Skip to content

Commit f6aeb2c

Browse files
dependabot[bot]masontikhonov
dependabot[bot]
and
masontikhonov
authored
build(deps): bump the npm_and_yarn group across 1 directory with 4 updates (#918)
Bumps the npm_and_yarn group with 4 updates in the / directory: [adm-zip](https://github.com/cthackers/adm-zip), [js-yaml](https://github.com/nodeca/js-yaml), [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) and [websocket-driver](https://github.com/faye/websocket-driver-node). Updates `adm-zip` from 0.5.17 to 0.6.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cthackers/adm-zip/releases">adm-zip's releases</a>.</em></p> <blockquote> <h2>v0.6.0</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0">https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0</a></p> <p>This release fixes a security vulnerability (CVE-2026-39244), resolves several long-standing bugs, ships built-in TypeScript types, and includes two behavior changes worth reading before you upgrade.</p> <ul> <li>extractEntryTo(dirEntry, target, maintainEntryPath = false) now preserves subdirectories instead of flattening files into the target folder by basename (which also silently overwrote same-named files). (<a href="https://redirect.github.com/cthackers/adm-zip/issues/306">#306</a>)</li> <li>Extraction no longer fails when the modification time can't be set — utimes is now best-effort. (<a href="https://redirect.github.com/cthackers/adm-zip/issues/379">#379</a>)</li> <li>Minimum Node.js is now 14 (the code already required it; engines was incorrectly &gt;=12).</li> <li>CVE-2026-39244 — a crafted archive declaring a huge uncompressed size could force an unbounded Buffer.alloc and OOM the process; allocation is now bounded by the data actually present. Reported by Daniel Púa (devploit), Anh Hong, and José Antonio Zamudio Amaya. (<a href="https://redirect.github.com/cthackers/adm-zip/issues/568">#568</a>)</li> <li>Hardened entry-name lookup against object injection (<strong>proto</strong> names). Prototype-less table.</li> <li>Data-descriptor regression rejecting valid archives (<a href="https://redirect.github.com/cthackers/adm-zip/issues/548">#548</a>, <a href="https://redirect.github.com/cthackers/adm-zip/issues/533">#533</a>, <a href="https://redirect.github.com/cthackers/adm-zip/issues/554">#554</a>)</li> <li>Directory permissions not restored on extract (<a href="https://redirect.github.com/cthackers/adm-zip/issues/530">#530</a>)</li> <li>Infinite recursion on symlink loops in addLocalFolder (<a href="https://redirect.github.com/cthackers/adm-zip/issues/541">#541</a>)</li> <li>Uncaught process crash in writeFileToAsync on write failure (<a href="https://redirect.github.com/cthackers/adm-zip/issues/470">#470</a>, <a href="https://redirect.github.com/cthackers/adm-zip/issues/459">#459</a>, <a href="https://redirect.github.com/cthackers/adm-zip/issues/402">#402</a>)</li> <li>Empty name on directory entries (<a href="https://redirect.github.com/cthackers/adm-zip/issues/466">#466</a>)</li> <li>test() always returned false for archives with files</li> <li>~6× faster entry sorting for large archives</li> <li>Built-in TypeScript definitions (types.d.ts) — you can drop <code>@​types/adm-zip</code></li> </ul> <h2>v0.5.18</h2> <h2>What's Changed</h2> <ul> <li>Bump js-yaml from 4.1.1 to 4.3.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/cthackers/adm-zip/pull/566">cthackers/adm-zip#566</a></li> <li>Fix corrupted zip when round-tripping entries with a data descriptor (<a href="https://redirect.github.com/cthackers/adm-zip/issues/555">#555</a>) by <a href="https://github.com/JohnJunior"><code>@​JohnJunior</code></a> in <a href="https://redirect.github.com/cthackers/adm-zip/pull/564">cthackers/adm-zip#564</a></li> <li>prevent crashes when process.versions is an empty object by <a href="https://github.com/matt-fidd"><code>@​matt-fidd</code></a> in <a href="https://redirect.github.com/cthackers/adm-zip/pull/551">cthackers/adm-zip#551</a></li> <li>support for writing zip64 by <a href="https://github.com/mielverkerken"><code>@​mielverkerken</code></a> in <a href="https://redirect.github.com/cthackers/adm-zip/pull/562">cthackers/adm-zip#562</a></li> <li>Fix Archive Utility failure on zips with empty directories (<a href="https://redirect.github.com/cthackers/adm-zip/issues/558">#558</a>) by <a href="https://github.com/JohnJunior"><code>@​JohnJunior</code></a> in <a href="https://redirect.github.com/cthackers/adm-zip/pull/563">cthackers/adm-zip#563</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/JohnJunior"><code>@​JohnJunior</code></a> made their first contribution in <a href="https://redirect.github.com/cthackers/adm-zip/pull/564">cthackers/adm-zip#564</a></li> <li><a href="https://github.com/matt-fidd"><code>@​matt-fidd</code></a> made their first contribution in <a href="https://redirect.github.com/cthackers/adm-zip/pull/551">cthackers/adm-zip#551</a></li> <li><a href="https://github.com/mielverkerken"><code>@​mielverkerken</code></a> made their first contribution in <a href="https://redirect.github.com/cthackers/adm-zip/pull/562">cthackers/adm-zip#562</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/cthackers/adm-zip/compare/v0.5.17...v0.5.18">https://github.com/cthackers/adm-zip/compare/v0.5.17...v0.5.18</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/cthackers/adm-zip/blob/master/history.md">adm-zip's changelog</a>.