Skip to content

Commit 00c4ed1

Browse files
ejarocki-cloudlinuxejarocki-cloudlinux
authored
Merge pull request #498 from ejarocki-cloudlinux/master
Add Ember.js 3.28.6
2 parents b7413cb + b90684d commit 00c4ed1

2 files changed

Lines changed: 141 additions & 65 deletions

File tree

‎docs/.vuepress/components/ELSTechnology.vue‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -613,7 +613,7 @@ const techData = [
613613
},
614614
{
615615
name: "Ember.js",
616-
versions: "2.18.2",
616+
versions: "2.18.2 | 3.28.6",
617617
link: "./ember/",
618618
},
619619
{

‎docs/els-for-libraries/ember/README.md‎

Lines changed: 140 additions & 64 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ Endless Lifecycle Support (ELS) for Ember.js from TuxCare provides security fixe
44

55
## Supported Ember.js Versions
66

7-
* Ember.js 2.18.2
7+
* Ember.js 2.18.2, 3.28.6
88

99
## Connection to ELS for Ember.js Library
1010

@@ -16,7 +16,7 @@ You need a token in order to use TuxCare ELS Ember.js library. Anonymous access
1616

1717
## Step 2: Set Up ELS for Ember.js
1818

19-
TuxCare publishes patched **transitive** dependencies for Ember.js 2.18.2 as NPM packages on a secure internal registry: **terser** 3.17.0, **rollup** 0.41.6, **printf** 0.5.3, **markdown-it** 8.4.2, and **clean-css** 3.4.28. Follow the steps below to add them to your project.
19+
TuxCare publishes patched **transitive** dependencies for supported Ember.js versions as NPM packages on a secure internal registry. Choose your Ember.js version below for the exact package list and `overrides`.
2020

2121
1. Navigate to the root directory of your Ember.js project.
2222
2. Create a `.npmrc` file or update it if it already exists.
@@ -43,68 +43,125 @@ TuxCare publishes patched **transitive** dependencies for Ember.js 2.18.2 as NPM
4343
Replace ${TOKEN} with the token you received from [sales@tuxcare.com](mailto:sales@tuxcare.com).
4444
:::
4545

