This is an automated email from the ASF dual-hosted git repository.
manirajv06 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/yunikorn-web.git
The following commit(s) were added to refs/heads/master by this push:
new bd32ebe [YUNIKORN-3339] web UI: upgrade pnpm for cve fixes (#280)
bd32ebe is described below
commit bd32ebe50f8020f888cca6fde941b3c33b264318
Author: Wilfred Spiegelenburg <[email protected]>
AuthorDate: Wed Jul 29 09:54:12 2026 +0530
[YUNIKORN-3339] web UI: upgrade pnpm for cve fixes (#280)
dependabot tracks 9 security issues in pnpm 11.5.0 which is used in the
current web UI build.
Dependabot cannot be used for this change
Closes: #280
Signed-off-by: Manikandan R <[email protected]>
---
Makefile | 2 +-
pnpm-lock.yaml | 76 +++++++++++++++++++++++++++++-----------------------------
2 files changed, 39 insertions(+), 39 deletions(-)
diff --git a/Makefile b/Makefile
index 9e95b00..88e86a1 100644
--- a/Makefile
+++ b/Makefile
@@ -138,7 +138,7 @@ NPM := npm
endif
# pnpm
-PNPM_VERSION=11.5
+PNPM_VERSION=11.17
PNPM_BIN=$(TOOLS_DIR)/bin/pnpm
# @angular/cli
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d680dfc..c6f3c47 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -7,52 +7,52 @@ importers:
configDependencies: {}
packageManagerDependencies:
'@pnpm/exe':
- specifier: 11.5.0
- version: 11.5.0
+ specifier: 11.17.0
+ version: 11.17.0
pnpm:
- specifier: 11.5.0
- version: 11.5.0
+ specifier: 11.17.0
+ version: 11.17.0
packages:
- '@pnpm/[email protected]':
- resolution: {integrity:
sha512-4hzOXq1HHrNPjwI8k1rt7Ot/Yrdx1JX3pn/L/M95ii1gid1Q6ZK6dVg4+gbSgUdPsYmYDZ4/Yfc0A7vd5C0ndg==}
+ '@pnpm/[email protected]':
+ resolution: {integrity:
sha512-lZWoAn5iAmIX0oiez/CeXIhVo1VGJn78VdQRTHFJWcldN/FjvfN1DKYFLeZHKIyZ0fKTjfojruVJhzOBD1Ribg==}
hasBin: true
- '@pnpm/[email protected]':
- resolution: {integrity:
sha512-NV9HdzzCB0epuI9LqZZeTaqjH3OweNQSQCS76GzEkFxJHS9e5Gvu7tgex91gxVL7bCZ+R4yr/3d3yexBFtr2ug==}
+ '@pnpm/[email protected]':
+ resolution: {integrity:
sha512-SKMkhu6HHgWbN8JfhK+QCHnky62EASkD8Ip6krwWYtHWBFKDz/nAFRf2n6YjuqY/aZMGZmP6Phn1woUe7xpGkA==}
cpu: [arm64]
os: [linux]
- '@pnpm/[email protected]':
- resolution: {integrity:
sha512-vH83rRx4iPk/bwm9pBVCn+5hXbcQI66I/4zk6Vc09SusJgTqOdbN4U6VhMcGIqSEdr901ksYGCyIbMv7f6Guew==}
+ '@pnpm/[email protected]':
+ resolution: {integrity:
sha512-2ua1+O9zFrebCMIcTSxAIG0w+k01PqYkFzMAvTtf7zEcmkSO0PiDvnhEtVqziXT8CVDSIILPYxx29uhAJzupzA==}
cpu: [x64]
os: [linux]
- '@pnpm/[email protected]':
- resolution: {integrity:
sha512-2nOnMW1rSwGv22q2yZz1HlGT3ly/Ij8wUlX0NB4n+Krx7nETRHA3MgWsbkVejxHknDcTulRVudAghuX9rgrXcw==}
+ '@pnpm/[email protected]':
+ resolution: {integrity:
sha512-lf0AqTzwcDZMesK5bl3IElOrmiHFqrnGN24Z974smIZIlXQq0h8vkda8UlvDYxIyPkDq/+XmOGI4qAfc33Fcow==}
cpu: [arm64]
os: [linux]
libc: [musl]
- '@pnpm/[email protected]':
- resolution: {integrity:
sha512-ONOC1Mg0JusHtjzkRlre9di1QO+GAjy4HP7jMjDx21yGhrSheNdUweTXbekMH1EflRd19kTU6d8M3zewJFPtVg==}