</em></p> <blockquote> <h1>0.6.0 / 2026-07-10</h1> <p>Security</p> <ul> <li>Fixed CVE-2026-39244: a crafted archive declaring a huge uncompressed size could force an unbounded <code>Buffer.alloc</code> (memory exhaustion / DoS) before any validation. Allocation is now bounded by the data actually present — STORED output is sized from the real bytes, DEFLATED output is grown by the inflater and capped at the declared size (<a href="https://redirect.github.com/cthackers/adm-zip/issues/568">#568</a>)</li> <li>Hardened the internal entry-name lookup table against object injection: entry names come from untrusted archives, and a name such as <code>__proto__</code> previously resolved to <code>Object.prototype</code>, crashing <code>addFile</code> and hiding the entry from <code>getEntry</code>/<code>readFile</code>. The table is now prototype-less</li> </ul> <p>Bug fixes</p> <ul> <li>Fixed a regression (0.5.15) that rejected valid archives using a data descriptor (general-purpose bit 3). The payload is now validated against the authoritative central-directory CRC instead of requiring/parsing the trailing descriptor (<a href="https://redirect.github.com/cthackers/adm-zip/issues/548">#548</a>, <a href="https://redirect.github.com/cthackers/adm-zip/issues/533">#533</a>, <a href="https://redirect.github.com/cthackers/adm-zip/issues/554">#554</a>)</li> <li>Fixed <code>extractAllTo</code>/<code>extractAllToAsync</code> not restoring directory permissions with <code>keepOriginalPermission</code>; directory modes are applied after their contents are written, deepest path first, and no longer lock the extractor out of a restrictive directory (<a href="https://redirect.github.com/cthackers/adm-zip/issues/530">#530</a>)</li> <li>Fixed infinite recursion in <code>addLocalFolder</code> when a folder contains a symlink pointing back to an ancestor (e.g. workspace <code>node_modules</code>); the walk now tracks resolved real paths and skips already-visited directories (<a href="https://redirect.github.com/cthackers/adm-zip/issues/541">#541</a>)</li> <li>Fixed an uncaught exception (<code>ERR_INVALID_ARG_TYPE</code>) that crashed the process when <code>writeFileToAsync</code> could not open the target file (bad permissions, invalid filename, exhausted file descriptors); write failures are now reported through the callback and write errors are no longer silently swallowed (<a href="https://redirect.github.com/cthackers/adm-zip/issues/470">#470</a>, <a href="https://redirect.github.com/cthackers/adm-zip/issues/459">#459</a>, <a href="https://redirect.github.com/cthackers/adm-zip/issues/402">#402</a>)</li> <li>Fixed directory entries reporting an empty <code>name</code> (e.g. <code>a/b/c/</code> now returns <code>c</code>) (<a href="https://redirect.github.com/cthackers/adm-zip/issues/466">#466</a>)</li> <li>Fixed <code>extractEntryTo</code> flattening subdirectories when <code>maintainEntryPath</code> is false; the structure below the extracted directory is now preserved instead of collapsing (and overwriting) files by basename (<a href="https://redirect.github.com/cthackers/adm-zip/issues/306">#306</a>)</li> <li>Fixed a failed <code>utimes</code> aborting extraction; setting the modification time is now best-effort and never fails extraction of already-written content (<a href="https://redirect.github.com/cthackers/adm-zip/issues/379">#379</a>)</li> <li>Fixed <code>test()</code> always returning false for any archive containing a file (it indexed the entries array with an entry object instead of reading the entry); it now correctly verifies each entry's CRC</li> </ul> <p>Performance</p> <ul> <li>Faster entry sorting when writing archives with many entries: names are decoded once instead of on every comparison (about 6× faster sort for large archives)</li> </ul> <p>Added</p> <ul> <li>Bundled TypeScript type definitions (<code>types.d.ts</code>), so <code>@types/adm-zip</code> is no longer required</li> </ul> <p>Notes</p> <ul> <li>Behavior change: <code>extractEntryTo(dir, target, /* maintainEntryPath */ false)</code> now preserves subdirectories beneath the extracted directory rather than flattening them</li> <li>Behavior change: extraction no longer fails when the modification time cannot be set</li> </ul> <h1>0.5.4 / 2021-03-08</h1> <ul> <li>Fixed relative paths</li> <li>Added zipcrypto encryption</li> <li>Lower verMade for macOS when generating zip file</li> </ul> <h1>0.5.3 / 2021-02-07</h1> <ul> <li>Fixed filemode when unzipping</li> </ul> <h1>0.5.2 / 2021-01-27</h1> <ul> <li>Fixed path traversal issue (GHSL-2020-198)</li> </ul> <h1>0.5.1 / 2020-11-27</h1> <ul> <li>Incremented version (cthackers)</li> <li>Fixed outFileName (cthackers)</li> </ul> <h1>0.5.0 / 2020-11-19</h1> <ul> <li>Added extra parameter to extractEntryTo so target filename can be renamed (cthackers)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cthackers/adm-zip/commit/2b4d84087d45344643e0183756e19191d52815cc"><code>2b4d840</code></a> updated minimum node engine version to &gt;= 14</li> <li><a href="https://github.com/cthackers/adm-zip/commit/dc57f0fcc945571052f73f883b42ef1a7237de4e"><code>dc57f0f</code></a> Hardened entry-name lookup, fixed test(), and sped up entry sorting</li> <li><a href="https://github.com/cthackers/adm-zip/commit/f81806adc0352ea02d01152d740706f02d0cc371"><code>f81806a</code></a> Made utimes best-effort so it can't abort extraction (<a href="https://redirect.github.com/cthackers/adm-zip/issues/379">#379</a>)</li> <li><a href="https://github.com/cthackers/adm-zip/commit/ab0432410eaef87a6d1e89efdd7266aa9270641b"><code>ab04324</code></a> Fixed extractEntryTo flattening subdirectories (<a href="https://redirect.github.com/cthackers/adm-zip/issues/306">#306</a>)</li> <li><a href="https://github.com/cthackers/adm-zip/commit/8a5d9bacd5553d7f0172821658e27f4e4e76c6d5"><code>8a5d9ba</code></a> Fixed empty name for directory entries (<a href="https://redirect.github.com/cthackers/adm-zip/issues/466">#466</a>)</li> <li><a href="https://github.com/cthackers/adm-zip/commit/3e727907541ba2b5cabc3fdba60b71134bd85825"><code>3e72790</code></a> Fixed uncaught crash in writeFileToAsync on write failure (<a href="https://redirect.github.com/cthackers/adm-zip/issues/470">#470</a>, <a href="https://redirect.github.com/cthackers/adm-zip/issues/459">#459</a>, <a href="https://redirect.github.com/cthackers/adm-zip/issues/402">#402</a>)</li> <li><a href="https://github.com/cthackers/adm-zip/commit/651ae4c3497f4ec2609dbfafb731da32dfe5e9ad"><code>651ae4c</code></a> Added typescript types</li> <li><a href="https://github.com/cthackers/adm-zip/commit/e72021dedf1140ec09aa529c703c98e4ac7eb947"><code>e72021d</code></a> Fixed infinite recursion on symlink loops in addLocalFolder (<a href="https://redirect.github.com/cthackers/adm-zip/issues/541">#541</a>)</li> <li><a href="https://github.com/cthackers/adm-zip/commit/8f3176bef3ab5fe89b587e0b8152ae202f28d14a"><code>8f3176b</code></a> Fixed directory permissions on linux</li> <li><a href="https://github.com/cthackers/adm-zip/commit/4d2c8f9652618d1f70265df818f33c3d57dd53b2"><code>4d2c8f9</code></a> Fixed error introduced with zip descriptor checks</li> <li>Additional commits viewable in <a href="https://github.com/cthackers/adm-zip/compare/v0.5.17...v0.6.0">compare view</a></li> </ul> </details> <br /> Updates `js-yaml` from 3.14.2 to 3.15.