This is an automated email from the ASF dual-hosted git repository.
FrankChen021 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git
The following commit(s) were added to refs/heads/master by this push:
new 3ce1110d202 fix: address website dependency vulnerabilities (#19814)
3ce1110d202 is described below
commit 3ce1110d202a5f207649ba894cbeb44967c6c5c0
Author: Frank Chen <[email protected]>
AuthorDate: Mon Sep 21 10:00:58 2026 +0800
fix: address website dependency vulnerabilities (#19814)
* Fix website dependency vulnerabilities
* ci: pin website npm version
* ci: remove website npm version pin
---
website/package-lock.json | 121 +++++++++++++---------------------------------
website/package.json | 7 +++
2 files changed, 41 insertions(+), 87 deletions(-)
diff --git a/website/package-lock.json b/website/package-lock.json
index 82c3e1738d8..39a2546af1d 100644
--- a/website/package-lock.json
+++ b/website/package-lock.json
@@ -6874,9 +6874,6 @@
"cpu": [
"arm64"
],
- "libc": [
- "glibc"
- ],
"license": "Apache-2.0 AND MIT",
"optional": true,
"os": [
@@ -6893,9 +6890,6 @@
"cpu": [
"arm64"
],
- "libc": [
- "musl"
- ],
"license": "Apache-2.0 AND MIT",
"optional": true,
"os": [
@@ -6912,9 +6906,6 @@
"cpu": [
"ppc64"
],
- "libc": [
- "glibc"
- ],
"license": "Apache-2.0 AND MIT",
"optional": true,
"os": [
@@ -6931,9 +6922,6 @@
"cpu": [
"s390x"
],
- "libc": [
- "glibc"
- ],
"license": "Apache-2.0 AND MIT",
"optional": true,
"os": [
@@ -6950,9 +6938,6 @@
"cpu": [
"x64"
],
- "libc": [
- "glibc"
- ],
"license": "Apache-2.0 AND MIT",
"optional": true,
"os": [
@@ -6969,9 +6954,6 @@
"cpu": [
"x64"
],
- "libc": [
- "musl"
- ],
"license": "Apache-2.0 AND MIT",
"optional": true,
"os": [
@@ -17228,15 +17210,6 @@
"node": ">= 0.4.0"
}
},
- "node_modules/os-tmpdir": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz";,
- "integrity":
"sha512-D2FR03Vir7FIu45XBY20mTb+/ZSWB00sjU9jdQXt83gDrI4Ztz5Fs7/yy74g2N5SVQY4xY1qDr4rNddwYRVX0g==",
- "dev": true,
- "engines": {
- "node": ">=0.10.0"
- }
- },
"node_modules/p-finally": {
"version": "1.0.0",
"resolved": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz";,
@@ -19429,14 +19402,6 @@
"url": "https://github.com/sponsors/sindresorhus";
}
},
- "node_modules/randombytes": {
- "version": "2.1.0",
- "resolved":
"https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz";,
- "integrity":
"sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==",
- "dependencies": {
- "safe-buffer": "^5.1.0"
- }
- },
"node_modules/range-parser": {
"version": "1.2.1",
"resolved":
"https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz";,
@@ -20791,11 +20756,12 @@
}
},
"node_modules/serialize-javascript": {
- "version": "6.0.2",
- "resolved":
"https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz";,
- "integrity":
"sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==",
- "dependencies": {
- "randombytes": "^2.1.0"
+ "version": "7.0.5",
+ "resolved":
"https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.0.5.tgz";,
+ "integrity":
"sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==",
+ "license": "BSD-3-Clause",
+ "engines": {
+ "node": ">=20.0.0"
}
},
"node_modules/serve-handler": {
@@ -21205,13 +21171,16 @@
}
},
"node_modules/sockjs/node_modules/uuid": {
- "version": "8.3.2",
- "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz";,
- "integrity":
"sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
- "deprecated": "uuid@10 and below is no longer supported. For ESM
codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be
aware this version will likely be deprecated in 2028).",
+ "version": "11.1.1",
+ "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz";,
+ "integrity":
"sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==",
+ "funding": [
+ "https://github.com/sponsors/broofa";,
+ "https://github.com/sponsors/ctavan";
+ ],
"license": "MIT",
"bin": {
- "uuid": "dist/bin/uuid"
+ "uuid": "dist/esm/bin/uuid"
}
},
"node_modules/sort-css-media-queries": {
@@ -21737,15 +21706,13 @@
}
},
"node_modules/tmp": {
- "version": "0.0.29",
- "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.0.29.tgz";,
- "integrity":
"sha512-89PTqMWGDva+GqClOqBV9s3SMh7MA3Mq0pJUdAoHuF65YoE7O0LermaZkVfT5/Ngfo18H4eYiyG7zKOtnEbxsw==",
+ "version": "0.2.7",
+ "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.7.tgz";,
