(incubator-kie-tools) branch main updated: NO-ISSUE: upgrade fast-xml-parser to version 4.4.1 (fixes CVE-2024-41818) (#2501)

[tiagobento]

This is an automated email from the ASF dual-hosted git repository.

tiagobento pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-kie-tools.git


The following commit(s) were added to refs/heads/main by this push:
     new 190d784f38e NO-ISSUE: upgrade fast-xml-parser to version 4.4.1 (fixes 
CVE-2024-41818) (#2501)
190d784f38e is described below

commit 190d784f38e7383524da87553de30ad40449fb9c
Author: Roberto Oliveira <rguim...@redhat.com>
AuthorDate: Wed Jul 31 17:30:58 2024 -0400

    NO-ISSUE: upgrade fast-xml-parser to version 4.4.1 (fixes CVE-2024-41818) 
(#2501)
---
 packages/backend/package.json                   |  2 +-
 pnpm-lock.yaml                                  | 68 ++++++++++++-------------
 scripts/check-junit-report-results/package.json |  2 +-
 3 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/packages/backend/package.json b/packages/backend/package.json
index 706d185db6f..6ea0e377b44 100644
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -27,7 +27,7 @@
     "@kie-tools-core/notifications": "workspace:*",
     "@kie-tools-core/workspace": "workspace:*",
     "axios": "^1.6.8",
-    "fast-xml-parser": "^4.3.1",
+    "fast-xml-parser": "^4.4.1",
     "portfinder": "^1.0.32",
     "semver": "^7.5.4",
     "sinon": "^11.1.1"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 039d5ea6572..99a2715de99 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -759,8 +759,8 @@ importers:
         specifier: ^1.6.8
         version: 1.6.8
       fast-xml-parser:
-        specifier: ^4.3.1
-        version: 4.3.1
+        specifier: ^4.4.1
+        version: 4.4.1
       portfinder:
         specifier: ^1.0.32
         version: 1.0.32
@@ -12617,8 +12617,8 @@ importers:
   scripts/check-junit-report-results:
     dependencies:
       fast-xml-parser:
-        specifier: ^4.3.1
-        version: 4.3.1
+        specifier: ^4.4.1
+        version: 4.4.1
     devDependencies:
       '@babel/core':
         specifier: ^7.16.0
@@ -21134,8 +21134,8 @@ packages:
   fast-url-parser@1.1.3:
     resolution: {integrity: 
sha512-5jOCVXADYNuRkKFzNJ0dCCewsZiYo0dz8QNYljkOpFC6r2U4OBmKtvm/Tsuh4w1YYdDqDb31a8TVhBJ2OJKdqQ==}
 
-  fast-xml-parser@4.3.1:
-    resolution: {integrity: 
sha512-viVv3xb8D+SiS1W4cv4tva3bni08kAkx0gQnWrykMM8nXPc1FxqZPU00dCEVjkiCg4HoXd2jC4x29Nzg/l2DAA==}
+  fast-xml-parser@4.4.1:
+    resolution: {integrity: 
sha512-xkjOecfnKGkSsOwtZ5Pz7Us/T6mrbPQrq0nh+aCO5V9nk5NLWmasAHumTKjiPJPWANe+kAZ84Jc8ooJkzZ88Sw==}
     hasBin: true
 
