This is an automated email from the ASF dual-hosted git repository.
vincbeck pushed a commit to branch v3-1-test
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/v3-1-test by this push:
new b77ab9a1cd0 [V3-1-test] Fix minimatch ReDoS vulnerabilities via pnpm
overrides (#62805)
b77ab9a1cd0 is described below
commit b77ab9a1cd04bf00e953ff4a12ded59899c162f8
Author: Pierre Jeambrun <[email protected]>
AuthorDate: Tue Mar 3 19:36:14 2026 +0100
[V3-1-test] Fix minimatch ReDoS vulnerabilities via pnpm overrides (#62805)
* Fix minimatch ReDoS vulnerabilities via pnpm overrides
Update pnpm overrides to patch minimatch ReDoS vulnerabilities
(CVE for matchOne() combinatorial backtracking and nested extglobs)
across three UI manifests:
- airflow-core/src/airflow/ui: add overrides for <3.1.4, >=9.0.0 <9.0.7,
>=10.0.0 <10.2.3
- simple-auth-manager-ui: add overrides for <3.1.4, >=9.0.0 <9.0.7,
>=10.0.0 <10.2.3
- react-plugin-template: add overrides for <3.1.4, >=9.0.0 <9.0.7, >=10.0.0
<10.2.3
* Constrain minimatch overrides to major version ranges
The minimatch overrides used open-ended ranges (e.g. >=3.1.4) which
allowed pnpm to resolve 3.x consumers to 10.x, breaking the API
(minimatch 10.x uses named exports, 3.x uses a default function).
Constrain to >=3.1.4 <4.0.0 and >=9.0.7 <10.0.0 respectively.
---
.../auth/managers/simple/ui/package.json | 7 +-
.../auth/managers/simple/ui/pnpm-lock.yaml | 73 ++++++-------
airflow-core/src/airflow/ui/package.json | 5 +-
airflow-core/src/airflow/ui/pnpm-lock.yaml | 119 +++++++++++----------
.../react_plugin_template/package.json | 7 +-
5 files changed, 112 insertions(+), 99 deletions(-)
diff --git
a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json
b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json
index 83f4dc5d088..152b1e181bf 100644
--- a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json
+++ b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json
@@ -60,6 +60,11 @@
"onlyBuiltDependencies": [
"@swc/core",
"esbuild"
- ]
+ ],
+ "overrides": {
+ "minimatch@>=3.0.0 <3.1.4": ">=3.1.4 <4.0.0",
+ "minimatch@>=9.0.0 <9.0.7": ">=9.0.7 <10.0.0",
+ "minimatch@>=10.0.0 <10.2.3": ">=10.2.3"
+ }
}
}
diff --git
a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml
b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml
index 01f3d557607..6a95e364839 100644
---
a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml
+++
b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml
@@ -4,6 +4,11 @@ settings:
autoInstallPeers: true
excludeLinksFromLockfile: false
+overrides:
+ minimatch@>=3.0.0 <3.1.4: '>=3.1.4 <4.0.0'
+ minimatch@>=9.0.0 <9.0.7: '>=9.0.7 <10.0.0'
+ minimatch@>=10.0.0 <10.2.3: '>=10.2.3'
+
importers:
.:
@@ -621,67 +626,56 @@ packages:
resolution: {integrity:
sha512-3zEuZsXfKaw8n/yF7t8N6NNdhyFw3s8xJTqjbTDXlipwrEHo4GtIKcMJr5Ed29leLpB9AugtAQpAHW0jvtKKaQ==}
cpu: [arm]
os: [linux]