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md">js-yaml's changelog</a>.</em></p> <blockquote> <h2>4.3.0, 3.15.0 - 2026-06-27</h2> <h3>Security</h3> <ul> <li>Backported <code>maxTotalMergeKeys</code> option.</li> </ul> <h2>[5.2.0] - 2026-06-26</h2> <h3>Added</h3> <ul> <li>Added <code>maxTotalMergeKeys</code> (10000) loader option to limit the total number of keys processed by YAML merge (<code>&lt;&lt;</code>) across one <code>load()</code> / <code>loadAll()</code> call.</li> <li>Added <code>maxAliases</code> (-1) loader option to limit the number of YAML aliases per document.</li> </ul> <h3>Removed</h3> <ul> <li><code>maxMergeSeqLength</code> replaced with <code>maxTotalMergeKeys</code> for limiting YAML merge processing.</li> </ul> <h3>Fixed</h3> <ul> <li>Round-trip of integers with exponential form (&gt;= <code>1e21</code>)</li> </ul> <h2>[5.1.0] - 2026-06-23</h2> <h3>Added</h3> <ul> <li>Collection tags can finalize an incrementally populated carrier into a different result value.</li> </ul> <h3>Changed</h3> <ul> <li>[breaking] <code>quoteStyle</code> now selects the preferred quote style; use the restored <code>forceQuotes</code> option to force quoting non-key strings.</li> </ul> <h2>[5.0.0] - 2026-06-20</h2> <h3>Added</h3> <ul> <li>Added named exports for schemas, tags, parser events and AST utilities.</li> <li>Reworked <code>JSON_SCHEMA</code> and <code>CORE_SCHEMA</code> with spec-compliant scalar resolution rules, and added <code>YAML11_SCHEMA</code>.</li> <li>Added <code>realMapTag</code> for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.</li> <li>Added <code>dump()</code> <code>transform</code> option for changing the generated AST before rendering.</li> <li>Added <code>dump()</code> options <code>seqInlineFirst</code>, <code>flowBracketPadding</code>, <code>flowSkipCommaSpace</code>, <code>flowSkipColonSpace</code>, <code>quoteFlowKeys</code>, <code>quoteStyle</code> and <code>tagBeforeAnchor</code>.</li> <li>Added formal data layers (events and AST) for modular data pipelines. <ul> <li>Added low-level parser (to events), presenter and visitor APIs.</li> </ul> </li> <li>Added the <a href="https://github.com/yaml/yaml-test-suite">YAML Test Suite</a> to the test set.</li> </ul> <h3>Changed</h3> <ul> <li>See the <a href="https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md">migration guide</a> for upgrade notes.</li> <li>Rewritten in TypeScript and reorganized the public API around flat named exports.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54"><code>c34b6c4</code></a> 3.15.0 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72"><code>21e13d3</code></a> dist rebuild</li> <li><a href="https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c"><code>4165c62</code></a> Add v3-legacy tag for publish</li> <li><a href="https://github.com/nodeca/js-yaml/commit/d8ff750b0130e4e4b4062fb0dbd32027e41d4c51"><code>d8ff750</code></a> Add package lock</li> <li><a href="https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"><code>24f13e7</code></a> Added <code>maxTotalMergeKeys</code> (10000) loader option (v5 backport)</li> <li>See full diff in <a href="https://github.com/nodeca/js-yaml/compare/3.14.2...3.15.0">compare view</a></li> </ul> </details> <br /> Updates `@babel/core` from 7.29.0 to 7.29.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/babel/babel/releases">@​babel/core's releases</a>.</em></p> <blockquote> <h2>v7.29.7 (2026-05-25)</h2> <p>Re-release all packages with npm provenance attestations</p> <h2>v7.29.6 (2026-05-25)</h2> <h4>:bug: Bug Fix</h4> <ul> <li><code>babel-generator</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/18014">#18014</a> Catchup source map position in preserveFormat (<a href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li> </ul> </li> <li><code>babel-core</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/18001">#18001</a> [7.x packport]Improve input source map handling (<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li> </ul> </li> <li><code>babel-core</code>, <code>babel-generator</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17998">#17998</a> Preserve original identifier names from input sourcemaps (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992">#17992</a>) (<a href="https://github.com/Andarist"><code>@​Andarist</code></a>)</li> </ul> </li> </ul> <h4>Committers: 3</h4> <ul> <li>Huáng Jùnliàng (<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li> <li>Mateusz Burzyński (<a href="https://github.com/Andarist"><code>@​Andarist</code></a>)</li> <li>Nicolò Ribaudo (<a href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li> </ul> <h2>v7.29.5 (2026-05-05)</h2> <h4>:house: Internal</h4> <ul> <li><code>babel-preset-env</code> <ul> <li>Update <code>@babel/*</code> dependencies</li> </ul> </li> </ul> <h2>v7.29.4 (2026-05-05)</h2> <h4>:bug: Bug Fix</h4> <ul> <li><code>babel-plugin-transform-modules-systemjs</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17974">#17974</a> [7.x backport]fix(systemjs): improve module string name support (<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li> </ul> </li> </ul> <h4>Committers: 1</h4> <ul> <li>Huáng Jùnliàng (<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li> </ul> <h2>v7.29.3 (2026-04-30)</h2> <h4>:eyeglasses: Spec Compliance</h4> <ul> <li><code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17923">#17923</a> Support flow extends bound (<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li> </ul> </li> </ul> <h4>:bug: Bug Fix</h4> <ul> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-plugin-proposal-decorators</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17931">#17931</a> fix(decorators): replace super within all removed static elements (<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li> </ul> </li> <li><code>babel-register</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17915">#17915</a> Fix thread synchronization issues in <code>@babel/register</code> (<a href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li> </ul> </li> <li><code>babel-compat-data</code>, <code>babel-plugin-bugfix-safari-rest-destructuring-rhs-array</code>, <code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17788">#17788</a> Add bugfix plugin for Safari array rest destructuring bug (<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li> </ul> </li> </ul> <h4>:nail_care: Polish</h4> <ul> <li><code>babel-parser</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090"><code>4fba754</code></a> v7.29.7</li> <li><a href="https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509"><code>04ea6b2</code></a> v7.29.6</li> <li><a href="https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb"><code>99f498a</code></a> [7.x packport]Improve input source map handling (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001">#18001</a>)</li> <li><a href="https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc"><code>feba0a3</code></a> Preserve original identifier names from input sourcemaps (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992">#17992</a>) (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998">#17998</a>)</li> <li>See full diff in <a href="https://github.com/babel/babel/commits/v7.29.7/packages/babel-core">compare view</a></li> </ul> </details> <br /> Updates `websocket-driver` from 0.7.4 to 0.7.5 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md">websocket-driver's changelog</a>.</em></p> <blockquote> <h3>0.7.5 / 2026-06-04</h3> <ul> <li>Close a draft-75/76 connection if a length header grows to exceed the configured max length</li> <li>Fail the connection if a message is larger than the configured max length after extension processing</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/faye/websocket-driver-node/commit/5d6a9aaf5f019007d917bd9ddc7eeb775c86cc1f"><code>5d6a9aa</code></a> Bump version to 0.7.5</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/c55679a5b18251dd0a55d18a0cc6a4fd8822b92f"><code>c55679a</code></a> Fail the connection if a message is larger than the configured max length aft...</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/5b197ca874dab58e96cacad8a3c256797d804680"><code>5b197ca</code></a> Close a draft-75/76 connection if a length header grows to exceed the configu...</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/fc93a48f879d0fd4a77c687a4a19c4328613df65"><code>fc93a48</code></a> Test on Node v22, v24, and v26</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/2e82d3464d294bdd11202657208636e667212335"><code>2e82d34</code></a> Test on recent versions of Node</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/e4962db9940ad1a8cf6fe8328d3b81c3f8c37479"><code>e4962db</code></a> Switch from Travis CI to GitHub Actions</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/3f2f9b70a8ae999b4657d26316a5d45b7caea679"><code>3f2f9b7</code></a> Travis update: cache npm modules, remove sudo, run on Node 15</li> <li>See full diff in <a href="https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/codefresh-io/cli/network/alerts). </details> <!-- ⚠️ ↓↓↓ Auto-generated by Codefresh CI. Any edits may be overridden. Image: ~codefresh/cli~ ↓↓↓ ⚠️ --> ## Security Report — codefresh/cli > [!NOTE] > Compared security scans: > > **Current image**: [quay.io/codefresh/cli:dependabotnpm_and_yarnnpm_and_yarn-7b375ce61c@sha256:cce477a7ead81c3d5ea07813fc8d913ac99979e23bdb2cdd4e7fbd5ed8d3c284](https://app.prismacloud.io/compute?computeState=/monitor/vulnerabilities/images/ci?search%3Dsha256%253Acce477a7ead81c3d5ea07813fc8d913ac99979e23bdb2cdd4e7fbd5ed8d3c284) > > **Baseline**: [quay.io/codefresh/cli:master@sha256:b8638037483323542ef9c0392eff88c7dc9afb513e1f2d186660339fd14936ca](https://app.prismacloud.io/compute?computeState=/monitor/vulnerabilities/images/ci?search%3Dsha256%253Ab8638037483323542ef9c0392eff88c7dc9afb513e1f2d186660339fd14936ca) ### Fixed CVEs: 4 #### 🟣 Critical: 1 - CVE-2026-54466 in `websocket-driver@0.7.4` at `/cf-cli/node_modules/websocket-driver` #### 🔴 High: 1 - CVE-2026-39244 in `adm-zip@0.5.17` at `/cf-cli/node_modules/adm-zip` #### 🟠 Medium: 1 - CVE-2026-54490 in `websocket-driver@0.7.4` at `/cf-cli/node_modules/websocket-driver` #### 🟡 Low: 1 - CVE-2026-53550 in `js-yaml@3.14.2` at `/cf-cli/node_modules/js-yaml` ### Fixed issues: 4 <!-- Fixed issues: ~[{"identifier":"CFS-14705","dueDate":"2026-08-17"},{"identifier":"CFS-14690","dueDate":"2026-07-30"},{"identifier":"CFS-14682","dueDate":"2026-09-14"},{"identifier":"CFS-12978","dueDate":"2026-08-15"}]~ --> - Fixes [CFS-14705](https://linear.app/octopus/issue/CFS-14705/security-or-codefreshcli-or-cve-2026-39244-or) - Fixes [CFS-14690](https://linear.app/octopus/issue/CFS-14690/security-or-codefreshcli-or-cve-2026-54466-or) - Fixes [CFS-14682](https://linear.app/octopus/issue/CFS-14682/security-or-codefreshcli-or-cve-2026-54490-or) - Fixes [CFS-12978](https://linear.app/octopus/issue/CFS-12978/security-or-codefreshcli-or-cve-2026-53550-or) <!-- ⚠️ ↑↑↑ Auto-generated by Codefresh CI. Any edits may be overridden. Image: ~codefresh/cli~ ↑↑↑ ⚠️ --> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Zhenya Tikhonov <masontikhonov@gmail.com> Co-authored-by: Zhenya Tikhonov <zhenya.tikhonov@octopus.com>
1 parent 25e589c commit f6aeb2c