   fastest-levenshtein@1.0.12:
@@ -27907,7 +27907,7 @@ snapshots:
     dependencies:
       '@ampproject/remapping': 2.2.0
       '@angular-devkit/architect': 0.1402.11(chokidar@3.5.3)
-      '@angular-devkit/build-webpack': 
0.1402.11(chokidar@3.5.3)(webpack-dev-server@4.11.0(webpack@5.76.1))(webpack@5.76.1(esbuild@0.15.5))
+      '@angular-devkit/build-webpack': 
0.1402.11(chokidar@3.5.3)(webpack-dev-server@4.11.0(webpack@5.76.1))(webpack@5.76.1)
       '@angular-devkit/core': 14.2.11(chokidar@3.5.3)
       '@angular/compiler-cli': 
14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4)
       '@babel/core': 7.18.10
@@ -27920,15 +27920,15 @@ snapshots:
       '@babel/runtime': 7.18.9
       '@babel/template': 7.18.10
       '@discoveryjs/json-ext': 0.5.7
-      '@ngtools/webpack': 
14.2.11(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4))(typescript@4.8.4)(webpack@5.76.1(esbuild@0.15.5))
+      '@ngtools/webpack': 
14.2.11(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4))(typescript@4.8.4)(webpack@5.76.1)
       ansi-colors: 4.1.3
-      babel-loader: 8.2.5(@babel/core@7.18.10)(webpack@5.76.1(esbuild@0.15.5))
+      babel-loader: 8.2.5(@babel/core@7.18.10)(webpack@5.76.1)
       babel-plugin-istanbul: 6.1.1
       browserslist: 4.20.2
       cacache: 16.1.2
-      copy-webpack-plugin: 11.0.0(webpack@5.76.1(esbuild@0.15.5))
+      copy-webpack-plugin: 11.0.0(webpack@5.76.1)
       critters: 0.0.16
-      css-loader: 6.7.1(webpack@5.76.1(esbuild@0.15.5))
+      css-loader: 6.7.1(webpack@5.76.1)
       esbuild-wasm: 0.15.5
       glob: 8.0.3
       https-proxy-agent: 5.0.1
@@ -27936,10 +27936,10 @@ snapshots:
       jsonc-parser: 3.1.0
       karma-source-map-support: 1.4.0
       less: 4.1.3
-      less-loader: 11.0.0(less@4.1.3)(webpack@5.76.1(esbuild@0.15.5))
-      license-webpack-plugin: 4.0.2(webpack@5.76.1(esbuild@0.15.5))
+      less-loader: 11.0.0(less@4.1.3)(webpack@5.76.1)
+      license-webpack-plugin: 4.0.2(webpack@5.76.1)
       loader-utils: 3.2.1
-      mini-css-extract-plugin: 2.6.1(webpack@5.76.1(esbuild@0.15.5))
+      mini-css-extract-plugin: 2.6.1(webpack@5.76.1)
       minimatch: 5.1.0
       open: 8.4.0
       ora: 5.4.1
@@ -27947,18 +27947,18 @@ snapshots:
       piscina: 3.2.0
       postcss: 8.4.16
       postcss-import: 15.0.0(postcss@8.4.16)
-      postcss-loader: 7.0.1(postcss@8.4.16)(webpack@5.76.1(esbuild@0.15.5))
+      postcss-loader: 7.0.1(postcss@8.4.16)(webpack@5.76.1)
       postcss-preset-env: 7.8.0(postcss@8.4.16)
       regenerator-runtime: 0.13.9
       resolve-url-loader: 5.0.0
       rxjs: 6.6.7
       sass: 1.54.4
-      sass-loader: 13.0.2(sass@1.54.4)(webpack@5.76.1(esbuild@0.15.5))
+      sass-loader: 13.0.2(sass@1.54.4)(webpack@5.76.1)
       semver: 7.3.7
-      source-map-loader: 4.0.0(webpack@5.76.1(esbuild@0.15.5))
+      source-map-loader: 4.0.0(webpack@5.76.1)
       source-map-support: 0.5.21
       stylus: 0.59.0
-      stylus-loader: 7.0.0(stylus@0.59.0)(webpack@5.76.1(esbuild@0.15.5))
+      stylus-loader: 7.0.0(stylus@0.59.0)(webpack@5.76.1)
       terser: 5.14.2
       text-table: 0.2.0
       tree-kill: 1.2.2
@@ -27968,7 +27968,7 @@ snapshots:
       webpack-dev-middleware: 5.3.3(webpack@5.76.1)
       webpack-dev-server: 4.11.0(webpack@5.76.1)
       webpack-merge: 5.8.0
-      webpack-subresource-integrity: 
5.1.0(html-webpack-plugin@5.5.3(webpack@5.76.1))(webpack@5.76.1(esbuild@0.15.5))
+      webpack-subresource-integrity: 
5.1.0(html-webpack-plugin@5.5.3(webpack@5.76.1))(webpack@5.76.1)
     optionalDependencies:
       esbuild: 0.15.5
       karma: 6.4.2
@@ -27987,7 +27987,7 @@ snapshots:
       - utf-8-validate
       - webpack-cli
 
-  
'@angular-devkit/build-webpack@0.1402.11(chokidar@3.5.3)(webpack-dev-server@4.11.0(webpack@5.76.1))(webpack@5.76.1(esbuild@0.15.5))':
+  
'@angular-devkit/build-webpack@0.1402.11(chokidar@3.5.3)(webpack-dev-server@4.11.0(webpack@5.76.1))(webpack@5.76.1)':
     dependencies:
       '@angular-devkit/architect': 0.1402.11(chokidar@3.5.3)
       rxjs: 6.6.7
@@ -33784,7 +33784,7 @@ snapshots:
       pump: 3.0.0
       tar-fs: 2.1.1
 
-  
'@ngtools/webpack@14.2.11(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4))(typescript@4.8.4)(webpack@5.76.1(esbuild@0.15.5))':
+  
'@ngtools/webpack@14.2.11(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4))(typescript@4.8.4)(webpack@5.76.1)':
     dependencies:
       '@angular/compiler-cli': 
14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.5.2)(zone.js@0.11.4)))(typescript@4.8.4)
       typescript: 4.8.4
@@ -38616,7 +38616,7 @@ snapshots:
       ci-info: 3.3.2
       clipanion: 4.0.0-rc.2(typanion@3.9.0)
       cross-spawn: 7.0.3
-      diff: 5.1.0
+      diff: 5.2.0
       dotenv: 16.3.1
       fast-glob: 3.2.11
       got: 11.8.2
@@ -39419,7 +39419,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  babel-loader@8.2.5(@babel/core@7.18.10)(webpack@5.76.1(esbuild@0.15.5)):
+  babel-loader@8.2.5(@babel/core@7.18.10)(webpack@5.76.1):
     dependencies:
       '@babel/core': 7.18.10
       find-cache-dir: 3.3.1
@@ -40682,7 +40682,7 @@ snapshots:
     dependencies:
       is-what: 3.14.1
 
