From 6c5956583cdd349e6384f2cfc2cc0795aadff496 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 14 Nov 2024 13:18:12 +0000 Subject: [PATCH] fix: frontend/package.json & frontend/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AGGRIDCOMMUNITY-7414157 - https://snyk.io/vuln/SNYK-JS-AGGRIDENTERPRISE-7414158 - https://snyk.io/vuln/SNYK-JS-TAR-6476909 --- frontend/package-lock.json | 37 ++++++++++++++++++++++++++----------- frontend/package.json | 6 +++--- 2 files changed, 29 insertions(+), 14 deletions(-) diff --git a/frontend/package-lock.json b/frontend/package-lock.json index c4eeb8f761..c8261a06d8 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -30,8 +30,8 @@ "@xyflow/svelte": "^0.1.15", "ag-charts-community": "^9.0.1", "ag-charts-enterprise": "^9.0.1", - "ag-grid-community": "^31.0.0", - "ag-grid-enterprise": "^31.0.0", + "ag-grid-community": "^31.3.4", + "ag-grid-enterprise": "^31.3.4", "ansi_up": "^5.2.1", "chart.js": "^4.3.0", "chartjs-adapter-date-fns": "^3.0.0", @@ -55,7 +55,7 @@ "ol": "^7.4.0", "openai": "^4.57.2", "p-limit": "^6.1.0", - "pdfjs-dist": "^3.8.162", + "pdfjs-dist": "^4.4.168", "quill": "^1.3.7", "rfc4648": "^1.5.3", "svelte-carousel": "^1.0.25", @@ -3821,16 +3821,27 @@ } }, "node_modules/ag-grid-community": { - "version": "31.0.0", + "version": "31.3.4", + "resolved": "https://registry.npmjs.org/ag-grid-community/-/ag-grid-community-31.3.4.tgz", + "integrity": "sha512-jOxQO86C6eLnk1GdP24HB6aqaouFzMWizgfUwNY5MnetiWzz9ZaAmOGSnW/XBvdjXvC5Fpk3gSbvVKKQ7h9kBw==", "license": "MIT" }, "node_modules/ag-grid-enterprise": { - "version": "31.0.0", + "version": "31.3.4", + "resolved": "https://registry.npmjs.org/ag-grid-enterprise/-/ag-grid-enterprise-31.3.4.tgz", + "integrity": "sha512-kreGRsFjz41APXXchLcQFtginnrmIGQYH48p7ydz33x8v+aja06HS5yEM6NP8j+VVHX43LeXnsl5Y4TLRgSoeg==", "license": "Commercial", "dependencies": { - "ag-grid-community": "~31.0.0" + "ag-charts-community": "9.3.2", + "ag-grid-community": "31.3.4" } }, + "node_modules/ag-grid-enterprise/node_modules/ag-charts-community": { + "version": "9.3.2", + "resolved": "https://registry.npmjs.org/ag-charts-community/-/ag-charts-community-9.3.2.tgz", + "integrity": "sha512-jw2llxTYzGAZ24m7eQsKS24BnJBhspZKsL03DbqH0wxLepbEcC3eeWICe+02TBQCbFVsWmSsYukjzQg3FkVWRw==", + "license": "MIT" + }, "node_modules/agent-base": { "version": "6.0.2", "license": "MIT", @@ -8654,12 +8665,14 @@ "node": ">=8" } }, - "node_modules/path2d-polyfill": { - "version": "2.0.1", + "node_modules/path2d": { + "version": "0.2.2", + "resolved": "https://registry.npmjs.org/path2d/-/path2d-0.2.2.tgz", + "integrity": "sha512-+vnG6S4dYcYxZd+CZxzXCNKdELYZSKfohrk98yajCo1PtRoDgCTrrwOvK1GT0UoAdVszagDVllQc0U1vaX4NUQ==", "license": "MIT", "optional": true, "engines": { - "node": ">=8" + "node": ">=6" } }, "node_modules/pathe": { @@ -8679,14 +8692,16 @@ } }, "node_modules/pdfjs-dist": { - "version": "3.11.174", + "version": "4.4.168", + "resolved": "https://registry.npmjs.org/pdfjs-dist/-/pdfjs-dist-4.4.168.tgz", + "integrity": "sha512-MbkAjpwka/dMHaCfQ75RY1FXX3IewBVu6NGZOcxerRFlaBiIkZmUoR0jotX5VUzYZEXAGzSFtknWs5xRKliXPA==", "license": "Apache-2.0", "engines": { "node": ">=18" }, "optionalDependencies": { "canvas": "^2.11.2", - "path2d-polyfill": "^2.0.1" + "path2d": "^0.2.0" } }, "node_modules/perfect-debounce": { diff --git a/frontend/package.json b/frontend/package.json index 5b521f7d77..219fa34baa 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -103,8 +103,8 @@ "@xyflow/svelte": "^0.1.15", "ag-charts-community": "^9.0.1", "ag-charts-enterprise": "^9.0.1", - "ag-grid-community": "^31.0.0", - "ag-grid-enterprise": "^31.0.0", + "ag-grid-community": "^31.3.4", + "ag-grid-enterprise": "^31.3.4", "ansi_up": "^5.2.1", "chart.js": "^4.3.0", "chartjs-adapter-date-fns": "^3.0.0", @@ -128,7 +128,7 @@ "ol": "^7.4.0", "openai": "^4.57.2", "p-limit": "^6.1.0", - "pdfjs-dist": "^3.8.162", + "pdfjs-dist": "^4.4.168", "quill": "^1.3.7", "rfc4648": "^1.5.3", "svelte-carousel": "^1.0.25",