This is an automated email from the ASF dual-hosted git repository.
xuang7 pushed a commit to branch release/v1.2
in repository https://gitbox.apache.org/repos/asf/texera.git
The following commit(s) were added to refs/heads/release/v1.2 by this push:
new ba32d7a09b fix(deps, frontend, v1.2): update dependency ajv to v8.18.0
[security] (#6984)
ba32d7a09b is described below
commit ba32d7a09befa8b6fb637b46211dc0cfb638b564
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Wed Jul 29 11:01:06 2026 -0700
fix(deps, frontend, v1.2): update dependency ajv to v8.18.0 [security]
(#6984)
### What changes were proposed in this PR?
Automated backport of #6908 to `release/v1.2`.
Source: 469e8f031c9b95282ff2cab1388f6c95f4a0045d ยท [automation
run](https://github.com/apache/texera/actions/runs/30414369328)
### Any related issues, documentation, discussions?
Backport of #6908. Fixes CVE-2025-69873 (see #6908 for details).
### How was this PR tested?
Release-branch CI runs on this branch once the conflicts are resolved
and this PR is marked ready for review.
### Was this PR authored or co-authored using generative AI tooling?
No.
---------
Co-authored-by: Mend Renovate <[email protected]>
Co-authored-by: Xinyuan Lin <[email protected]>
Co-authored-by: Claude Fable 5 <[email protected]>
Co-authored-by: Yicong Huang
<[email protected]>
---
frontend/LICENSE-binary | 10 ++--------
frontend/package.json | 2 +-
frontend/yarn.lock | 14 +-------------
3 files changed, 4 insertions(+), 22 deletions(-)
diff --git a/frontend/LICENSE-binary b/frontend/LICENSE-binary
index 30dafa2dba..9b2488ba70 100644
--- a/frontend/LICENSE-binary
+++ b/frontend/LICENSE-binary
@@ -271,7 +271,7 @@ Angular / npm packages:
- @ngx-formly/[email protected]
- @ngx-formly/[email protected]
- @vscode/[email protected]
- - [email protected]
+ - [email protected]
- [email protected]
- [email protected]
- [email protected]
@@ -333,15 +333,9 @@ Dependencies under the BSD 3-Clause License
Angular / npm packages:
- [email protected]
+ - [email protected]
- [email protected]
---------------------------------------------------------------------------------
-Dependencies under the BSD 2-Clause License
---------------------------------------------------------------------------------
-
-Angular / npm packages:
- - [email protected]
-
--------------------------------------------------------------------------------
Dependencies under the ISC License
--------------------------------------------------------------------------------
diff --git a/frontend/package.json b/frontend/package.json
index 49f0c0b7cf..cde064aee2 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -42,7 +42,7 @@
"@ngx-formly/core": "7.1.0",
"@ngx-formly/ng-zorro-antd": "7.1.0",
"ai": "5.0.93",
- "ajv": "8.10.0",
+ "ajv": "8.18.0",
"concaveman": "2.0.0",
"d3-shape": "2.1.0",
"dagre": "0.8.5",
diff --git a/frontend/yarn.lock b/frontend/yarn.lock
index 7f632e5f3a..53f34eb37e 100644
--- a/frontend/yarn.lock
+++ b/frontend/yarn.lock
@@ -7149,18 +7149,6 @@ __metadata:
languageName: node
linkType: hard
-"ajv@npm:8.10.0":
- version: 8.10.0
- resolution: "ajv@npm:8.10.0"
- dependencies:
- fast-deep-equal: "npm:^3.1.1"
- json-schema-traverse: "npm:^1.0.0"
- require-from-string: "npm:^2.0.2"
- uri-js: "npm:^4.2.2"
- checksum:
10c0/cc2c02a89289420ea96720f728d39d4d19dbcb2c1d0363481d0a9973282b69d94c8c1a02f4c424a89a1bd888e6049f87d0f82d21b5d056546cdbb364dd043f23
- languageName: node
- linkType: hard
-
"ajv@npm:8.18.0":
version: 8.18.0
resolution: "ajv@npm:8.18.0"
@@ -10635,7 +10623,7 @@ __metadata:
"@vitest/browser-playwright": "npm:4.1.9"
"@vitest/coverage-v8": "npm:4.1.9"
ai: "npm:5.0.93"
- ajv: "npm:8.10.0"
+ ajv: "npm:8.18.0"
buffer: "npm:5.7.1"
build-number-generator: "npm:3.1.0"
concaveman: "npm:2.0.0"
