Skip to content

OCPBUGS-83287: [release-4.21] CVE-2026-26996 Bump minimatch library #16276

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Atharva-Shinde wants to merge 1 commit into
base: release-4.21
Choose a base branch
from
+51 −73
Open

OCPBUGS-83287: [release-4.21] CVE-2026-26996 Bump minimatch library #16276

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions dynamic-demo-plugin/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -77,5 +77,10 @@
"yamlEditor": "./components/YAMLEditorPage.tsx"
}
},
"resolutions": {
"minimatch@^3.0.2": "^3.1.3",
"minimatch@^3.0.4": "^3.1.3",
"minimatch@^3.1.1": "^3.1.3"
},
"packageManager": "yarn@4.12.0"
}
66 changes: 25 additions & 41 deletions dynamic-demo-plugin/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -196,7 +196,7 @@ __metadata:
version: 0.0.0-use.local
resolution: "@openshift-console/dynamic-plugin-sdk-webpack@portal:../frontend/packages/console-dynamic-plugin-sdk/dist/webpack::locator=%40console%2Fdynamic-demo-plugin%40workspace%3A."
dependencies:
"@openshift/dynamic-plugin-sdk-webpack": "npm:^4.1.0"
"@openshift/dynamic-plugin-sdk-webpack": "npm:^4.0.2"
ajv: "npm:^6.12.3"
chalk: "npm:2.4.x"
comment-json: "npm:4.x"
Expand All @@ -215,7 +215,6 @@ __metadata:
version: 0.0.0-use.local
resolution: "@openshift-console/dynamic-plugin-sdk@portal:../frontend/packages/console-dynamic-plugin-sdk/dist/core::locator=%40console%2Fdynamic-demo-plugin%40workspace%3A."
dependencies:
"@openshift/dynamic-plugin-sdk": "npm:^5.0.1"
"@patternfly/react-topology": "npm:^6.2.0"
immutable: "npm:3.x"
lodash: "npm:^4.17.23"
Expand All @@ -225,7 +224,7 @@ __metadata:
react-router: "npm:5.3.x"
react-router-dom: "npm:5.3.x"
react-router-dom-v5-compat: "npm:^6.11.2"
redux: "npm:^4.0.4"
redux: "npm:4.0.1"
redux-thunk: "npm:2.4.0"
reselect: "npm:4.x"
typesafe-actions: "npm:^4.2.1"
Expand All @@ -244,7 +243,7 @@ __metadata:
languageName: node
linkType: soft

"@openshift/dynamic-plugin-sdk-webpack@npm:^4.1.0":
"@openshift/dynamic-plugin-sdk-webpack@npm:^4.0.2":
version: 4.1.0
resolution: "@openshift/dynamic-plugin-sdk-webpack@npm:4.1.0"
dependencies:
Expand All @@ -257,20 +256,6 @@ __metadata:
languageName: node
linkType: hard

"@openshift/dynamic-plugin-sdk@npm:^5.0.1":
version: 5.0.1
resolution: "@openshift/dynamic-plugin-sdk@npm:5.0.1"
dependencies:
lodash: "npm:^4.17.21"
semver: "npm:^7.3.7"
uuid: "npm:^8.3.2"
yup: "npm:^0.32.11"
peerDependencies:
react: ^17 || ^18
checksum: 10c0/2793e27abd90b47daabb0a6c97c76d6acfe0f5a102d394e6eeb1c140e38609b1185dc774ce4816e4fe4ed76656b0f2e5d0295ee4529dc921a544a7d81c263c9c
languageName: node
linkType: hard

"@patternfly/react-core@npm:^6.0.0, @patternfly/react-core@npm:^6.2.2":
version: 6.2.2
resolution: "@patternfly/react-core@npm:6.2.2"
Expand Down Expand Up @@ -4121,21 +4106,12 @@ __metadata:
languageName: node
linkType: hard