46-
4. Update your `package.json` so the transitive versions above resolve to TuxCare packages. You can do this in two ways:
47-
48-
* **Option 1: Manual update**
49-
50-
Add `overrides` (and optional matching `dependencies` entries) so **terser** 3.17.0, **rollup** 0.41.6, **printf** 0.5.3, **markdown-it** 8.4.2, and **clean-css** 3.4.28 use the `@els-js/*` builds.
51-
52-
```text
53-
"dependencies": {
54-
"terser": "npm:@els-js/terser@>=3.17.0-tuxcare.1",
55-
"rollup": "npm:@els-js/rollup@>=0.41.6-tuxcare.1",
56-
"printf": "npm:@els-js/printf@>=0.5.3-tuxcare.1",
57-
"markdown-it": "npm:@els-js/markdown-it@>=8.4.2-tuxcare.1",
58-
"clean-css": "npm:@els-js/clean-css@>=3.4.28-tuxcare.1"
59-
},
60-
"overrides": {
61-
"terser@3.17.0": "npm:@els-js/terser@>=3.17.0-tuxcare.1",
62-
"rollup@0.41.6": "npm:@els-js/rollup@>=0.41.6-tuxcare.1",
63-
"printf@0.5.3": "npm:@els-js/printf@>=0.5.3-tuxcare.1",
64-
"markdown-it@8.4.2": "npm:@els-js/markdown-it@>=8.4.2-tuxcare.1",
65-
"clean-css@3.4.28": "npm:@els-js/clean-css@>=3.4.28-tuxcare.1"
66-
}
67-
```
68-
69-
* **Option 2: TuxCare Patcher (Automated)**
70-
71-
Install the Patcher globally and run it. The TuxCare Patcher updates your `package.json` so these library versions use the corresponding TuxCare `@els-js/*` packages.
72-
73-
```text
74-
npm install -g @els-js/tuxcare-patcher --userconfig ./.npmrc
75-
tuxcare-patch-js
76-
```
77-
78-
The patcher will update your `package.json`, for example, from:
79-
80-
```text
81-
"dependencies": {
82-
"terser": "3.17.0",
83-
"rollup": "0.41.6",
84-
"printf": "0.5.3",
85-
"markdown-it": "8.4.2",
86-
"clean-css": "3.4.28"
87-
}
88-
```
89-
90-
to:
91-
92-
```text
93-
"dependencies": {
94-
"terser": "npm:@els-js/terser@>=3.17.0-tuxcare.1",
95-
"rollup": "npm:@els-js/rollup@>=0.41.6-tuxcare.1",
96-
"printf": "npm:@els-js/printf@>=0.5.3-tuxcare.1",
97-
"markdown-it": "npm:@els-js/markdown-it@>=8.4.2-tuxcare.1",
98-
"clean-css": "npm:@els-js/clean-css@>=3.4.28-tuxcare.1"
99-
},
100-
"overrides": {
101-
"terser@3.17.0": "npm:@els-js/terser@>=3.17.0-tuxcare.1",
102-
"rollup@0.41.6": "npm:@els-js/rollup@>=0.41.6-tuxcare.1",
103-
"printf@0.5.3": "npm:@els-js/printf@>=0.5.3-tuxcare.1",
104-
"markdown-it@8.4.2": "npm:@els-js/markdown-it@>=8.4.2-tuxcare.1",
105-
"clean-css@3.4.28": "npm:@els-js/clean-css@>=3.4.28-tuxcare.1"
106-
}
107-
```
46+
4. Update your `package.json` so the transitive versions for your Ember.js version resolve to TuxCare packages. You can do this in two ways:
47+
48+
<TableTabs label="Choose Ember.js version: " >
49+
50+
<template #ember_2.18.2>
51+
52+
* **Option 1: Manual update**
53+
54+
```text
55+
"dependencies": {
56+
"terser": "npm:@els-js/terser@>=3.17.0-tuxcare.1",
57+
"rollup": "npm:@els-js/rollup@>=0.41.6-tuxcare.1",
58+
"printf": "npm:@els-js/printf@>=0.5.3-tuxcare.1",
59+
"markdown-it": "npm:@els-js/markdown-it@>=8.4.2-tuxcare.1",
60+
"clean-css": "npm:@els-js/clean-css@>=3.4.28-tuxcare.1"
61+
},
62+
"overrides": {
63+
"terser@3.17.0": "npm:@els-js/terser@>=3.17.0-tuxcare.1",
64+
"rollup@0.41.6": "npm:@els-js/rollup@>=0.41.6-tuxcare.1",
65+
"printf@0.5.3": "npm:@els-js/printf@>=0.5.3-tuxcare.1",
66+
"markdown-it@8.4.2": "npm:@els-js/markdown-it@>=8.4.2-tuxcare.1",
67+
"clean-css@3.4.28": "npm:@els-js/clean-css@>=3.4.28-tuxcare.1"
68+
}
69+
```
70+
71+
* **Option 2: TuxCare Patcher (Automated)**
72+
73+
```text
74+
npm install -g @els-js/tuxcare-patcher --userconfig ./.npmrc
75+
tuxcare-patch-js
76+
```
77+
78+
The patcher will update your `package.json`, for example, from:
79+
80+
```text
81+
"dependencies": {
82+
"terser": "3.17.0",
83+
"rollup": "0.41.6",
84+
"printf": "0.5.3",
85+
"markdown-it": "8.4.2",
86+
"clean-css": "3.4.28"
87+
}
88+
```
89+
90+
to:
91+
92+
```text
93+
"dependencies": {
94+
"terser": "npm:@els-js/terser@>=3.17.0-tuxcare.1",
95+
"rollup": "npm:@els-js/rollup@>=0.41.6-tuxcare.1",
96+
"printf": "npm:@els-js/printf@>=0.5.3-tuxcare.1",
97+
"markdown-it": "npm:@els-js/markdown-it@>=8.4.2-tuxcare.1",
98+
"clean-css": "npm:@els-js/clean-css@>=3.4.28-tuxcare.1"
99+
},
100+
"overrides": {
101+
"terser@3.17.0": "npm:@els-js/terser@>=3.17.0-tuxcare.1",
102+
"rollup@0.41.6": "npm:@els-js/rollup@>=0.41.6-tuxcare.1",
103+
"printf@0.5.3": "npm:@els-js/printf@>=0.5.3-tuxcare.1",
104+
"markdown-it@8.4.2": "npm:@els-js/markdown-it@>=8.4.2-tuxcare.1",
105+
"clean-css@3.4.28": "npm:@els-js/clean-css@>=3.4.28-tuxcare.1"
106+
}
107+
```
108+
109+
</template>
110+
111+
<template #ember_3.28.6>
112+
113+
* **Option 1: Manual update**
114+
115+
```text
116+
"dependencies": {
117+
"rollup": "npm:@els-js/rollup@>=0.57.1-tuxcare.1",
118+
"markdown-it": "npm:@els-js/markdown-it@>=13.0.2-tuxcare.1",
119+
"diff": "npm:@els-js/diff@>=7.0.0-tuxcare.1"
120+
},
121+
"overrides": {
122+
"rollup@0.57.1": "npm:@els-js/rollup@>=0.57.1-tuxcare.1",
123+
"markdown-it@13.0.2": "npm:@els-js/markdown-it@>=13.0.2-tuxcare.1",
124+
"diff@7.0.0": "npm:@els-js/diff@>=7.0.0-tuxcare.1"
125+
}
126+
```
127+
128+
* **Option 2: TuxCare Patcher (Automated)**
129+
130+
Install the Patcher globally and run it. The TuxCare Patcher updates your `package.json` so these library versions use the corresponding TuxCare `@els-js/*` packages.
131+
132+
```text
133+
npm install -g @els-js/tuxcare-patcher --userconfig ./.npmrc
134+
tuxcare-patch-js
135+
```
136+
137+
The patcher will update your `package.json`, for example, from:
138+
139+
```text
140+
"dependencies": {
141+
"rollup": "0.57.1",
142+
"markdown-it": "13.0.2",
143+
"diff": "7.0.0"
144+
}
145+
```
146+
147+
to:
148+
149+
```text
150+
"dependencies": {
151+
"rollup": "npm:@els-js/rollup@>=0.57.1-tuxcare.1",
152+
"markdown-it": "npm:@els-js/markdown-it@>=13.0.2-tuxcare.1",
153+
"diff": "npm:@els-js/diff@>=7.0.0-tuxcare.1"
154+
},
155+
"overrides": {
156+
"rollup@0.57.1": "npm:@els-js/rollup@>=0.57.1-tuxcare.1",
157+
"markdown-it@13.0.2": "npm:@els-js/markdown-it@>=13.0.2-tuxcare.1",
158+
"diff@7.0.0": "npm:@els-js/diff@>=7.0.0-tuxcare.1"
159+
}
160+
```
161+
162+
</template>
163+
164+
</TableTabs>
108165
109166
5. You need to remove the `node_modules` directory and the `package-lock.json` file, and also clear the `npm cache` before installing the patched packages. Use the following commands:
110167
@@ -149,6 +206,10 @@ If you have already installed a package with a `tuxcare.1` suffix and want to up
149206

