This is an automated email from the ASF dual-hosted git repository.

wangzx pushed a commit to branch 4.9.1-security-fix
in repository https://gitbox.apache.org/repos/asf/echarts.git


The following commit(s) were added to refs/heads/4.9.1-security-fix by this 
push:
     new 172186136 fix uglify-js as v3.6.0 to avoid inconsistent bundle than 
before
172186136 is described below

commit 1721861368a668f2420fd21a5be121562d2abc9a
Author: plainheart <[email protected]>
AuthorDate: Sat May 24 19:59:04 2025 +0800

    fix uglify-js as v3.6.0 to avoid inconsistent bundle than before
---
 package-lock.json | 54 ++++++++++++++++++++++++++++++++++++++++++++++--------
 package.json      |  3 ++-
 2 files changed, 48 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 8490cc3c4..9686910b0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -43,7 +43,8 @@
         "semver": "6.3.0",
         "serve-handler": "6.1.1",
         "slugify": "1.3.4",
-        "socket.io": "2.2.0"
+        "socket.io": "2.2.0",
+        "uglify-js": "^3.6.0"
       }
     },
     "node_modules/@babel/code-frame": {
@@ -9355,10 +9356,14 @@
       }
     },
     "node_modules/uglify-js": {
-      "version": "3.19.3",
-      "resolved": 
"https://registry.npmjs.org/uglify-js/-/uglify-js-3.19.3.tgz";,
-      "integrity": 
"sha512-v3Xu+yuwBXisp6QYTcH4UbH+xYJXqnq2m/LtQVWKWzYc1iehYnLixoQDN9FH6/j9/oybfd6W9Ghwkl8+UMKTKQ==",
+      "version": "3.6.0",
+      "resolved": 
"https://registry.npmmirror.com/uglify-js/-/uglify-js-3.6.0.tgz";,
+      "integrity": 
"sha512-W+jrUHJr3DXKhrsS7NUVxn3zqMOFn0hL/Ei6v0anCIMoKC93TjcflTagwIHLW7SfMFfiQuktQyFVCFHGUE0+yg==",
       "dev": true,
+      "dependencies": {
+        "commander": "~2.20.0",
+        "source-map": "~0.6.1"
+      },
       "bin": {
         "uglifyjs": "bin/uglifyjs"
       },
@@ -9366,6 +9371,21 @@
         "node": ">=0.8.0"
       }
     },
+    "node_modules/uglify-js/node_modules/commander": {
+      "version": "2.20.3",
+      "resolved": 
"https://registry.npmmirror.com/commander/-/commander-2.20.3.tgz";,
+      "integrity": 
"sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==",
+      "dev": true
+    },
+    "node_modules/uglify-js/node_modules/source-map": {
+      "version": "0.6.1",
+      "resolved": 
"https://registry.npmmirror.com/source-map/-/source-map-0.6.1.tgz";,
+      "integrity": 
"sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==",
+      "dev": true,
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/unbox-primitive": {
       "version": "1.1.0",
       "resolved": 
"https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.1.0.tgz";,
@@ -17324,10 +17344,28 @@
       }
     },
     "uglify-js": {
-      "version": "3.19.3",
-      "resolved": 
"https://registry.npmjs.org/uglify-js/-/uglify-js-3.19.3.tgz";,
-      "integrity": 
"sha512-v3Xu+yuwBXisp6QYTcH4UbH+xYJXqnq2m/LtQVWKWzYc1iehYnLixoQDN9FH6/j9/oybfd6W9Ghwkl8+UMKTKQ==",
-      "dev": true
+      "version": "3.6.0",
+      "resolved": 
"https://registry.npmmirror.com/uglify-js/-/uglify-js-3.6.0.tgz";,
+      "integrity": 
"sha512-W+jrUHJr3DXKhrsS7NUVxn3zqMOFn0hL/Ei6v0anCIMoKC93TjcflTagwIHLW7SfMFfiQuktQyFVCFHGUE0+yg==",
+      "dev": true,
+      "requires": {
+        "commander": "~2.20.0",
+        "source-map": "~0.6.1"
+      },
+      "dependencies": {
+        "commander": {
+          "version": "2.20.3",
+          "resolved": 
"https://registry.npmmirror.com/commander/-/commander-2.20.3.tgz";,
+          "integrity": 
"sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==",
+          "dev": true
+        },
+        "source-map": {
+          "version": "0.6.1",
+          "resolved": 
"https://registry.npmmirror.com/source-map/-/source-map-0.6.1.tgz";,
+          "integrity": 
"sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==",
+          "dev": true
+        }
+      }
     },
     "unbox-primitive": {
       "version": "1.1.0",
diff --git a/package.json b/package.json
index 70031481d..d110b299b 100644
--- a/package.json
+++ b/package.json
@@ -61,6 +61,7 @@
     "semver": "6.3.0",
     "serve-handler": "6.1.1",
     "slugify": "1.3.4",
-    "socket.io": "2.2.0"
+    "socket.io": "2.2.0",
+    "uglify-js": "^3.6.0"
   }
 }


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to