chore: security patches for the dependency chain (second iteration) (#5288)

chore: pin form-data in pnpm override
This commit is contained in:
Mir Arif Hasan 2025-07-29 12:38:57 +06:00 committed by GitHub
parent 6473cd5af6
commit 96b1bd10a8
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 39 additions and 74 deletions

View file

@ -53,7 +53,8 @@
"apiconnect-wsdl": "2.0.36",
"@xmldom/xmldom": "0.8.10",
"brace-expansion@2.0.1": "2.0.2",
"brace-expansion@1.1.11": "1.1.12"
"brace-expansion@1.1.11": "1.1.12",
"form-data@4.0.2": "4.0.4"
},
"onlyBuiltDependencies": [
"@apollo/protobufjs",

View file

@ -24,6 +24,7 @@ overrides:
'@xmldom/xmldom': 0.8.10
brace-expansion@2.0.1: 2.0.2
brace-expansion@1.1.11: 1.1.12
form-data@4.0.2: 4.0.4
importers:
@ -8710,10 +8711,6 @@ packages:
resolution: {integrity: sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==}
engines: {node: '>= 0.4'}
es-set-tostringtag@2.0.3:
resolution: {integrity: sha512-3T8uNMC3OQTHkFUsFq8r/BwAXLHvU/9O9mE0fBc/MY5iq/8H7ncvO947LmYA6ldWw9Uh8Yhf25zu6n7nML5QWQ==}
engines: {node: '>= 0.4'}
es-set-tostringtag@2.1.0:
resolution: {integrity: sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==}
engines: {node: '>= 0.4'}
@ -9349,14 +9346,6 @@ packages:
resolution: {integrity: sha512-ETEklSGi5t0QMZuiXoA/Q6vcnxcLQP5vdugSpuAyi6SVGi2clPPp+xgEhuMaHC+zGgn31Kd235W35f7Hykkaww==}
engines: {node: '>= 6'}
form-data@4.0.1:
resolution: {integrity: sha512-tzN8e4TX8+kkxGPK8D5u0FNmjPUjw3lwC9lSLxxoB/+GtsJG91CO8bSWy73APlgAZzZbXEYZJuxjkHH2w+Ezhw==}
engines: {node: '>= 6'}
form-data@4.0.2:
resolution: {integrity: sha512-hGfm/slu0ZabnNt4oaRZ6uREyfCj6P4fT/n6A1rGV+Z0VdGXjfOhVUpkn6qVQONHGIFwmveGXyDs75+nr6FM8w==}
engines: {node: '>= 6'}
form-data@4.0.4:
resolution: {integrity: sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==}
engines: {node: '>= 6'}
@ -9737,10 +9726,6 @@ packages:
resolution: {integrity: sha512-KIL7eQPfHQRC8+XluaIw7BHUwwqL19bQn4hzNgdr+1wXoU0KKj6rufu47lhY7KbJR2C6T6+PfyN0Ea7wkSS+qQ==}
engines: {node: '>= 0.4'}
has-symbols@1.0.3:
resolution: {integrity: sha512-l3LCuF6MgDNwTDKkdYGEihYjt5pRPbEg46rtlmnSPlUbgmB8LOIrKJbYYFBSbnPaJexMKtiPO8hmeRjRz2Td+A==}
engines: {node: '>= 0.4'}
has-symbols@1.1.0:
resolution: {integrity: sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==}
engines: {node: '>= 0.4'}
@ -20925,7 +20910,7 @@ snapshots:
'@types/node-fetch@2.6.12':
dependencies:
'@types/node': 22.9.3
form-data: 4.0.2
form-data: 4.0.4
'@types/node@17.0.45': {}
@ -21059,7 +21044,7 @@ snapshots:
'@types/cookiejar': 2.1.5
'@types/methods': 1.1.4
'@types/node': 22.9.3
form-data: 4.0.2
form-data: 4.0.4
'@types/supertest@6.0.3':
dependencies:
@ -22399,7 +22384,7 @@ snapshots:
define-properties: 1.2.1
es-abstract: 1.23.3
es-errors: 1.3.0
get-intrinsic: 1.2.4
get-intrinsic: 1.3.0
is-array-buffer: 3.0.4
is-shared-array-buffer: 1.0.3
@ -22497,7 +22482,7 @@ snapshots:
axios@1.8.2:
dependencies:
follow-redirects: 1.15.6
form-data: 4.0.1
form-data: 4.0.4
proxy-from-env: 1.1.0
transitivePeerDependencies:
- debug
@ -22800,7 +22785,7 @@ snapshots:
es-define-property: 1.0.0
es-errors: 1.3.0
function-bind: 1.1.2
get-intrinsic: 1.2.4
get-intrinsic: 1.3.0
set-function-length: 1.2.2
call-bind@1.0.8:
@ -23557,9 +23542,9 @@ snapshots:
define-data-property@1.1.4:
dependencies:
es-define-property: 1.0.0
es-define-property: 1.0.1
es-errors: 1.3.0
gopd: 1.0.1
gopd: 1.2.0
define-lazy-prop@3.0.0: {}
@ -23857,19 +23842,19 @@ snapshots:
data-view-buffer: 1.0.1
data-view-byte-length: 1.0.1
data-view-byte-offset: 1.0.0
es-define-property: 1.0.0
es-define-property: 1.0.1
es-errors: 1.3.0
es-object-atoms: 1.0.0
es-set-tostringtag: 2.0.3
es-object-atoms: 1.1.1
es-set-tostringtag: 2.1.0
es-to-primitive: 1.2.1
function.prototype.name: 1.1.6
get-intrinsic: 1.2.4
get-intrinsic: 1.3.0
get-symbol-description: 1.0.2
globalthis: 1.0.4
gopd: 1.0.1
gopd: 1.2.0
has-property-descriptors: 1.0.2
has-proto: 1.0.3
has-symbols: 1.0.3
has-symbols: 1.1.0
hasown: 2.0.2
internal-slot: 1.0.7
is-array-buffer: 3.0.4
@ -23953,7 +23938,7 @@ snapshots:
es-define-property@1.0.0:
dependencies:
get-intrinsic: 1.2.4
get-intrinsic: 1.3.0
es-define-property@1.0.1: {}
@ -23962,8 +23947,8 @@ snapshots:
es-get-iterator@1.1.3:
dependencies:
call-bind: 1.0.7
get-intrinsic: 1.2.4
has-symbols: 1.0.3
get-intrinsic: 1.3.0
has-symbols: 1.1.0
is-arguments: 1.1.1
is-map: 2.0.3
is-set: 2.0.3
@ -23981,12 +23966,6 @@ snapshots:
dependencies:
es-errors: 1.3.0
es-set-tostringtag@2.0.3:
dependencies:
get-intrinsic: 1.2.4
has-tostringtag: 1.0.2
hasown: 2.0.2
es-set-tostringtag@2.1.0:
dependencies:
es-errors: 1.3.0
@ -24952,19 +24931,6 @@ snapshots:
combined-stream: 1.0.8
mime-types: 2.1.35
form-data@4.0.1:
dependencies:
asynckit: 0.4.0
combined-stream: 1.0.8
mime-types: 2.1.35
form-data@4.0.2:
dependencies:
asynckit: 0.4.0
combined-stream: 1.0.8
es-set-tostringtag: 2.1.0
mime-types: 2.1.35
form-data@4.0.4:
dependencies:
asynckit: 0.4.0
@ -25072,7 +25038,7 @@ snapshots:
es-errors: 1.3.0
function-bind: 1.1.2
has-proto: 1.0.3
has-symbols: 1.0.3
has-symbols: 1.1.0
hasown: 2.0.2
get-intrinsic@1.3.0:
@ -25113,7 +25079,7 @@ snapshots:
dependencies:
call-bind: 1.0.7
es-errors: 1.3.0
get-intrinsic: 1.2.4
get-intrinsic: 1.3.0
get-symbol-description@1.1.0:
dependencies:
@ -25460,7 +25426,7 @@ snapshots:
has-property-descriptors@1.0.2:
dependencies:
es-define-property: 1.0.0