150207
Fixes for the following **transitive** vulnerabilities are available in ELS for Ember.js from TuxCare versions:
151208

209+
<TableTabs label="Choose Ember.js version: " >
210+
211+
<template #ember_2.18.2>
212+
152213
| CVE ID | CVE Type | Severity | Affected Libraries | Vulnerable Versions |
153214
| :------------: | :------: |:--------:|:------------------:| :----------------: |
154215
| CVE-2021-23354 | Transitive | High | printf | < 0.6.1 |
@@ -158,4 +219,19 @@ Fixes for the following **transitive** vulnerabilities are available in ELS for
158219
| CVE-2026-27606 | Transitive | Critical | rollup | < 2.80.0, >= 3.0.0 < 3.30.0, >= 4.0.0 < 4.59.0 |
159220
| GHSA-wxhq-pm8v-cw75 | Transitive | Low | clean-css | < 4.1.11 |
160221

222+
</template>
223+
224+
<template #ember_3.28.6>
225+
226+
| CVE ID | CVE Type | Severity | Affected Libraries | Vulnerable Versions |
227+
| :------------: | :------: |:--------:|:------------------:| :----------------: |
228+
| CVE-2024-47068 | Transitive | Medium | rollup | < 2.79.2, >= 3.0.0 < 3.29.5, >= 4.0.0 < 4.22.4 |
229+
| CVE-2026-27606 | Transitive | Critical | rollup | < 2.80.0, >= 3.0.0 < 3.30.0, >= 4.0.0 < 4.59.0 |
230+
| CVE-2026-2327 | Transitive | High | markdown-it | >= 13.0.0 < 14.1.1 |
231+
| CVE-2026-24001 | Transitive | High | diff | < 3.5.1, >= 4.0.0 < 4.0.4, >= 5.0.0 < 5.2.2, >= 6.0.0 < 8.0.3 |
232+
233+
</template>
234+
235+
</TableTabs>
236+
161237
If you are interested in the TuxCare Endless Lifecycle Support, contact [sales@tuxcare.com](mailto:sales@tuxcare.com).

0 commit comments

Comments
 (0)