This is an automated email from the ASF dual-hosted git repository.

jacopoc pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git

commit 3d30321ed0367a9e5e4ff976eb9bbfbf3f806cef
Author: Jacopo Cappellato <[email protected]>
AuthorDate: Tue Jun 23 15:15:19 2026 +0200

    Improved: Update js-yaml to version 4.2.0 to resolve a security warning
---
 framework/rest-api/package-lock.json | 16 +++++++++++++---
 framework/rest-api/package.json      |  3 +++
 2 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/framework/rest-api/package-lock.json 
b/framework/rest-api/package-lock.json
index b8551be0a8..f1cebf8e39 100644
--- a/framework/rest-api/package-lock.json
+++ b/framework/rest-api/package-lock.json
@@ -474,9 +474,19 @@
             "license": "MIT"
         },
         "node_modules/js-yaml": {
-            "version": "4.1.1",
-            "resolved": 
"https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz";,
-            "integrity": 
"sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
+            "version": "4.2.0",
+            "resolved": 
"https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz";,
+            "integrity": 
"sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+            "funding": [
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/puzrin";
+                },
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/nodeca";
+                }
+            ],
             "license": "MIT",
             "dependencies": {
                 "argparse": "^2.0.1"
diff --git a/framework/rest-api/package.json b/framework/rest-api/package.json
index 4f63b215a2..ddd0b580c0 100644
--- a/framework/rest-api/package.json
+++ b/framework/rest-api/package.json
@@ -6,5 +6,8 @@
     "dependencies": {
         "swagger-ui-dist": "5.32.8",
         "redoc": "2.5.3"
+    },
+    "overrides": {
+        "js-yaml": "4.2.0"
     }
 }

Reply via email to