This is an automated email from the ASF dual-hosted git repository.
klesh pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/devlake.git
The following commit(s) were added to refs/heads/main by this push:
new 368b90408 fix(config-ui): remove unused @ahooksjs/use-url-state (#9311)
368b90408 is described below
commit 368b90408751028d041407db554d37a97c7e3887
Author: Dirk <[email protected]>
AuthorDate: Fri Nov 6 08:29:15 2026 +0100
fix(config-ui): remove unused @ahooksjs/use-url-state (#9311)
The last useUrlState call was replaced by react-router's useLocation in
#7841, but the dependency stayed in package.json. Through query-string@6
it pulls in decode-uri-component 0.2.2, which is affected by
GHSA-vcc3-ghjq-m6fr and GHSA-qr28-fpjm-wq7f (denial of service on
malformed percent-encoded input). Fixed versions (>= 0.5.1) are
ESM-only and cannot be used by query-string@6.
Removing the dependency drops query-string, decode-uri-component,
filter-obj, split-on-first and strict-uri-encode from yarn.lock. The
vite build output is byte-identical before and after.
Signed-off-by: DoDiODev <[email protected]>
Co-authored-by: Copilot <[email protected]>
---
config-ui/package.json | 1 -
config-ui/yarn.lock | 74 --------------------------------------------------
2 files changed, 75 deletions(-)
diff --git a/config-ui/package.json b/config-ui/package.json
index d2c94eee0..f4a4e31fa 100644
--- a/config-ui/package.json
+++ b/config-ui/package.json
@@ -24,7 +24,6 @@
]
},
"dependencies": {
- "@ahooksjs/use-url-state": "^3.5.1",
"@ant-design/icons": "6.3.4",
"@reduxjs/toolkit": "2.13.0",
"ahooks": "3.11.0",
diff --git a/config-ui/yarn.lock b/config-ui/yarn.lock
index 431fd1ef9..f0a116d3d 100644
--- a/config-ui/yarn.lock
+++ b/config-ui/yarn.lock
@@ -19,20 +19,6 @@ __metadata:
languageName: node
linkType: hard
-"@ahooksjs/use-url-state@npm:^3.5.1":
- version: 3.5.1
- resolution: "@ahooksjs/use-url-state@npm:3.5.1"
- dependencies:
- ahooks: "npm:^3.4.1"
- query-string: "npm:^6.9.0"
- tslib: "npm:^2.4.1"
- peerDependencies:
- react: ^16.8.0 || ^17.0.0 || ^18.0.0
- react-router: ^5.0.0 || ^6.0.0
- checksum:
10c0/769640b65f4d3bddae67486db10957ed7ca6170e811830ccd688346ea168e5a0465118907965026b1c84bcd515d50c5c11c61a3c1306cb9b61b75caafb4ba562
- languageName: node
- linkType: hard
-
"@ant-design/colors@npm:^8.0.1":
version: 8.0.1
resolution: "@ant-design/colors@npm:8.0.1"
@@ -2480,25 +2466,6 @@ __metadata:
languageName: node
linkType: hard
-"ahooks@npm:^3.4.1":
- version: 3.10.0
- resolution: "ahooks@npm:3.10.0"
- dependencies:
- "@babel/runtime": "npm:^7.21.0"
- dayjs: "npm:^1.9.1"
- js-cookie: "npm:^3.0.5"
- lodash: "npm:^4.17.21"
- react-fast-compare: "npm:^3.2.2"
- resize-observer-polyfill: "npm:^1.5.1"
- screenfull: "npm:^5.0.0"
- tslib: "npm:^2.4.1"
- peerDependencies:
- react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
- react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
- checksum:
10c0/80a4c7a6b565b79d65370d4eb3c100f64ffff99f9d06bd9e0774240f845356b3a3bc19c31468ceadb2232e98721732beddd3f2bb2579cc8b430df1bba182ad2b
- languageName: node
- linkType: hard
-
"ajv@npm:^6.14.0":
version: 6.15.0
resolution: "ajv@npm:6.15.0"
@@ -3042,7 +3009,6 @@ __metadata:
version: 0.0.0-use.local
resolution: "config-ui@workspace:."