- libc: [glibc]
'@rollup/[email protected]':
resolution: {integrity:
sha512-leo9tOIlKrcBmmEypzunV/2w946JeLbTdDlwEZ7OnnsUyelZ72NMnT4B2vsikSgwQifjnJUbdXzuW4ToN1wV+Q==}
cpu: [arm]
os: [linux]
- libc: [musl]
'@rollup/[email protected]':
resolution: {integrity:
sha512-Vy/WS4z4jEyvnJm+CnPfExIv5sSKqZrUr98h03hpAMbE2aI0aD2wvK6GiSe8Gx2wGp3eD81cYDpLLBqNb2ydwQ==}
cpu: [arm64]
os: [linux]
- libc: [glibc]
'@rollup/[email protected]':
resolution: {integrity:
sha512-x5Kzn7XTwIssU9UYqWDB9VpLpfHYuXw5c6bJr4Mzv9kIv242vmJHbI5PJJEnmBYitUIfoMCODDhR7KoZLot2VQ==}
cpu: [arm64]
os: [linux]
- libc: [musl]
'@rollup/[email protected]':
resolution: {integrity:
sha512-yzCaBbwkkWt/EcgJOKDUdUpMHjhiZT/eDktOPWvSRpqrVE04p0Nd6EGV4/g7MARXXeOqstflqsKuXVM3H9wOIQ==}
cpu: [loong64]
os: [linux]
- libc: [glibc]
'@rollup/[email protected]':
resolution: {integrity:
sha512-UK0WzWUjMAJccHIeOpPhPcKBqax7QFg47hwZTp6kiMhQHeOYJeaMwzeRZe1q5IiTKsaLnHu9s6toSYVUlZ2QtQ==}
cpu: [ppc64]
os: [linux]
- libc: [glibc]
'@rollup/[email protected]':
resolution: {integrity:
sha512-3NADEIlt+aCdCbWVZ7D3tBjBX1lHpXxcvrLt/kdXTiBrOds8APTdtk2yRL2GgmnSVeX4YS1JIf0imFujg78vpw==}
cpu: [riscv64]
os: [linux]
- libc: [glibc]
'@rollup/[email protected]':
resolution: {integrity:
sha512-euuwm/QTXAMOcyiFCcrx0/S2jGvFlKJ2Iro8rsmYL53dlblp3LkUQVFzEidHhvIPPvcIsxDhl2wkBE+I6YVGzA==}
cpu: [riscv64]
os: [linux]
- libc: [musl]
'@rollup/[email protected]':
resolution: {integrity:
sha512-w8mULUjmPdWLJgmTYJx/W6Qhln1a+yqvgwmGXcQl2vFBkWsKGUBRbtLRuKJUln8Uaimf07zgJNxOhHOvjSQmBQ==}
cpu: [s390x]
os: [linux]
- libc: [glibc]
'@rollup/[email protected]':
resolution: {integrity:
sha512-90taWXCWxTbClWuMZD0DKYohY1EovA+W5iytpE89oUPmT5O1HFdf8cuuVIylE6vCbrGdIGv85lVRzTcpTRZ+kA==}
cpu: [x64]
os: [linux]
- libc: [glibc]
'@rollup/[email protected]':
resolution: {integrity:
sha512-2Gu29SkFh1FfTRuN1GR1afMuND2GKzlORQUP3mNMJbqdndOg7gNsa81JnORctazHRokiDzQ5+MLE5XYmZW5VWg==}
cpu: [x64]
os: [linux]
- libc: [musl]
'@rollup/[email protected]':
resolution: {integrity:
sha512-6kQFR1WuAO50bxkIlAVeIYsz3RUx+xymwhTo9j94dJ+kmHe9ly7muH23sdfWduD0BA8pD9/yhonUvAjxGh34jQ==}
@@ -727,28 +721,24 @@ packages:
engines: {node: '>=10'}
cpu: [arm64]
os: [linux]
- libc: [glibc]
'@swc/[email protected]':
resolution: {integrity:
sha512-9+ZxFN5GJag4CnYnq6apKTnnezpfJhCumyz0504/JbHLo+Ue+ZtJnf3RhyA9W9TINtLE0bC4hKpWi8ZKoETyOQ==}
engines: {node: '>=10'}
cpu: [arm64]
os: [linux]
- libc: [musl]
'@swc/[email protected]':
resolution: {integrity:
sha512-WD530qvHrki8Ywt/PloKUjaRKgstQqNGvmZl54g06kA+hqtSE2FTG9gngXr3UJxYu/cNAjJYiBifm7+w4nbHbA==}
engines: {node: '>=10'}
cpu: [x64]
os: [linux]
- libc: [glibc]
'@swc/[email protected]':
resolution: {integrity:
sha512-Luj8y4OFYx4DHNQTWjdIuKTq2f5k6uSXICqx+FSabnXptaOBAbJHNbHT/06JZh6NRUouaf0mYXN0mcsqvkhd7Q==}
engines: {node: '>=10'}
cpu: [x64]
os: [linux]
- libc: [musl]
'@swc/[email protected]':
resolution: {integrity:
sha512-cZ6UpumhF9SDJvv4DA2fo9WIzlNFuKSkZpZmPG1c+4PFSEMy5DFOjBSllCvnqihCabzXzpn6ykCwBmHpy31vQw==}
@@ -1879,6 +1869,7 @@ packages:
[email protected]:
resolution: {integrity:
sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==}
+ deprecated: Old versions of glob are not supported, and contain widely
publicized security vulnerabilities, which have been fixed in the current
version. Please update. Support for old versions may be purchased (at
exorbitant rates) by contacting [email protected]
hasBin: true
[email protected]:
@@ -2209,11 +2200,11 @@ packages:
resolution: {integrity:
sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==}
engines: {node: '>=4'}
- [email protected]:
- resolution: {integrity:
sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==}
+ [email protected]:
+ resolution: {integrity:
sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==}
- [email protected]:
- resolution: {integrity:
sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==}
+ [email protected]:
+ resolution: {integrity:
sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==}
engines: {node: '>=16 || 14 >=14.17'}
[email protected]:
@@ -2227,8 +2218,8 @@ packages:
resolution: {integrity:
sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==}
engines: {node: '>=8'}
- [email protected]:
- resolution: {integrity:
sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==}
+ [email protected]:
+ resolution: {integrity:
sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==}
engines: {node: '>=16 || 14 >=14.17'}
[email protected]:
@@ -2667,8 +2658,8 @@ packages:
resolution: {integrity:
sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==}
engines: {node: '>=8'}
- [email protected]:
- resolution: {integrity:
sha512-gmBGslpoQJtgnMAvOVqGZpEz9dyoKTCzy2nfz/n8aIFhN/jCE/rCmcxabB6jOOHV+0WNnylOxaxBQPSvcWklhA==}
+ [email protected]:
+ resolution: {integrity:
sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==}
engines: {node: '>=12'}
[email protected]:
@@ -3304,7 +3295,7 @@ snapshots:
dependencies:
'@eslint/object-schema': 2.1.6
debug: 4.4.1
- minimatch: 3.1.2
+ minimatch: 3.1.5
transitivePeerDependencies:
- supports-color
@@ -3323,7 +3314,7 @@ snapshots:
ignore: 5.3.2
import-fresh: 3.3.1
js-yaml: 4.1.0
- minimatch: 3.1.2
+ minimatch: 3.1.5
strip-json-comments: 3.1.1
transitivePeerDependencies:
- supports-color
@@ -3389,7 +3380,7 @@ snapshots:
dependencies:
string-width: 5.1.2
string-width-cjs: [email protected]
- strip-ansi: 7.1.2
+ strip-ansi: 7.2.0
strip-ansi-cjs: [email protected]
wrap-ansi: 8.1.0
wrap-ansi-cjs: [email protected]
@@ -3625,7 +3616,7 @@ snapshots:
'@ts-morph/[email protected]':
dependencies:
fast-glob: 3.3.3
- minimatch: 9.0.5
+ minimatch: 9.0.9
mkdirp: 3.0.1
path-browserify: 1.0.1
@@ -3798,7 +3789,7 @@ snapshots:
debug: 4.4.1
fast-glob: 3.3.3
is-glob: 4.0.3
- minimatch: 9.0.5
+ minimatch: 9.0.9
semver: 7.7.2
ts-api-utils: 2.1.0([email protected])
typescript: 5.8.3
