paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 31 Packages Projects Releases Wiki Activity

Merge pull request #21800 from Thutm/SNYK-JS-ZOD-5925617-fix

Browse Source 
Fixing Snyk vulnerability SNYK-JS-ZOD-5925617 by upgrading zod packages to latest
This commit is contained in:
Fredrik Adelöw
2023-12-15 20:43:59 +01:00
committed by GitHub
parent c6c6be1e35 b9846ff504
commit 8a23b73866
21 changed files with 62 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.changeset/tough-dancers-suffer.md
+23
View File
@@ -0,0 +1,23 @@
---
'@backstage/plugin-scaffolder-backend-module-gitlab': patch
'@backstage/frontend-plugin-api': patch
'@backstage/plugin-permission-backend': patch
'@backstage/plugin-scaffolder-backend': patch
'@backstage/plugin-permission-common': patch
'@backstage/core-components': patch
'@backstage/plugin-playlist-backend': patch
'@backstage/plugin-scaffolder-react': patch
'@backstage/plugin-catalog-backend': patch
'@backstage/plugin-permission-node': patch
'@backstage/plugin-scaffolder-node': patch
'@backstage/backend-tasks': patch
'@backstage/plugin-search-backend': patch
'@backstage/core-app-api': patch
'@backstage/plugin-scaffolder': patch
'@backstage/cli-node': patch
'@backstage/plugin-auth-node': patch
'@backstage/cli': patch
'@backstage/plugin-home': patch
---
Fixing regular expression ReDoS with zod packages. Upgrading to latest. ref: https://security.snyk.io/vuln/SNYK-JS-ZOD-5925617
packages/backend-tasks/package.json
+1 -1
View File
@@ -44,7 +44,7 @@
"luxon": "^3.0.0",
"uuid": "^8.0.0",
"winston": "^3.2.1",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"devDependencies": {
"@backstage/backend-test-utils": "workspace:^",
packages/cli-node/package.json
+1 -1
View File
@@ -35,7 +35,7 @@
"@yarnpkg/parsers": "^3.0.0-rc.4",
"fs-extra": "10.1.0",
"semver": "^7.5.3",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"devDependencies": {
"@backstage/cli": "workspace:^",
packages/cli/package.json
+1 -1
View File
@@ -138,7 +138,7 @@
"yaml": "^2.0.0",
"yml-loader": "^2.1.0",
"yn": "^4.0.0",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"devDependencies": {
"@backstage/backend-common": "workspace:^",
packages/core-app-api/package.json
+1 -1
View File
@@ -54,7 +54,7 @@
"prop-types": "^15.7.2",
"react-use": "^17.2.4",
"zen-observable": "^0.10.0",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"peerDependencies": {
"react": "^16.13.1 || ^17.0.0 || ^18.0.0",
packages/core-components/package.json
+1 -1
View File
@@ -86,7 +86,7 @@
"react-window": "^1.8.6",
"remark-gfm": "^3.0.1",
"zen-observable": "^0.10.0",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"peerDependencies": {
"react": "^16.13.1 || ^17.0.0 || ^18.0.0",
packages/frontend-plugin-api/package.json
+1 -1
View File
@@ -47,7 +47,7 @@
"@material-ui/core": "^4.12.4",
"@types/react": "^16.13.1 || ^17.0.0",
"lodash": "^4.17.21",
"zod": "^3.21.4",
"zod": "^3.22.4",
"zod-to-json-schema": "^3.21.4"
}
}
plugins/auth-node/package.json
+1 -1
View File
@@ -43,7 +43,7 @@
"node-fetch": "^2.6.7",
"passport": "^0.7.0",
"winston": "^3.2.1",
"zod": "^3.21.4",
"zod": "^3.22.4",
"zod-to-json-schema": "^3.21.4"
},
"devDependencies": {
plugins/catalog-backend/package.json
+1 -1
View File
@@ -82,7 +82,7 @@
"winston": "^3.2.1",
"yaml": "^2.0.0",
