This is an automated email from the ASF dual-hosted git repository.
yesamer pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-kie-tools.git
The following commit(s) were added to refs/heads/main by this push:
new df48db6bdc2 NO-ISSUE: Upgrade js-yaml to 3.15.2 and 4.3.2 to address
CVE-2026-84375 (#3993)
df48db6bdc2 is described below
commit df48db6bdc2f66890887c597fb20b932e3cb8af2
Author: Adarsh vk <[email protected]>
AuthorDate: Fri Sep 25 22:04:16 2026 +0530
NO-ISSUE: Upgrade js-yaml to 3.15.2 and 4.3.2 to address CVE-2026-84375
(#3993)
---
pnpm-lock.yaml | 136 ++++++++++++++++++++++++++--------------------------
pnpm-workspace.yaml | 11 ++---
2 files changed, 71 insertions(+), 76 deletions(-)
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index f2e140c4626..035146f41d1 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,11 +6,9 @@ settings:
overrides:
'@apidevtools/swagger-parser>@apidevtools/json-schema-ref-parser': ^15.3.6
- '@istanbuljs/load-nyc-config>js-yaml': ^3.15.0
cross-spawn: ^7.0.6
d3-color: 3.1.0
graphql: 14.3.1
- json-refs>js-yaml: ^3.15.0
minimatch@^3>brace-expansion: 1.1.18
minimatch@^5>brace-expansion: 2.1.4
openapi-types: 7.2.3
@@ -18,8 +16,8 @@ overrides:
path-to-regexp@^0: 0.1.13
react-dropzone: ^11.4.2
superagent: 10.2.2
- xmlbuilder2>js-yaml: ^3.15.0
- js-yaml@^4: ^4.2.0
+ js-yaml@^3: ^3.15.2
+ js-yaml@^4: ^4.3.2
minimatch@^3: 3.1.5
minimatch@^9: 9.0.8
minimatch@^10: 10.2.1
@@ -149,7 +147,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -218,7 +216,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -264,7 +262,7 @@ importers:
version: 4.10.2
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -376,7 +374,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -445,7 +443,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -496,7 +494,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -706,7 +704,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -812,7 +810,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -860,7 +858,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -1084,7 +1082,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -1329,7 +1327,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -1549,7 +1547,7 @@ importers:
version: 5.108.4([email protected])([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -1826,7 +1824,7 @@ importers:
version: 4.10.2
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -1957,7 +1955,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -2166,7 +2164,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -2284,7 +2282,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-merge:
specifier: ^5.9.0
version: 5.10.0
@@ -2508,7 +2506,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -2848,7 +2846,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -3119,7 +3117,7 @@ importers:
version: 4.10.2
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -3622,7 +3620,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -3689,7 +3687,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -4071,7 +4069,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -4177,7 +4175,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -4476,7 +4474,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -4781,7 +4779,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -4931,8 +4929,8 @@ importers:
specifier: ^3.1.1
version: 3.1.1
js-yaml:
- specifier: ^4.2.0
- version: 4.3.0
+ specifier: ^4.3.2
+ version: 4.3.2
jsonpath-rfc9535:
specifier: ^1.3.0
version: 1.3.0
@@ -5202,7 +5200,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -5593,7 +5591,7 @@ importers:
version: 5.108.4([email protected])([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -5764,8 +5762,8 @@ importers:
specifier: ^1.30.1
version: 1.38.10
js-yaml:
- specifier: ^4.2.0
- version: 4.3.0
+ specifier: ^4.3.2
+ version: 4.3.2
json-refs:
specifier: ^3.0.15
version: 3.0.15
