mirror of
https://github.com/openobserve/openobserve.git
synced 2026-11-04 08:09:27 +00:00
Prabhat Sharma
fb50aaea7f
## Summary - update vulnerable web transitive dependencies (`axios`, `brace-expansion`, `fast-uri`, `http-proxy-middleware`, `js-yaml`, `uuid`, and `websocket-driver`) - remove the unused `node-polyfill-webpack-plugin`, eliminating the unpatched `elliptic` dependency chain - update Playwright to 1.55.1 and `node-forge` to 1.4.0 in the UI test lockfile - adapt `BaseImport` to Axios 1.18's stricter response-header type This is expected to resolve 39 of the 41 currently open Dependabot alerts. ## Remaining alerts - `rmcp` remains on the project's custom `rmcp-openapi` fork. Updating it safely requires a coordinated change to the enterprise `Cargo.toml.openobserve`, which currently replaces the OSS manifest during enterprise builds and pins the old API. The compatible intermediate upstream releases also lack the fork's required `allOf`/`anyOf` support. - `thrift` 0.17.0 remains through `parquet` 58.4.0. The patched Thrift line (0.23+) is outside Parquet 58's version constraint. Parquet 59 removes the Thrift dependency, but adopting it requires a coordinated Arrow/DataFusion 59 upgrade. ## Validation - `npm ci` and `npm audit --package-lock-only` in `web/` (0 vulnerabilities) - `npm ci` and `npm audit --package-lock-only` in `tests/ui-testing/` (0 vulnerabilities) - `npm run type-check:app` - `npm run lint:ci -- --quiet` - `npm run lint:design:strict` - `NODE_OPTIONS=--max-old-space-size=8192 npm run build` - `npm run test:unit -- --run` (41,917 passed, 404 skipped) - `npx vitest run src/components/common/BaseImport.spec.ts --environment jsdom` (41 passed) - Playwright test discovery under 1.55.1 (2,076 tests in 265 files) - `cargo fmt --all -- --check` - `cargo test -p openobserve-mcp` (94 passed, 1 ignored) - `cargo audit` (0 vulnerabilities; 2 allowed unmaintained warnings)
31 lines
907 B
JSON
31 lines
907 B
JSON
{
|
|
"name": "zincsearch",
|
|
"version": "1.0.0",
|
|
"description": "zincsearchautomationtest",
|
|
"main": "index.js",
|
|
"scripts": {
|
|
"test": "npx playwright test",
|
|
"test:poc": "npx playwright test --config=playwright-poc.config.js",
|
|
"test:poc:headed": "npx playwright test --config=playwright-poc.config.js --headed",
|
|
"test:poc:debug": "DEBUG=pw:api npx playwright test --config=playwright-poc.config.js",
|
|
"report": "npx playwright show-report playwright-results/poc-html-report"
|
|
},
|
|
"author": "",
|
|
"license": "ISC",
|
|
"devDependencies": {
|
|
"@playwright/test": "1.55.1",
|
|
"@types/node": "^20.12.2",
|
|
"dotenv": "^17.2.1"
|
|
},
|
|
"dependencies": {
|
|
"@google-cloud/local-auth": "^2.1.0",
|
|
"date-fns": "^3.6.0",
|
|
"date-fns-tz": "^3.1.3",
|
|
"googleapis": "^171.4.0",
|
|
"pixelmatch": "^5.3.0",
|
|
"pngjs": "^7.0.0",
|
|
"uuid": "^14.0.0",
|
|
"winston": "^3.11.0"
|
|
}
|
|
}
|