+ "integrity":
"sha512-e0votIpp4Uo2AJYSzVHV6xCcawuiez3DzqDAbrTc3YxBkplN6e+dM13ZeIcZnDg/QpSuU2zfZ3rzwY8ukEnaXw==",
"dev": true,
- "dependencies": {
- "os-tmpdir": "~1.0.1"
- },
+ "license": "MIT",
"engines": {
- "node": ">=0.4.0"
+ "node": ">=14.14"
}
},
"node_modules/to-regex-range": {
@@ -28776,7 +28743,7 @@
"globby": "^13.1.1",
"normalize-path": "^3.0.0",
"schema-utils": "^4.0.0",
- "serialize-javascript": "^6.0.0"
+ "serialize-javascript": "7.0.5"
},
"dependencies": {
"glob-parent": {
@@ -28945,7 +28912,7 @@
"jest-worker": "^29.4.3",
"postcss": "^8.4.24",
"schema-utils": "^4.0.1",
- "serialize-javascript": "^6.0.1"
+ "serialize-javascript": "7.0.5"
}
},
"css-prefers-color-scheme": {
@@ -30138,7 +30105,7 @@
"requires": {
"extend": "^3.0.0",
"spawn-sync": "^1.0.15",
- "tmp": "^0.0.29"
+ "tmp": "0.2.7"
}
},
"fast-deep-equal": {
@@ -33729,12 +33696,6 @@
"integrity":
"sha512-jd0cvB8qQ5uVt0lvCIexBaROw1KyKm5sbulg2fWOHjETisuCzWyt+eTZKEMs8v6HwzoGs8xik26jg7eCM6pS+A==",
"dev": true
},
- "os-tmpdir": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz";,
- "integrity":
"sha512-D2FR03Vir7FIu45XBY20mTb+/ZSWB00sjU9jdQXt83gDrI4Ztz5Fs7/yy74g2N5SVQY4xY1qDr4rNddwYRVX0g==",
- "dev": true
- },
"p-finally": {
"version": "1.0.0",
"resolved": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz";,
@@ -34974,14 +34935,6 @@
"resolved": "https://registry.npmjs.org/quick-lru/-/quick-lru-5.1.1.tgz";,
"integrity":
"sha512-WuyALRjWPDGtt/wzJiadO5AXY+8hZ80hVpe6MyivgraREW751X3SbhRvG3eLKOYN+8VEvqLcf3wdnt44Z4S4SA=="
},
- "randombytes": {
- "version": "2.1.0",
- "resolved":
"https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz";,
- "integrity":
"sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==",
- "requires": {
- "safe-buffer": "^5.1.0"
- }
- },
"range-parser": {
"version": "1.2.1",
"resolved":
"https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz";,
@@ -35960,12 +35913,9 @@
}
},
"serialize-javascript": {
- "version": "6.0.2",
- "resolved":
"https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz";,
- "integrity":
"sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==",
- "requires": {
- "randombytes": "^2.1.0"
- }
+ "version": "7.0.5",
+ "resolved":
"https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.0.5.tgz";,
+ "integrity":
"sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw=="
},
"serve-handler": {
"version": "6.1.7",
@@ -36252,7 +36202,7 @@
"integrity":
"sha512-GJgLTZ7vYb/JtPSSZ10hsOYIvEYsjbNU+zPdIHcUaWVNUEPivzxku31865sSSud0Da0W4lEeOPlmw93zLQchuQ==",
"requires": {
"faye-websocket": "^0.11.3",
- "uuid": "^8.3.2",
+ "uuid": "11.1.1",
"websocket-driver": "^0.7.4"
},
"dependencies": {
@@ -36265,9 +36215,9 @@
}
},
"uuid": {
- "version": "8.3.2",
- "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz";,
- "integrity":
"sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg=="
+ "version": "11.1.1",
+ "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz";,
+ "integrity":
"sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ=="
}
}
},
@@ -36564,7 +36514,7 @@
"@jridgewell/trace-mapping": "^0.3.25",
"jest-worker": "^27.4.5",
"schema-utils": "^4.3.0",
- "serialize-javascript": "^6.0.2",
+ "serialize-javascript": "7.0.5",
"terser": "^5.31.1"
},
"dependencies": {
@@ -36626,13 +36576,10 @@
"integrity":
"sha512-Zba82s87IFq9A9XmjiX5uZA/ARWDrB03OHlq+Vw1fSdt0I+4/Kutwy8BP4Y/y/aORMo61FQ0vIb5j44vSo5Pkg=="
},
"tmp": {
- "version": "0.0.29",
- "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.0.29.tgz";,
- "integrity":
"sha512-89PTqMWGDva+GqClOqBV9s3SMh7MA3Mq0pJUdAoHuF65YoE7O0LermaZkVfT5/Ngfo18H4eYiyG7zKOtnEbxsw==",
- "dev": true,
- "requires": {
- "os-tmpdir": "~1.0.1"
- }
+ "version": "0.2.7",
+ "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.7.tgz";,
+ "integrity":
"sha512-e0votIpp4Uo2AJYSzVHV6xCcawuiez3DzqDAbrTc3YxBkplN6e+dM13ZeIcZnDg/QpSuU2zfZ3rzwY8ukEnaXw==",
+ "dev": true
},
"to-regex-range": {
"version": "5.0.1",
diff --git a/website/package.json b/website/package.json
index d16684884c7..dc5ccac3f2d 100644
--- a/website/package.json
+++ b/website/package.json
@@ -39,5 +39,12 @@
"react": "^18.2.0",
"react-dom": "^18.2.0",
"replace-in-file": "^4.3.1"
+ },
+ "overrides": {
+ "serialize-javascript": "7.0.5",
+ "sockjs": {
+ "uuid": "11.1.1"
+ },
+ "tmp": "0.2.7"
}
}
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
