[
https://issues.apache.org/jira/browse/FLINK-39518?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Purushottam Sinha updated FLINK-39518:
--------------------------------------
Description: (was: {{npm audit}} in
{{flink-runtime-web/web-dashboard}} reports 55
advisories (2 Critical, 30 High, 17 Moderate, 6 Low) as of 2026-04-22.
All findings are in dev/build tooling — none ship in the runtime —
but they show up in downstream {{npm audit}} runs and block release
sign-off for packagers.
Goal: drive {{npm audit}} to zero without breaking build, lint, or the
dashboard.
Split by risk:
* FLINK-39517 — lockfile-only fixes ({{npm audit fix}}, no major bumps)
* FLINK-39518 — SemVer-major upgrades for the rest )
> Upgrade web-dashboard dependencies to major remaining npm advisories
> --------------------------------------------------------------------
>
> Key: FLINK-39518
> URL: https://issues.apache.org/jira/browse/FLINK-39518
> Project: Flink
> Issue Type: Sub-task
> Components: Runtime / Web Frontend
> Reporter: Purushottam Sinha
> Priority: Minor
> Attachments: DEPENDENCY_UPGRADES.md
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