2 files changed

Lines changed: 115 additions & 133 deletions

File tree

‎package.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "codefresh",
3-
"version": "1.2.2",
3+
"version": "1.2.3",
44
"description": "Codefresh command line utility",
55
"main": "index.js",
66
"preferGlobal": true,
@@ -48,7 +48,7 @@
4848
"**/request/qs": "^6.15.2"
4949
},
5050
"dependencies": {
51-
"adm-zip": "^0.5.5",
51+
"adm-zip": "^0.6.0",
5252
"ajv": "^6.14.0",
5353
"bluebird": "^3.5.1",
5454
"cf-errors": "^0.1.16",

‎yarn.lock‎

Lines changed: 113 additions & 131 deletions
Original file line numberDiff line numberDiff line change
@@ -482,112 +482,112 @@
482482
dependencies:
483483
"@babel/highlight" "^7.10.4"
484484

485-
"@babel/code-frame@^7.0.0", "@babel/code-frame@^7.12.13", "@babel/code-frame@^7.28.6", "@babel/code-frame@^7.29.0":
486-
version "7.29.0"
487-
resolved "https://registry.yarnpkg.com/@babel/code-frame/-/code-frame-7.29.0.tgz#7cd7a59f15b3cc0dcd803038f7792712a7d0b15c"
488-
integrity sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==
485+
"@babel/code-frame@^7.0.0", "@babel/code-frame@^7.12.13", "@babel/code-frame@^7.29.7":
486+
version "7.29.7"
487+
resolved "https://registry.yarnpkg.com/@babel/code-frame/-/code-frame-7.29.7.tgz#f2fbbfea87c44a21590ec515b778b2c26d8866e7"
488+
integrity sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==
489489
dependencies:
490-
"@babel/helper-validator-identifier" "^7.28.5"
490+
"@babel/helper-validator-identifier" "^7.29.7"
491491
js-tokens "^4.0.0"
492492
picocolors "^1.1.1"
493493

494-
"@babel/compat-data@^7.28.6":
495-
version "7.29.3"
496-
resolved "https://registry.yarnpkg.com/@babel/compat-data/-/compat-data-7.29.3.tgz#e3f5347f0589596c91d227ccb6a541d37fb1307b"
497-
integrity sha512-LIVqM46zQWZhj17qA8wb4nW/ixr2y1Nw+r1etiAWgRM6U1IqP+LNhL1yg440jYZR72jCWcWbLWzIosH+uP1fqg==
494+
"@babel/compat-data@^7.29.7":
495+
version "7.29.7"
496+
resolved "https://registry.yarnpkg.com/@babel/compat-data/-/compat-data-7.29.7.tgz#6f0237f0f36d2e51c0570a636faed9d2d0efe629"
497+
integrity sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==
498498

499499
"@babel/core@^7.11.6", "@babel/core@^7.12.3", "@babel/core@^7.23.9":
500-
version "7.29.0"
501-
resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.29.0.tgz#5286ad785df7f79d656e88ce86e650d16ca5f322"
502-
integrity sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==
503-
dependencies:
504-
"@babel/code-frame" "^7.29.0"
505-
"@babel/generator" "^7.29.0"
506-
"@babel/helper-compilation-targets" "^7.28.6"
507-
"@babel/helper-module-transforms" "^7.28.6"
508-
"@babel/helpers" "^7.28.6"
509-
"@babel/parser" "^7.29.0"
510-
"@babel/template" "^7.28.6"
511-
"@babel/traverse" "^7.29.0"
512-
"@babel/types" "^7.29.0"
500+
version "7.29.7"
501+
resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.29.7.tgz#80c10b17248082968b57a857b91640971f2070f7"
502+
integrity sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==
503+
dependencies:
504+
"@babel/code-frame" "^7.29.7"
505+
"@babel/generator" "^7.29.7"
506+
"@babel/helper-compilation-targets" "^7.29.7"
507+
"@babel/helper-module-transforms" "^7.29.7"
508+
"@babel/helpers" "^7.29.7"
509+
"@babel/parser" "^7.29.7"
510+
"@babel/template" "^7.29.7"
511+
"@babel/traverse" "^7.29.7"
512+
"@babel/types" "^7.29.7"
513513
"@jridgewell/remapping" "^2.3.5"
514514
convert-source-map "^2.0.0"
515515
debug "^4.1.0"
516516
gensync "^1.0.0-beta.2"
517517
json5 "^2.2.3"
518518
semver "^6.3.1"
519519

520-
"@babel/generator@^7.23.0", "@babel/generator@^7.29.0", "@babel/generator@^7.7.2":
521-
version "7.29.1"
522-
resolved "https://registry.yarnpkg.com/@babel/generator/-/generator-7.29.1.tgz#d09876290111abbb00ef962a7b83a5307fba0d50"
523-
integrity sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==
520+
"@babel/generator@^7.23.0", "@babel/generator@^7.29.7", "@babel/generator@^7.7.2":
521+
version "7.29.7"
522+
resolved "https://registry.yarnpkg.com/@babel/generator/-/generator-7.29.7.tgz#cca0b8827e6bcf3ba176788e7f3b180ad6db2fa3"
523+
integrity sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ==
524524
dependencies:
525-
"@babel/parser" "^7.29.0"
526-
"@babel/types" "^7.29.0"
525+
"@babel/parser" "^7.29.7"
526+
"@babel/types" "^7.29.7"
527527
"@jridgewell/gen-mapping" "^0.3.12"
528528
"@jridgewell/trace-mapping" "^0.3.28"
529529
jsesc "^3.0.2"
530530

531-
"@babel/helper-compilation-targets@^7.28.6":
532-
version "7.28.6"
533-
resolved "https://registry.yarnpkg.com/@babel/helper-compilation-targets/-/helper-compilation-targets-7.28.6.tgz#32c4a3f41f12ed1532179b108a4d746e105c2b25"
534-
integrity sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA==
531+
"@babel/helper-compilation-targets@^7.29.7":
532+
version "7.29.7"
533+
resolved "https://registry.yarnpkg.com/@babel/helper-compilation-targets/-/helper-compilation-targets-7.29.7.tgz#7a1def704302401c47f64fa85589e974ae217042"
534+
integrity sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==
535535
dependencies:
536-
"@babel/compat-data" "^7.28.6"
537-
"@babel/helper-validator-option" "^7.27.1"
536+
"@babel/compat-data" "^7.29.7"
537+
"@babel/helper-validator-option" "^7.29.7"
538538
browserslist "^4.24.0"
539539
lru-cache "^5.1.1"
540540
semver "^6.3.1"
541541

