From f8062e7f4862265670d3ab75954561a1c9675a4a Mon Sep 17 00:00:00 2001 From: Stephane Bouchet Date: Fri, 7 Aug 2026 15:45:05 -0500 Subject: [PATCH 1/2] fix: override js-yaml to patched versions Signed-off-by: Stephane Bouchet --- code/build/package-lock.json | 6 +-- code/build/package.json | 3 +- code/extensions/che-api/package-lock.json | 25 ++++++++---- code/extensions/che-api/package.json | 5 ++- .../extensions/che-commands/package-lock.json | 19 +++++++-- code/extensions/che-commands/package.json | 2 +- .../package-lock.json | 17 ++++++-- .../che-github-authentication/package.json | 3 +- code/extensions/che-port/package-lock.json | 6 +-- code/extensions/che-port/package.json | 3 +- code/extensions/che-remote/package-lock.json | 25 ++++++++---- code/extensions/che-remote/package.json | 5 ++- .../che-resource-monitor/package-lock.json | 40 ++++++++++++------- .../che-resource-monitor/package.json | 4 +- .../extensions/che-terminal/package-lock.json | 19 +++++++-- code/extensions/che-terminal/package.json | 2 +- code/extensions/copilot/package-lock.json | 8 ++-- code/extensions/copilot/package.json | 2 +- code/package-lock.json | 8 ++-- code/package.json | 2 +- code/remote/package-lock.json | 8 ++-- code/remote/package.json | 2 +- code/test/sanity/package-lock.json | 6 +-- code/test/sanity/package.json | 3 +- launcher/package-lock.json | 40 +++++++++++++------ launcher/package.json | 5 ++- 26 files changed, 178 insertions(+), 90 deletions(-) diff --git a/code/build/package-lock.json b/code/build/package-lock.json index 0502d3c5eba..0a99423a2f8 100644 --- a/code/build/package-lock.json +++ b/code/build/package-lock.json @@ -4318,9 +4318,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.2.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz", - "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "dev": true, "funding": [ { diff --git a/code/build/package.json b/code/build/package.json index 61623814e8c..ec889ec5809 100644 --- a/code/build/package.json +++ b/code/build/package.json @@ -86,6 +86,7 @@ "brace-expansion": "5.0.7", "form-data": "^4.0.6" }, - "form-data@4": "^4.0.6" + "form-data@4": "^4.0.6", + "js-yaml": "^4.3.1" } } diff --git a/code/extensions/che-api/package-lock.json b/code/extensions/che-api/package-lock.json index e23bfaa05ea..d21279db7a3 100644 --- a/code/extensions/che-api/package-lock.json +++ b/code/extensions/che-api/package-lock.json @@ -14,7 +14,7 @@ "@kubernetes/client-node": "^1.4.0", "fs-extra": "^11.2.0", "inversify": "^6.0.2", - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.1", "reflect-metadata": "^0.2.2", "vscode-nls": "^5.0.0" }, @@ -615,9 +615,9 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.14.2", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz", - "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, "license": "MIT", "dependencies": { @@ -3329,9 +3329,20 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/puzrin" + }, + { + "type": "github", + "url": "https://github.com/sponsors/nodeca" + } + ], + "license": "MIT", "dependencies": { "argparse": "^2.0.1" }, diff --git a/code/extensions/che-api/package.json b/code/extensions/che-api/package.json index 1fa470ae928..78fe845066c 100644 --- a/code/extensions/che-api/package.json +++ b/code/extensions/che-api/package.json @@ -35,7 +35,7 @@ "@kubernetes/client-node": "^1.4.0", "fs-extra": "^11.2.0", "inversify": "^6.0.2", - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.1", "reflect-metadata": "^0.2.2", "vscode-nls": "^5.0.0" }, @@ -68,7 +68,8 @@ }, "axios": { "form-data": "^4.0.6" - } + }, + "js-yaml@3": "^3.15.0" }, "repository": { "type": "git", diff --git a/code/extensions/che-commands/package-lock.json b/code/extensions/che-commands/package-lock.json index 6b7f56e26e8..2af589bb34f 100644 --- a/code/extensions/che-commands/package-lock.json +++ b/code/extensions/che-commands/package-lock.json @@ -12,7 +12,7 @@ "@devfile/api": "^2.3.0-1738854228", "@kubernetes/client-node": "^1.4.0", "fs-extra": "^11.2.0", - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.1", "reflect-metadata": "^0.2.2", "vscode-nls": "^5.0.0" }, @@ -590,9 +590,20 @@ } }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/puzrin" + }, + { + "type": "github", + "url": "https://github.com/sponsors/nodeca" + } + ], + "license": "MIT", "dependencies": { "argparse": "^2.0.1" }, diff --git a/code/extensions/che-commands/package.json b/code/extensions/che-commands/package.json index 4a572b38e46..cbf48fa5b22 100644 --- a/code/extensions/che-commands/package.json +++ b/code/extensions/che-commands/package.json @@ -33,7 +33,7 @@ "reflect-metadata": "^0.2.2", "fs-extra": "^11.2.0", "vscode-nls": "^5.0.0", - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.1", "@devfile/api": "^2.3.0-1738854228", "@kubernetes/client-node": "^1.4.0" }, diff --git a/code/extensions/che-github-authentication/package-lock.json b/code/extensions/che-github-authentication/package-lock.json index 68d106698dd..20d35a49d1c 100644 --- a/code/extensions/che-github-authentication/package-lock.json +++ b/code/extensions/che-github-authentication/package-lock.json @@ -950,9 +950,20 @@ } }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/puzrin" + }, + { + "type": "github", + "url": "https://github.com/sponsors/nodeca" + } + ], + "license": "MIT", "dependencies": { "argparse": "^2.0.1" }, diff --git a/code/extensions/che-github-authentication/package.json b/code/extensions/che-github-authentication/package.json index e8e1d4b44b5..acbf5dc6b10 100644 --- a/code/extensions/che-github-authentication/package.json +++ b/code/extensions/che-github-authentication/package.json @@ -75,7 +75,8 @@ }, "@types/node-fetch": { "form-data": "^4.0.6" - } + }, + "js-yaml": "^4.3.1" }, "repository": { "type": "git", diff --git a/code/extensions/che-port/package-lock.json b/code/extensions/che-port/package-lock.json index f1c08035f98..165f1b93ef8 100644 --- a/code/extensions/che-port/package-lock.json +++ b/code/extensions/che-port/package-lock.json @@ -2983,9 +2983,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "3.14.2", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz", - "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, "license": "MIT", "dependencies": { diff --git a/code/extensions/che-port/package.json b/code/extensions/che-port/package.json index d4231d8de53..6285d52caad 100644 --- a/code/extensions/che-port/package.json +++ b/code/extensions/che-port/package.json @@ -52,7 +52,8 @@ "form-data@2": "^2.5.6" }, "minimatch": "^3.1.5", - "handlebars": "4.7.9" + "handlebars": "4.7.9", + "js-yaml": "^3.15.0" }, "repository": { "type": "git", diff --git a/code/extensions/che-remote/package-lock.json b/code/extensions/che-remote/package-lock.json index b416d2de576..62e649470d7 100644 --- a/code/extensions/che-remote/package-lock.json +++ b/code/extensions/che-remote/package-lock.json @@ -12,7 +12,7 @@ "@eclipse-che/che-devworkspace-generator": "7.113.0", "axios": "^1.17.0", "https": "^1.0.0", - "js-yaml": "^4.0.0", + "js-yaml": "^4.3.1", "vscode-nls": "^5.0.0" }, "devDependencies": { @@ -774,9 +774,9 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.14.2", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz", - "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, "license": "MIT", "dependencies": { @@ -3746,9 +3746,20 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/puzrin" + }, + { + "type": "github", + "url": "https://github.com/sponsors/nodeca" + } + ], + "license": "MIT", "dependencies": { "argparse": "^2.0.1" }, diff --git a/code/extensions/che-remote/package.json b/code/extensions/che-remote/package.json index ab71b1ceda7..52c6d5162ad 100644 --- a/code/extensions/che-remote/package.json +++ b/code/extensions/che-remote/package.json @@ -35,7 +35,7 @@ "axios": "^1.17.0", "@eclipse-che/che-devworkspace-generator": "7.113.0", "https": "^1.0.0", - "js-yaml": "^4.0.0" + "js-yaml": "^4.3.1" }, "devDependencies": { "jest": "29.7.0", @@ -65,7 +65,8 @@ "flatted": "^3.4.2", "axios": { "form-data": "^4.0.6" - } + }, + "js-yaml@3": "^3.15.0" }, "repository": { "type": "git", diff --git a/code/extensions/che-resource-monitor/package-lock.json b/code/extensions/che-resource-monitor/package-lock.json index 20404f96c8e..efad060a2b3 100644 --- a/code/extensions/che-resource-monitor/package-lock.json +++ b/code/extensions/che-resource-monitor/package-lock.json @@ -591,9 +591,9 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.14.2", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz", - "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, "license": "MIT", "dependencies": { @@ -1029,6 +1029,28 @@ "node": ">= 6" } }, + "node_modules/@kubernetes/client-node/node_modules/js-yaml": { + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/puzrin" + }, + { + "type": "github", + "url": "https://github.com/sponsors/nodeca" + } + ], + "license": "MIT", + "dependencies": { + "argparse": "^2.0.1" + }, + "bin": { + "js-yaml": "bin/js-yaml.js" + } + }, "node_modules/@kubernetes/client-node/node_modules/undici-types": { "version": "7.16.0", "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz", @@ -3300,18 +3322,6 @@ "dev": true, "license": "MIT" }, - "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", - "license": "MIT", - "dependencies": { - "argparse": "^2.0.1" - }, - "bin": { - "js-yaml": "bin/js-yaml.js" - } - }, "node_modules/jsep": { "version": "1.4.0", "resolved": "https://registry.npmjs.org/jsep/-/jsep-1.4.0.tgz", diff --git a/code/extensions/che-resource-monitor/package.json b/code/extensions/che-resource-monitor/package.json index 49c5d83e82e..8130c9a21a3 100644 --- a/code/extensions/che-resource-monitor/package.json +++ b/code/extensions/che-resource-monitor/package.json @@ -59,7 +59,9 @@ }, "@types/node-fetch": { "form-data": "^4.0.6" - } + }, + "js-yaml@3": "^3.15.0", + "js-yaml@4": "^4.3.1" }, "repository": { "type": "git", diff --git a/code/extensions/che-terminal/package-lock.json b/code/extensions/che-terminal/package-lock.json index 7b2b8be126e..e3c8d1d1356 100644 --- a/code/extensions/che-terminal/package-lock.json +++ b/code/extensions/che-terminal/package-lock.json @@ -10,7 +10,7 @@ "license": "EPL-2.0", "dependencies": { "fs-extra": "^11.2.0", - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.1", "vscode-nls": "^5.2.0", "ws": "^8.21.0" }, @@ -81,9 +81,20 @@ "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==" }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/puzrin" + }, + { + "type": "github", + "url": "https://github.com/sponsors/nodeca" + } + ], + "license": "MIT", "dependencies": { "argparse": "^2.0.1" }, diff --git a/code/extensions/che-terminal/package.json b/code/extensions/che-terminal/package.json index e857502fc1a..6b63bcbba86 100644 --- a/code/extensions/che-terminal/package.json +++ b/code/extensions/che-terminal/package.json @@ -40,7 +40,7 @@ }, "dependencies": { "fs-extra": "^11.2.0", - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.1", "vscode-nls": "^5.2.0", "ws": "^8.21.0" }, diff --git a/code/extensions/copilot/package-lock.json b/code/extensions/copilot/package-lock.json index 3a3fc30200b..e3c3e1e6bf4 100644 --- a/code/extensions/copilot/package-lock.json +++ b/code/extensions/copilot/package-lock.json @@ -106,7 +106,7 @@ "esbuild": "0.28.1", "fastq": "^1.19.1", "glob": "^11.1.0", - "js-yaml": "^4.3.0", + "js-yaml": "^4.3.1", "minimist": "^1.2.8", "mobx": "^6.13.7", "mobx-react-lite": "^4.1.0", @@ -11506,9 +11506,9 @@ "dev": true }, "node_modules/js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "dev": true, "funding": [ { diff --git a/code/extensions/copilot/package.json b/code/extensions/copilot/package.json index 497ff5f3fac..a107cb703aa 100644 --- a/code/extensions/copilot/package.json +++ b/code/extensions/copilot/package.json @@ -7161,7 +7161,7 @@ "esbuild": "0.28.1", "fastq": "^1.19.1", "glob": "^11.1.0", - "js-yaml": "^4.3.0", + "js-yaml": "^4.3.1", "minimist": "^1.2.8", "mobx": "^6.13.7", "mobx-react-lite": "^4.1.0", diff --git a/code/package-lock.json b/code/package-lock.json index d93adf0aa52..40578a1c485 100644 --- a/code/package-lock.json +++ b/code/package-lock.json @@ -55,7 +55,7 @@ "detect-libc": "^2.1.2", "http-proxy-agent": "^7.0.0", "https-proxy-agent": "^7.0.2", - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.1", "jschardet": "3.1.4", "katex": "^0.16.22", "kerberos": "2.1.1", @@ -12191,9 +12191,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "funding": [ { "type": "github", diff --git a/code/package.json b/code/package.json index 4a2d86c46f1..99e8eb214de 100644 --- a/code/package.json +++ b/code/package.json @@ -159,7 +159,7 @@ "yauzl": "^3.3.1", "yazl": "^2.4.3", "zod": "^3.25.76", - "js-yaml": "^4.1.0" + "js-yaml": "^4.3.1" }, "devDependencies": { "@anthropic-ai/claude-agent-sdk": "0.3.198", diff --git a/code/remote/package-lock.json b/code/remote/package-lock.json index a168b8f5a35..01db7b9903e 100644 --- a/code/remote/package-lock.json +++ b/code/remote/package-lock.json @@ -42,7 +42,7 @@ "detect-libc": "^2.1.2", "http-proxy-agent": "^7.0.0", "https-proxy-agent": "^7.0.2", - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.1", "jschardet": "3.1.4", "katex": "^0.16.22", "kerberos": "2.1.1", @@ -1664,9 +1664,9 @@ } }, "node_modules/js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "funding": [ { "type": "github", diff --git a/code/remote/package.json b/code/remote/package.json index 176caaaf9ee..003af7fb79a 100644 --- a/code/remote/package.json +++ b/code/remote/package.json @@ -52,7 +52,7 @@ "yauzl": "^3.3.1", "yazl": "^2.4.3", "zod": "^3.25.76", - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.1", "@kubernetes/client-node": "^1.4.0" }, "overrides": { diff --git a/code/test/sanity/package-lock.json b/code/test/sanity/package-lock.json index 378ccd82d4d..05d9c61eb30 100644 --- a/code/test/sanity/package-lock.json +++ b/code/test/sanity/package-lock.json @@ -588,9 +588,9 @@ } }, "node_modules/js-yaml": { - "version": "4.2.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz", - "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "funding": [ { "type": "github", diff --git a/code/test/sanity/package.json b/code/test/sanity/package.json index 6e67f1d1663..a27e7bacb6a 100644 --- a/code/test/sanity/package.json +++ b/code/test/sanity/package.json @@ -22,6 +22,7 @@ "typescript": "^6.0.0-dev.20251110" }, "overrides": { - "serialize-javascript": "^7.0.3" + "serialize-javascript": "^7.0.3", + "js-yaml": "^4.3.1" } } diff --git a/launcher/package-lock.json b/launcher/package-lock.json index 8344c064b5e..b4b2b2ff685 100644 --- a/launcher/package-lock.json +++ b/launcher/package-lock.json @@ -9,7 +9,7 @@ "version": "0.0.1", "dependencies": { "@kubernetes/client-node": "^1.4.0", - "js-yaml": "^4.1.0" + "js-yaml": "^4.3.1" }, "bin": { "che-code-launcher": "out/entrypoint.js" @@ -740,10 +740,11 @@ } }, "node_modules/@eslint/eslintrc/node_modules/js-yaml": { - "version": "3.14.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", - "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, + "license": "MIT", "dependencies": { "argparse": "^1.0.7", "esprima": "^4.0.0" @@ -800,10 +801,11 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.14.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", - "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, + "license": "MIT", "dependencies": { "argparse": "^1.0.7", "esprima": "^4.0.0" @@ -2459,10 +2461,11 @@ } }, "node_modules/eslint/node_modules/js-yaml": { - "version": "3.14.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", - "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, + "license": "MIT", "dependencies": { "argparse": "^1.0.7", "esprima": "^4.0.0" @@ -3927,9 +3930,20 @@ "dev": true }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/puzrin" + }, + { + "type": "github", + "url": "https://github.com/sponsors/nodeca" + } + ], + "license": "MIT", "dependencies": { "argparse": "^2.0.1" }, diff --git a/launcher/package.json b/launcher/package.json index 03eb2dc6a0c..4124d8aff1e 100644 --- a/launcher/package.json +++ b/launcher/package.json @@ -31,7 +31,7 @@ "url": "git+https://github.com/che-incubator/che-code.git" }, "dependencies": { - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.1", "@kubernetes/client-node": "^1.4.0" }, "devDependencies": { @@ -59,7 +59,8 @@ "ws": "^8.21.0", "@types/node-fetch": { "form-data": "^4.0.6" - } + }, + "js-yaml@3": "^3.15.0" }, "jest": { "collectCoverage": true, From f7d288dc0932f0edcd0321aa7a326fcc5a7c93cd Mon Sep 17 00:00:00 2001 From: Stephane Bouchet Date: Fri, 7 Aug 2026 16:07:41 -0500 Subject: [PATCH 2/2] regen package-lock Signed-off-by: Stephane Bouchet --- code/extensions/che-api/package-lock.json | 6 +++--- code/extensions/che-port/package-lock.json | 6 +++--- code/extensions/che-remote/package-lock.json | 6 +++--- .../che-resource-monitor/package-lock.json | 6 +++--- launcher/package-lock.json | 18 +++++++++--------- 5 files changed, 21 insertions(+), 21 deletions(-) diff --git a/code/extensions/che-api/package-lock.json b/code/extensions/che-api/package-lock.json index d21279db7a3..5b1e3d2643d 100644 --- a/code/extensions/che-api/package-lock.json +++ b/code/extensions/che-api/package-lock.json @@ -615,9 +615,9 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.15.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", - "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", + "version": "3.15.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", + "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", "dev": true, "license": "MIT", "dependencies": { diff --git a/code/extensions/che-port/package-lock.json b/code/extensions/che-port/package-lock.json index 165f1b93ef8..4ea04c5cf82 100644 --- a/code/extensions/che-port/package-lock.json +++ b/code/extensions/che-port/package-lock.json @@ -2983,9 +2983,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "3.15.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", - "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", + "version": "3.15.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", + "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", "dev": true, "license": "MIT", "dependencies": { diff --git a/code/extensions/che-remote/package-lock.json b/code/extensions/che-remote/package-lock.json index 62e649470d7..997d7620a99 100644 --- a/code/extensions/che-remote/package-lock.json +++ b/code/extensions/che-remote/package-lock.json @@ -774,9 +774,9 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.15.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", - "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", + "version": "3.15.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", + "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", "dev": true, "license": "MIT", "dependencies": { diff --git a/code/extensions/che-resource-monitor/package-lock.json b/code/extensions/che-resource-monitor/package-lock.json index efad060a2b3..1384f0979e2 100644 --- a/code/extensions/che-resource-monitor/package-lock.json +++ b/code/extensions/che-resource-monitor/package-lock.json @@ -591,9 +591,9 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.15.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", - "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", + "version": "3.15.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", + "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", "dev": true, "license": "MIT", "dependencies": { diff --git a/launcher/package-lock.json b/launcher/package-lock.json index b4b2b2ff685..3eb141d48c2 100644 --- a/launcher/package-lock.json +++ b/launcher/package-lock.json @@ -740,9 +740,9 @@ } }, "node_modules/@eslint/eslintrc/node_modules/js-yaml": { - "version": "3.15.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", - "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", + "version": "3.15.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", + "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", "dev": true, "license": "MIT", "dependencies": { @@ -801,9 +801,9 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.15.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", - "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", + "version": "3.15.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", + "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", "dev": true, "license": "MIT", "dependencies": { @@ -2461,9 +2461,9 @@ } }, "node_modules/eslint/node_modules/js-yaml": { - "version": "3.15.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", - "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", + "version": "3.15.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", + "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", "dev": true, "license": "MIT", "dependencies": {