[7.119] fix: override ws to patched versions (CVE-2026-48779) (#730)

* fix: override ws to patched versions (CVE-2026-48779)

Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>

* add missing package-lock files

Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>

* add missing package-lock files

Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>

---------

Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>

Author: sbouchet

code/build/rspack/package-lock.json

@@ -12,7 +12,11 @@
     "@vscode/esm-url-webpack-plugin": "^1.0.1-3"
   },
   "overrides": {
-    "shell-quote": "^1.8.4"
+    "shell-quote": "^1.8.4",
+    "ws": "^8.21.0",
+    "webpack-bundle-analyzer":{
+      "ws": "^7.5.11"
+    }
   },
   "dependencies": {
     "@vscode/component-explorer": "^0.2.1-8",

code/build/rspack/package.json

@@ -55,7 +55,8 @@
       "axios": "^0.32.0"
     },
     "follow-redirects": "^1.16.0",
-    "ip-address": "^10.2.0"
+    "ip-address": "^10.2.0",
+    "ws": "^8.21.0"
   },
   "repository": {
     "type": "git",

code/extensions/che-api/package-lock.json

@@ -43,7 +43,8 @@
     "@types/node": "22.x"
   },
   "overrides": {
-    "ip-address": "^10.2.0"
+    "ip-address": "^10.2.0",
+    "ws": "^8.21.0"
   },
   "repository": {
     "type": "git",

code/extensions/che-api/package.json

@@ -65,7 +65,8 @@
     "@types/uuid": "8.0.0"
   },
   "overrides": {
-    "ip-address": "^10.2.0"
+    "ip-address": "^10.2.0",
+    "ws": "^8.21.0"
   },
   "repository": {
     "type": "git",

code/extensions/che-commands/package-lock.json

@@ -49,7 +49,8 @@
   "overrides": {
     "minimatch": "^3.1.5",
     "handlebars": "4.7.9",
-    "ip-address": "^10.2.0"
+    "ip-address": "^10.2.0",
+    "ws": "^8.21.0"
   },
   "repository": {
     "type": "git",