"minimatch@npm:^3.0.2, minimatch@npm:^3.0.4":
version: 3.0.4
resolution: "minimatch@npm:3.0.4"
dependencies:
brace-expansion: "npm:^1.1.7"
checksum: 10c0/d0a2bcd93ebec08a9eef3ca83ba33c9fb6feb93932e0b4dc6aa46c5f37a9404bea7ad9ff7cafe23ce6634f1fe3b206f5315ecbb05812da6e692c21d8ecfd3dae
languageName: node
linkType: hard

"minimatch@npm:^3.1.1":
version: 3.1.2
resolution: "minimatch@npm:3.1.2"
"minimatch@npm:^3.1.3":
version: 3.1.5
resolution: "minimatch@npm:3.1.5"
dependencies:
brace-expansion: "npm:^1.1.7"
checksum: 10c0/0262810a8fc2e72cca45d6fd86bd349eee435eb95ac6aa45c9ea2180e7ee875ef44c32b55b5973ceabe95ea12682f6e3725cbb63d7a2d1da3ae1163c8b210311
checksum: 10c0/2ecbdc0d33f07bddb0315a8b5afbcb761307a8778b48f0b312418ccbced99f104a2d17d8aca7573433c70e8ccd1c56823a441897a45e384ea76ef401a26ace70
languageName: node
linkType: hard

Expand Down Expand Up @@ -5433,7 +5409,17 @@ __metadata:
languageName: node
linkType: hard

"redux@npm:^4.0.0, redux@npm:^4.0.4":
"redux@npm:4.0.1":
version: 4.0.1
resolution: "redux@npm:4.0.1"
dependencies:
loose-envify: "npm:^1.4.0"
symbol-observable: "npm:^1.2.0"
checksum: 10c0/40515233ca564c96890b3559945c0938d42af2ce41ad30541a3d64409dafcb61394dcacf8eabd957c7f1f44393f5e9ef74417607a441a08618c629d8d90bc2d1
languageName: node
linkType: hard

"redux@npm:^4.0.0":
version: 4.2.1
resolution: "redux@npm:4.2.1"
dependencies:
Expand Down Expand Up @@ -6171,6 +6157,13 @@ __metadata:
languageName: node
linkType: hard

"symbol-observable@npm:^1.2.0":
version: 1.2.0
resolution: "symbol-observable@npm:1.2.0"
checksum: 10c0/009fee50798ef80ed4b8195048288f108b03de162db07493f2e1fd993b33fafa72d659e832b584da5a2427daa78e5a738fb2a9ab027ee9454252e0bedbcd1fdc
languageName: node
linkType: hard

"symlink-or-copy@npm:^1.1.8, symlink-or-copy@npm:^1.2.0, symlink-or-copy@npm:^1.3.1":
version: 1.3.1
resolution: "symlink-or-copy@npm:1.3.1"
Expand Down Expand Up @@ -6553,15 +6546,6 @@ __metadata:
languageName: node
linkType: hard

"uuid@npm:^8.3.2":
version: 8.3.2
resolution: "uuid@npm:8.3.2"
bin:
uuid: dist/bin/uuid
checksum: 10c0/bcbb807a917d374a49f475fae2e87fdca7da5e5530820ef53f65ba1d12131bd81a92ecf259cc7ce317cbe0f289e7d79fdfebcef9bfa3087c8c8a2fa304c9be54
languageName: node
linkType: hard

"v8-compile-cache-lib@npm:^3.0.1":
version: 3.0.1
resolution: "v8-compile-cache-lib@npm:3.0.1"
Expand Down
9 changes: 8 additions & 1 deletion frontend/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -323,7 +323,14 @@
"ua-parser-js": "^0.7.24",
"glob-parent": "^5.1.2",
"postcss": "^8.2.13",
"async": "^3.2.5"
"async": "^3.2.5",
"minimatch@^3.0.2": "^3.1.3",
"minimatch@^3.0.3": "^3.1.3",
"minimatch@^3.0.4": "^3.1.3",
"minimatch@3.0.4": "^3.1.3",
"minimatch@3.0.5": "^3.1.3",
"minimatch@^3.1.1": "^3.1.3",
"minimatch@^9.0.4": "^9.0.6"
},
"lint-staged": {
"*.{js,jsx,ts,tsx,json,gql,graphql}": "eslint --color --fix"
Expand Down
44 changes: 13 additions & 31 deletions frontend/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6403,12 +6403,12 @@ __metadata:
languageName: node
linkType: hard