@@ -3812,7 +3803,7 @@ snapshots:
'@typescript-eslint/types': 8.50.0
'@typescript-eslint/visitor-keys': 8.50.0
debug: 4.4.1
- minimatch: 9.0.5
+ minimatch: 9.0.9
semver: 7.7.2
tinyglobby: 0.2.15
ts-api-utils: 2.1.0([email protected])
@@ -4922,7 +4913,7 @@ snapshots:
hasown: 2.0.2
jsx-ast-utils: 3.3.5
language-tags: 1.0.9
- minimatch: 3.1.2
+ minimatch: 3.1.5
object.fromentries: 2.0.8
safe-regex-test: 1.1.0
string.prototype.includes: 2.0.1
@@ -4966,7 +4957,7 @@ snapshots:
estraverse: 5.3.0
hasown: 2.0.2
jsx-ast-utils: 3.3.5
- minimatch: 3.1.2
+ minimatch: 3.1.5
object.entries: 1.1.9
object.fromentries: 2.0.8
object.values: 1.2.1
@@ -5041,7 +5032,7 @@ snapshots:
is-glob: 4.0.3
json-stable-stringify-without-jsonify: 1.0.1
lodash.merge: 4.6.2
- minimatch: 3.1.2
+ minimatch: 3.1.5
natural-compare: 1.4.0
optionator: 0.9.4
optionalDependencies:
@@ -5208,8 +5199,8 @@ snapshots:
dependencies:
foreground-child: 3.3.1
jackspeak: 3.4.3
- minimatch: 9.0.5
- minipass: 7.1.2
+ minimatch: 9.0.9
+ minipass: 7.1.3
package-json-from-dist: 1.0.1
path-scurry: 1.11.1
@@ -5520,11 +5511,11 @@ snapshots:
[email protected]: {}
- [email protected]:
+ [email protected]:
dependencies:
brace-expansion: 1.1.12
- [email protected]:
+ [email protected]:
dependencies:
brace-expansion: 2.0.2
@@ -5536,7 +5527,7 @@ snapshots:
[email protected]: {}
- [email protected]: {}
+ [email protected]: {}
[email protected]:
dependencies:
@@ -5669,7 +5660,7 @@ snapshots:
[email protected]:
dependencies:
lru-cache: 10.4.3
- minipass: 7.1.2
+ minipass: 7.1.3
[email protected]: {}
@@ -5968,7 +5959,7 @@ snapshots:
dependencies:
eastasianwidth: 0.2.0
emoji-regex: 9.2.2
- strip-ansi: 7.1.2
+ strip-ansi: 7.2.0
[email protected]:
dependencies:
@@ -6024,7 +6015,7 @@ snapshots:
dependencies:
ansi-regex: 5.0.1
- [email protected]:
+ [email protected]:
dependencies:
ansi-regex: 6.2.2
@@ -6324,7 +6315,7 @@ snapshots:
dependencies:
ansi-styles: 6.2.3
string-width: 5.1.2
- strip-ansi: 7.1.2
+ strip-ansi: 7.2.0
[email protected]: {}
diff --git a/airflow-core/src/airflow/ui/package.json
b/airflow-core/src/airflow/ui/package.json
index ded6284fbad..a6f14447039 100644
--- a/airflow-core/src/airflow/ui/package.json
+++ b/airflow-core/src/airflow/ui/package.json
@@ -113,7 +113,10 @@
"msw"
],
"overrides": {
- "tar": ">=7.5.7"
+ "tar": ">=7.5.7",
+ "minimatch@>=3.0.0 <3.1.4": ">=3.1.4 <4.0.0",
+ "minimatch@>=9.0.0 <9.0.7": ">=9.0.7 <10.0.0",
+ "minimatch@>=10.0.0 <10.2.3": ">=10.2.3"
}
}
}
diff --git a/airflow-core/src/airflow/ui/pnpm-lock.yaml
b/airflow-core/src/airflow/ui/pnpm-lock.yaml
index 5bdefbc2692..80a9b30ceab 100644
--- a/airflow-core/src/airflow/ui/pnpm-lock.yaml
+++ b/airflow-core/src/airflow/ui/pnpm-lock.yaml
@@ -6,6 +6,9 @@ settings:
overrides:
tar: '>=7.5.7'
+ minimatch@>=3.0.0 <3.1.4: '>=3.1.4 <4.0.0'
+ minimatch@>=9.0.0 <9.0.7: '>=9.0.7 <10.0.0'
+ minimatch@>=10.0.0 <10.2.3: '>=10.2.3'
