Skip to content

chore(orchestrator): patch yarn.lock to resolve 1.10.2 CVEs#2658

Merged
JessicaJHee merged 4 commits into
redhat-developer:release-1.10from
JessicaJHee:1.10.2-orchestrator-cve
Jul 2, 2026
Merged

chore(orchestrator): patch yarn.lock to resolve 1.10.2 CVEs#2658
JessicaJHee merged 4 commits into
redhat-developer:release-1.10from
JessicaJHee:1.10.2-orchestrator-cve

Conversation

@JessicaJHee

@JessicaJHee JessicaJHee commented Jun 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Patch containing CVE fixes listed in the manifest file, generated by the scripts in this PR

Fixes RHIDP-14960

Note that form-data couldn’t be completely bump due to pinned rbac version, but it’s fine because it’s in the app-legacy dev package

└─┬ app-legacy@0.0.3 -> ./packages/app-legacy
  ├─┬ @backstage-community/plugin-rbac@1.33.2
  │ └─┬ @janus-idp/shared-react@2.14.0
  │   └─┬ @kubernetes/client-node@0.22.3
  │     └─┬ request@2.88.2
  │       └── form-data@2.3.3

@JessicaJHee

JessicaJHee commented Jun 24, 2026

Copy link
Copy Markdown
Member Author

/publish

@github-actions

github-actions Bot commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

Publish workflow has completed with success.

Publishing process

✅ Finished successfully.

✅ Published container images:

  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:pr_2658__5.7.13
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:pr_2658__8.9.5
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki:pr_2658__1.2.6
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:pr_2658__1.10.8
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:pr_2658__1.5.4

Backstage Compatibility Check

✅ All workspaces are compatible with the target Backstage version (1.49.4).

No action required.

Metadata Validation

✅ All metadata files validated successfully.

Running e2e tests
/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jun 24, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 17m 55s
Passed: 31 | Failed: 1 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@github-actions github-actions Bot added release-branch-patch PR modifies workspace on a release branch workspace-update PR modifies files in an existing workspace labels Jun 24, 2026
@JessicaJHee

JessicaJHee commented Jun 25, 2026

Copy link
Copy Markdown
Member Author

/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jun 25, 2026

Copy link
Copy Markdown

✅ Passed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 17m 22s
Passed: 32 | Failed: 0 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@JessicaJHee JessicaJHee marked this pull request as draft June 25, 2026 20:43
@JessicaJHee JessicaJHee force-pushed the 1.10.2-orchestrator-cve branch from 6a79fc3 to 5cb428b Compare June 26, 2026 14:34
@JessicaJHee JessicaJHee marked this pull request as ready for review June 26, 2026 14:37
@JessicaJHee

JessicaJHee commented Jun 26, 2026

Copy link
Copy Markdown
Member Author

/publish

@JessicaJHee JessicaJHee mentioned this pull request Jun 26, 2026
Open
@github-actions

github-actions Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Publish workflow has completed with success.

Publishing process

✅ Finished successfully.

✅ Published container images:

  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:pr_2658__5.7.13
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:pr_2658__8.9.5
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki:pr_2658__1.2.6
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:pr_2658__1.10.8
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:pr_2658__1.5.4

Backstage Compatibility Check

✅ All workspaces are compatible with the target Backstage version (1.49.4).

No action required.

Metadata Validation

✅ All metadata files validated successfully.

Running e2e tests
/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jun 26, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 19m 54s
Passed: 31 | Failed: 1 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@JessicaJHee

JessicaJHee commented Jun 26, 2026

Copy link
Copy Markdown
Member Author

/publish

@JessicaJHee

JessicaJHee commented Jun 26, 2026

Copy link
Copy Markdown
Member Author

/test e2e-ocp-helm

@github-actions

github-actions Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Publish workflow has completed with success.

Publishing process

✅ Finished successfully.

✅ Published container images:

  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:pr_2658__5.7.13
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:pr_2658__8.9.5
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki:pr_2658__1.2.6
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:pr_2658__1.10.8
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:pr_2658__1.5.4

Backstage Compatibility Check

✅ All workspaces are compatible with the target Backstage version (1.49.4).

No action required.

Metadata Validation

✅ All metadata files validated successfully.

Running e2e tests
/test e2e-ocp-helm

@JessicaJHee

JessicaJHee commented Jun 26, 2026

Copy link
Copy Markdown
Member Author

/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jun 26, 2026

Copy link
Copy Markdown

✅ Passed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 17m 40s
Passed: 32 | Failed: 0 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@JessicaJHee JessicaJHee force-pushed the 1.10.2-orchestrator-cve branch from 98b713c to cbb7766 Compare June 30, 2026 16:32
@JessicaJHee

JessicaJHee commented Jun 30, 2026

Copy link
Copy Markdown
Member Author

/publish

@github-actions

github-actions Bot commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

Publish workflow has completed with success.

Publishing process

✅ Finished successfully.

✅ Published container images:

  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:pr_2658__5.7.13
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:pr_2658__8.9.5
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki:pr_2658__1.2.7
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:pr_2658__1.10.8
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:pr_2658__1.5.4

Backstage Compatibility Check

✅ All workspaces are compatible with the target Backstage version (1.49.4).

No action required.

Metadata Validation

✅ All metadata files validated successfully.

