This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/trunk by this push:
new 4b83b016c4 Bump js-yaml to 4.3.0 and brace-expansion to 2.1.2
4b83b016c4 is described below
commit 4b83b016c48b8ad45567da732295865092ea595a
Author: Jacopo Cappellato <[email protected]>
AuthorDate: Wed Jul 22 08:38:09 2026 +0200
Bump js-yaml to 4.3.0 and brace-expansion to 2.1.2
These are transitive dependencies introduced via redoc 2.5.3. The upgrade
fixes 2 security alerts by Dependabot.
---
framework/rest-api/package-lock.json | 12 ++++++------
framework/rest-api/package.json | 3 ++-
2 files changed, 8 insertions(+), 7 deletions(-)
diff --git a/framework/rest-api/package-lock.json
b/framework/rest-api/package-lock.json
index f1cebf8e39..653ce81cbe 100644
--- a/framework/rest-api/package-lock.json
+++ b/framework/rest-api/package-lock.json
@@ -176,9 +176,9 @@
"license": "MIT"
},
"node_modules/brace-expansion": {
- "version": "2.1.1",
- "resolved":
"https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.1.tgz";,
- "integrity":
"sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA==",
+ "version": "2.1.2",
+ "resolved":
"https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz";,
+ "integrity":
"sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==",
"license": "MIT",
"dependencies": {
"balanced-match": "^1.0.0"
@@ -474,9 +474,9 @@
"license": "MIT"
},
"node_modules/js-yaml": {
- "version": "4.2.0",
- "resolved":
"https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz";,
- "integrity":
"sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+ "version": "4.3.0",
+ "resolved":
"https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz";,
+ "integrity":
"sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
"funding": [
{
"type": "github",
diff --git a/framework/rest-api/package.json b/framework/rest-api/package.json
index ddd0b580c0..ecb125472d 100644
--- a/framework/rest-api/package.json
+++ b/framework/rest-api/package.json
@@ -8,6 +8,7 @@
"redoc": "2.5.3"
},
"overrides": {
- "js-yaml": "4.2.0"
+ "js-yaml": "4.3.0",
+ "brace-expansion": "2.1.2"
}
}
