From 0c530373078cdabdb8d65c00a71460fd1d03118b Mon Sep 17 00:00:00 2001 From: Robert Hebel Date: Wed, 26 Aug 2026 11:53:06 +0200 Subject: [PATCH] fix(dev-deps): bump lerna, js-yaml and brace-expansion to non vulnerable versions --- package-lock.json | 70 ++++++++++++----------------------------------- package.json | 10 ++++++- 2 files changed, 27 insertions(+), 53 deletions(-) diff --git a/package-lock.json b/package-lock.json index a83e13496..1ac894d25 100644 --- a/package-lock.json +++ b/package-lock.json @@ -42,7 +42,7 @@ "http-string-parser": "^0.0.6", "husky": "^9.1.7", "jest": "^30.3.0", - "lerna": "=10.0.0", + "lerna": "=10.0.1", "lint-staged": "^10.5.4", "lodash": "^4.17.23", "nock": "^13.1.3", @@ -5461,23 +5461,6 @@ } } }, - "node_modules/conventional-changelog/node_modules/conventional-commits-parser": { - "version": "7.1.2", - "resolved": "https://registry.npmjs.org/conventional-commits-parser/-/conventional-commits-parser-7.1.2.tgz", - "integrity": "sha512-O+x4N2yH+ijvqWlIyTHsXTAP+algNWgGbjY2duCe8w2vUMvUB95cLRslCPfTMQyLAKlet3bhZTdu6ozn4M+QJQ==", - "dev": true, - "license": "MIT", - "dependencies": { - "@simple-libs/stream-utils": "^2.0.0", - "argue-cli": "^3.1.0" - }, - "bin": { - "conventional-commits-parser": "dist/cli/index.js" - }, - "engines": { - "node": ">=22" - } - }, "node_modules/conventional-commits-filter": { "version": "6.0.1", "resolved": "https://registry.npmjs.org/conventional-commits-filter/-/conventional-commits-filter-6.0.1.tgz", @@ -5489,9 +5472,9 @@ } }, "node_modules/conventional-commits-parser": { - "version": "7.1.0", - "resolved": "https://registry.npmjs.org/conventional-commits-parser/-/conventional-commits-parser-7.1.0.tgz", - "integrity": "sha512-DPp6hkUjvwIivxbkrTiLXeRswNv1A/4GFA2X6scXma0AMa9632V3TwxmrlkUIEtUktiM3Ln+RrSH2xlP3/jUTw==", + "version": "7.1.2", + "resolved": "https://registry.npmjs.org/conventional-commits-parser/-/conventional-commits-parser-7.1.2.tgz", + "integrity": "sha512-O+x4N2yH+ijvqWlIyTHsXTAP+algNWgGbjY2duCe8w2vUMvUB95cLRslCPfTMQyLAKlet3bhZTdu6ozn4M+QJQ==", "dev": true, "license": "MIT", "dependencies": { @@ -5552,23 +5535,6 @@ } } }, - "node_modules/conventional-recommended-bump/node_modules/conventional-commits-parser": { - "version": "7.1.2", - "resolved": "https://registry.npmjs.org/conventional-commits-parser/-/conventional-commits-parser-7.1.2.tgz", - "integrity": "sha512-O+x4N2yH+ijvqWlIyTHsXTAP+algNWgGbjY2duCe8w2vUMvUB95cLRslCPfTMQyLAKlet3bhZTdu6ozn4M+QJQ==", - "dev": true, - "license": "MIT", - "dependencies": { - "@simple-libs/stream-utils": "^2.0.0", - "argue-cli": "^3.1.0" - }, - "bin": { - "conventional-commits-parser": "dist/cli/index.js" - }, - "engines": { - "node": ">=22" - } - }, "node_modules/convert-source-map": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz", @@ -8970,9 +8936,9 @@ } }, "node_modules/lerna": { - "version": "10.0.0", - "resolved": "https://registry.npmjs.org/lerna/-/lerna-10.0.0.tgz", - "integrity": "sha512-U1Rkz2lMZEGstg7h6vw2LfuGNTomXANZ+mX80+3pR0L2RWWcXI/gZJya9EDq4wTY+1AoUzhNNUnlAEWdFugisw==", + "version": "10.0.1", + "resolved": "https://registry.npmjs.org/lerna/-/lerna-10.0.1.tgz", + "integrity": "sha512-ibmMaBmH/sR2HpZzgvpEI5/6bCgMp0AISIFZ/cQcCzRVH2EgPapBYHXS6A6NgI6vRJNE4pgnxQbNiSq00HVSjA==", "dev": true, "license": "MIT", "dependencies": { @@ -8988,7 +8954,7 @@ "conventional-changelog": "8.1.0", "conventional-changelog-angular": "9.2.1", "conventional-commits-filter": "6.0.1", - "conventional-commits-parser": "7.1.0", + "conventional-commits-parser": "7.1.2", "conventional-recommended-bump": "12.1.0", "cosmiconfig": "9.0.0", "dedent": "1.5.3", @@ -9019,7 +8985,7 @@ "signal-exit": "3.0.7", "ssri": "12.0.0", "string-width": "^4.2.3", - "tar": "7.5.20", + "tar": "7.5.22", "tinyglobby": "0.2.12", "validate-npm-package-license": "3.0.4", "validate-npm-package-name": "6.0.2", @@ -9112,9 +9078,9 @@ } }, "node_modules/lerna/node_modules/js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "dev": true, "funding": [ { @@ -10486,9 +10452,9 @@ } }, "node_modules/nx/node_modules/brace-expansion": { - "version": "5.0.8", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz", - "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==", + "version": "5.0.9", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz", + "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==", "dev": true, "license": "MIT", "dependencies": { @@ -12602,9 +12568,9 @@ } }, "node_modules/tar": { - "version": "7.5.20", - "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.20.tgz", - "integrity": "sha512-9FcyK4PA6+WbzlTM9WhQm6vB5W7cP7dUiPsv1g7YDwEQnQ1CGpK3MGlKk/ITVWMk05kHZuBhmVhiv8LZoy/PFQ==", + "version": "7.5.22", + "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.22.tgz", + "integrity": "sha512-MFO/QzvtAOmJbkhOaCTvbGcFN9L9b+JunIsDwaKljSOdcLMea3NJ1k9Usz/rjdfSXTq4dfzfeS7W4p4YOAAHeA==", "dev": true, "license": "BlueOak-1.0.0", "dependencies": { diff --git a/package.json b/package.json index 54422372b..a0981335e 100644 --- a/package.json +++ b/package.json @@ -54,7 +54,7 @@ "http-string-parser": "^0.0.6", "husky": "^9.1.7", "jest": "^30.3.0", - "lerna": "=10.0.0", + "lerna": "=10.0.1", "lint-staged": "^10.5.4", "lodash": "^4.17.23", "nock": "^13.1.3", @@ -71,6 +71,14 @@ "typescript": "5.4.5", "typescript-eslint": "^8.57.2" }, + "overrides": { + "lerna": { + "js-yaml": "4.3.1" + }, + "nx": { + "brace-expansion": "5.0.9" + } + }, "lint-staged": { "**/packages/**/*.ts": [ "eslint --fix"