importers:
@@ -755,14 +758,6 @@ packages:
'@internationalized/[email protected]':
resolution: {integrity:
sha512-E5QTOlMg9wo5OrKdHD6edo1JJlIoOsylh0+mbf0evi1tHJwMZfJSaBpGtnJV9N7w3jeiioox9EG/EWRWPh82vg==}
- '@isaacs/[email protected]':
- resolution: {integrity:
sha512-yzMTt9lEb8Gv7zRioUilSglI0c0smZ9k5D65677DLWLtWJaXIS3CqcGyUFByYKlnUj6TkjLVs54fBl6+TiGQDQ==}
- engines: {node: 20 || >=22}
-
- '@isaacs/[email protected]':
- resolution: {integrity:
sha512-WMz71T1JS624nWj2n2fnYAuPovhv7EUhk69R6i9dsVyzxt5eM3bjwvgk9L+APE1TRscGysAVMANkB0jh0LQZrQ==}
- engines: {node: 20 || >=22}
-
'@isaacs/[email protected]':
resolution: {integrity:
sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==}
engines: {node: '>=12'}
@@ -1922,6 +1917,10 @@ packages:
[email protected]:
resolution: {integrity:
sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
+ [email protected]:
+ resolution: {integrity:
sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
+ engines: {node: 18 || 20 || >=22}
+
[email protected]:
resolution: {integrity:
sha512-pNdYkNPiJUnEhnfXV56+sQy8+AaPcG3POZAUnwr4EeqCUZFz4u2PePbo3e5Gj4ziYPCWGUZT9RHisvJKnwFuBQ==}
@@ -1937,11 +1936,15 @@ packages:
resolution: {integrity:
sha512-02qvAaxv8tp7fBa/mw1ga98OGm+eCbqzJOKoRt70sLmfEEi+jyBYVTDGfCL/k06/4EMk/z01gCe7HoCH/f2LTg==}
engines: {node: '>=18'}
- [email protected]:
- resolution: {integrity:
sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==}
+ [email protected]:
+ resolution: {integrity:
sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==}
- [email protected]:
- resolution: {integrity:
sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==}
+ [email protected]:
+ resolution: {integrity:
sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==}
+
+ [email protected]:
+ resolution: {integrity:
sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==}
+ engines: {node: 18 || 20 || >=22}
[email protected]:
resolution: {integrity:
sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
@@ -3229,8 +3232,8 @@ packages:
[email protected]:
resolution: {integrity:
sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
- [email protected]:
- resolution: {integrity:
sha512-vFrFJkWtJvJnD5hg+hJvVE8Lh/TcMzKnTgCWmtBipwI5yLX/iX+5UB2tfuyODF5E7k9xEzMdYgGqaSb1c0c5Yw==}
+ [email protected]:
+ resolution: {integrity:
sha512-ESL2CrkS/2wTPfuend7Zhkzo2u0daGJ/A2VucJOgQ/C48S/zB8MMeMHSGKYpXhIjbPxfuezITkaBH1wqv00DDQ==}
engines: {node: 20 || >=22}
[email protected]:
@@ -3422,15 +3425,15 @@ packages:
resolution: {integrity:
sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==}
engines: {node: '>=4'}
- [email protected]:
- resolution: {integrity:
sha512-fu656aJ0n2kcXwsnwnv9g24tkU5uSmOlTjd6WyyaKm2Z+h1qmY6bAjrcaIxF/BslFqbZ8UBtbJi7KgQOZD2PTw==}
- engines: {node: 20 || >=22}
+ [email protected]:
+ resolution: {integrity:
sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==}
+ engines: {node: 18 || 20 || >=22}