542-
"@babel/helper-globals@^7.28.0":
543-
version "7.28.0"
544-
resolved "https://registry.yarnpkg.com/@babel/helper-globals/-/helper-globals-7.28.0.tgz#b9430df2aa4e17bc28665eadeae8aa1d985e6674"
545-
integrity sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==
542+
"@babel/helper-globals@^7.29.7":
543+
version "7.29.7"
544+
resolved "https://registry.yarnpkg.com/@babel/helper-globals/-/helper-globals-7.29.7.tgz#f04a96fbd8473241b1079243f5b3f03a3010ab7b"
545+
integrity sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==
546546

547-
"@babel/helper-module-imports@^7.28.6":
548-
version "7.28.6"
549-
resolved "https://registry.yarnpkg.com/@babel/helper-module-imports/-/helper-module-imports-7.28.6.tgz#60632cbd6ffb70b22823187201116762a03e2d5c"
550-
integrity sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw==
547+
"@babel/helper-module-imports@^7.29.7":
548+
version "7.29.7"
549+
resolved "https://registry.yarnpkg.com/@babel/helper-module-imports/-/helper-module-imports-7.29.7.tgz#ef25048a518e828d7393fac5882ddd73921d7396"
550+
integrity sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==
551551
dependencies:
552-
"@babel/traverse" "^7.28.6"
553-
"@babel/types" "^7.28.6"
552+
"@babel/traverse" "^7.29.7"
553+
"@babel/types" "^7.29.7"
554554

555-
"@babel/helper-module-transforms@^7.28.6":
556-
version "7.28.6"
557-
resolved "https://registry.yarnpkg.com/@babel/helper-module-transforms/-/helper-module-transforms-7.28.6.tgz#9312d9d9e56edc35aeb6e95c25d4106b50b9eb1e"
558-
integrity sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA==
555+
"@babel/helper-module-transforms@^7.29.7":
556+
version "7.29.7"
557+
resolved "https://registry.yarnpkg.com/@babel/helper-module-transforms/-/helper-module-transforms-7.29.7.tgz#b062747a5997ba138637201328bbff77960574ae"
558+
integrity sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==
559559
dependencies:
560-
"@babel/helper-module-imports" "^7.28.6"
561-
"@babel/helper-validator-identifier" "^7.28.5"
562-
"@babel/traverse" "^7.28.6"
560+
"@babel/helper-module-imports" "^7.29.7"
561+
"@babel/helper-validator-identifier" "^7.29.7"
562+
"@babel/traverse" "^7.29.7"
563563

564564
"@babel/helper-plugin-utils@^7.0.0", "@babel/helper-plugin-utils@^7.10.4", "@babel/helper-plugin-utils@^7.12.13", "@babel/helper-plugin-utils@^7.14.5", "@babel/helper-plugin-utils@^7.28.6", "@babel/helper-plugin-utils@^7.8.0":
565565
version "7.28.6"
566566
resolved "https://registry.yarnpkg.com/@babel/helper-plugin-utils/-/helper-plugin-utils-7.28.6.tgz#6f13ea251b68c8532e985fd532f28741a8af9ac8"
567567
integrity sha512-S9gzZ/bz83GRysI7gAD4wPT/AI3uCnY+9xn+Mx/KPs2JwHJIz1W8PZkg2cqyt3RNOBM8ejcXhV6y8Og7ly/Dug==
568568

569-
"@babel/helper-string-parser@^7.27.1":
570-
version "7.27.1"
571-
resolved "https://registry.yarnpkg.com/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz#54da796097ab19ce67ed9f88b47bb2ec49367687"
572-
integrity sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==
569+
"@babel/helper-string-parser@^7.29.7":
570+
version "7.29.7"
571+
resolved "https://registry.yarnpkg.com/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz#7f0871d99824d23137d60f86fcf6130fd5a1b51f"
572+
integrity sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==
573573

574-
"@babel/helper-validator-identifier@^7.25.9", "@babel/helper-validator-identifier@^7.28.5":
575-
version "7.28.5"
576-
resolved "https://registry.yarnpkg.com/@babel/helper-validator-identifier/-/helper-validator-identifier-7.28.5.tgz#010b6938fab7cb7df74aa2bbc06aa503b8fe5fb4"
577-
integrity sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==
574+
"@babel/helper-validator-identifier@^7.25.9", "@babel/helper-validator-identifier@^7.29.7":
575+
version "7.29.7"
576+
resolved "https://registry.yarnpkg.com/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz#bd87084ced0c796ec46bda492de6e83d29e89fc2"
577+
integrity sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==
578578

579-
"@babel/helper-validator-option@^7.27.1":
580-
version "7.27.1"
581-
resolved "https://registry.yarnpkg.com/@babel/helper-validator-option/-/helper-validator-option-7.27.1.tgz#fa52f5b1e7db1ab049445b421c4471303897702f"
582-
integrity sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg==
579+
"@babel/helper-validator-option@^7.29.7":
580+
version "7.29.7"
581+
resolved "https://registry.yarnpkg.com/@babel/helper-validator-option/-/helper-validator-option-7.29.7.tgz#cf315be940213b354eb4abcc0bd01ebe3f73bc2a"
582+
integrity sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==
583583

584-
"@babel/helpers@^7.28.6":
585-
version "7.29.2"
586-
resolved "https://registry.yarnpkg.com/@babel/helpers/-/helpers-7.29.2.tgz#9cfbccb02b8e229892c0b07038052cc1a8709c49"
587-
integrity sha512-HoGuUs4sCZNezVEKdVcwqmZN8GoHirLUcLaYVNBK2J0DadGtdcqgr3BCbvH8+XUo4NGjNl3VOtSjEKNzqfFgKw==
584+
"@babel/helpers@^7.29.7":
585+
version "7.29.7"
586+
resolved "https://registry.yarnpkg.com/@babel/helpers/-/helpers-7.29.7.tgz#45abfde7548997e34376c3e69feb475cffb4a607"
587+
integrity sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==
588588
dependencies:
589-
"@babel/template" "^7.28.6"
590-
"@babel/types" "^7.29.0"
589+
"@babel/template" "^7.29.7"
590+
"@babel/types" "^7.29.7"
591591

