This is an automated email from the ASF dual-hosted git repository.
vincbeck pushed a commit to branch v3-3-test
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/v3-3-test by this push:
new fcfe46b68f8 Fix NPM vulenaribilities in simple auth manager (#70191)
(#70753)
fcfe46b68f8 is described below
commit fcfe46b68f86462382e98594da385091ba15b4e9
Author: Rahul Vats <[email protected]>
AuthorDate: Thu Jul 30 19:17:39 2026 +0530
Fix NPM vulenaribilities in simple auth manager (#70191) (#70753)
(cherry picked from commit 2060ff322b9eeba378ffd5598b17a5d8e3c75801)
Co-authored-by: Vincent <[email protected]>
---
.../api_fastapi/auth/managers/simple/ui/package.json | 3 ++-
.../api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml | 13 +++++++------
2 files changed, 9 insertions(+), 7 deletions(-)
diff --git
a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json
b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json
index dd670aa8494..ae347e79261 100644
--- a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json
+++ b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json
@@ -91,7 +91,8 @@
"axios@<1.15.0": ">=1.15.0",
"esbuild@>=0.17.0 <0.28.1": ">=0.28.1",
"@babel/core@<=7.29.0": ">=7.29.6",
- "js-yaml@>=4.0.0 <4.3.0": ">=4.3.0"
+ "js-yaml@>=4.0.0 <4.3.0": "^4.3.0",
+ "@hey-api/openapi-ts@<0.97.3": ">=0.97.3"
}
}
}
diff --git
a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml
b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml
index 7aaa76185de..8053bc04d35 100644
---
a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml
+++
b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml
@@ -26,7 +26,8 @@ overrides:
axios@<1.15.0: '>=1.15.0'
esbuild@>=0.17.0 <0.28.1: '>=0.28.1'
'@babel/core@<=7.29.0': '>=7.29.6'
- js-yaml@>=4.0.0 <4.3.0: '>=4.3.0'
+ js-yaml@>=4.0.0 <4.3.0: ^4.3.0
+ '@hey-api/openapi-ts@<0.97.3': '>=0.97.3'
importers:
@@ -463,7 +464,7 @@ packages:
resolution: {integrity:
sha512-fvpOdnEz6tu5T2+IMNZW3g9mAZwaXavqpsvtapEZNtYxyYtQ+lQs9wJn/VPhZEvdXAXu8HPTCRpmfa0t1aRATA==}
deprecated: Starting with v0.73.0, this package is bundled directly inside
@hey-api/openapi-ts.
peerDependencies:
- '@hey-api/openapi-ts': < 2
+ '@hey-api/openapi-ts': '>=0.97.3'
axios: '>=1.15.0'
'@hey-api/[email protected]':
@@ -2061,8 +2062,8 @@ packages:
[email protected]:
resolution: {integrity:
sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
- [email protected]:
- resolution: {integrity:
sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==}
+ [email protected]:
+ resolution: {integrity:
sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
hasBin: true
[email protected]:
@@ -3345,7 +3346,7 @@ snapshots:
dependencies:
'@jsdevtools/ono': 7.1.3
'@types/json-schema': 7.0.15
- js-yaml: 5.2.1
+ js-yaml: 4.3.0
'@hey-api/[email protected]([email protected])([email protected])':
dependencies:
@@ -5388,7 +5389,7 @@ snapshots:
[email protected]: {}
- [email protected]:
+ [email protected]:
dependencies:
argparse: 2.0.1
