From 9b6af8e012d220852157e680683d5219c50e3116 Mon Sep 17 00:00:00 2001
From: "ugo.bechameil" <ugo.bechameil@hackolade.com>
Date: Tue, 28 Jul 2026 15:09:20 +0200
Subject: [PATCH] chore: address Trivy production dependency vulnerabilities

Bump vulnerable production dependencies/overrides and refresh package-lock.json to clear Plugins develop Trivy findings.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 package-lock.json | 18 +++++++++---------
 package.json      |  6 ++++--
 2 files changed, 13 insertions(+), 11 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 1a3a3f7d..6ae401dd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "Snowflake",
-    "version": "0.2.56",
+    "version": "0.2.57",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "Snowflake",
-            "version": "0.2.56",
+            "version": "0.2.57",
             "hasInstallScript": true,
             "dependencies": {
                 "@hackolade/fetch": "1.3.0",
@@ -5422,9 +5422,9 @@
             "license": "MIT"
         },
         "node_modules/axios": {
-            "version": "1.17.0",
-            "resolved": "https://registry.npmjs.org/axios/-/axios-1.17.0.tgz",
-            "integrity": "sha512-J8SwNxprqqpbfenehxWYXE7CW+wM1BB4w3+N+g+/Wx40xM4rsLrfPmHHxSWIxJLYDgSY/HqlFPIYb2/S3rxafw==",
+            "version": "1.18.0",
+            "resolved": "https://registry.npmjs.org/axios/-/axios-1.18.0.tgz",
+            "integrity": "sha512-E32NzpYKp++W7XRe52rHiXV2ehxmh3wbdgO7MHeFM+vqxLBYHzt0ElkiImtOBxtOmyp0yoC8C6uESVV84Y2/hw==",
             "license": "MIT",
             "dependencies": {
                 "follow-redirects": "^1.16.0",
@@ -5532,16 +5532,16 @@
             "license": "MIT"
         },
         "node_modules/brace-expansion": {
-            "version": "5.0.6",
-            "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz",
-            "integrity": "sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==",
+            "version": "5.0.8",
+            "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz",
+            "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==",
             "dev": true,
             "license": "MIT",
             "dependencies": {
                 "balanced-match": "^4.0.2"
             },
             "engines": {
-                "node": "18 || 20 || >=22"
+                "node": "20 || >=22"
             }
         },
         "node_modules/braces": {
diff --git a/package.json b/package.json
index ed6b6cf9..a8fbfe2d 100644
--- a/package.json
+++ b/package.json
@@ -94,9 +94,11 @@
         "uuid": "14.0.0"
     },
     "overrides": {
+        "axios": "1.18.0",
         "fast-xml-parser": "5.7.3",
         "minimatch": "10.2.4",
         "@tootallnate/once": "3.0.1",
-        "uuid": "$uuid"
+        "uuid": "$uuid",
+        "brace-expansion": "5.0.8"
     }
-}
\ No newline at end of file
+}