From 5e3addcc41ec35b5fb61ab703c880f242378d468 Mon Sep 17 00:00:00 2001 From: Susmitha Girumala Date: Mon, 8 Jun 2026 18:47:51 -0400 Subject: [PATCH] =?UTF-8?q?chore:=20=F0=9F=A4=96=20Upgrade=20lint-staged?= =?UTF-8?q?=20to=20resolve=20yaml=20secvuln=20(#3310)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ✅ Closes: https://github.com/hashicorp/boundary-ui/security/code-scanning/254 Co-authored-by: Lisbet Alvarez <107949262+lisbet-alvarez@users.noreply.github.com> --- package.json | 4 +-- pnpm-lock.yaml | 96 +++++++++++++++++++++++++++----------------------- 2 files changed, 53 insertions(+), 47 deletions(-) diff --git a/package.json b/package.json index 89fa5e198..cdfde8013 100755 --- a/package.json +++ b/package.json @@ -36,11 +36,11 @@ "devDependencies": { "concurrently": "^9.1.0", "doctoc": "^2.2.0", + "esbuild": "^0.25.4", "git-cz": "^4.9.0", "husky": "^9.1.6", "license-checker": "^25.0.1", - "lint-staged": "^15.2.10", - "esbuild": "^0.25.4" + "lint-staged": "^15.5.2" }, "pnpm": { "overrides": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 1bc6b60da..2948c35a3 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -44,8 +44,8 @@ importers: specifier: ^25.0.1 version: 25.0.1 lint-staged: - specifier: ^15.2.10 - version: 15.2.10 + specifier: ^15.5.2 + version: 15.5.2 addons/api: dependencies: @@ -4024,6 +4024,10 @@ packages: resolution: {integrity: sha512-dLitG79d+GV1Nb/VYcCDFivJeK1hiukt9QjRNVOsUtTy1rR1YJsmpGGTZ3qJos+uw7WmWF4wUwBd9jxjocFC2w==} engines: {node: ^12.17.0 || ^14.13 || >=16.0.0} + chalk@5.6.2: + resolution: {integrity: sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA==} + engines: {node: ^12.17.0 || ^14.13 || >=16.0.0} + character-entities-legacy@1.1.4: resolution: {integrity: sha512-3Xnr+7ZFS1uxeiUDvV02wQ+QDbc55o97tIV5zHScSPJpcLm/r0DFPcoY3tYRp+VZukxuMeKgXYmsXQHO05zQeA==} @@ -4191,8 +4195,8 @@ packages: resolution: {integrity: sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==} engines: {node: '>= 0.8'} - commander@12.1.0: - resolution: {integrity: sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==} + commander@13.1.0: + resolution: {integrity: sha512-/rFeCpNJQbhSZjGVwO9RFV3xPqbnERS8MmIQzCtD/zl6gpJuV/bMLuN92oG3F7d8oDEHHRrujSXNUr8fpjntKw==} engines: {node: '>=18'} commander@2.20.3: @@ -6780,8 +6784,8 @@ packages: resolution: {integrity: sha512-mET5AIwl7MR2IAKYYoVBBpV0OnkKQ1xGj2IMMeEFIs42QAkEVjRtFZGWmQ28WeU7MP779iAgOaOy93Mn44mn6g==} hasBin: true - lilconfig@3.1.2: - resolution: {integrity: sha512-eop+wDAvpItUys0FWkHIKeC9ybYrTGbU41U5K7+bttZZeohvnY7M9dZ5kB21GNWiFT2q1OoPTvncPCgSOVO5ow==} + lilconfig@3.1.3: + resolution: {integrity: sha512-/vlFKAoH5Cgt3Ie+JLhRbwOsCQePABiU3tJ1egGvyQ+33R/vcwM2Zl2QR/LzjsBeItPt3oSVXapn+m4nQDvpzw==} engines: {node: '>=14'} line-column@1.0.2: @@ -6793,8 +6797,8 @@ packages: linkify-it@4.0.1: resolution: {integrity: sha512-C7bfi1UZmoj8+PQx22XyeXCuBlokoyWQL5pWSP+EI6nzRylyThouddufc2c1NDIcP9k5agmN9fLpA7VNJfIiqw==} - lint-staged@15.2.10: - resolution: {integrity: sha512-5dY5t743e1byO19P9I4b3x8HJwalIznL5E1FWYnU6OWw33KxNBSLAc6Cy7F2PsFEO8FKnLwjwm5hx7aMF0jzZg==} + lint-staged@15.5.2: + resolution: {integrity: sha512-YUSOLq9VeRNAo/CTaVmhGDKG+LBtA8KF1X4K5+ykMSwWST1vDxJRB2kv2COgLb1fvpCo+A/y9A0G0znNVmdx4w==} engines: {node: '>=18.12.0'} hasBin: true @@ -8384,8 +8388,8 @@ packages: engines: {node: '>=10'} hasBin: true - semver@7.8.1: - resolution: {integrity: sha512-rkVq3IXh+4FDGch+KwzX3aV9W3kO54GyEgpvBzSyctDA6Xtd7RJQV1xmXbeQp5v7+VzLOfVqiutSE6GICgPFvg==} + semver@7.8.3: + resolution: {integrity: sha512-wnilbGyMxzbY7dNOl7jpKbLSjcfeweJWU5j4+u5qW+6/wuGD9KzIGOyZnQVSBM9E7DtWaaH3CyHkppYrKYoxwg==} engines: {node: '>=10'} hasBin: true @@ -9441,9 +9445,9 @@ packages: resolution: {integrity: sha512-Hv9xxHtsJ9228wNhk03xnlDReUuWVvHwM4rIbjdAXYvHLs17xjuyF50N6XXFMN6N0omBaqgOok/MCK3At9fTAg==} engines: {node: ^4.5 || 6.* || >= 7.*} - yaml@2.5.1: - resolution: {integrity: sha512-bLQOjaX/ADgQ20isPJRvF0iRUHIxVhYvr53Of7wGcWlO2jvtUlH5m87DsmulFVxRpNLOnI4tB6p/oh8D7kpn9Q==} - engines: {node: '>= 14'} + yaml@2.9.0: + resolution: {integrity: sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==} + engines: {node: '>= 14.6'} hasBin: true yargs-parser@20.2.9: @@ -10380,7 +10384,7 @@ snapshots: '@babel/parser': 7.29.7 '@babel/template': 7.29.7 '@babel/types': 7.29.7 - debug: 4.4.0 + debug: 4.4.3 transitivePeerDependencies: - supports-color @@ -10540,7 +10544,7 @@ snapshots: '@electron/rebuild': 3.7.2 '@malept/cross-spawn-promise': 2.0.0 chalk: 4.1.2 - debug: 4.4.3 + debug: 4.4.0 find-up: 5.0.0 fs-extra: 10.1.0 log-symbols: 4.1.0 @@ -10567,7 +10571,7 @@ snapshots: '@electron/rebuild': 3.7.2 '@malept/cross-spawn-promise': 2.0.0 chalk: 4.1.2 - debug: 4.4.1 + debug: 4.4.0 fast-glob: 3.3.3 filenamify: 4.3.0 find-up: 5.0.0 @@ -10628,7 +10632,7 @@ snapshots: '@electron-forge/core-utils': 7.8.1 '@electron-forge/shared-types': 7.8.1 '@malept/cross-spawn-promise': 2.0.0 - debug: 4.4.3 + debug: 4.4.0 fs-extra: 10.1.0 username: 5.1.0 transitivePeerDependencies: @@ -10683,7 +10687,7 @@ snapshots: '@electron/get@3.1.0': dependencies: - debug: 4.4.3 + debug: 4.4.0 env-paths: 2.2.1 fs-extra: 8.1.0 got: 11.8.6 @@ -10713,7 +10717,7 @@ snapshots: '@electron/notarize@2.5.0': dependencies: - debug: 4.4.3 + debug: 4.4.0 fs-extra: 9.1.0 promise-retry: 2.0.1 transitivePeerDependencies: @@ -10722,7 +10726,7 @@ snapshots: '@electron/osx-sign@1.3.3': dependencies: compare-version: 0.1.2 - debug: 4.4.3 + debug: 4.4.0 fs-extra: 10.1.0 isbinaryfile: 4.0.10 minimist: 1.2.8 @@ -10738,7 +10742,7 @@ snapshots: '@electron/osx-sign': 1.3.3 '@electron/universal': 2.0.3 '@electron/windows-sign': 1.2.2 - debug: 4.4.3 + debug: 4.4.0 extract-zip: 2.0.1 filenamify: 4.3.0 fs-extra: 11.3.5 @@ -10759,7 +10763,7 @@ snapshots: '@electron/node-gyp': https://codeload.github.com/electron/node-gyp/tar.gz/06b29aafb7708acef8b3669835c8a7857ebc92d2 '@malept/cross-spawn-promise': 2.0.0 chalk: 4.1.2 - debug: 4.4.3 + debug: 4.4.0 detect-libc: 2.0.4 fs-extra: 10.1.0 got: 11.8.6 @@ -10778,7 +10782,7 @@ snapshots: dependencies: '@electron/asar': 3.4.1 '@malept/cross-spawn-promise': 2.0.0 - debug: 4.4.3 + debug: 4.4.0 dir-compare: 4.2.0 fs-extra: 11.3.5 minimatch: 9.0.9 @@ -10789,7 +10793,7 @@ snapshots: '@electron/windows-sign@1.2.2': dependencies: cross-dirname: 0.1.0 - debug: 4.4.3 + debug: 4.4.0 fs-extra: 11.3.5 minimist: 1.2.8 postject: 1.0.0-alpha.6 @@ -12268,7 +12272,7 @@ snapshots: fast-glob: 3.3.3 is-glob: 4.0.3 minimatch: 9.0.9 - semver: 7.8.1 + semver: 7.8.3 ts-api-utils: 2.5.0(typescript@5.8.3) typescript: 5.8.3 transitivePeerDependencies: @@ -13405,6 +13409,8 @@ snapshots: chalk@5.3.0: {} + chalk@5.6.2: {} + character-entities-legacy@1.1.4: {} character-entities@1.2.4: {} @@ -13543,7 +13549,7 @@ snapshots: dependencies: delayed-stream: 1.0.0 - commander@12.1.0: {} + commander@13.1.0: {} commander@2.20.3: {} @@ -14411,7 +14417,7 @@ snapshots: dependencies: ansi-to-html: 0.6.15 broccoli-stew: 3.0.0 - debug: 4.4.0 + debug: 4.4.3 execa: 4.1.0 fs-extra: 9.1.0 resolve: 1.22.10 @@ -14426,7 +14432,7 @@ snapshots: dependencies: ansi-to-html: 0.6.15 broccoli-stew: 3.0.0 - debug: 4.4.0 + debug: 4.4.3 execa: 4.1.0 fs-extra: 9.1.0 resolve: 1.22.10 @@ -15659,7 +15665,7 @@ snapshots: extract-zip@2.0.1: dependencies: - debug: 4.4.3 + debug: 4.4.0 get-stream: 5.2.0 yauzl: 2.10.0 optionalDependencies: @@ -15893,7 +15899,7 @@ snapshots: flora-colossus@2.0.0: dependencies: - debug: 4.4.3 + debug: 4.4.0 fs-extra: 10.1.0 transitivePeerDependencies: - supports-color @@ -16053,7 +16059,7 @@ snapshots: galactus@1.0.0: dependencies: - debug: 4.4.3 + debug: 4.4.0 flora-colossus: 2.0.0 fs-extra: 10.1.0 transitivePeerDependencies: @@ -16440,7 +16446,7 @@ snapshots: dependencies: '@tootallnate/once': 2.0.1 agent-base: 6.0.2 - debug: 4.4.3 + debug: 4.4.0 transitivePeerDependencies: - supports-color @@ -16983,7 +16989,7 @@ snapshots: transitivePeerDependencies: - supports-color - lilconfig@3.1.2: {} + lilconfig@3.1.3: {} line-column@1.0.2: dependencies: @@ -16996,18 +17002,18 @@ snapshots: dependencies: uc.micro: 1.0.6 - lint-staged@15.2.10: + lint-staged@15.5.2: dependencies: - chalk: 5.3.0 - commander: 12.1.0 - debug: 4.3.7 + chalk: 5.6.2 + commander: 13.1.0 + debug: 4.4.3 execa: 8.0.1 - lilconfig: 3.1.2 + lilconfig: 3.1.3 listr2: 8.2.5 micromatch: 4.0.8 pidtree: 0.6.0 string-argv: 0.3.2 - yaml: 2.5.1 + yaml: 2.9.0 transitivePeerDependencies: - supports-color @@ -18239,7 +18245,7 @@ snapshots: read-binary-file-arch@1.0.6: dependencies: - debug: 4.4.3 + debug: 4.4.0 transitivePeerDependencies: - supports-color @@ -18690,7 +18696,7 @@ snapshots: semver@7.7.4: {} - semver@7.8.1: + semver@7.8.3: optional: true send@0.19.0: @@ -18907,7 +18913,7 @@ snapshots: socks-proxy-agent@7.0.0: dependencies: agent-base: 6.0.2 - debug: 4.4.3 + debug: 4.4.0 socks: 2.8.9 transitivePeerDependencies: - supports-color @@ -18997,7 +19003,7 @@ snapshots: stagehand@1.0.1: dependencies: - debug: 4.4.3 + debug: 4.4.0 transitivePeerDependencies: - supports-color @@ -19233,7 +19239,7 @@ snapshots: sumchecker@3.0.1: dependencies: - debug: 4.4.3 + debug: 4.4.0 transitivePeerDependencies: - supports-color @@ -20024,7 +20030,7 @@ snapshots: fs-extra: 4.0.3 lodash.merge: 4.6.2 - yaml@2.5.1: {} + yaml@2.9.0: {} yargs-parser@20.2.9: {}