Skip to content

Commit fbb46db

Browse files
committed
[build] Fix vulnerability in uuid < 14.0.0
``` npm audit report uuid <14.0.0 Severity: moderate uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided - GHSA-w5hq-g745-h8pq fix available via `npm audit fix --force` Will install @redhat-developer/[email protected], which is a breaking change node_modules/@redhat-developer/vscode-redhat-telemetry/node_modules/uuid node_modules/uuid @azure/msal-node <=5.1.4 Depends on vulnerable versions of uuid node_modules/@azure/msal-node @redhat-developer/vscode-redhat-telemetry >=0.0.5 Depends on vulnerable versions of uuid node_modules/@redhat-developer/vscode-redhat-telemetry ``` Fixes: https://github.com/redhat-developer/vscode-openshift-tools/security/dependabot/155 Signed-off-by: Victor Rubezhny <[email protected]>
1 parent fa11b05 commit fbb46db

4 files changed

Lines changed: 12 additions & 18 deletions

File tree

build/esbuild.settings.cjs

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,7 @@ const webviews = [
2323
const esmImportTargets = {
2424
'clipboardy': { entry: 'node_modules/clipboardy/index.js', outfile: 'out/esm/clipboardy.cjs' },
2525
'got': { entry: 'node_modules/got/dist/source/index.js', outfile: 'out/esm/got.cjs' },
26+
'uuid': { entry: 'node_modules/uuid/dist/index.js', outfile: 'out/esm/uuid.cjs' },
2627
'@kubernetes/client-node': { entry: 'node_modules/@kubernetes/client-node/dist/index.js', outfile: 'out/esm/k8s-client-node.cjs' },
2728
'@apidevtools/json-schema-ref-parser': { entry: 'node_modules/@apidevtools/json-schema-ref-parser/dist/lib/index.js', outfile: 'out/esm/apidevtools-json-schema-ref-parser.cjs' }
2829
};

package-lock.json

Lines changed: 8 additions & 17 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -200,7 +200,8 @@
200200
"tough-cookie": "^6.0.1",
201201
"tar-fs": "^3.1.2",
202202
"diff": "^8.0.3",
203-
"serialize-javascript": "^7.0.5"
203+
"serialize-javascript": "^7.0.5",
204+
"uuid": "^14.0.0"
204205
},
205206
"activationEvents": [
206207
"onView:openshiftProjectExplorer",

tsconfig.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@
55
"paths": {
66
"clipboardy": [ "out/esm/clipboardy.cjs" ],
77
"got": [ "out/esm/got.cjs" ],
8+
"uuid": [ "out/esm/uuid.cjs"],
89
"@kubernetes/client-node": [ "out/esm/k8s-client-node.cjs" ],
910
"@apidevtools/json-schema-ref-parser": [ "out/esm/apidevtools-json-schema-ref-parser.cjs" ]
1011
},

0 commit comments

Comments
 (0)