From 16dff694368342375ea5f3e41dd95c1a6c7f051c Mon Sep 17 00:00:00 2001 From: Aliullov Vlad Date: Tue, 3 Nov 2026 15:20:22 +0100 Subject: [PATCH] chore(security): fix dependency vulnerabilities. override glob --- pnpm-lock.yaml | 114 ++++++-------------------------------------- pnpm-workspace.yaml | 1 + 2 files changed, 16 insertions(+), 99 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index ee167a2461d4..2c0b78e1811b 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -202,6 +202,7 @@ overrides: compression@<1.8.2: ^1.8.2 dompurify@<=3.4.16: ^3.4.17 follow-redirects@>=1.16.0 <1.16.2: ^1.16.2 + glob@>=9.0.0 <14.0.2: ^14.0.3 hono@<4.13.11: ^4.13.11 http-cache-semantics@<=4.2.0: ^4.3.0 launch-editor@<2.14.2: ^2.14.2 @@ -5172,10 +5173,6 @@ packages: '@types/node': optional: true - '@isaacs/cliui@8.0.2': - resolution: {integrity: sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==} - engines: {node: '>=12'} - '@isaacs/fs-minipass@4.0.1': resolution: {integrity: sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==} engines: {node: '>=18.0.0'} @@ -6800,10 +6797,6 @@ packages: peerDependencies: typescript: '>3.0.0' - '@pkgjs/parseargs@0.11.0': - resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==} - engines: {node: '>=14'} - '@pkgr/core@0.3.6': resolution: {integrity: sha512-SEeaJLb3qBNF/OaXnaR1NmmBbFYk1zC0ZH/52fATcRPLFg/p791YrcyFFy44Bo9sLaGuSuLp5Q6axbb/O+v/RA==} engines: {node: ^14.18.0 || >=16.0.0} @@ -11307,10 +11300,6 @@ packages: resolution: {integrity: sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==} engines: {node: '>= 0.4'} - foreground-child@3.3.1: - resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==} - engines: {node: '>=14'} - fork-ts-checker-webpack-plugin@9.1.0: resolution: {integrity: sha512-mpafl89VFPJmhnJ1ssH+8wmM2b50n+Rew5x42NeI2U78aRWgtkEtGmctp7iT16UjquJTjorEmIfESj3DxdW84Q==} engines: {node: '>=14.21.3'} @@ -11481,15 +11470,6 @@ packages: glob-to-regexp@0.4.1: resolution: {integrity: sha512-lkX1HJXwyMcprw/5YUZc2s7DrpAiHB21/V+E1rHUrVNokkvB6bqMzT0VfV6/86ZNabt1k14YOIaT7nDvOX3Iiw==} - glob@10.5.0: - resolution: {integrity: sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==} - deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me - hasBin: true - - glob@13.0.6: - resolution: {integrity: sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==} - engines: {node: 18 || 20 || >=22} - glob@14.0.3: resolution: {integrity: sha512-A1vjIwC3qpdCso45Iw127gnp7sPhqgY8lUQhDrArIs+GbmfaaVPFuoyy7WyLT9EPZCRZ7j7aLdwUhQmHWesEow==} engines: {node: 18 || 20 || >=22} @@ -12418,9 +12398,6 @@ packages: resolution: {integrity: sha512-H0dkQoCa3b2VEeKQBOxFph+JAbcrQdE7KC0UkqwpLmv2EC4P41QXP+rqo9wYodACiG5/WM5s9oDApTU8utwj9g==} engines: {node: '>= 0.4'} - jackspeak@3.4.3: - resolution: {integrity: sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==} - jasmine-core@4.6.1: resolution: {integrity: sha512-VYz/BjjmC3klLJlLwA4Kw8ytk0zDSmbbDLNs794VnWmkcCB7I9aAL/D48VNQtmITyPvea2C3jdUMfc3kAoy0PQ==} @@ -14050,9 +14027,6 @@ packages: resolution: {integrity: sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==} engines: {node: '>=6'} - package-json-from-dist@1.0.1: - resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==} - pacote@21.5.1: resolution: {integrity: sha512-KvcJ9iy3crysCsgqc4+PknH/w6jkrp8JN36mpZBPwNaDRwTfMZD37YzRazNstiZUOhuF5pno9f78n9mEJBavwg==} engines: {node: ^20.17.0 || >=22.9.0} @@ -14170,14 +14144,6 @@ packages: resolution: {integrity: sha512-Y30dB6rab1A/nfEKsZxmr01nUotHX0c/ZiIAsCTatEe1CmS5Pm5He7fZ195bPT7RdquoaL8lLxFCMQi/bS7IJg==} engines: {node: '>= 0.8.0'} - path-scurry@1.11.1: - resolution: {integrity: sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==} - engines: {node: '>=16 || 14 >=14.18'} - - path-scurry@2.0.2: - resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==} - engines: {node: 18 || 20 || >=22} - path-scurry@3.0.0: resolution: {integrity: sha512-1pTbQqH1wIwMi/eleQ5leFTTCkzFsPcgXNjwOA8YGGW/W4/kHT3dssE7Z6NH+zuqNLOzOB0uaD61yl7cAcVhgg==} engines: {node: 18 || 20 || >=22} @@ -20458,7 +20424,7 @@ snapshots: dependencies: buffer: 6.0.3 events: 3.3.0 - glob: 13.0.6 + glob: 14.0.3 path: 0.12.7 stream: 0.0.3 string_decoder: 1.3.0 @@ -21324,15 +21290,6 @@ snapshots: optionalDependencies: '@types/node': 20.19.37 - '@isaacs/cliui@8.0.2': - dependencies: - string-width: 5.1.2 - string-width-cjs: string-width@4.2.3 - strip-ansi: 7.2.0 - strip-ansi-cjs: strip-ansi@6.0.1 - wrap-ansi: 8.1.0 - wrap-ansi-cjs: wrap-ansi@7.0.0 - '@isaacs/fs-minipass@4.0.1': dependencies: minipass: 7.1.3 @@ -21581,7 +21538,7 @@ snapshots: chalk: 4.1.2 collect-v8-coverage: 1.0.3 exit-x: 0.2.2 - glob: 10.5.0 + glob: 14.0.3 graceful-fs: 4.2.11 istanbul-lib-coverage: 3.2.2 istanbul-lib-instrument: 6.0.3 @@ -22171,7 +22128,7 @@ snapshots: '@npmcli/package-json@7.0.5': dependencies: '@npmcli/git': 7.0.2 - glob: 13.0.6 + glob: 14.0.3 hosted-git-info: 9.0.2 json-parse-even-better-errors: 5.0.0 proc-log: 6.1.0 @@ -23323,9 +23280,6 @@ snapshots: esquery: 1.7.0 typescript: 5.9.3 - '@pkgjs/parseargs@0.11.0': - optional: true - '@pkgr/core@0.3.6': {} '@playwright/test@1.62.1': @@ -26394,7 +26348,7 @@ snapshots: dependencies: '@npmcli/fs': 5.0.0 fs-minipass: 3.0.3 - glob: 13.0.6 + glob: 14.0.3 lru-cache: 11.3.5 minipass: 7.1.3 minipass-collect: 2.0.1 @@ -29009,11 +28963,6 @@ snapshots: dependencies: is-callable: 1.2.7 - foreground-child@3.3.1: - dependencies: - cross-spawn: 7.0.6 - signal-exit: 4.1.0 - fork-ts-checker-webpack-plugin@9.1.0(typescript@5.9.3)(webpack@5.105.4(@swc/core@1.15.30(@swc/helpers@0.5.21))): dependencies: '@babel/code-frame': 7.29.7 @@ -29201,21 +29150,6 @@ snapshots: glob-to-regexp@0.4.1: {} - glob@10.5.0: - dependencies: - foreground-child: 3.3.1 - jackspeak: 3.4.3 - minimatch: 9.0.9 - minipass: 7.1.3 - package-json-from-dist: 1.0.1 - path-scurry: 1.11.1 - - glob@13.0.6: - dependencies: - minimatch: 10.2.5 - minipass: 7.1.3 - path-scurry: 2.0.2 - glob@14.0.3: dependencies: minimatch: 11.0.3 @@ -30263,12 +30197,6 @@ snapshots: has-symbols: 1.1.0 set-function-name: 2.0.2 - jackspeak@3.4.3: - dependencies: - '@isaacs/cliui': 8.0.2 - optionalDependencies: - '@pkgjs/parseargs': 0.11.0 - jasmine-core@4.6.1: {} jasmine-core@5.12.1: {} @@ -30277,7 +30205,7 @@ snapshots: jasmine@5.12.0: dependencies: - glob: 10.5.0 + glob: 14.0.3 jasmine-core: 5.12.1 jest-changed-files@30.4.1: @@ -30429,7 +30357,7 @@ snapshots: chalk: 4.1.2 ci-info: 4.4.0 deepmerge: 4.3.1 - glob: 10.5.0 + glob: 14.0.3 graceful-fs: 4.2.11 jest-circus: 30.4.2(babel-plugin-macros@3.1.0) jest-docblock: 30.4.0 @@ -30461,7 +30389,7 @@ snapshots: chalk: 4.1.2 ci-info: 4.4.0 deepmerge: 4.3.1 - glob: 10.5.0 + glob: 14.0.3 graceful-fs: 4.2.11 jest-circus: 30.4.2(babel-plugin-macros@3.1.0) jest-docblock: 30.4.0 @@ -30494,7 +30422,7 @@ snapshots: chalk: 4.1.2 ci-info: 4.4.0 deepmerge: 4.3.1 - glob: 10.5.0 + glob: 14.0.3 graceful-fs: 4.2.11 jest-circus: 30.4.2(babel-plugin-macros@3.1.0) jest-docblock: 30.4.0 @@ -30526,7 +30454,7 @@ snapshots: chalk: 4.1.2 ci-info: 4.4.0 deepmerge: 4.3.1 - glob: 10.5.0 + glob: 14.0.3 graceful-fs: 4.2.11 jest-circus: 30.4.2(babel-plugin-macros@3.1.0) jest-docblock: 30.4.0 @@ -30559,7 +30487,7 @@ snapshots: chalk: 4.1.2 ci-info: 4.4.0 deepmerge: 4.3.1 - glob: 10.5.0 + glob: 14.0.3 graceful-fs: 4.2.11 jest-circus: 30.4.2(babel-plugin-macros@3.1.0) jest-docblock: 30.4.0 @@ -30591,7 +30519,7 @@ snapshots: chalk: 4.1.2 ci-info: 4.4.0 deepmerge: 4.3.1 - glob: 10.5.0 + glob: 14.0.3 graceful-fs: 4.2.11 jest-circus: 30.4.2(babel-plugin-macros@3.1.0) jest-docblock: 30.4.0 @@ -30623,7 +30551,7 @@ snapshots: chalk: 4.1.2 ci-info: 4.4.0 deepmerge: 4.3.1 - glob: 10.5.0 + glob: 14.0.3 graceful-fs: 4.2.11 jest-circus: 30.4.2(babel-plugin-macros@3.1.0) jest-docblock: 30.4.0 @@ -30793,7 +30721,7 @@ snapshots: chalk: 4.1.2 cjs-module-lexer: 2.2.0 collect-v8-coverage: 1.0.3 - glob: 10.5.0 + glob: 14.0.3 graceful-fs: 4.2.11 jest-haste-map: 30.4.1 jest-message-util: 30.4.1 @@ -30962,7 +30890,7 @@ snapshots: dependencies: config-chain: 1.1.13 editorconfig: 1.0.7 - glob: 10.5.0 + glob: 14.0.3 js-cookie: 3.0.7 nopt: 7.2.1 @@ -32886,8 +32814,6 @@ snapshots: p-try@2.2.0: {} - package-json-from-dist@1.0.1: {} - pacote@21.5.1(supports-color@7.2.0): dependencies: '@gar/promise-retry': 1.0.3 @@ -33039,16 +32965,6 @@ snapshots: path-platform@0.11.15: {} - path-scurry@1.11.1: - dependencies: - lru-cache: 10.4.3 - minipass: 7.1.3 - - path-scurry@2.0.2: - dependencies: - lru-cache: 11.3.5 - minipass: 7.1.3 - path-scurry@3.0.0: dependencies: lru-cache: 11.3.5 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 3bb8da298067..5b140dcd5d94 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -56,6 +56,7 @@ overrides: compression@<1.8.2: ^1.8.2 dompurify@<=3.4.16: ^3.4.17 follow-redirects@>=1.16.0 <1.16.2: ^1.16.2 + glob@>=9.0.0 <14.0.2: ^14.0.3 hono@<4.13.11: ^4.13.11 http-cache-semantics@<=4.2.0: ^4.3.0 launch-editor@<2.14.2: ^2.14.2