From 98c05d91e418d002e122caf6c96ae2076dca1733 Mon Sep 17 00:00:00 2001 From: Chinmaya Date: Mon, 10 Aug 2026 10:58:09 +0530 Subject: [PATCH 1/4] =?UTF-8?q?LTS-4695:=20bump=20brace-expansion=20to=202?= =?UTF-8?q?.1.4=20(override)=20=E2=80=94=20GHSA-3jxr-9vmj-r5cp=20DoS?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- package-lock.json | 16 ++++++++-------- package.json | 1 + 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4378d7a..09af721 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1448,9 +1448,9 @@ } }, "node_modules/brace-expansion": { - "version": "2.1.1", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.1.tgz", - "integrity": "sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA==", + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz", + "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==", "dev": true, "license": "MIT", "dependencies": { @@ -7200,9 +7200,9 @@ } }, "brace-expansion": { - "version": "2.1.1", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.1.tgz", - "integrity": "sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA==", + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz", + "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==", "dev": true, "requires": { "balanced-match": "^1.0.0" @@ -9090,7 +9090,7 @@ "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==", "dev": true, "requires": { - "brace-expansion": "^2.0.2" + "brace-expansion": "2.1.4" } }, "minimist": { @@ -9624,7 +9624,7 @@ "integrity": "sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw==", "dev": true, "requires": { - "brace-expansion": "^2.0.1" + "brace-expansion": "2.1.4" } } } diff --git a/package.json b/package.json index 9481a2f..0a85ab2 100644 --- a/package.json +++ b/package.json @@ -20,6 +20,7 @@ "fast-uri": "3.1.4", "js-yaml@3": "3.15.0", "js-yaml@4": "4.3.0", + "brace-expansion": "2.1.4", "tmp": "0.2.7", "protobufjs": "7.6.4", "glob@7.2.3": { From 77af7fe909d0faaaf5856f63ca1a79377616870e Mon Sep 17 00:00:00 2001 From: Chinmaya Date: Mon, 10 Aug 2026 11:02:15 +0530 Subject: [PATCH 2/4] LTS-4695/4696: bump brace-expansion to 2.1.4 and fast-uri to 3.1.5 (overrides) --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 09af721..b8852e2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2556,9 +2556,9 @@ "dev": true }, "node_modules/fast-uri": { - "version": "3.1.4", - "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz", - "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==", + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz", + "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==", "dev": true, "funding": [ { @@ -6914,7 +6914,7 @@ "dev": true, "requires": { "fast-deep-equal": "^3.1.3", - "fast-uri": "3.1.4", + "fast-uri": "3.1.5", "json-schema-traverse": "^1.0.0", "require-from-string": "^2.0.2" } @@ -7991,9 +7991,9 @@ "dev": true }, "fast-uri": { - "version": "3.1.4", - "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz", - "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==", + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz", + "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==", "dev": true }, "fecha": { diff --git a/package.json b/package.json index 0a85ab2..92f98b5 100644 --- a/package.json +++ b/package.json @@ -17,7 +17,7 @@ "jws": "4.0.1", "tar-fs": "3.1.1", "basic-ftp": "^5.3.1", - "fast-uri": "3.1.4", + "fast-uri": "3.1.5", "js-yaml@3": "3.15.0", "js-yaml@4": "4.3.0", "brace-expansion": "2.1.4", From 8a0f43f7a66fb855bb0631987e4b7f391f28f519 Mon Sep 17 00:00:00 2001 From: Chinmaya Date: Mon, 10 Aug 2026 11:11:52 +0530 Subject: [PATCH 3/4] LTS-4695/4696/4697: bump brace-expansion 2.1.4, fast-uri 3.1.5, socks 2.8.9 + ip-address 10.4.0 (overrides) --- package-lock.json | 54 ++++++++++++++++------------------------------- package.json | 2 ++ 2 files changed, 20 insertions(+), 36 deletions(-) diff --git a/package-lock.json b/package-lock.json index b8852e2..bab3dc5 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3525,14 +3525,11 @@ "dev": true }, "node_modules/ip-address": { - "version": "9.0.5", - "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-9.0.5.tgz", - "integrity": "sha512-zHtQzGojZXTwZTHQqra+ETKd4Sn3vgi7uBmlPoXVWZqYvuKmtI0l/VZTjqGmJY9x88GGOaZ9+G9ES8hC4T4X8g==", + "version": "10.4.0", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.4.0.tgz", + "integrity": "sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==", "dev": true, - "dependencies": { - "jsbn": "1.1.0", - "sprintf-js": "^1.1.3" - }, + "license": "MIT", "engines": { "node": ">= 12" } @@ -3787,12 +3784,6 @@ "js-yaml": "4.x" } }, - "node_modules/jsbn": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/jsbn/-/jsbn-1.1.0.tgz", - "integrity": "sha512-4bYVV3aAMtDTTu4+xsDYa6sy9GyJ69/amsu9sYF2zqjiEoZA5xJi3BrfX3uY+/IekIu7MwdObdbDWpoZdBv3/A==", - "dev": true - }, "node_modules/jsep": { "version": "1.4.0", "resolved": "https://registry.npmjs.org/jsep/-/jsep-1.4.0.tgz", @@ -5223,12 +5214,13 @@ } }, "node_modules/socks": { - "version": "2.8.6", - "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.6.tgz", - "integrity": "sha512-pe4Y2yzru68lXCb38aAqRf5gvN8YdjP1lok5o0J7BOHljkyCGKVz7H3vpVIXKD27rj2giOJ7DwVyk/GWrPHDWA==", + "version": "2.8.9", + "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.9.tgz", + "integrity": "sha512-LJhUYUvItdQ0LkJTmPeaEObWXAqFyfmP85x0tch/ez9cahmhlBBLbIqDFnvBnUJGagb0JbIQrkBs1wJ+yRYpEw==", "dev": true, + "license": "MIT", "dependencies": { - "ip-address": "^9.0.5", + "ip-address": "^10.1.1", "smart-buffer": "^4.2.0" }, "engines": { @@ -8663,14 +8655,10 @@ "dev": true }, "ip-address": { - "version": "9.0.5", - "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-9.0.5.tgz", - "integrity": "sha512-zHtQzGojZXTwZTHQqra+ETKd4Sn3vgi7uBmlPoXVWZqYvuKmtI0l/VZTjqGmJY9x88GGOaZ9+G9ES8hC4T4X8g==", - "dev": true, - "requires": { - "jsbn": "1.1.0", - "sprintf-js": "^1.1.3" - } + "version": "10.4.0", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.4.0.tgz", + "integrity": "sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==", + "dev": true }, "is-ci": { "version": "3.0.1", @@ -8850,12 +8838,6 @@ "esprima": "^4.0.1" } }, - "jsbn": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/jsbn/-/jsbn-1.1.0.tgz", - "integrity": "sha512-4bYVV3aAMtDTTu4+xsDYa6sy9GyJ69/amsu9sYF2zqjiEoZA5xJi3BrfX3uY+/IekIu7MwdObdbDWpoZdBv3/A==", - "dev": true - }, "jsep": { "version": "1.4.0", "resolved": "https://registry.npmjs.org/jsep/-/jsep-1.4.0.tgz", @@ -9867,12 +9849,12 @@ "dev": true }, "socks": { - "version": "2.8.6", - "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.6.tgz", - "integrity": "sha512-pe4Y2yzru68lXCb38aAqRf5gvN8YdjP1lok5o0J7BOHljkyCGKVz7H3vpVIXKD27rj2giOJ7DwVyk/GWrPHDWA==", + "version": "2.8.9", + "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.9.tgz", + "integrity": "sha512-LJhUYUvItdQ0LkJTmPeaEObWXAqFyfmP85x0tch/ez9cahmhlBBLbIqDFnvBnUJGagb0JbIQrkBs1wJ+yRYpEw==", "dev": true, "requires": { - "ip-address": "^9.0.5", + "ip-address": "10.4.0", "smart-buffer": "^4.2.0" } }, @@ -9884,7 +9866,7 @@ "requires": { "agent-base": "^7.1.2", "debug": "^4.3.4", - "socks": "^2.8.3" + "socks": "2.8.9" }, "dependencies": { "agent-base": { diff --git a/package.json b/package.json index 92f98b5..c8351f8 100644 --- a/package.json +++ b/package.json @@ -21,6 +21,8 @@ "js-yaml@3": "3.15.0", "js-yaml@4": "4.3.0", "brace-expansion": "2.1.4", + "socks": "2.8.9", + "ip-address": "10.4.0", "tmp": "0.2.7", "protobufjs": "7.6.4", "glob@7.2.3": { From 3f304d305f6e36695d2970cee505ef005b3a9eae Mon Sep 17 00:00:00 2001 From: Chinmaya Date: Mon, 10 Aug 2026 11:20:07 +0530 Subject: [PATCH 4/4] LTS-4695/4696/4697/4698: bump brace-expansion 2.1.4, fast-uri 3.1.5, socks 2.8.9 + ip-address 10.4.0, js-yaml 3.15.1/4.3.1 (overrides) --- package-lock.json | 30 +++++++++++++++--------------- package.json | 4 ++-- 2 files changed, 17 insertions(+), 17 deletions(-) diff --git a/package-lock.json b/package-lock.json index bab3dc5..df017d3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3712,9 +3712,9 @@ } }, "node_modules/js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "dev": true, "funding": [ { @@ -3753,9 +3753,9 @@ } }, "node_modules/js-yaml-cloudformation-schema/node_modules/js-yaml": { - "version": "3.15.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", - "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, "license": "MIT", "dependencies": { @@ -6531,7 +6531,7 @@ "form-data": "^4.0.0", "hpagent": "^1.2.0", "isomorphic-ws": "^5.0.0", - "js-yaml": "4.3.0", + "js-yaml": "4.3.1", "jsonpath-plus": "^10.3.0", "node-fetch": "^2.6.9", "openid-client": "^6.1.3", @@ -7247,7 +7247,7 @@ "got": "^11.8.6", "https-proxy-agent": "^5.0.1", "jest-worker": "^28.1.0", - "js-yaml": "4.3.0", + "js-yaml": "4.3.1", "js-yaml-cloudformation-schema": "^1.0.0", "js-yaml-js-types": "^1.0.1", "lodash": "^4.18.0", @@ -8785,9 +8785,9 @@ "dev": true }, "js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "dev": true, "requires": { "argparse": "^2.0.1" @@ -8799,7 +8799,7 @@ "integrity": "sha512-eokVVPLsjLFuuCRQWIIaE5fX7qPUNRAAmJFXSvtzUnJcdNS0ZtAPdaFcwCrTHM+owGcBR82rlpd0b6bu8pFwQA==", "dev": true, "requires": { - "js-yaml": "3.15.0" + "js-yaml": "3.15.1" }, "dependencies": { "argparse": { @@ -8812,9 +8812,9 @@ } }, "js-yaml": { - "version": "3.15.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", - "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, "requires": { "argparse": "^1.0.7", diff --git a/package.json b/package.json index c8351f8..4b1b082 100644 --- a/package.json +++ b/package.json @@ -18,8 +18,8 @@ "tar-fs": "3.1.1", "basic-ftp": "^5.3.1", "fast-uri": "3.1.5", - "js-yaml@3": "3.15.0", - "js-yaml@4": "4.3.0", + "js-yaml@3": "3.15.1", + "js-yaml@4": "4.3.1", "brace-expansion": "2.1.4", "socks": "2.8.9", "ip-address": "10.4.0",