Commit Graph
15 Commits
Author SHA1 Message Date
Bartosz Sekula d0368ba9c8 AAE-48569 Security bump for socket-io.parser (#12185)
* AAE-48569 Security bump for socket-io.parser

* cr
2026-08-20 16:36:12 +01:00
Bartosz Sekula d7b1d74b05 AAE-50130 js-yaml quadratic CPU consumption (#12178) 2026-08-18 09:15:58 +01:00
Bartosz Sekula 84e247c85f AAE-49666 Bump brace-expansion (#12163) 2026-08-11 09:57:08 +02:00
Bartosz Sekula a65bf21161 AAE-49656 Remove rendundant libs (#12162)
* AAE-49656 Remove rendundant libs

* update

* update
2026-08-11 09:03:48 +02:00
Bartosz Sekula 2a873d7a06 AAE-49666 brace-expansion security bump (#12139) 2026-08-07 11:50:32 +01:00
Bartosz Sekula d62f241098 AAE-49663 AAE-49665 fast-uri and undici security version bump (#12136)
* AAE-49663 fast-uri host confusion via backslash authority introducer

* added undici
2026-08-07 11:59:21 +02:00
Domenico Sibilio 2579d58d25 AAE-49320 Bump postcss to 8.5.18 (#12123) 2026-08-03 13:38:43 +00:00
AleksanderSklorz 83f8b3cff5 [PRODSEC-13315] fix brace expansion do s via exponential time expansion of consecutive non expanding groups (#12120)
* [PRODSEC-13315] Fix brace expansion vulnerability

* [PRODSEC-13315] Fix brace expansion vulnerability

* [PRODSEC-13315] Updated pnpm lock
2026-08-03 13:02:04 +02:00
Denys Vuika c0ab354698 Migrate to webpack-dev-server 6.0.0 (#12106)
* chore: update webpack-dev-server version to 6.0.0 in pnpm-workspace.yaml

* chore: downgrade webpack version to 5.109.0 in package.json

* chore: update packageManager field in package.json to include SHA512 hash
2026-07-29 16:20:37 +01:00
Bartosz Sekula c316c6b594 AAE-48934 Security update of libs: js-yaml(partially), brace-expansion@5.0.6(partially), shell-quote (#12103) 2026-07-28 15:09:54 +02:00
Denys Vuika 03e6320bd2 refactor: remove node-fetch dependency and use native fetch API (#12097) 2026-07-27 15:17:49 +00:00
Bartosz Sekula e1f463aa8a AAE-48934 Bump "svgo" "axios" and "adm-zip" versions (#12096)
* AAE-48934 bump svgo axios and adm-zip versions

* cr
2026-07-27 12:52:11 +02:00
Bartosz Sekula 9a49e4ff5c AAE-48934 bump fast-uri version (#12093) 2026-07-27 10:44:04 +02:00
Denys Vuika 85ec35cdf9 Migrate to new animations api (#12078) 2026-07-23 12:21:10 +01:00
Vito Albano 78661f11c5 [AAE-46514] - Migration to PNPM (#11926)
* [AAE-46514] - using by default ignore-scripts and have a trusted list for those who are trusted

* [AAE-46514] - Improved the checks to cover more cases

* [AAE-46514] - Fixed copilot comments

* [AAE-46514] - OTher fixes

* [AAE-46514] - Fixing other improvements and comments

* [AAE-46514] - npmrc should be versioned to enforce the audit

* [AAE-46514] - Improved code

* [AAE-46514] - Removed the check on CI as we have other tools

* [AAE-46514] - Improved check, updated descriptions, skip check on CI as there is already Sonar

* [AAE-46514] - Reduced functions in smaller pieces

* [AAE-46514] - Migrating to Pnpm to increase safety

* [ci:force] - Checking

* [ci:force] - Fixed complexity of the scripts

* [ci:force] - Fixed complexity of the scripts

* [ci:force] - Fixed wrong typing on yml

* [ci:force] - Fixed sonar comments and added correct version to sha pinned action

* [ci:force] - Fixed cache hit for npmn

* [ci:force] - Improved eslint plugin so it can be built with standard action

* [ci:force] - Improved eslint plugin so it can be built with standard action

* [ci:force] - Added minimatch

* [ci:force] - Fixing issues

* [ci:force] - Removed 'run' as it is not needed

* [ci:force] - Using audit in place of custom scripts

* [ci:force] - Fixed vulnerabilities and removed custom scripts in favor of audit --critical

* [ci:force] - Added minimum time for publishing to install

* [ci:force] - Address issue with too new packages

* [ci:force] - Address issue with too new packages
2026-06-04 18:38:22 +01:00