@checkstack/healthcheck-frontend 0.19.1 → 0.19.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +61 -0
- package/package.json +15 -15
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,66 @@
|
|
|
1
1
|
# @checkstack/healthcheck-frontend
|
|
2
2
|
|
|
3
|
+
## 0.19.3
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- Updated dependencies [1909a61]
|
|
8
|
+
- @checkstack/ui@1.8.3
|
|
9
|
+
- @checkstack/auth-frontend@0.6.3
|
|
10
|
+
- @checkstack/dashboard-frontend@0.7.3
|
|
11
|
+
- @checkstack/gitops-frontend@0.4.3
|
|
12
|
+
- @checkstack/tips-frontend@0.2.3
|
|
13
|
+
|
|
14
|
+
## 0.19.2
|
|
15
|
+
|
|
16
|
+
### Patch Changes
|
|
17
|
+
|
|
18
|
+
- b627562: Bump direct and transitive dependencies to clear MEDIUM-severity advisories
|
|
19
|
+
that Trivy now surfaces alongside CRITICAL/HIGH.
|
|
20
|
+
|
|
21
|
+
Direct version bumps in package.json:
|
|
22
|
+
|
|
23
|
+
- `@checkstack/catalog-backend`, `@checkstack/gitops-backend`,
|
|
24
|
+
`@checkstack/healthcheck-frontend`: `uuid` `^13.0.0` → `^14.0.0`
|
|
25
|
+
(GHSA-w5hq-g745-h8pq, missing buffer bounds check in v3/v5/v6). Also
|
|
26
|
+
dropped the now-redundant `@types/uuid` devDependency — uuid 14 ships
|
|
27
|
+
its own types and the npm `@types/uuid` package is a stub.
|
|
28
|
+
- `@checkstack/gitops-backend`: `yaml` `^2.7.0` → `^2.8.3`
|
|
29
|
+
(GHSA-48c2-rrv3-qjmp, stack overflow on deeply nested collections).
|
|
30
|
+
- `@checkstack/dev-server`: `vite` `^5.4.0` → `^8.0.12`
|
|
31
|
+
(GHSA-4w7w-66w2-5vf9, path traversal in optimized-deps `.map` handling)
|
|
32
|
+
and `@vitejs/plugin-react` `^4.3.4` → `^6.0.1` to stay inside the new
|
|
33
|
+
vite peer range.
|
|
34
|
+
|
|
35
|
+
Root `overrides` / `resolutions` to bypass transitive pins that block the
|
|
36
|
+
walk:
|
|
37
|
+
|
|
38
|
+
- `dompurify` `^3.4.3` — `monaco-editor@0.55.1` pins `dompurify@3.2.7`
|
|
39
|
+
exactly, so the only way to pick up the eight DOMPurify XSS / prototype
|
|
40
|
+
pollution advisories (GHSA-v2wj-7wpq-c8vv et al.) is an override.
|
|
41
|
+
Affects `@checkstack/ui`, which is the only consumer of monaco.
|
|
42
|
+
- `uuid` `^14.0.0` — also forces `bullmq`'s nested `uuid@11.1.0`
|
|
43
|
+
(vulnerable per GHSA-w5hq-g745-h8pq) to the patched line. Affects
|
|
44
|
+
`@checkstack/queue-bullmq-backend`.
|
|
45
|
+
- `yaml` `^2.9.0` — covers transitive resolutions that would otherwise
|
|
46
|
+
pin pre-2.8.3 yaml.
|
|
47
|
+
|
|
48
|
+
The CI image scan (`.github/workflows/pr-checks.yml`) and the local
|
|
49
|
+
`bun run audit:*` helper now include `MEDIUM` alongside `CRITICAL,HIGH`,
|
|
50
|
+
so future MEDIUM regressions fail the pipeline. The production Dockerfile
|
|
51
|
+
also strips vendored `test/`, `tests/`, `__tests__/`, `benchmark/`,
|
|
52
|
+
`benchmarks/`, `example/` and `examples/` folders from `node_modules`
|
|
53
|
+
before the runtime stage — those tarball artefacts ship their own
|
|
54
|
+
nested `package.json` (`benchmark`, `tedious-benchmarks`, etc.) which
|
|
55
|
+
Trivy was scanning as if they were real packages.
|
|
56
|
+
|
|
57
|
+
- Updated dependencies [b627562]
|
|
58
|
+
- @checkstack/ui@1.8.2
|
|
59
|
+
- @checkstack/auth-frontend@0.6.2
|
|
60
|
+
- @checkstack/dashboard-frontend@0.7.2
|
|
61
|
+
- @checkstack/gitops-frontend@0.4.2
|
|
62
|
+
- @checkstack/tips-frontend@0.2.2
|
|
63
|
+
|
|
3
64
|
## 0.19.1
|
|
4
65
|
|
|
5
66
|
### Patch Changes
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@checkstack/healthcheck-frontend",
|
|
3
|
-
"version": "0.19.
|
|
3
|
+
"version": "0.19.3",
|
|
4
4
|
"license": "Elastic-2.0",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "src/index.tsx",
|
|
@@ -13,18 +13,18 @@
|
|
|
13
13
|
"lint:code": "eslint . --max-warnings 0"
|
|
14
14
|
},
|
|
15
15
|
"dependencies": {
|
|
16
|
-
"@checkstack/anomaly-common": "1.
|
|
17
|
-
"@checkstack/auth-frontend": "0.6.
|
|
18
|
-
"@checkstack/catalog-common": "2.
|
|
19
|
-
"@checkstack/common": "0.
|
|
20
|
-
"@checkstack/dashboard-frontend": "0.7.
|
|
21
|
-
"@checkstack/frontend-api": "0.5.
|
|
22
|
-
"@checkstack/gitops-frontend": "0.4.
|
|
23
|
-
"@checkstack/healthcheck-common": "1.0
|
|
24
|
-
"@checkstack/satellite-common": "0.
|
|
25
|
-
"@checkstack/signal-frontend": "0.1.
|
|
26
|
-
"@checkstack/tips-frontend": "0.2.
|
|
27
|
-
"@checkstack/ui": "1.8.
|
|
16
|
+
"@checkstack/anomaly-common": "1.2.0",
|
|
17
|
+
"@checkstack/auth-frontend": "0.6.2",
|
|
18
|
+
"@checkstack/catalog-common": "2.2.0",
|
|
19
|
+
"@checkstack/common": "0.10.0",
|
|
20
|
+
"@checkstack/dashboard-frontend": "0.7.2",
|
|
21
|
+
"@checkstack/frontend-api": "0.5.1",
|
|
22
|
+
"@checkstack/gitops-frontend": "0.4.2",
|
|
23
|
+
"@checkstack/healthcheck-common": "1.1.0",
|
|
24
|
+
"@checkstack/satellite-common": "0.5.0",
|
|
25
|
+
"@checkstack/signal-frontend": "0.1.3",
|
|
26
|
+
"@checkstack/tips-frontend": "0.2.2",
|
|
27
|
+
"@checkstack/ui": "1.8.2",
|
|
28
28
|
"ajv": "^8.18.0",
|
|
29
29
|
"ajv-formats": "^3.0.1",
|
|
30
30
|
"date-fns": "^4.1.0",
|
|
@@ -32,11 +32,11 @@
|
|
|
32
32
|
"react": "^18.2.0",
|
|
33
33
|
"react-router-dom": "^6.20.0",
|
|
34
34
|
"recharts": "^3.6.0",
|
|
35
|
-
"uuid": "^
|
|
35
|
+
"uuid": "^14.0.0",
|
|
36
36
|
"zod": "^4.2.1"
|
|
37
37
|
},
|
|
38
38
|
"devDependencies": {
|
|
39
|
-
"@checkstack/scripts": "0.3.
|
|
39
|
+
"@checkstack/scripts": "0.3.2",
|
|
40
40
|
"@checkstack/tsconfig": "0.0.7",
|
|
41
41
|
"@types/react": "^18.2.0",
|
|
42
42
|
"typescript": "^5.0.0"
|