spuru9 opened a new pull request, #29126:
URL: https://github.com/apache/flink/pull/29126

   ## What is the purpose of the change
   
   Bring `flink-runtime-web/web-dashboard`'s npm dependencies up to date — 
several packages in the dependency tree have `npm audit` findings that are 
resolved in newer releases.
   
   ## Brief change log
   
     - Bump `@angular/*` (animations, common, compiler, core, forms, 
platform-browser, platform-browser-dynamic, router, build, compiler-cli) from 
21.2.17 to 21.2.22
     - Bump `monaco-editor` from 0.55.1 to 0.56.0 (latest available), which 
also updates its bundled `dompurify`
     - Run `npm audit fix` to update remaining fixable transitive dev-tooling 
dependencies
     - Regenerate `flink-runtime-web/src/main/resources/META-INF/NOTICE` to 
match the new dependency versions
     - One transitive dependency bundled by `monaco-editor` can't be fully 
updated until its next upstream release; will revisit then
   
   ## Verifying this change
   
   This change is already covered by existing tests. Verified with `npm run 
ci-check` (lint, unit tests, production build) in 
`flink-runtime-web/web-dashboard`, all passing.
   
   ## Does this pull request potentially affect one of the following parts:
   
     - Dependencies (does it add or upgrade a dependency): yes (npm 
dependencies only, no Java/Maven dependency changes)
     - The public API, i.e., is any changed class annotated with 
`@Public(Evolving)`: no
     - The serializers: no
     - The runtime per-record code paths (performance sensitive): no
     - Anything that affects deployment or recovery: JobManager (and its 
components), Checkpointing, Kubernetes/Yarn, ZooKeeper: no
     - The S3 file system connector: no
   
   ## Documentation
   
     - Does this pull request introduce a new feature? no
     - If yes, how is the feature documented? not applicable
   
   ---
   
   ##### Was generative AI tooling used to co-author this PR?
   
   - [X] Yes (please specify the tool below)
   
   Generated-by: Claude Code (claude-sonnet-5)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to