- [email protected]:
- resolution: {integrity:
sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==}
+ [email protected]:
+ resolution: {integrity:
sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==}
- [email protected]:
- resolution: {integrity:
sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==}
+ [email protected]:
+ resolution: {integrity:
sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==}
engines: {node: '>=16 || 14 >=14.17'}
[email protected]:
@@ -3440,6 +3443,10 @@ packages:
resolution: {integrity:
sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==}
engines: {node: '>=16 || 14 >=14.17'}
+ [email protected]:
+ resolution: {integrity:
sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==}
+ engines: {node: '>=16 || 14 >=14.17'}
+
[email protected]:
resolution: {integrity:
sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==}
engines: {node: '>= 18'}
@@ -3640,9 +3647,9 @@ packages:
resolution: {integrity:
sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==}
engines: {node: '>=16 || 14 >=14.18'}
- [email protected]:
- resolution: {integrity:
sha512-oWyT4gICAu+kaA7QWk/jvCHWarMKNs6pXOGWKDTr7cw4IGcUbW+PeTfbaQiLGheFRpjo6O9J0PmyMfQPjH71oA==}
- engines: {node: 20 || >=22}
+ [email protected]:
+ resolution: {integrity:
sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==}
+ engines: {node: 18 || 20 || >=22}
[email protected]:
resolution: {integrity:
sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ==}
@@ -5154,7 +5161,7 @@ snapshots:
dependencies:
'@eslint/object-schema': 2.1.6
debug: 4.4.0
- minimatch: 3.1.2
+ minimatch: 3.1.5
transitivePeerDependencies:
- supports-color
@@ -5173,7 +5180,7 @@ snapshots:
ignore: 5.3.2
import-fresh: 3.3.1
js-yaml: 4.1.0
- minimatch: 3.1.2
+ minimatch: 3.1.5
strip-json-comments: 3.1.1
transitivePeerDependencies:
- supports-color
@@ -5265,12 +5272,6 @@ snapshots:
dependencies:
'@swc/helpers': 0.5.15
- '@isaacs/[email protected]': {}
-
- '@isaacs/[email protected]':
- dependencies:
- '@isaacs/balanced-match': 4.0.1
-
'@isaacs/[email protected]':
dependencies:
string-width: 5.1.2
@@ -5590,7 +5591,7 @@ snapshots:
'@ts-morph/[email protected]':
dependencies:
fast-glob: 3.3.3
- minimatch: 9.0.5
+ minimatch: 9.0.9
mkdirp: 3.0.1
path-browserify: 1.0.1
@@ -5838,7 +5839,7 @@ snapshots:
debug: 4.4.0
fast-glob: 3.3.3
is-glob: 4.0.3
- minimatch: 9.0.5
+ minimatch: 9.0.9
semver: 7.7.1
ts-api-utils: 2.1.0([email protected])
typescript: 5.8.3
@@ -5852,7 +5853,7 @@ snapshots:
'@typescript-eslint/types': 8.50.0
'@typescript-eslint/visitor-keys': 8.50.0
debug: 4.4.0
- minimatch: 9.0.5
+ minimatch: 9.0.9
semver: 7.7.1
tinyglobby: 0.2.15
ts-api-utils: 2.1.0([email protected])
@@ -7041,6 +7042,8 @@ snapshots:
[email protected]: {}
+ [email protected]: {}
+
[email protected]: {}
[email protected]: {}
@@ -7061,15 +7064,19 @@ snapshots:
transitivePeerDependencies:
- supports-color
