagobento pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-kie-tools.git
The following commit(s) were added to refs/heads/main by this push:
new 190d784f38e NO-ISSUE: upgrade fast-xml-parser to version 4.4.1 (fixes CVE-2024-41818) (#2501)
190d784f38e is described below
commit 190d784f38e7383524da87553de30ad40449fb9c
Author: Roberto Oliveira <rg...@redhat.com>
AuthorDate: Wed Jul 31 17:30:58 2024 -0400
NO-ISSUE: upgrade fast-xml-parser to version 4.4.1 (fixes CVE-2024-41818) (#2501)
---
packages/backend/package.json | 2 +-
pnpm-lock.yaml | 68 ++++++++++++-------------
scripts/check-junit-report-results/package.json | 2 +-
3 files changed, 36 insertions(+), 36 deletions(-)
diff --git a/packages/backend/package.json b/packages/backend/package.json
index 706d185db6f..6ea0e377b44 100644
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -27,7 +27,7 @@
"@kie-tools-core/notifications": "workspace:*",
"@kie-tools-core/workspace": "workspace:*",
"axios": "^1.6.8",
- "fast-xml-parser": "^4.3.1",
+ "fast-xml-parser": "^4.4.1",
"portfinder": "^1.0.32",
"semver": "^7.5.4",
"sinon": "^11.1.1"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 039d5ea6572..99a2715de99 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -759,8 +759,8 @@ importers:
specifier: ^1.6.8
version: 1.6.8
fast-xml-parser:
- specifier: ^4.3.1
- version: 4.3.1
+ specifier: ^4.4.1
+ version: 4.4.1
portfinder:
specifier: ^1.0.32
version: 1.0.32
@@ -12617,8 +12617,8 @@ importers:
scripts/check-junit-report-results:
dependencies:
fast-xml-parser:
- specifier: ^4.3.1
- version: 4.3.1
+ specifier: ^4.4.1
+ version: 4.4.1
devDependencies:
'@babel/core':
specifier: ^7.16.0
@@ -21134,8 +21134,8 @@ packages:
fast-url-parser@1.1.3:
resolution: {integrity: sha512-5jOCVXADYNuRkKFzNJ0dCCewsZiYo0dz8QNYljkOpFC6r2U4OBmKtvm/Tsuh4w1YYdDqDb31a8TVhBJ2OJKdqQ==}
- fast-xml-parser@4.3.1:
- resolution: {integrity: sha512-viVv3xb8D+SiS1W4cv4tva3bni08kAkx0gQnWrykMM8nXPc1FxqZPU00dCEVjkiCg4HoXd2jC4x29Nzg/l2DAA==}
+ fast-xml-parser@4.4.1:
+ resolution: {integrity: sha512-xkjOecfnKGkSsOwtZ5Pz7Us/T6mrbPQrq0nh+aCO5V9nk5NLWmasAHumTKjiPJPWANe+kAZ84Jc8ooJkzZ88Sw==}
hasBin: true
fastest-levenshtein@1.0.12:
@@ -27907,7 +27907,7 @@ snapshots:
dependencies:
'@ampproject/remapping': 2.2.0
'@angular-devkit/architect': 0.1402.11(chokidar@3.5.3)
- '@angular-devkit/build-webpack': 0.1402.11(chokidar@3.5.3)(webpack-dev-server@4.11.0(webpack@5.76.1))(webpack@5.76.1(esbuild@0.15.5))
+ '@angular-devkit/build-webpack': 0.1402.11(chokidar@3.5.3)(webpack-dev-server@4.11.0(webpack@5.76.1))(webpack@5.76.1)
'@angular-devkit/core': 14.2.11(chokidar@3.5.3)
'@angular/compiler-cli': 14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4)
'@babel/core': 7.18.10
@@ -27920,15 +27920,15 @@ snapshots:
'@babel/runtime': 7.18.9
'@babel/template': 7.18.10
'@discoveryjs/json-ext': 0.5.7
- '@ngtools/webpack': 14.2.11(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4))(typescript@4.8.4)(webpack@5.76.1(esbuild@0.15.5))
+ '@ngtools/webpack': 14.2.11(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4))(typescript@4.8.4)(webpack@5.76.1)
ansi-colors: 4.1.3
- babel-loader: 8.2.5(@babel/core@7.18.10)(webpack@5.76.1(esbuild@0.15.5))
+ babel-loader: 8.2.5(@babel/core@7.18.10)(webpack@5.76.1)