-  copy-webpack-plugin@11.0.0(webpack@5.76.1(esbuild@0.15.5)):
+  copy-webpack-plugin@11.0.0(webpack@5.76.1):
     dependencies:
       fast-glob: 3.2.11
       glob-parent: 6.0.2
@@ -41005,7 +41005,7 @@ snapshots:
       semver: 7.5.4
       webpack: 5.88.2
 
-  css-loader@6.7.1(webpack@5.76.1(esbuild@0.15.5)):
+  css-loader@6.7.1(webpack@5.76.1):
     dependencies:
       icss-utils: 5.1.0(postcss@8.4.38)
       postcss: 8.4.38
@@ -42692,7 +42692,7 @@ snapshots:
     dependencies:
       punycode: 1.4.1
 
-  fast-xml-parser@4.3.1:
+  fast-xml-parser@4.4.1:
     dependencies:
       strnum: 1.0.5
 
@@ -45359,7 +45359,7 @@ snapshots:
     dependencies:
       readable-stream: 2.3.7
 
-  less-loader@11.0.0(less@4.1.3)(webpack@5.76.1(esbuild@0.15.5)):
+  less-loader@11.0.0(less@4.1.3)(webpack@5.76.1):
     dependencies:
       klona: 2.0.5
       less: 4.1.3
@@ -45388,7 +45388,7 @@ snapshots:
       prelude-ls: 1.2.1
       type-check: 0.4.0
 
-  license-webpack-plugin@4.0.2(webpack@5.76.1(esbuild@0.15.5)):
+  license-webpack-plugin@4.0.2(webpack@5.76.1):
     dependencies:
       webpack-sources: 3.2.3
     optionalDependencies:
@@ -45811,7 +45811,7 @@ snapshots:
 
   min-indent@1.0.1: {}
 
-  mini-css-extract-plugin@2.6.1(webpack@5.76.1(esbuild@0.15.5)):
+  mini-css-extract-plugin@2.6.1(webpack@5.76.1):
     dependencies:
       schema-utils: 4.2.0
       webpack: 5.76.1(esbuild@0.15.5)
@@ -47122,7 +47122,7 @@ snapshots:
       postcss: 8.4.16
       postcss-value-parser: 4.2.0
 
-  postcss-loader@7.0.1(postcss@8.4.16)(webpack@5.76.1(esbuild@0.15.5)):
+  postcss-loader@7.0.1(postcss@8.4.16)(webpack@5.76.1):
     dependencies:
       cosmiconfig: 7.0.1
       klona: 2.0.5
@@ -48692,7 +48692,7 @@ snapshots:
     optionalDependencies:
       sass: 1.54.4
 
-  sass-loader@13.0.2(sass@1.54.4)(webpack@5.76.1(esbuild@0.15.5)):
+  sass-loader@13.0.2(sass@1.54.4)(webpack@5.76.1):
     dependencies:
       klona: 2.0.5
       neo-async: 2.6.2
@@ -49096,7 +49096,7 @@ snapshots:
       source-map-js: 0.6.2
       webpack: 5.88.2
 
-  source-map-loader@4.0.0(webpack@5.76.1(esbuild@0.15.5)):
+  source-map-loader@4.0.0(webpack@5.76.1):
     dependencies:
       abab: 2.0.6
       iconv-lite: 0.6.3
@@ -49473,7 +49473,7 @@ snapshots:
       postcss: 8.4.38
       postcss-selector-parser: 6.0.16
 
-  stylus-loader@7.0.0(stylus@0.59.0)(webpack@5.76.1(esbuild@0.15.5)):
+  stylus-loader@7.0.0(stylus@0.59.0)(webpack@5.76.1):
     dependencies:
       fast-glob: 3.2.11
       klona: 2.0.5
@@ -51200,7 +51200,7 @@ snapshots:
 
   webpack-sources@3.2.3: {}
 
-  
webpack-subresource-integrity@5.1.0(html-webpack-plugin@5.5.3(webpack@5.76.1))(webpack@5.76.1(esbuild@0.15.5)):
+  
webpack-subresource-integrity@5.1.0(html-webpack-plugin@5.5.3(webpack@5.76.1))(webpack@5.76.1):
     dependencies:
       typed-assert: 1.0.8
       webpack: 5.76.1(esbuild@0.15.5)
diff --git a/scripts/check-junit-report-results/package.json 
b/scripts/check-junit-report-results/package.json
index 75279790cbe..8b433420a2a 100644
--- a/scripts/check-junit-report-results/package.json
+++ b/scripts/check-junit-report-results/package.json
@@ -7,7 +7,7 @@
     "install": "jest --silent --verbose --passWithNoTests"
   },
   "dependencies": {
-    "fast-xml-parser": "^4.3.1"
+    "fast-xml-parser": "^4.4.1"
   },
   "devDependencies": {
     "@babel/core": "^7.16.0",


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@kie.apache.org
For additional commands, e-mail: commits-h...@kie.apache.org