@@ -5919,7 +5917,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -6218,7 +6216,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -6340,7 +6338,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -6776,7 +6774,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -7008,7 +7006,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -7565,7 +7563,7 @@ importers:
version: 5.108.4([email protected])([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -8022,7 +8020,7 @@ importers:
version:
5.108.4(@swc/[email protected](@swc/[email protected]))([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -8507,7 +8505,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -8543,7 +8541,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -8971,7 +8969,7 @@ importers:
version: 5.108.4([email protected])
webpack-cli:
specifier: ^7.2.1
- version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ version:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
webpack-dev-server:
specifier: ^5.2.5
version: 5.2.6([email protected])([email protected])([email protected])
@@ -18544,8 +18542,8 @@ packages:
resolution: {integrity:
sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==}
hasBin: true
- [email protected]:
- resolution: {integrity:
sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
+ [email protected]:
+ resolution: {integrity:
sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==}
hasBin: true
[email protected]:
@@ -23331,7 +23329,7 @@ packages:
engines: {node: '>=20.9.0'}
hasBin: true
peerDependencies:
- js-yaml: ^4.2.0
+ js-yaml: ^4.3.2
json5: ^2.2.3
toml: ^3.0.0 || ^4.0.0
webpack: ^5.101.0
@@ -25866,7 +25864,7 @@ snapshots:
globals: 13.24.0
ignore: 5.3.2
import-fresh: 3.3.1
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
minimatch: 3.1.5
strip-json-comments: 3.1.1
transitivePeerDependencies:
@@ -26287,7 +26285,7 @@ snapshots:
http-proxy-agent: 6.1.1
https-proxy-agent: 6.2.1
jose: 4.15.9
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
json-stable-stringify: 1.3.0
lodash: 4.18.1
scuid: 1.1.0
@@ -28935,7 +28933,7 @@ snapshots:
'@jsdevtools/ono': 7.1.3
'@types/json-schema': 7.0.15
call-me-maybe: 1.0.2
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
'@readme/[email protected]([email protected])':
dependencies:
@@ -30246,7 +30244,7 @@ snapshots:
'@textlint/types': 15.7.1
chalk: 4.1.2
debug: 4.4.3([email protected])
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
lodash: 4.18.1
pluralize: 2.0.0
string-width: 4.2.3
@@ -33209,7 +33207,7 @@ snapshots:
[email protected]:
dependencies:
import-fresh: 3.3.1
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
parse-json: 5.2.0
path-type: 4.0.0
@@ -33217,7 +33215,7 @@ snapshots:
dependencies:
env-paths: 2.2.1
import-fresh: 3.3.1
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
parse-json: 5.2.0
optionalDependencies:
typescript: 5.9.3
@@ -34524,7 +34522,7 @@ snapshots:
imurmurhash: 0.1.4
is-glob: 4.0.3
is-path-inside: 3.0.3
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
json-stable-stringify-without-jsonify: 1.0.1
levn: 0.4.1
lodash.merge: 4.6.2
@@ -36762,7 +36760,7 @@ snapshots:
argparse: 1.0.10
esprima: 4.0.1
- [email protected]:
+ [email protected]:
dependencies:
argparse: 2.0.1
@@ -37942,7 +37940,7 @@ snapshots:
find-up: 5.0.0
glob: 8.1.0
he: 1.2.0
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
log-symbols: 4.1.0
minimatch: 5.1.9
ms: 2.1.3
@@ -38490,7 +38488,7 @@ snapshots:
[email protected]:
dependencies:
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
mime: 3.0.0
prettier: 2.8.8
tiny-glob: 0.2.9
@@ -39458,7 +39456,7 @@ snapshots:
[email protected]:
dependencies:
debug: 4.4.3([email protected])
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
json5: 2.2.3
require-from-string: 2.0.2
transitivePeerDependencies:
@@ -39860,7 +39858,7 @@ snapshots:
[email protected]:
dependencies:
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
strip-bom: 4.0.0
[email protected]:
@@ -42198,7 +42196,7 @@ snapshots:
glob: 13.0.6
got: 14.6.6
hpagent: 1.2.0
