From 8d3849efdcb36d3e58f3f34763879bab1b9831dc Mon Sep 17 00:00:00 2001 From: Vikram Raj Date: Fri, 7 Aug 2026 21:46:09 +0530 Subject: [PATCH] CVE-2026-59869 bump js-yaml --- frontend/package.json | 4 ++-- frontend/yarn.lock | 16 ++++++++-------- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/frontend/package.json b/frontend/package.json index ed9b0bf2e77..caf63c0fd71 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -73,7 +73,7 @@ "export-pos": "./i18n-scripts/export-pos.sh", "memsource-upload": "./i18n-scripts/memsource-upload.sh", "memsource-download": "./i18n-scripts/memsource-download.sh", - "prepare-husky": "cd .. && husky install frontend/.husky" + "prepare-husky": "[ \"${OPENSHIFT_CI:-}\" = true ] || (cd .. && husky install frontend/.husky)" }, "jest": { "globals": { @@ -181,7 +181,7 @@ "immutable": "^3.8.3", "istextorbinary": "^9.5.0", "js-base64": "^3.7.7", - "js-yaml": "^3.13.1", + "js-yaml": "^3.15.0", "json-schema": "^0.3.0", "jsonpath-plus": "^10.3.0", "lodash-es": "^4.18.1", diff --git a/frontend/yarn.lock b/frontend/yarn.lock index 6ff3be3d1e7..c558dd4d276 100644 --- a/frontend/yarn.lock +++ b/frontend/yarn.lock @@ -15497,26 +15497,26 @@ __metadata: languageName: node linkType: hard -"js-yaml@npm:^3.10.0, js-yaml@npm:^3.13.1, js-yaml@npm:^3.7.0, js-yaml@npm:^3.9.0": - version: 3.14.0 - resolution: "js-yaml@npm:3.14.0" +"js-yaml@npm:^3.10.0, js-yaml@npm:^3.13.1, js-yaml@npm:^3.15.0, js-yaml@npm:^3.7.0, js-yaml@npm:^3.9.0": + version: 3.15.1 + resolution: "js-yaml@npm:3.15.1" dependencies: argparse: "npm:^1.0.7" esprima: "npm:^4.0.0" bin: js-yaml: bin/js-yaml.js - checksum: 10c0/9b21ab19f03aae734c83e5c8a3d5e6f80bab5ce0e24bdbb186e531fb0887ff0034affd96ae3eed993c33e33bc606a6b78389207b853df97094393804d6c37184 + checksum: 10c0/6c693b8c59ffe12021df3b36994b090df19d920826dd810baab81652b40861e1974509dd11fe92225ab4c00cc14de053300c94db015c2c0e211edea39b118737 languageName: node linkType: hard "js-yaml@npm:^4.1.0": - version: 4.1.0 - resolution: "js-yaml@npm:4.1.0" + version: 4.3.1 + resolution: "js-yaml@npm:4.3.1" dependencies: argparse: "npm:^2.0.1" bin: js-yaml: bin/js-yaml.js - checksum: 10c0/184a24b4eaacfce40ad9074c64fd42ac83cf74d8c8cd137718d456ced75051229e5061b8633c3366b8aada17945a7a356b337828c19da92b51ae62126575018f + checksum: 10c0/13c500ca322e0c3f8c81686e6ecda96d2ea37b45247a420c17c7db36932d6965cc27391abc2d1a104501600e7f0d947a5f8b7be6db619c4fefa87901b3512807 languageName: node linkType: hard @@ -18513,7 +18513,7 @@ __metadata: jest-resolve: "npm:^26.4.0" jest-transform-graphql: "npm:^2.1.0" js-base64: "npm:^3.7.7" - js-yaml: "npm:^3.13.1" + js-yaml: "npm:^3.15.0" json-schema: "npm:^0.3.0" jsonpath-plus: "npm:^10.3.0" lint-staged: "npm:^10.2.2"