+ '@pnpm/[email protected]':
+ resolution: {integrity:
sha512-+CO5KvfRcAJCm5a1A1sDI7/FKplJW1dHxdY+6xv8F53h8F4Mvk9839HoQpv1NtQMFxtFXOMcRm1TmdQEIBz3FQ==}
cpu: [x64]
os: [linux]
libc: [musl]
- '@pnpm/[email protected]':
- resolution: {integrity:
sha512-od0ALdTxs4A7s5vAH5q2l2phzCJb98+PVOW1rq7BGpWGeYxQ+EwvL+vq0KaO6iLsn/eVVoncCkgZ/k6QNYuTgw==}
+ '@pnpm/[email protected]':
+ resolution: {integrity:
sha512-EQHPo5DLYvJ3kl9f5uSTyq9AvB1IYPmcDQXeU7CN0B74pZoJyKqsiPfuAQ/vr+eKD5ecbYL6jmbhlb5gWqjENA==}
cpu: [arm64]
os: [darwin]
- '@pnpm/[email protected]':
- resolution: {integrity:
sha512-9HqbI80FjVVqFx4+EPxYYNfeP9Sx69W6kYqUDvOJn9G7RJ/2NNNQ898cVHTMpXlW1/PrMEcijmdpa/NjZIrWiQ==}
+ '@pnpm/[email protected]':
+ resolution: {integrity:
sha512-FPws2ER3+0h4EHS9UxEuAgAXgsUghSdsSjzSgDps9y9fvWl5q1HVVpixlezXf/roca8j9TPxnkGPo8+xaIWNRw==}
cpu: [arm64]
os: [win32]
- '@pnpm/[email protected]':
- resolution: {integrity:
sha512-Q89CQqFGAsWmfvHZs5Kbbar45q3GBYtfAdPUCiVMVNJoLi3dsBS2LCvUq8ak3AufkFDaJBpvhaFcDP2M1NXr3A==}
+ '@pnpm/[email protected]':
+ resolution: {integrity:
sha512-4YhOi214A9Ou9Zfg93oCEhU6a1vizebiqVAlEdYNGmd3zeyf7wv2K0Ek8oDQpSX32QXEGIhvF3Y/Ss1EDI7DFg==}
cpu: [x64]
os: [win32]
@@ -116,45 +116,45 @@ packages:
resolution: {integrity:
sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
engines: {node: '>=8'}
- [email protected]:
- resolution: {integrity:
sha512-2/zE+Bz0hZev1Lw5H/3xLBHxqfuDo5W/prCi2cwv2P/rr9scy9UpYyFT95OQTCYVt/Cf4aNFRz/Rw1hFFyqOsQ==}
+ [email protected]:
+ resolution: {integrity:
sha512-zKPOozKtJUu4QUX5ZtGfSHlhUhA0b8kseaBH8joNezzKPDeS8AdrofGDHSd++88KkRmzGppg7Kf7PWIx8zHvcg==}
engines: {node: '>=22.13'}
hasBin: true
snapshots:
- '@pnpm/[email protected]':
+ '@pnpm/[email protected]':
dependencies:
'@reflink/reflink': 0.1.19
detect-libc: 2.1.2
optionalDependencies:
- '@pnpm/linux-arm64': 11.5.0
- '@pnpm/linux-x64': 11.5.0
- '@pnpm/linuxstatic-arm64': 11.5.0
- '@pnpm/linuxstatic-x64': 11.5.0
- '@pnpm/macos-arm64': 11.5.0
- '@pnpm/win-arm64': 11.5.0
- '@pnpm/win-x64': 11.5.0
+ '@pnpm/linux-arm64': 11.17.0
+ '@pnpm/linux-x64': 11.17.0
+ '@pnpm/linuxstatic-arm64': 11.17.0
+ '@pnpm/linuxstatic-x64': 11.17.0
+ '@pnpm/macos-arm64': 11.17.0
+ '@pnpm/win-arm64': 11.17.0
+ '@pnpm/win-x64': 11.17.0
- '@pnpm/[email protected]':
+ '@pnpm/[email protected]':
optional: true
- '@pnpm/[email protected]':
+ '@pnpm/[email protected]':
optional: true
- '@pnpm/[email protected]':
+ '@pnpm/[email protected]':
optional: true
- '@pnpm/[email protected]':
+ '@pnpm/[email protected]':
optional: true
- '@pnpm/[email protected]':
+ '@pnpm/[email protected]':
optional: true
- '@pnpm/[email protected]':
+ '@pnpm/[email protected]':
optional: true
- '@pnpm/[email protected]':
+ '@pnpm/[email protected]':
optional: true
'@reflink/[email protected]':
@@ -194,7 +194,7 @@ snapshots:
[email protected]: {}
- [email protected]: {}
+ [email protected]: {}
---
lockfileVersion: '9.0'
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