592592
"@babel/highlight@^7.10.4":
593593
version "7.25.9"
@@ -599,12 +599,12 @@
599599
js-tokens "^4.0.0"
600600
picocolors "^1.0.0"
601601

602-
"@babel/parser@^7.1.0", "@babel/parser@^7.14.7", "@babel/parser@^7.20.7", "@babel/parser@^7.23.0", "@babel/parser@^7.23.9", "@babel/parser@^7.28.6", "@babel/parser@^7.29.0":
603-
version "7.29.3"
604-
resolved "https://registry.yarnpkg.com/@babel/parser/-/parser-7.29.3.tgz#116f70a77958307fceac27747573032f8a62f88e"
605-
integrity sha512-b3ctpQwp+PROvU/cttc4OYl4MzfJUWy6FZg+PMXfzmt/+39iHVF0sDfqay8TQM3JA2EUOyKcFZt75jWriQijsA==
602+
"@babel/parser@^7.1.0", "@babel/parser@^7.14.7", "@babel/parser@^7.20.7", "@babel/parser@^7.23.0", "@babel/parser@^7.23.9", "@babel/parser@^7.29.7":
603+
version "7.29.7"
604+
resolved "https://registry.yarnpkg.com/@babel/parser/-/parser-7.29.7.tgz#837b87387cbf5ec5530cb634b3c622f68edb9334"
605+
integrity sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg==
606606
dependencies:
607-
"@babel/types" "^7.29.0"
607+
"@babel/types" "^7.29.7"
608608

609609
"@babel/plugin-syntax-async-generators@^7.8.4":
610610
version "7.8.4"
@@ -732,35 +732,35 @@
732732
dependencies:
733733
core-js-pure "^3.48.0"
734734

735-
"@babel/template@^7.28.6", "@babel/template@^7.3.3":
736-
version "7.28.6"
737-
resolved "https://registry.yarnpkg.com/@babel/template/-/template-7.28.6.tgz#0e7e56ecedb78aeef66ce7972b082fce76a23e57"
738-
integrity sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==
739-
dependencies:
740-
"@babel/code-frame" "^7.28.6"
741-
"@babel/parser" "^7.28.6"
742-
"@babel/types" "^7.28.6"
743-
744-
"@babel/traverse@^7.23.0", "@babel/traverse@^7.28.6", "@babel/traverse@^7.29.0":
745-
version "7.29.0"
746-
resolved "https://registry.yarnpkg.com/@babel/traverse/-/traverse-7.29.0.tgz#f323d05001440253eead3c9c858adbe00b90310a"
747-
integrity sha512-4HPiQr0X7+waHfyXPZpWPfWL/J7dcN1mx9gL6WdQVMbPnF3+ZhSMs8tCxN7oHddJE9fhNE7+lxdnlyemKfJRuA==
748-
dependencies:
749-
"@babel/code-frame" "^7.29.0"
750-
"@babel/generator" "^7.29.0"
751-
"@babel/helper-globals" "^7.28.0"
752-
"@babel/parser" "^7.29.0"
753-
"@babel/template" "^7.28.6"
754-
"@babel/types" "^7.29.0"
735+
"@babel/template@^7.29.7", "@babel/template@^7.3.3":
736+
version "7.29.7"
737+
resolved "https://registry.yarnpkg.com/@babel/template/-/template-7.29.7.tgz#4d9d4004f645cdd304de958c725162784ecac700"
738+
integrity sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==
739+
dependencies:
740+
"@babel/code-frame" "^7.29.7"
741+
"@babel/parser" "^7.29.7"
742+
"@babel/types" "^7.29.7"
743+
744+
"@babel/traverse@^7.23.0", "@babel/traverse@^7.29.7":
745+
version "7.29.7"
746+
resolved "https://registry.yarnpkg.com/@babel/traverse/-/traverse-7.29.7.tgz#c47b07a41b95da0907d026b5dd894d98de7d2f2d"
747+
integrity sha512-EhlfNQtZ+NK22w5BM61ciuiq1m58ed33Wr1Xan//ZRTy6hgjnwyCffRYwzsGXdASJSUJ1guZILsErh1eQcl+zw==
748+
dependencies:
749+
"@babel/code-frame" "^7.29.7"
750+
"@babel/generator" "^7.29.7"
751+
"@babel/helper-globals" "^7.29.7"
752+
"@babel/parser" "^7.29.7"
753+
"@babel/template" "^7.29.7"
754+
"@babel/types" "^7.29.7"
755755
debug "^4.3.1"
756756

757-
"@babel/types@^7.0.0", "@babel/types@^7.20.7", "@babel/types@^7.23.0", "@babel/types@^7.28.2", "@babel/types@^7.28.6", "@babel/types@^7.29.0", "@babel/types@^7.3.3":
758-
version "7.29.0"
759-
resolved "https://registry.yarnpkg.com/@babel/types/-/types-7.29.0.tgz#9f5b1e838c446e72cf3cd4b918152b8c605e37c7"
760-
integrity sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==
757+
"@babel/types@^7.0.0", "@babel/types@^7.20.7", "@babel/types@^7.23.0", "@babel/types@^7.28.2", "@babel/types@^7.29.7", "@babel/types@^7.3.3":
758+
version "7.29.7"
759+
resolved "https://registry.yarnpkg.com/@babel/types/-/types-7.29.7.tgz#8005e31d82712ee7adaef6e23c63b71a62770a92"
760+
integrity sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==
761761
dependencies:
762-
"@babel/helper-string-parser" "^7.27.1"
763-
"@babel/helper-validator-identifier" "^7.28.5"
762+
"@babel/helper-string-parser" "^7.29.7"
763+
"@babel/helper-validator-identifier" "^7.29.7"
764764