dependencies:
- "@ahooksjs/use-url-state": "npm:^3.5.1"
"@ant-design/icons": "npm:6.3.4"
"@eslint/js": "npm:^10.0.1"
"@reduxjs/toolkit": "npm:2.13.0"
@@ -3322,13 +3288,6 @@ __metadata:
languageName: node
linkType: hard
-"decode-uri-component@npm:^0.2.0":
- version: 0.2.2
- resolution: "decode-uri-component@npm:0.2.2"
- checksum:
10c0/1f4fa54eb740414a816b3f6c24818fbfcabd74ac478391e9f4e2282c994127db02010ce804f3d08e38255493cfe68608b3f5c8e09fd6efc4ae46c807691f7a31
- languageName: node
- linkType: hard
-
"deep-is@npm:^0.1.3":
version: 0.1.4
resolution: "deep-is@npm:0.1.4"
@@ -3949,13 +3908,6 @@ __metadata:
languageName: node
linkType: hard
-"filter-obj@npm:^1.1.0":
- version: 1.1.0
- resolution: "filter-obj@npm:1.1.0"
- checksum:
10c0/071e0886b2b50238ca5026c5bbf58c26a7c1a1f720773b8c7813d16ba93d0200de977af14ac143c5ac18f666b2cfc83073f3a5fe6a4e996c49e0863d5500fccf
- languageName: node
- linkType: hard
-
"find-up@npm:^5.0.0":
version: 5.0.0
resolution: "find-up@npm:5.0.0"
@@ -6091,18 +6043,6 @@ __metadata:
languageName: node
linkType: hard
-"query-string@npm:^6.9.0":
- version: 6.14.1
- resolution: "query-string@npm:6.14.1"
- dependencies:
- decode-uri-component: "npm:^0.2.0"
- filter-obj: "npm:^1.1.0"
- split-on-first: "npm:^1.0.0"
- strict-uri-encode: "npm:^2.0.0"
- checksum:
10c0/900e0fa788000e9dc5f929b6f4141742dcf281f02d3bab9714bc83bea65fab3de75169ea8d61f19cda996bc0dcec72e156efe3c5614c6bce65dcf234ac955b14
- languageName: node
- linkType: hard
-
"react-copy-to-clipboard@npm:5.1.1":
version: 5.1.1
resolution: "react-copy-to-clipboard@npm:5.1.1"
@@ -6732,13 +6672,6 @@ __metadata:
languageName: node
linkType: hard
-"split-on-first@npm:^1.0.0":
- version: 1.1.0
- resolution: "split-on-first@npm:1.1.0"
- checksum:
10c0/56df8344f5a5de8521898a5c090023df1d8b8c75be6228f56c52491e0fc1617a5236f2ac3a066adb67a73231eac216ccea7b5b4a2423a543c277cb2f48d24c29
- languageName: node
- linkType: hard
-
"std-env@npm:^4.3.0":
version: 4.3.0
resolution: "std-env@npm:4.3.0"
@@ -6756,13 +6689,6 @@ __metadata:
languageName: node
linkType: hard
-"strict-uri-encode@npm:^2.0.0":
- version: 2.0.0
- resolution: "strict-uri-encode@npm:2.0.0"
- checksum:
10c0/010cbc78da0e2cf833b0f5dc769e21ae74cdc5d5f5bd555f14a4a4876c8ad2c85ab8b5bdf9a722dc71a11dcd3184085e1c3c0bd50ec6bb85fffc0f28cf82597d
- languageName: node
- linkType: hard
-
"string-argv@npm:^0.3.2":
version: 0.3.2
resolution: "string-argv@npm:0.3.2"