"yn": "^4.0.0",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"devDependencies": {
"@backstage/backend-test-utils": "workspace:^",
plugins/home/package.json
+1 -1
View File
@@ -72,7 +72,7 @@
"react-grid-layout": "1.3.4",
"react-resizable": "^3.0.4",
"react-use": "^17.2.4",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"peerDependencies": {
"react": "^16.13.1 || ^17.0.0 || ^18.0.0",
plugins/permission-backend/package.json
+1 -1
View File
@@ -56,7 +56,7 @@
"node-fetch": "^2.6.7",
"winston": "^3.2.1",
"yn": "^4.0.0",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"devDependencies": {
"@backstage/cli": "workspace:^",
plugins/permission-common/package.json
+1 -1
View File
@@ -47,7 +47,7 @@
"@backstage/types": "workspace:^",
"cross-fetch": "^4.0.0",
"uuid": "^8.0.0",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"devDependencies": {
"@backstage/cli": "workspace:^",
plugins/permission-node/package.json
+1 -1
View File
@@ -55,7 +55,7 @@
"@types/express": "^4.17.6",
"express": "^4.17.1",
"express-promise-router": "^4.1.0",
"zod": "^3.21.4",
"zod": "^3.22.4",
"zod-to-json-schema": "^3.20.4"
},
"devDependencies": {
plugins/playlist-backend/package.json
+1 -1
View File
@@ -46,7 +46,7 @@
"uuid": "^8.2.0",
"winston": "^3.2.1",
"yn": "^4.0.0",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"devDependencies": {
"@backstage/backend-test-utils": "workspace:^",
plugins/scaffolder-backend-module-gitlab/package.json
+1 -1
View File
@@ -39,7 +39,7 @@
"@gitbeaker/core": "^35.8.0",
"@gitbeaker/node": "^35.8.0",
"yaml": "^2.0.0",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"devDependencies": {
"@backstage/backend-test-utils": "workspace:^",
plugins/scaffolder-backend/package.json
+1 -1
View File
@@ -87,7 +87,7 @@
"winston": "^3.2.1",
"yaml": "^2.0.0",
"zen-observable": "^0.10.0",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"devDependencies": {
"@backstage/backend-test-utils": "workspace:^",
plugins/scaffolder-node/package.json
+1 -1
View File
@@ -54,7 +54,7 @@
"jsonschema": "^1.2.6",
"p-limit": "^3.1.0",
"winston": "^3.2.1",
"zod": "^3.21.4",
"zod": "^3.22.4",
"zod-to-json-schema": "^3.20.4"
},
"devDependencies": {
plugins/scaffolder-react/package.json
+1 -1
View File
@@ -77,7 +77,7 @@
"react-use": "^17.2.4",
"use-immer": "^0.9.0",
"zen-observable": "^0.10.0",
"zod": "^3.21.4",
"zod": "^3.22.4",
"zod-to-json-schema": "^3.20.4"
},
"peerDependencies": {
plugins/scaffolder/package.json
+1 -1
View File
@@ -88,7 +88,7 @@
"react-use": "^17.2.4",
"yaml": "^2.0.0",
"zen-observable": "^0.10.0",
"zod": "^3.21.4",
"zod": "^3.22.4",
"zod-to-json-schema": "^3.20.4"
},
"peerDependencies": {
plugins/search-backend/package.json
+1 -1
View File
@@ -61,7 +61,7 @@
"qs": "^6.10.1",
"winston": "^3.2.1",
"yn": "^4.0.0",
"zod": "^3.21.4"
"zod": "^3.22.4"
},
"devDependencies": {
"@backstage/backend-test-utils": "workspace:^",
yarn.lock
+20 -20
View File
@@ -3457,7 +3457,7 @@ __metadata:
uuid: ^8.0.0
wait-for-expect: ^3.0.2
winston: ^3.2.1
zod: ^3.21.4
zod: ^3.22.4
languageName: unknown
linkType: soft
@@ -3551,7 +3551,7 @@ __metadata:
fs-extra: 10.1.0
mock-fs: ^5.2.0
semver: ^7.5.3
zod: ^3.21.4
zod: ^3.22.4
languageName: unknown
linkType: soft
@@ -3697,7 +3697,7 @@ __metadata:
yaml: ^2.0.0
yml-loader: ^2.1.0
yn: ^4.0.0
zod: ^3.21.4
zod: ^3.22.4
peerDependencies:
"@vitejs/plugin-react": ^4.0.4