765765
"@bcoe/v8-coverage@^0.2.3":
766766
version "0.2.3"
@@ -2104,10 +2104,10 @@ acorn@^7.4.0:
21042104
resolved "https://registry.yarnpkg.com/acorn/-/acorn-7.4.1.tgz#feaed255973d2e77555b83dbc08851a6c63520fa"
21052105
integrity sha512-nQyp0o1/mNdbTO1PO6kHkwSrmgZ0MT/jCCpNiwbUjGoRN4dlBhqJtoQuCnEOKzgTVwg0ZWiCoQy6SxMebQVh8A==
21062106

2107-
adm-zip@^0.5.5:
2108-
version "0.5.17"
2109-
resolved "https://registry.yarnpkg.com/adm-zip/-/adm-zip-0.5.17.tgz#5c0b65f37aeec5c2a94995c024f931f62e4bbc5a"
2110-
integrity sha512-+Ut8d9LLqwEvHHJl1+PIHqoyDxFgVN847JTVM3Izi3xHDWPE4UtzzXysMZQs64DMcrJfBeS/uoEP4AD3HQHnQQ==
2107+
adm-zip@^0.6.0:
2108+
version "0.6.0"
2109+
resolved "https://registry.yarnpkg.com/adm-zip/-/adm-zip-0.6.0.tgz#bbc5c6c333755e967a06dd98747f431e1d53a3cf"
2110+
integrity sha512-XleryMhbuksdKtofnWZ9Sk+4CUTbms4Mb/EU32SZwToAyZ5RgVos/ki8n+yr0LWHOGKuakbXTuuYNHLQjhddgg==
21112111

21122112
agent-base@6:
21132113
version "6.0.2"
@@ -4251,14 +4251,7 @@ has-tostringtag@^1.0.2:
42514251
dependencies:
42524252
has-symbols "^1.0.3"
42534253

4254-
hasown@^2.0.2:
4255-
version "2.0.3"
4256-
resolved "https://registry.yarnpkg.com/hasown/-/hasown-2.0.3.tgz#5e5c2b15b60370a4c7930c383dfb76bf17bc403c"
4257-
integrity sha512-ej4AhfhfL2Q2zpMmLo7U1Uv9+PyhIZpgQLGT1F9miIGmiCJIoCgSmczFdrc97mWT4kVY72KA+WnnhJ5pghSvSg==
4258-
dependencies:
4259-
function-bind "^1.1.2"
4260-
4261-
hasown@^2.0.4:
4254+
hasown@^2.0.2, hasown@^2.0.4:
42624255
version "2.0.4"
42634256
resolved "https://registry.yarnpkg.com/hasown/-/hasown-2.0.4.tgz#8c62d8cb90beb2aad5d0a5b67581ad9854c3f003"
42644257
integrity sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==
@@ -5125,9 +5118,9 @@ js-tokens@^4.0.0:
51255118
integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==
51265119

51275120
js-yaml@^3.10.0, js-yaml@^3.13.1, js-yaml@^3.14.0:
5128-
version "3.14.2"
5129-
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.14.2.tgz#77485ce1dd7f33c061fd1b16ecea23b55fcb04b0"
5130-
integrity sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==
5121+
version "3.15.0"
5122+
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.15.0.tgz#586e5214eafe3e893756a41e979b50d89d3e4a67"
5123+
integrity sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==
51315124
dependencies:
51325125
argparse "^1.0.7"
51335126
esprima "^4.0.0"
@@ -6484,7 +6477,7 @@ shebang-regex@^3.0.0:
64846477
resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-3.0.0.tgz#ae16f1644d873ecad843b0307b143362d4c42172"
64856478
integrity sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==
64866479

6487-
side-channel-list@^1.0.0, side-channel-list@^1.0.1:
6480+
side-channel-list@^1.0.1:
64886481
version "1.0.1"
64896482
resolved "https://registry.yarnpkg.com/side-channel-list/-/side-channel-list-1.0.1.tgz#c2e0b5a14a540aebee3bbc6c3f8666cc9b509127"
64906483
integrity sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==
@@ -6513,18 +6506,7 @@ side-channel-weakmap@^1.0.2:
65136506
object-inspect "^1.13.3"
65146507
side-channel-map "^1.0.1"
65156508

6516-
side-channel@^1.1.0:
6517-
version "1.1.0"
6518-
resolved "https://registry.yarnpkg.com/side-channel/-/side-channel-1.1.0.tgz#c3fcff9c4da932784873335ec9765fa94ff66bc9"
6519-
integrity sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==
6520-
dependencies:
6521-
es-errors "^1.3.0"
6522-
object-inspect "^1.13.3"
6523-
side-channel-list "^1.0.0"
6524-
side-channel-map "^1.0.1"
6525-
side-channel-weakmap "^1.0.2"
6526-
6527-
side-channel@^1.1.1:
6509+
side-channel@^1.1.0, side-channel@^1.1.1:
65286510
version "1.1.1"
65296511
resolved "https://registry.yarnpkg.com/side-channel/-/side-channel-1.1.1.tgz#ea02c62e05dc4bea67d4442f0fb71ee192f8e0ab"
65306512
integrity sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==
@@ -7319,9 +7301,9 @@ webidl-conversions@^7.0.0:
73197301
integrity sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==
73207302

73217303
websocket-driver@>=0.5.1:
7322-
version "0.7.4"
7323-
resolved "https://registry.yarnpkg.com/websocket-driver/-/websocket-driver-0.7.4.tgz#89ad5295bbf64b480abcba31e4953aca706f5760"
7324-
integrity sha512-b17KeDIQVjvb0ssuSDF2cYXSg2iztliJ4B9WdsuB6J952qCPKmnVq4DyW5motImXHDC1cBT/1UezrJVsKw5zjg==
7304+
version "0.7.5"
7305+
resolved "https://registry.yarnpkg.com/websocket-driver/-/websocket-driver-0.7.5.tgz#569d22764ab21f2de20af0e74b411e8ae5a0fa46"
7306+
integrity sha512-ZL2+3c7kMBdIRCMz6l8jQMHyGVxj+UL+xVk74Ombiciboca8rHa15L86B19E5oh1pL9Ii/uj54gtsIrZGMo6zA==
73257307
dependencies:
73267308
http-parser-js ">=0.5.1"
73277309
safe-buffer ">=5.1.0"

0 commit comments

Comments
 (0)