babel-plugin-istanbul: 6.1.1
browserslist: 4.20.2
cacache: 16.1.2
- copy-webpack-plugin: 11.0.0(webpack@5.76.1(esbuild@0.15.5))
+ copy-webpack-plugin: 11.0.0(webpack@5.76.1)
critters: 0.0.16
- css-loader: 6.7.1(webpack@5.76.1(esbuild@0.15.5))
+ css-loader: 6.7.1(webpack@5.76.1)
esbuild-wasm: 0.15.5
glob: 8.0.3
https-proxy-agent: 5.0.1
@@ -27936,10 +27936,10 @@ snapshots:
jsonc-parser: 3.1.0
karma-source-map-support: 1.4.0
less: 4.1.3
- less-loader: 11.0.0(less@4.1.3)(webpack@5.76.1(esbuild@0.15.5))
- license-webpack-plugin: 4.0.2(webpack@5.76.1(esbuild@0.15.5))
+ less-loader: 11.0.0(less@4.1.3)(webpack@5.76.1)
+ license-webpack-plugin: 4.0.2(webpack@5.76.1)
loader-utils: 3.2.1
- mini-css-extract-plugin: 2.6.1(webpack@5.76.1(esbuild@0.15.5))
+ mini-css-extract-plugin: 2.6.1(webpack@5.76.1)
minimatch: 5.1.0
open: 8.4.0
ora: 5.4.1
@@ -27947,18 +27947,18 @@ snapshots:
piscina: 3.2.0
postcss: 8.4.16
postcss-import: 15.0.0(postcss@8.4.16)
- postcss-loader: 7.0.1(postcss@8.4.16)(webpack@5.76.1(esbuild@0.15.5))
+ postcss-loader: 7.0.1(postcss@8.4.16)(webpack@5.76.1)
postcss-preset-env: 7.8.0(postcss@8.4.16)
regenerator-runtime: 0.13.9
resolve-url-loader: 5.0.0
rxjs: 6.6.7
sass: 1.54.4
- sass-loader: 13.0.2(sass@1.54.4)(webpack@5.76.1(esbuild@0.15.5))
+ sass-loader: 13.0.2(sass@1.54.4)(webpack@5.76.1)
semver: 7.3.7
- source-map-loader: 4.0.0(webpack@5.76.1(esbuild@0.15.5))
+ source-map-loader: 4.0.0(webpack@5.76.1)
source-map-support: 0.5.21
stylus: 0.59.0
- stylus-loader: 7.0.0(stylus@0.59.0)(webpack@5.76.1(esbuild@0.15.5))
+ stylus-loader: 7.0.0(stylus@0.59.0)(webpack@5.76.1)
terser: 5.14.2
text-table: 0.2.0
tree-kill: 1.2.2
@@ -27968,7 +27968,7 @@ snapshots:
webpack-dev-middleware: 5.3.3(webpack@5.76.1)
webpack-dev-server: 4.11.0(webpack@5.76.1)
webpack-merge: 5.8.0
- webpack-subresource-integrity: 5.1.0(html-webpack-plugin@5.5.3(webpack@5.76.1))(webpack@5.76.1(esbuild@0.15.5))
+ webpack-subresource-integrity: 5.1.0(html-webpack-plugin@5.5.3(webpack@5.76.1))(webpack@5.76.1)
optionalDependencies:
esbuild: 0.15.5
karma: 6.4.2
@@ -27987,7 +27987,7 @@ snapshots:
- utf-8-validate
- webpack-cli
- '@angular-devkit/build-webpack@0.1402.11(chokidar@3.5.3)(webpack-dev-server@4.11.0(webpack@5.76.1))(webpack@5.76.1(esbuild@0.15.5))':
+ '@angular-devkit/build-webpack@0.1402.11(chokidar@3.5.3)(webpack-dev-server@4.11.0(webpack@5.76.1))(webpack@5.76.1)':
dependencies:
'@angular-devkit/architect': 0.1402.11(chokidar@3.5.3)
rxjs: 6.6.7
@@ -33784,7 +33784,7 @@ snapshots:
pump: 3.0.0
tar-fs: 2.1.1
- '@ngtools/webpack@14.2.11(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4))(typescript@4.8.4)(webpack@5.76.1(esbuild@0.15.5))':
+ '@ngtools/webpack@14.2.11(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4))(typescript@4.8.4)(webpack@5.76.1)':
dependencies:
'@angular/compiler-cli': 14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4)
typescript: 4.8.4
@@ -38616,7 +38616,7 @@ snapshots:
ci-info: 3.3.2
clipanion: 4.0.0-rc.2(typanion@3.9.0)
cross-spawn: 7.0.3
- diff: 5.1.0
+ diff: 5.2.0
dotenv: 16.3.1
fast-glob: 3.2.11
got: 11.8.2
@@ -39419,7 +39419,7 @@ snapshots:
transitivePeerDependencies:
- supports-color
- babel-loader@8.2.5(@babel/core@7.18.10)(webpack@5.76.1(esbuild@0.15.5)):
+ babel-loader@8.2.5(@babel/core@7.18.10)(webpack@5.76.1):