"brace-expansion@npm:^2.0.1":
version: 2.0.1
resolution: "brace-expansion@npm:2.0.1"
"brace-expansion@npm:^2.0.2":
version: 2.0.3
resolution: "brace-expansion@npm:2.0.3"
dependencies:
balanced-match: "npm:^1.0.0"
checksum: 10c0/b358f2fe060e2d7a87aa015979ecea07f3c37d4018f8d6deb5bd4c229ad3a0384fe6029bb76cd8be63c81e516ee52d1a0673edbe2023d53a5191732ae3c3e49f
checksum: 10c0/468436c9b2fa6f9e64d0cff8784b21300677571a7196e258593e95e7c3db9973a80fbafdb0f01404d5d298a04dc666eae1fc3c9052e2edbb9f2510541deeddfe
languageName: node
linkType: hard

Expand Down Expand Up @@ -16974,24 +16974,6 @@ __metadata:
languageName: node
linkType: hard

"minimatch@npm:3.0.4":
version: 3.0.4
resolution: "minimatch@npm:3.0.4"
dependencies:
brace-expansion: "npm:^1.1.7"
checksum: 10c0/d0a2bcd93ebec08a9eef3ca83ba33c9fb6feb93932e0b4dc6aa46c5f37a9404bea7ad9ff7cafe23ce6634f1fe3b206f5315ecbb05812da6e692c21d8ecfd3dae
languageName: node
linkType: hard

"minimatch@npm:3.0.5":
version: 3.0.5
resolution: "minimatch@npm:3.0.5"
dependencies:
brace-expansion: "npm:^1.1.7"
checksum: 10c0/f398652d0d260137c289c270a4ac98ebe0a27cd316fa0fac72b096e96cbdc89f71d80d47ac7065c716ba3b0b730783b19180bd85a35f9247535d2adfe96bba76
languageName: node
linkType: hard

"minimatch@npm:^10.2.2":
version: 10.2.2
resolution: "minimatch@npm:10.2.2"
Expand All @@ -17001,21 +16983,21 @@ __metadata:
languageName: node
linkType: hard

"minimatch@npm:^3.0.2, minimatch@npm:^3.0.3, minimatch@npm:^3.0.4, minimatch@npm:^3.1.1":
version: 3.1.2
resolution: "minimatch@npm:3.1.2"
"minimatch@npm:^3.1.3":
version: 3.1.5
resolution: "minimatch@npm:3.1.5"
dependencies:
brace-expansion: "npm:^1.1.7"
checksum: 10c0/0262810a8fc2e72cca45d6fd86bd349eee435eb95ac6aa45c9ea2180e7ee875ef44c32b55b5973ceabe95ea12682f6e3725cbb63d7a2d1da3ae1163c8b210311
checksum: 10c0/2ecbdc0d33f07bddb0315a8b5afbcb761307a8778b48f0b312418ccbced99f104a2d17d8aca7573433c70e8ccd1c56823a441897a45e384ea76ef401a26ace70
languageName: node
linkType: hard

"minimatch@npm:^9.0.4":
version: 9.0.5
resolution: "minimatch@npm:9.0.5"
"minimatch@npm:^9.0.6":
version: 9.0.9
resolution: "minimatch@npm:9.0.9"
dependencies:
brace-expansion: "npm:^2.0.1"
checksum: 10c0/de96cf5e35bdf0eab3e2c853522f98ffbe9a36c37797778d2665231ec1f20a9447a7e567cb640901f89e4daaa95ae5d70c65a9e8aa2bb0019b6facbc3c0575ed
brace-expansion: "npm:^2.0.2"
checksum: 10c0/0b6a58530dbb00361745aa6c8cffaba4c90f551afe7c734830bd95fd88ebf469dd7355a027824ea1d09e37181cfeb0a797fb17df60c15ac174303ac110eb7e86
languageName: node
linkType: hard

Expand Down