- [email protected]:
+ [email protected]:
dependencies:
balanced-match: 1.0.2
concat-map: 0.0.1
- [email protected]:
+ [email protected]:
dependencies:
balanced-match: 1.0.2
+ [email protected]:
+ dependencies:
+ balanced-match: 4.0.4
+
[email protected]:
dependencies:
fill-range: 7.1.1
@@ -7679,7 +7686,7 @@ snapshots:
hasown: 2.0.2
jsx-ast-utils: 3.3.5
language-tags: 1.0.9
- minimatch: 3.1.2
+ minimatch: 3.1.5
object.fromentries: 2.0.8
safe-regex-test: 1.1.0
string.prototype.includes: 2.0.1
@@ -7723,7 +7730,7 @@ snapshots:
estraverse: 5.3.0
hasown: 2.0.2
jsx-ast-utils: 3.3.5
- minimatch: 3.1.2
+ minimatch: 3.1.5
object.entries: 1.1.9
object.fromentries: 2.0.8
object.values: 1.2.1
@@ -7799,7 +7806,7 @@ snapshots:
is-glob: 4.0.3
json-stable-stringify-without-jsonify: 1.0.1
lodash.merge: 4.6.2
- minimatch: 3.1.2
+ minimatch: 3.1.5
natural-compare: 1.4.0
optionator: 0.9.4
zod: 3.24.4
@@ -8073,7 +8080,7 @@ snapshots:
dependencies:
foreground-child: 3.3.1
jackspeak: 3.4.3
- minimatch: 9.0.5
+ minimatch: 9.0.9
minipass: 7.1.2
package-json-from-dist: 1.0.1
path-scurry: 1.11.1
@@ -8082,10 +8089,10 @@ snapshots:
dependencies:
foreground-child: 3.3.1
jackspeak: 4.2.3
- minimatch: 10.1.2
- minipass: 7.1.2
+ minimatch: 10.2.4
+ minipass: 7.1.3
package-json-from-dist: 1.0.1
- path-scurry: 2.0.1
+ path-scurry: 2.0.2
[email protected]: {}
@@ -8542,7 +8549,7 @@ snapshots:
[email protected]: {}
- [email protected]: {}
+ [email protected]: {}
[email protected]: {}
@@ -8935,22 +8942,24 @@ snapshots:
[email protected]: {}
- [email protected]:
+ [email protected]:
dependencies:
- '@isaacs/brace-expansion': 5.0.1
+ brace-expansion: 5.0.4
- [email protected]:
+ [email protected]:
dependencies:
- brace-expansion: 1.1.11
+ brace-expansion: 1.1.12
- [email protected]:
+ [email protected]:
dependencies:
- brace-expansion: 2.0.1
+ brace-expansion: 2.0.2
[email protected]: {}
[email protected]: {}
+ [email protected]: {}
+
[email protected]:
dependencies:
minipass: 7.1.2
@@ -9184,10 +9193,10 @@ snapshots:
lru-cache: 10.4.3
minipass: 7.1.2
- [email protected]:
+ [email protected]:
dependencies:
- lru-cache: 11.2.5
- minipass: 7.1.2
+ lru-cache: 11.2.6
+ minipass: 7.1.3
[email protected]: {}
@@ -9900,7 +9909,7 @@ snapshots:
dependencies:
'@istanbuljs/schema': 0.1.3
glob: 10.5.0
- minimatch: 9.0.5
+ minimatch: 9.0.9
[email protected]: {}
diff --git a/dev/react-plugin-tools/react_plugin_template/package.json
b/dev/react-plugin-tools/react_plugin_template/package.json
index 2dc729b6ba8..4f005fa74a6 100644
--- a/dev/react-plugin-tools/react_plugin_template/package.json
+++ b/dev/react-plugin-tools/react_plugin_template/package.json
@@ -72,6 +72,11 @@
"onlyBuiltDependencies": [
"@swc/core",
"esbuild"
- ]
+ ],
+ "overrides": {
+ "minimatch@>=3.0.0 <3.1.4": ">=3.1.4 <4.0.0",
+ "minimatch@>=9.0.0 <9.0.7": ">=9.0.7 <10.0.0",
+ "minimatch@>=10.0.0 <10.2.3": ">=10.2.3"
+ }
}
}