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
mocha: 10.8.2
sanitize-filename: 1.6.4
selenium-webdriver: 4.46.0
@@ -42316,7 +42314,7 @@ snapshots:
- bufferutil
- utf-8-validate
-
[email protected]([email protected])([email protected])([email protected])([email protected])([email protected]):
+
[email protected]([email protected])([email protected])([email protected])([email protected])([email protected]):
dependencies:
'@discoveryjs/json-ext': 1.1.0
commander: 14.0.3
@@ -42328,7 +42326,7 @@ snapshots:
webpack: 5.108.4([email protected])([email protected])
webpack-merge: 6.0.1
optionalDependencies:
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
json5: 2.2.3
webpack-bundle-analyzer: 4.10.2
webpack-dev-server:
5.2.6([email protected])([email protected])([email protected])
@@ -42490,7 +42488,7 @@ snapshots:
ws: 8.21.1
optionalDependencies:
webpack: 5.108.4([email protected])([email protected])
- webpack-cli:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ webpack-cli:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
transitivePeerDependencies:
- bufferutil
- debug
@@ -42794,7 +42792,7 @@ snapshots:
watchpack: 2.5.2
webpack-sources: 3.5.1
optionalDependencies:
- webpack-cli:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ webpack-cli:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
transitivePeerDependencies:
- '@minify-html/node'
- '@swc/core'
@@ -42834,7 +42832,7 @@ snapshots:
watchpack: 2.5.2
webpack-sources: 3.5.1
optionalDependencies:
- webpack-cli:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ webpack-cli:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
transitivePeerDependencies:
- '@minify-html/node'
- '@swc/core'
@@ -42874,7 +42872,7 @@ snapshots:
watchpack: 2.5.2
webpack-sources: 3.5.1
optionalDependencies:
- webpack-cli:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ webpack-cli:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
transitivePeerDependencies:
- '@minify-html/node'
- '@swc/core'
@@ -42914,7 +42912,7 @@ snapshots:
watchpack: 2.5.2
webpack-sources: 3.5.1
optionalDependencies:
- webpack-cli:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
+ webpack-cli:
7.2.1([email protected])([email protected])([email protected])([email protected])([email protected])
transitivePeerDependencies:
- '@minify-html/node'
- '@swc/core'
@@ -43093,7 +43091,7 @@ snapshots:
[email protected]:
dependencies:
- js-yaml: 4.3.0
+ js-yaml: 4.3.2
write-file-atomic: 3.0.3
[email protected]:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 771f5b42852..1c4829f991f 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -5,12 +5,9 @@ packages:
overrides:
# CVE-2026-15195: Prototype pollution in Pointer.set. Fixed in 15.3.6.
"@apidevtools/swagger-parser>@apidevtools/json-schema-ref-parser": "^15.3.6"
- # GHSA-h67p-54hq-rp68: js-yaml 3.x prototype-pollution/ReDoS — upgrade
transitive consumers to patched 3.15.0
- "@istanbuljs/load-nyc-config>js-yaml": "^3.15.0"
"cross-spawn": "^7.0.6"
"d3-color": "3.1.0"
"graphql": "14.3.1"
- "json-refs>js-yaml": "^3.15.0"
# CVE-2026-33750: Fix security vulnerability in brace-expansion
# Overriding transitive dependency until minimatch updates to patched
brace-expansion version
"minimatch@^3>brace-expansion": "1.1.18"
@@ -22,10 +19,10 @@ overrides:
"path-to-regexp@^0": "0.1.13"
"react-dropzone": "^11.4.2"
"superagent": "10.2.2"
- "xmlbuilder2>js-yaml": "^3.15.0"
- # GHSA-h67p-54hq-rp68: Fix ReDoS / prototype-pollution vulnerability in
js-yaml
- # Upgrade all consumers of js-yaml@^4 to the patched 4.2.0 release
- "js-yaml@^4": "^4.2.0"
+ # CVE-2026-84375: merge-key resource limit bypass causes prolonged CPU
consumption on untrusted YAML
+ # Overriding transitive dependency until all parents update to patched
js-yaml versions
+ "js-yaml@^3": "^3.15.2"
+ "js-yaml@^4": "^4.3.2"
"minimatch@^3": "3.1.5"
"minimatch@^9": "9.0.8"
"minimatch@^10": "10.2.1"
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