vite: ^4.4.9
@@ -3805,7 +3805,7 @@ __metadata:
react-router-stable: "npm:react-router@^6.3.0"
react-use: ^17.2.4
zen-observable: ^0.10.0
zod: ^3.21.4
zod: ^3.22.4
peerDependencies:
react: ^16.13.1 || ^17.0.0 || ^18.0.0
react-dom: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -4004,7 +4004,7 @@ __metadata:
react-window: ^1.8.6
remark-gfm: ^3.0.1
zen-observable: ^0.10.0
zod: ^3.21.4
zod: ^3.22.4
peerDependencies:
react: ^16.13.1 || ^17.0.0 || ^18.0.0
react-dom: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -4215,7 +4215,7 @@ __metadata:
"@types/react": ^16.13.1 || ^17.0.0
history: ^5.3.0
lodash: ^4.17.21
zod: ^3.21.4
zod: ^3.22.4
zod-to-json-schema: ^3.21.4
peerDependencies:
react: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -5041,7 +5041,7 @@ __metadata:
supertest: ^6.1.3
uuid: ^8.0.0
winston: ^3.2.1
zod: ^3.21.4
zod: ^3.22.4
zod-to-json-schema: ^3.21.4
languageName: unknown
linkType: soft
@@ -5809,7 +5809,7 @@ __metadata:
winston: ^3.2.1
yaml: ^2.0.0
yn: ^4.0.0
zod: ^3.21.4
zod: ^3.22.4
languageName: unknown
linkType: soft
@@ -7381,7 +7381,7 @@ __metadata:
react-grid-layout: 1.3.4
react-resizable: ^3.0.4
react-use: ^17.2.4
zod: ^3.21.4
zod: ^3.22.4
peerDependencies:
react: ^16.13.1 || ^17.0.0 || ^18.0.0
react-dom: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -8303,7 +8303,7 @@ __metadata:
supertest: ^6.1.6
winston: ^3.2.1
yn: ^4.0.0
zod: ^3.21.4
zod: ^3.22.4
languageName: unknown
linkType: soft
@@ -8318,7 +8318,7 @@ __metadata:
cross-fetch: ^4.0.0
msw: ^1.0.0
uuid: ^8.0.0
zod: ^3.21.4
zod: ^3.22.4
languageName: unknown
linkType: soft
@@ -8340,7 +8340,7 @@ __metadata:
express-promise-router: ^4.1.0
msw: ^1.0.0
supertest: ^6.1.3
zod: ^3.21.4
zod: ^3.22.4
zod-to-json-schema: ^3.20.4
languageName: unknown
linkType: soft
@@ -8413,7 +8413,7 @@ __metadata:
uuid: ^8.2.0
winston: ^3.2.1
yn: ^4.0.0
zod: ^3.21.4
zod: ^3.22.4
languageName: unknown
linkType: soft
@@ -8717,7 +8717,7 @@ __metadata:
"@gitbeaker/core": ^35.8.0
"@gitbeaker/node": ^35.8.0
yaml: ^2.0.0
zod: ^3.21.4
zod: ^3.22.4
languageName: unknown
linkType: soft
@@ -8826,7 +8826,7 @@ __metadata:
winston: ^3.2.1
yaml: ^2.0.0
zen-observable: ^0.10.0
zod: ^3.21.4
zod: ^3.22.4
languageName: unknown
linkType: soft
@@ -8860,7 +8860,7 @@ __metadata:
jsonschema: ^1.2.6
p-limit: ^3.1.0
winston: ^3.2.1
zod: ^3.21.4
zod: ^3.22.4
zod-to-json-schema: ^3.20.4
languageName: unknown
linkType: soft
@@ -8911,7 +8911,7 @@ __metadata:
react-use: ^17.2.4
use-immer: ^0.9.0
zen-observable: ^0.10.0
zod: ^3.21.4
zod: ^3.22.4
zod-to-json-schema: ^3.20.4
peerDependencies:
react: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -8978,7 +8978,7 @@ __metadata:
react-use: ^17.2.4
yaml: ^2.0.0
zen-observable: ^0.10.0
zod: ^3.21.4
zod: ^3.22.4
zod-to-json-schema: ^3.20.4
peerDependencies:
react: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -9163,7 +9163,7 @@ __metadata:
supertest: ^6.1.3
winston: ^3.2.1
yn: ^4.0.0
zod: ^3.21.4
zod: ^3.22.4
languageName: unknown
linkType: soft
@@ -45412,7 +45412,7 @@ __metadata:
languageName: node
linkType: hard
"zod@npm:^3.21.4":
"zod@npm:^3.21.4, zod@npm:^3.22.4":
version: 3.22.4
resolution: "zod@npm:3.22.4"
checksum: 80bfd7f8039b24fddeb0718a2ec7c02aa9856e4838d6aa4864335a047b6b37a3273b191ef335bf0b2002e5c514ef261ffcda5a589fb084a48c336ffc4cdbab7f