yujunjun/OpenMetadata
1
0
Fork 0
mirror of https://github.com/open-metadata/OpenMetadata.git synced 2025-08-31 12:39:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

[Snyk] Security upgrade axios from 1.7.4 to 1.7.8 (#19927)

Browse Source 
* fix: openmetadata-ui/src/main/resources/ui/package.json & openmetadata-ui/src/main/resources/ui/yarn.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-6671926

* Update the axios version to 1.7.9 since 1.7.8 was messing up with type validations in multiple files

---------

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Co-authored-by: Aniket Katkar <aniketkatkar97@gmail.com>
This commit is contained in:
Chirag Madlani 2025-03-02 16:17:39 +05:30 committed by GitHub
parent f59252cd52
commit fa6da999ec
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
openmetadata-ui/src/main/resources/ui/package.json
View File

@ -76,7 +76,7 @@
"antd": "4.24.0",
"antlr4": "4.9.2",
"autoprefixer": "^10.0.0",
"axios": "1.7.4",
"axios": "1.7.9",
"classnames": "^2.3.1",
"codemirror": "^5.65.16",
"cookie-storage": "^6.1.0",
@ -237,7 +237,7 @@
"prosemirror-state": "1.4.1",
"prosemirror-transform": "1.7.0",
"prosemirror-view": "1.28.2",
"axios": "1.7.4",
"axios": "1.7.9",
"ws": "8.17.1",
"micromatch": "4.0.8",
"minimatch": "3.0.5",

8
openmetadata-ui/src/main/resources/ui/yarn.lock
View File

@ -5594,10 +5594,10 @@ axe-core@^4.4.3:
resolved "https://registry.yarnpkg.com/axe-core/-/axe-core-4.6.1.tgz#79cccdee3e3ab61a8f42c458d4123a6768e6fbce"
integrity sha512-lCZN5XRuOnpG4bpMq8v0khrWtUOn+i8lZSb6wHZH56ZfbIEv6XwJV84AAueh9/zi7qPVJ/E4yz6fmsiyOmXR4w==
axios@1.7.4, axios@^1.4.0:
version "1.7.4"
resolved "https://registry.yarnpkg.com/axios/-/axios-1.7.4.tgz#4c8ded1b43683c8dd362973c393f3ede24052aa2"
integrity sha512-DukmaFRnY6AzAALSH4J2M3k6PkaC+MfaAGdEERRWcC9q3/TWQwLpHR8ZRLKTdQ3aBDL64EdluRDjJqKw+BPZEw==
axios@1.7.9, axios@^1.4.0:
version "1.7.9"
resolved "https://registry.yarnpkg.com/axios/-/axios-1.7.9.tgz#d7d071380c132a24accda1b2cfc1535b79ec650a"
integrity sha512-LhLcE7Hbiryz8oMDdDptSrWowmB4Bl6RCt6sIJKpRB4XtVf0iEgewX3au/pJqm+Py1kCASkb/FFKjxQaLtxJvw==
dependencies:
follow-redirects "^1.15.6"
form-data "^4.0.0"