Purushottam Sinha created FLINK-40590:
-----------------------------------------
Summary: Web dashboard: Update Angular and monaco-editor to latest
patch versions
Key: FLINK-40590
URL: https://issues.apache.org/jira/browse/FLINK-40590
Project: Flink
Issue Type: Improvement
Components: Runtime / Web Frontend
Reporter: Purushottam Sinha
h3. Problem
flink-runtime-web/web-dashboard's npm dependencies are behind on patch
versions. npm audit flags a number of known issues in the dependency tree that
are resolved in newer releases.
h3. Evidence
* flink-runtime-web/web-dashboard/package.json: @angular/* pinned to ^21.2.17,
monaco-editor pinned to ^0.55.1
* npm audit (public registry) reports findings against the current versions;
all clear on the latest patch releases
h3. Proposed fix
* Bump @angular/* to 21.2.22, monaco-editor to 0.56.0 (latest available);
regenerate META-INF/NOTICE
* Run npm audit fix for remaining fixable transitive dev-tooling dependencies
* One transitive dependency bundled by monaco-editor can't be fully updated
until its next upstream release — track as a follow-up, revisit when a newer
monaco-editor ships
h3. Acceptance
* npm audit on flink-runtime-web/web-dashboard reports no unresolved
high/critical findings
* npm run ci-check (lint, test, build) passes
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