dependencies:
'@babel/core': 7.18.10
find-cache-dir: 3.3.1
@@ -40682,7 +40682,7 @@ snapshots:
dependencies:
is-what: 3.14.1
- copy-webpack-plugin@11.0.0(webpack@5.76.1(esbuild@0.15.5)):
+ copy-webpack-plugin@11.0.0(webpack@5.76.1):
dependencies:
fast-glob: 3.2.11
glob-parent: 6.0.2
@@ -41005,7 +41005,7 @@ snapshots:
semver: 7.5.4
webpack: 5.88.2
- css-loader@6.7.1(webpack@5.76.1(esbuild@0.15.5)):
+ css-loader@6.7.1(webpack@5.76.1):
dependencies:
icss-utils: 5.1.0(postcss@8.4.38)
postcss: 8.4.38
@@ -42692,7 +42692,7 @@ snapshots:
dependencies:
punycode: 1.4.1
- fast-xml-parser@4.3.1:
+ fast-xml-parser@4.4.1:
dependencies:
strnum: 1.0.5
@@ -45359,7 +45359,7 @@ snapshots:
dependencies:
readable-stream: 2.3.7
- less-loader@11.0.0(less@4.1.3)(webpack@5.76.1(esbuild@0.15.5)):
+ less-loader@11.0.0(less@4.1.3)(webpack@5.76.1):
dependencies:
klona: 2.0.5
less: 4.1.3
@@ -45388,7 +45388,7 @@ snapshots:
prelude-ls: 1.2.1
type-check: 0.4.0
- license-webpack-plugin@4.0.2(webpack@5.76.1(esbuild@0.15.5)):
+ license-webpack-plugin@4.0.2(webpack@5.76.1):
dependencies:
webpack-sources: 3.2.3
optionalDependencies:
@@ -45811,7 +45811,7 @@ snapshots:
min-indent@1.0.1: {}
- mini-css-extract-plugin@2.6.1(webpack@5.76.1(esbuild@0.15.5)):
+ mini-css-extract-plugin@2.6.1(webpack@5.76.1):
dependencies:
schema-utils: 4.2.0
webpack: 5.76.1(esbuild@0.15.5)
@@ -47122,7 +47122,7 @@ snapshots:
postcss: 8.4.16
postcss-value-parser: 4.2.0
- postcss-loader@7.0.1(postcss@8.4.16)(webpack@5.76.1(esbuild@0.15.5)):
+ postcss-loader@7.0.1(postcss@8.4.16)(webpack@5.76.1):
dependencies:
cosmiconfig: 7.0.1
klona: 2.0.5
@@ -48692,7 +48692,7 @@ snapshots:
optionalDependencies:
sass: 1.54.4
- sass-loader@13.0.2(sass@1.54.4)(webpack@5.76.1(esbuild@0.15.5)):
+ sass-loader@13.0.2(sass@1.54.4)(webpack@5.76.1):
dependencies:
klona: 2.0.5
neo-async: 2.6.2
@@ -49096,7 +49096,7 @@ snapshots:
source-map-js: 0.6.2
webpack: 5.88.2
- source-map-loader@4.0.0(webpack@5.76.1(esbuild@0.15.5)):
+ source-map-loader@4.0.0(webpack@5.76.1):
dependencies:
abab: 2.0.6
iconv-lite: 0.6.3
@@ -49473,7 +49473,7 @@ snapshots:
postcss: 8.4.38
postcss-selector-parser: 6.0.16
- stylus-loader@7.0.0(stylus@0.59.0)(webpack@5.76.1(esbuild@0.15.5)):
+ stylus-loader@7.0.0(stylus@0.59.0)(webpack@5.76.1):
dependencies:
fast-glob: 3.2.11
klona: 2.0.5
@@ -51200,7 +51200,7 @@ snapshots:
webpack-sources@3.2.3: {}
- webpack-subresource-integrity@5.1.0(html-webpack-plugin@5.5.3(webpack@5.76.1))(webpack@5.76.1(esbuild@0.15.5)):
+ webpack-subresource-integrity@5.1.0(html-webpack-plugin@5.5.3(webpack@5.76.1))(webpack@5.76.1):
dependencies:
typed-assert: 1.0.8
webpack: 5.76.1(esbuild@0.15.5)
diff --git a/scripts/check-junit-report-results/package.json b/scripts/check-junit-report-results/package.json
index 75279790cbe..8b433420a2a 100644
--- a/scripts/check-junit-report-results/package.json
+++ b/scripts/check-junit-report-results/package.json
@@ -7,7 +7,7 @@
"install": "jest --silent --verbose --passWithNoTests"
},
"dependencies": {
- "fast-xml-parser": "^4.3.1"
+ "fast-xml-parser": "^4.4.1"
},
"devDependencies": {
"@babel/core": "^7.16.0",
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@kie.apache.org
For additional commands, e-mail: commits-help@kie.apache.org