From d2583b078ab3c1b0a2f0ca50bddf969ea53857a9 Mon Sep 17 00:00:00 2001 From: "ugo.bechameil" Date: Tue, 28 Jul 2026 15:08:30 +0200 Subject: [PATCH] chore: address Trivy production dependency vulnerabilities Bump vulnerable production dependencies/overrides and refresh package-lock.json to clear Plugins develop Trivy findings. Co-authored-by: Cursor --- package-lock.json | 16 ++++++++-------- package.json | 4 +++- 2 files changed, 11 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index c0dd28f..a0cbdca 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1180,12 +1180,12 @@ "license": "BSD-2-Clause" }, "node_modules/adm-zip": { - "version": "0.4.16", - "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.4.16.tgz", - "integrity": "sha512-TFi4HBKSGfIKsK5YCkKaaFG2m4PEDyViZmEwof3MTIgzimHLto6muaHVpbrljdIvIrFZzEq/p4nafOeLcYegrg==", + "version": "0.6.0", + "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.6.0.tgz", + "integrity": "sha512-XleryMhbuksdKtofnWZ9Sk+4CUTbms4Mb/EU32SZwToAyZ5RgVos/ki8n+yr0LWHOGKuakbXTuuYNHLQjhddgg==", "license": "MIT", "engines": { - "node": ">=0.3.0" + "node": ">=14.0" } }, "node_modules/aggregate-error": { @@ -1316,16 +1316,16 @@ } }, "node_modules/brace-expansion": { - "version": "5.0.6", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz", - "integrity": "sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==", + "version": "5.0.8", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz", + "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==", "dev": true, "license": "MIT", "dependencies": { "balanced-match": "^4.0.2" }, "engines": { - "node": "18 || 20 || >=22" + "node": "20 || >=22" } }, "node_modules/braces": { diff --git a/package.json b/package.json index d247c4f..3db617f 100644 --- a/package.json +++ b/package.json @@ -77,7 +77,9 @@ "lodash": "4.18.1" }, "overrides": { + "adm-zip": "0.6.0", "fast-xml-parser": "$fast-xml-parser", - "minimatch": "10.2.4" + "minimatch": "10.2.4", + "brace-expansion": "5.0.8" } }