Running e2e tests
/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jun 30, 2026

Copy link
Copy Markdown

✅ Passed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 18m 4s
Passed: 32 | Failed: 0 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@JessicaJHee
chore(orchestrator): patch yarn.lock to resolve 1.10.2 CVEs
67cfe62 
Signed-off-by: Jessica He <jhe@redhat.com>
@JessicaJHee JessicaJHee force-pushed the 1.10.2-orchestrator-cve branch from cbb7766 to 67cfe62 Compare July 1, 2026 11:18
@alizard0

alizard0 commented Jul 1, 2026

Copy link
Copy Markdown
Member

/publish

@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Publish workflow has completed with success.

Publishing process

✅ Finished successfully.

✅ Published container images:

  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:pr_2658__5.7.13
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:pr_2658__8.9.5
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki:pr_2658__1.2.7
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:pr_2658__1.10.8
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:pr_2658__1.5.4

Backstage Compatibility Check

✅ All workspaces are compatible with the target Backstage version (1.49.4).

No action required.

Metadata Validation

✅ All metadata files validated successfully.

Running e2e tests
/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jul 1, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 19m 30s
Passed: 31 | Failed: 1 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@rhdh-test-bot

rhdh-test-bot commented Jul 1, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 19m 31s
Passed: 31 | Failed: 1 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@alizard0

alizard0 commented Jul 1, 2026

Copy link
Copy Markdown
Member

/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jul 1, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 17m 52s
Passed: 31 | Failed: 1 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@invincibleJai

invincibleJai commented Jul 2, 2026

Copy link
Copy Markdown
Member

/retest

@sanketpathak

sanketpathak commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jul 2, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 19m 33s
Passed: 31 | Failed: 1 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@alizard0

alizard0 commented Jul 2, 2026

Copy link
Copy Markdown
Member

/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jul 2, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 20m 10s
Passed: 31 | Failed: 1 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@alizard0

alizard0 commented Jul 2, 2026

Copy link
Copy Markdown
Member

/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jul 2, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 19m 44s
Passed: 31 | Failed: 1 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@alizard0

alizard0 commented Jul 2, 2026

Copy link
Copy Markdown
Member

/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jul 2, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 19m 26s
Passed: 31 | Failed: 1 | Flaky: 0 | Skipped: 0
Playwright Report | Build Log | Logs | Artifacts

@sanketpathak

sanketpathak commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

@JessicaJHee Merge this pr JessicaJHee#1 to get the flaky test disabled

@JessicaJHee
Merge pull request #1 from sanketpathak/disable-orchestrator-rerun-1.…
b2db4e8 
…10.2

disable rerun failswitch orchestrator test
@openshift-ci openshift-ci Bot removed the lgtm label Jul 2, 2026
@openshift-ci

openshift-ci Bot commented Jul 2, 2026

Copy link
Copy Markdown

New changes are detected. LGTM label has been removed.

@JessicaJHee

JessicaJHee commented Jul 2, 2026

Copy link
Copy Markdown
Member Author

/publish

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Publish workflow has completed with success.

Publishing process

✅ Finished successfully.

✅ Published container images:

  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:pr_2658__5.7.13
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:pr_2658__8.9.5
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki:pr_2658__1.2.7
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:pr_2658__1.10.8
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:pr_2658__1.5.4

Backstage Compatibility Check

✅ All workspaces are compatible with the target Backstage version (1.49.4).

No action required.

Metadata Validation

✅ All metadata files validated successfully.

Running e2e tests
/test e2e-ocp-helm

@sonarqubecloud

sonarqubecloud Bot commented Jul 2, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@JessicaJHee

JessicaJHee commented Jul 2, 2026

Copy link
Copy Markdown
Member Author

/publish

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Publish workflow has completed with success.

Publishing process

✅ Finished successfully.

✅ Published container images:

  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:pr_2658__5.7.13
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:pr_2658__8.9.5
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki:pr_2658__1.2.7
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:pr_2658__1.10.8
  • ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:pr_2658__1.5.4

Backstage Compatibility Check

✅ All workspaces are compatible with the target Backstage version (1.49.4).

No action required.

Metadata Validation

✅ All metadata files validated successfully.

Running e2e tests
/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jul 2, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 18m 55s
Passed: 30 | Failed: 1 | Flaky: 0 | Skipped: 1
Playwright Report | Build Log | Logs | Artifacts

@JessicaJHee

JessicaJHee commented Jul 2, 2026

Copy link
Copy Markdown
Member Author

/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jul 2, 2026

Copy link
Copy Markdown

❌ Failed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 16m 34s
Passed: 0 | Failed: 1 | Flaky: 0 | Skipped: 31
Playwright Report | Build Log | Logs | Artifacts

@JessicaJHee

JessicaJHee commented Jul 2, 2026

Copy link
Copy Markdown
Member Author

/test e2e-ocp-helm

@rhdh-test-bot

rhdh-test-bot commented Jul 2, 2026

Copy link
Copy Markdown

✅ Passed E2E Tests - orchestrator

Platform: ocp 4.18 | RHDH Version: 1.10 | Duration: 17m 48s
Passed: 31 | Failed: 0 | Flaky: 0 | Skipped: 1
Playwright Report | Build Log | Logs | Artifacts

@JessicaJHee JessicaJHee merged commit 1921209 into redhat-developer:release-1.10 Jul 2, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@alizard0 alizard0 alizard0 approved these changes
@kim-tsao kim-tsao kim-tsao approved these changes

Assignees

@alizard0 alizard0

@kim-tsao kim-tsao

Labels

do-not-merge/hold release-branch-patch PR modifies workspace on a release branch workspace-update PR modifies files in an existing workspace

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

6 participants

@JessicaJHee @rhdh-test-bot @alizard0 @invincibleJai @sanketpathak @kim-tsao