es-define-property: 1.0.1
has-proto@1.0.3: {}
@ -25468,13 +25434,11 @@ snapshots:
dependencies:
dunder-proto: 1.0.1
has-symbols@1.0.3: {}
has-symbols@1.1.0: {}
has-tostringtag@1.0.2:
dependencies:
has-symbols: 1.0.3
has-symbols: 1.1.0
has-unicode@2.0.1:
optional: true
@ -25781,7 +25745,7 @@ snapshots:
is-array-buffer@3.0.4:
dependencies:
call-bind: 1.0.7
get-intrinsic: 1.2.4
get-intrinsic: 1.3.0
is-array-buffer@3.0.5:
dependencies:
@ -25979,7 +25943,7 @@ snapshots:
is-symbol@1.0.4:
dependencies:
has-symbols: 1.0.3
has-symbols: 1.1.0
is-symbol@1.1.1:
dependencies:
@ -26024,7 +25988,7 @@ snapshots:
is-weakset@2.0.3:
dependencies:
call-bind: 1.0.7
get-intrinsic: 1.2.4
get-intrinsic: 1.3.0
is-what@4.1.16: {}
@ -26552,7 +26516,7 @@ snapshots:
cssstyle: 4.1.0
data-urls: 5.0.0
decimal.js: 10.4.3
form-data: 4.0.1
form-data: 4.0.4
html-encoding-sniffer: 4.0.0
http-proxy-agent: 7.0.2
https-proxy-agent: 7.0.5
@ -27922,7 +27886,7 @@ snapshots:
dependencies:
call-bind: 1.0.7
define-properties: 1.2.1
has-symbols: 1.0.3
has-symbols: 1.1.0
object-keys: 1.1.1
object.assign@4.1.7:
@ -29190,8 +29154,8 @@ snapshots:
safe-array-concat@1.1.2:
dependencies:
call-bind: 1.0.7
get-intrinsic: 1.2.4
has-symbols: 1.0.3
get-intrinsic: 1.3.0
has-symbols: 1.1.0
isarray: 2.0.5
safe-array-concat@1.1.3:
@ -29336,8 +29300,8 @@ snapshots:
define-data-property: 1.1.4
es-errors: 1.3.0
function-bind: 1.1.2
get-intrinsic: 1.2.4
gopd: 1.0.1
get-intrinsic: 1.3.0
gopd: 1.2.0
has-property-descriptors: 1.0.2
set-function-name@2.0.2:
@ -29717,13 +29681,13 @@ snapshots:
call-bind: 1.0.7
define-properties: 1.2.1
es-abstract: 1.23.3
es-object-atoms: 1.0.0
es-object-atoms: 1.1.1
string.prototype.trimend@1.0.8:
dependencies:
call-bind: 1.0.7
define-properties: 1.2.1
es-object-atoms: 1.0.0
es-object-atoms: 1.1.1
string.prototype.trimend@1.0.9:
dependencies:
@ -29736,7 +29700,7 @@ snapshots:
dependencies:
call-bind: 1.0.7
define-properties: 1.2.1
es-object-atoms: 1.0.0
es-object-atoms: 1.1.1
string_decoder@1.1.1:
dependencies:
@ -30472,7 +30436,7 @@ snapshots:
dependencies:
call-bind: 1.0.7
for-each: 0.3.3
gopd: 1.0.1
gopd: 1.2.0
has-proto: 1.0.3
is-typed-array: 1.1.13
@ -30489,7 +30453,7 @@ snapshots:
available-typed-arrays: 1.0.7
call-bind: 1.0.7
for-each: 0.3.3
gopd: 1.0.1
gopd: 1.2.0
has-proto: 1.0.3
is-typed-array: 1.1.13
@ -30507,7 +30471,7 @@ snapshots:
dependencies:
call-bind: 1.0.7
for-each: 0.3.3
gopd: 1.0.1
gopd: 1.2.0
has-proto: 1.0.3
is-typed-array: 1.1.13
possible-typed-array-names: 1.0.0
@ -30550,7 +30514,7 @@ snapshots:
dependencies:
call-bind: 1.0.7
has-bigints: 1.0.2
has-symbols: 1.0.3
has-symbols: 1.1.0
which-boxed-primitive: 1.0.2
unbox-primitive@1.1.0: