This is an automated email from the ASF dual-hosted git repository. sergehuber pushed a commit to branch UNOMI-875-pr2-dependency-hygiene in repository https://gitbox.apache.org/repos/asf/unomi.git
commit 858354636d97358420e527b699df65e71f1065f7 Author: Serge Huber <[email protected]> AuthorDate: Wed Jul 1 13:31:10 2026 +0200 chore(graphql-ui): pin semver transitive dependency to 5.7.2 (E1). Addresses Dependabot #634 in the GraphiQL UI module. --- graphql/graphql-ui/package.json | 11 ++++++----- graphql/graphql-ui/yarn.lock | 23 ++++------------------- 2 files changed, 10 insertions(+), 24 deletions(-) diff --git a/graphql/graphql-ui/package.json b/graphql/graphql-ui/package.json index 2c9e99b17..11a6578a1 100644 --- a/graphql/graphql-ui/package.json +++ b/graphql/graphql-ui/package.json @@ -23,11 +23,12 @@ "react": "^18.3.1", "react-dom": "^18.3.1" }, - "resolutions" : { - "**/terser" : "4.8.1", - "**/postcss" : "7.0.39", - "**/ansi-regex" : "4.1.1", - "**/minimist" : "1.2.6" + "resolutions": { + "**/terser": "4.8.1", + "**/postcss": "7.0.39", + "**/ansi-regex": "4.1.1", + "**/minimist": "1.2.6", + "**/semver": "5.7.2" }, "devDependencies": { "@babel/core": "^7.10.4", diff --git a/graphql/graphql-ui/yarn.lock b/graphql/graphql-ui/yarn.lock index ef1f31db1..324a5b691 100644 --- a/graphql/graphql-ui/yarn.lock +++ b/graphql/graphql-ui/yarn.lock @@ -2869,25 +2869,10 @@ schema-utils@^4.0.0: ajv-formats "^2.1.1" ajv-keywords "^5.1.0" [email protected]: - version "7.0.0" - resolved "https://registry.npmjs.org/semver/-/semver-7.0.0.tgz#5f3ca35761e47e05b206c6daff2cf814f0316b8e"; - integrity sha512-+GB6zVA9LWh6zovYQLALHwv5rb2PHGlJi3lfiqIHxR0uuwCgefcOJc59v9fv1w8GbStwxuuqqAjI9NMAOOgq1A== - -semver@^5.4.1, semver@^5.5.0, semver@^5.6.0: - version "5.7.1" - resolved "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz#a954f931aeba508d307bbf069eff0c01c96116f7"; - integrity sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ== - -semver@^6.0.0, semver@^6.3.0: - version "6.3.0" - resolved "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz#ee0a64c8af5e8ceea67687b133761e1becbd1d3d"; - integrity sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw== - -semver@^7.5.4: - version "7.6.2" - resolved "https://registry.yarnpkg.com/semver/-/semver-7.6.2.tgz#1e3b34759f896e8f14d6134732ce798aeb0c6e13"; - integrity sha512-FNAIBWCx9qcRhoHcgcJ0gvU7SN1lYU2ZXuSfl04bSC5OpvDHFyJCjdNHomPXxjQlCBU67YW64PzY7/VIEH7F2w== [email protected], [email protected], semver@^5.4.1, semver@^5.5.0, semver@^5.6.0, semver@^6.0.0, semver@^6.3.0, semver@^7.5.4: + version "5.7.2" + resolved "https://registry.yarnpkg.com/semver/-/semver-5.7.2.tgz#48d55db737c3287cd4835e17fa13feace1c41ef8"; + integrity sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g== serialize-javascript@^6.0.1: version "6.0.2"
