From f06738c4efafe1c7c0f222ea95259cd28a673446 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 8 Oct 2026 12:14:30 +0000 Subject: [PATCH 1/2] chore(deps): bump nx from 22.7.7 to 22.7.12 Bumps [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) from 22.7.7 to 22.7.12. - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.12/packages/nx) --- updated-dependencies: - dependency-name: nx dependency-version: 22.7.12 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- yarn.lock | 109 ++++++++++++++++++++++++++++++------------------------ 1 file changed, 61 insertions(+), 48 deletions(-) diff --git a/yarn.lock b/yarn.lock index df855a1f49..79ce97888a 100644 --- a/yarn.lock +++ b/yarn.lock @@ -4566,72 +4566,72 @@ __metadata: languageName: node linkType: hard -"@nx/nx-darwin-arm64@npm:22.7.7": - version: 22.7.7 - resolution: "@nx/nx-darwin-arm64@npm:22.7.7" +"@nx/nx-darwin-arm64@npm:22.7.12": + version: 22.7.12 + resolution: "@nx/nx-darwin-arm64@npm:22.7.12" conditions: os=darwin & cpu=arm64 languageName: node linkType: hard -"@nx/nx-darwin-x64@npm:22.7.7": - version: 22.7.7 - resolution: "@nx/nx-darwin-x64@npm:22.7.7" +"@nx/nx-darwin-x64@npm:22.7.12": + version: 22.7.12 + resolution: "@nx/nx-darwin-x64@npm:22.7.12" conditions: os=darwin & cpu=x64 languageName: node linkType: hard -"@nx/nx-freebsd-x64@npm:22.7.7": - version: 22.7.7 - resolution: "@nx/nx-freebsd-x64@npm:22.7.7" +"@nx/nx-freebsd-x64@npm:22.7.12": + version: 22.7.12 + resolution: "@nx/nx-freebsd-x64@npm:22.7.12" conditions: os=freebsd & cpu=x64 languageName: node linkType: hard -"@nx/nx-linux-arm-gnueabihf@npm:22.7.7": - version: 22.7.7 - resolution: "@nx/nx-linux-arm-gnueabihf@npm:22.7.7" +"@nx/nx-linux-arm-gnueabihf@npm:22.7.12": + version: 22.7.12 + resolution: "@nx/nx-linux-arm-gnueabihf@npm:22.7.12" conditions: os=linux & cpu=arm languageName: node linkType: hard -"@nx/nx-linux-arm64-gnu@npm:22.7.7": - version: 22.7.7 - resolution: "@nx/nx-linux-arm64-gnu@npm:22.7.7" +"@nx/nx-linux-arm64-gnu@npm:22.7.12": + version: 22.7.12 + resolution: "@nx/nx-linux-arm64-gnu@npm:22.7.12" conditions: os=linux & cpu=arm64 & libc=glibc languageName: node linkType: hard -"@nx/nx-linux-arm64-musl@npm:22.7.7": - version: 22.7.7 - resolution: "@nx/nx-linux-arm64-musl@npm:22.7.7" +"@nx/nx-linux-arm64-musl@npm:22.7.12": + version: 22.7.12 + resolution: "@nx/nx-linux-arm64-musl@npm:22.7.12" conditions: os=linux & cpu=arm64 & libc=musl languageName: node linkType: hard -"@nx/nx-linux-x64-gnu@npm:22.7.7": - version: 22.7.7 - resolution: "@nx/nx-linux-x64-gnu@npm:22.7.7" +"@nx/nx-linux-x64-gnu@npm:22.7.12": + version: 22.7.12 + resolution: "@nx/nx-linux-x64-gnu@npm:22.7.12" conditions: os=linux & cpu=x64 & libc=glibc languageName: node linkType: hard -"@nx/nx-linux-x64-musl@npm:22.7.7": - version: 22.7.7 - resolution: "@nx/nx-linux-x64-musl@npm:22.7.7" +"@nx/nx-linux-x64-musl@npm:22.7.12": + version: 22.7.12 + resolution: "@nx/nx-linux-x64-musl@npm:22.7.12" conditions: os=linux & cpu=x64 & libc=musl languageName: node linkType: hard -"@nx/nx-win32-arm64-msvc@npm:22.7.7": - version: 22.7.7 - resolution: "@nx/nx-win32-arm64-msvc@npm:22.7.7" +"@nx/nx-win32-arm64-msvc@npm:22.7.12": + version: 22.7.12 + resolution: "@nx/nx-win32-arm64-msvc@npm:22.7.12" conditions: os=win32 & cpu=arm64 languageName: node linkType: hard -"@nx/nx-win32-x64-msvc@npm:22.7.7": - version: 22.7.7 - resolution: "@nx/nx-win32-x64-msvc@npm:22.7.7" +"@nx/nx-win32-x64-msvc@npm:22.7.12": + version: 22.7.12 + resolution: "@nx/nx-win32-x64-msvc@npm:22.7.12" conditions: os=win32 & cpu=x64 languageName: node linkType: hard @@ -9058,7 +9058,7 @@ __metadata: languageName: node linkType: hard -"agent-base@npm:6": +"agent-base@npm:6, agent-base@npm:6.0.2": version: 6.0.2 resolution: "agent-base@npm:6.0.2" dependencies: @@ -10547,6 +10547,15 @@ __metadata: languageName: node linkType: hard +"brace-expansion@npm:5.0.8": + version: 5.0.8 + resolution: "brace-expansion@npm:5.0.8" + dependencies: + balanced-match: "npm:^4.0.2" + checksum: 10c0/73304caafd00fdc5b0168e693ac15bf25b6357dec76d1195fcd628fe2cf99c46f9c889a7ecfa3cfe236dbd2d5ce3e27a6ccc4370b46d475d0d19081e11f86019 + languageName: node + linkType: hard + "brace-expansion@npm:^1.1.7": version: 1.1.21 resolution: "brace-expansion@npm:1.1.21" @@ -12029,7 +12038,7 @@ __metadata: languageName: node linkType: hard -"debug@npm:4, debug@npm:^4.0.0, debug@npm:^4.1.0, debug@npm:^4.1.1, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.3, debug@npm:^4.3.4, debug@npm:^4.3.5, debug@npm:^4.4.0, debug@npm:^4.4.1, debug@npm:^4.4.3": +"debug@npm:4, debug@npm:4.4.3, debug@npm:^4.0.0, debug@npm:^4.1.0, debug@npm:^4.1.1, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.3, debug@npm:^4.3.4, debug@npm:^4.3.5, debug@npm:^4.4.0, debug@npm:^4.4.1, debug@npm:^4.4.3": version: 4.4.3 resolution: "debug@npm:4.4.3" dependencies: @@ -15677,7 +15686,7 @@ __metadata: languageName: node linkType: hard -"https-proxy-agent@npm:^5.0.0, https-proxy-agent@npm:^5.0.1": +"https-proxy-agent@npm:5.0.1, https-proxy-agent@npm:^5.0.0, https-proxy-agent@npm:^5.0.1": version: 5.0.1 resolution: "https-proxy-agent@npm:5.0.1" dependencies: @@ -20967,37 +20976,38 @@ __metadata: linkType: hard "nx@npm:>=21.5.3 < 23.0.0": - version: 22.7.7 - resolution: "nx@npm:22.7.7" + version: 22.7.12 + resolution: "nx@npm:22.7.12" dependencies: "@emnapi/core": "npm:1.4.5" "@emnapi/runtime": "npm:1.4.5" "@emnapi/wasi-threads": "npm:1.0.4" "@jest/diff-sequences": "npm:30.0.1" "@napi-rs/wasm-runtime": "npm:0.2.4" - "@nx/nx-darwin-arm64": "npm:22.7.7" - "@nx/nx-darwin-x64": "npm:22.7.7" - "@nx/nx-freebsd-x64": "npm:22.7.7" - "@nx/nx-linux-arm-gnueabihf": "npm:22.7.7" - "@nx/nx-linux-arm64-gnu": "npm:22.7.7" - "@nx/nx-linux-arm64-musl": "npm:22.7.7" - "@nx/nx-linux-x64-gnu": "npm:22.7.7" - "@nx/nx-linux-x64-musl": "npm:22.7.7" - "@nx/nx-win32-arm64-msvc": "npm:22.7.7" - "@nx/nx-win32-x64-msvc": "npm:22.7.7" + "@nx/nx-darwin-arm64": "npm:22.7.12" + "@nx/nx-darwin-x64": "npm:22.7.12" + "@nx/nx-freebsd-x64": "npm:22.7.12" + "@nx/nx-linux-arm-gnueabihf": "npm:22.7.12" + "@nx/nx-linux-arm64-gnu": "npm:22.7.12" + "@nx/nx-linux-arm64-musl": "npm:22.7.12" + "@nx/nx-linux-x64-gnu": "npm:22.7.12" + "@nx/nx-linux-x64-musl": "npm:22.7.12" + "@nx/nx-win32-arm64-msvc": "npm:22.7.12" + "@nx/nx-win32-x64-msvc": "npm:22.7.12" "@tybys/wasm-util": "npm:0.9.0" "@yarnpkg/lockfile": "npm:1.1.0" "@zkochan/js-yaml": "npm:0.0.7" + agent-base: "npm:6.0.2" ansi-colors: "npm:4.1.3" ansi-regex: "npm:5.0.1" ansi-styles: "npm:4.3.0" argparse: "npm:2.0.1" asynckit: "npm:0.4.0" - axios: "npm:1.16.0" + axios: "npm:1.18.1" balanced-match: "npm:4.0.3" base64-js: "npm:1.5.1" bl: "npm:4.1.0" - brace-expansion: "npm:5.0.6" + brace-expansion: "npm:5.0.8" buffer: "npm:5.7.1" call-bind-apply-helpers: "npm:1.0.2" chalk: "npm:4.1.2" @@ -21008,6 +21018,7 @@ __metadata: color-convert: "npm:2.0.1" color-name: "npm:1.1.4" combined-stream: "npm:1.0.8" + debug: "npm:4.4.3" defaults: "npm:1.0.4" define-lazy-prop: "npm:2.0.0" delayed-stream: "npm:1.0.0" @@ -21038,6 +21049,7 @@ __metadata: has-symbols: "npm:1.1.0" has-tostringtag: "npm:1.0.2" hasown: "npm:2.0.4" + https-proxy-agent: "npm:5.0.1" ieee754: "npm:1.2.1" ignore: "npm:7.0.5" inherits: "npm:2.0.4" @@ -21056,6 +21068,7 @@ __metadata: mimic-fn: "npm:2.1.0" minimatch: "npm:10.2.5" minimist: "npm:1.2.8" + ms: "npm:2.1.3" npm-run-path: "npm:4.0.1" once: "npm:1.4.0" onetime: "npm:5.1.2" @@ -21122,7 +21135,7 @@ __metadata: bin: nx: ./dist/bin/nx.js nx-cloud: ./dist/bin/nx-cloud.js - checksum: 10c0/11c9bc83bb9cbea6959aef2dd49c5070e13da222f1a5b63fd9ff39e9cff0eae2e6df49275870b762bc001a67a06547096648acb48e9b4bd01c218cd87585fadb + checksum: 10c0/dea963353097c1852fceda946fb2b9737f5241a8bc13fdd1af7a7dcda1a7ef9e7d2c01fe82ff66bc312a158f8ababcc099df04d8e310453b5ba79d4623a42a2b languageName: node linkType: hard From 425a5e52bdcdc1f347f41812f943e95d890235b9 Mon Sep 17 00:00:00 2001 From: Antonis Lilis Date: Mon, 12 Oct 2026 09:13:11 +0200 Subject: [PATCH 2/2] chore(deps): Override brace-expansion 5.0.8 to ^5.0.9 nx 22.7.12 hard-pins brace-expansion@5.0.8, which escaped the existing resolutions (keyed on ^5.0.2/^5.0.5/5.0.6) and reintroduced three high-severity DoS advisories (GHSA-rgw5-rvv9-x895, GHSA-6j4f-fj2g-mc7p, GHSA-qhr7-859c-m2p7). Add a matching resolution so it resolves to ^5.0.9. Co-Authored-By: Claude Opus 4.8 --- package.json | 1 + yarn.lock | 9 --------- 2 files changed, 1 insertion(+), 9 deletions(-) diff --git a/package.json b/package.json index 4dd32323f4..79c90c694e 100644 --- a/package.json +++ b/package.json @@ -119,6 +119,7 @@ "brace-expansion@npm:^5.0.2": "^5.0.9", "brace-expansion@npm:^5.0.5": "^5.0.9", "brace-expansion@npm:5.0.6": "^5.0.9", + "brace-expansion@npm:5.0.8": "^5.0.9", "@appium/base-driver@npm:10.2.2/path-to-regexp": "^8.4.0", "router@npm:2.2.0/path-to-regexp": "^8.4.0", "yaml": "^2.8.3", diff --git a/yarn.lock b/yarn.lock index 79ce97888a..b754089ded 100644 --- a/yarn.lock +++ b/yarn.lock @@ -10547,15 +10547,6 @@ __metadata: languageName: node linkType: hard -"brace-expansion@npm:5.0.8": - version: 5.0.8 - resolution: "brace-expansion@npm:5.0.8" - dependencies: - balanced-match: "npm:^4.0.2" - checksum: 10c0/73304caafd00fdc5b0168e693ac15bf25b6357dec76d1195fcd628fe2cf99c46f9c889a7ecfa3cfe236dbd2d5ce3e27a6ccc4370b46d475d0d19081e11f86019 - languageName: node - linkType: hard - "brace-expansion@npm:^1.1.7": version: 1.1.21 resolution: "brace-expansion@npm:1.1.21"