@forge/csp 5.9.0-next.1 → 5.9.0-next.2-experimental-44b7a12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,23 @@
1
1
  # @forge/csp
2
2
 
3
+ ## 5.9.0-next.2-experimental-44b7a12
4
+
5
+ ### Minor Changes
6
+
7
+ - 297d598: Added FOS CDN Urls to getAtlassianImageHost for IC
8
+
9
+ ### Patch Changes
10
+
11
+ - 661b109: Trigger re-publish of @forge/csp to include getFOSCDNUrls in getAtlassianImageHost
12
+ - 55c1371: bump cheerio to ^1.2.0 to pull in a patched undici (>=7.19.0, resolving to a fixed release) and remediate CVE-2026-1525
13
+ NodeJS requirement bumped from 20.0.0 to >=20.18.1
14
+
15
+ ## 5.9.0-next.2
16
+
17
+ ### Patch Changes
18
+
19
+ - 661b109: Trigger re-publish of @forge/csp to include getFOSCDNUrls in getAtlassianImageHost
20
+
3
21
  ## 5.9.0-next.1
4
22
 
5
23
  ### Minor Changes
@@ -1 +1 @@
1
- {"version":3,"file":"csp-injection-service.d.ts","sourceRoot":"","sources":["../../src/csp/csp-injection-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAmB,MAAM,UAAU,CAAC;AAEvD,aAAK,iBAAiB,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAIF,aAAK,oBAAoB,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,MAAM,CAAC;CAC3B,CAAC;AAEF,aAAK,SAAS,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;AA+K1D,eAAO,MAAM,qBAAqB,cAAe,iBAAiB,cAAc,SAAS,KAAG,MAAM,EAWjG,CAAC;AAMF,eAAO,MAAM,kCAAkC,UAAiE,CAAC;AAEjH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,aAAa;IAmCrB,OAAO,CAAC,iBAAiB;IAuElB,gBAAgB;4BAUD,UAAU;mBACnB,iBAAiB;;;;;;;UAO1B,MAAM,EAAE,CAgGV;CACH"}
1
+ {"version":3,"file":"csp-injection-service.d.ts","sourceRoot":"","sources":["../../src/csp/csp-injection-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAmB,MAAM,UAAU,CAAC;AAEvD,aAAK,iBAAiB,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAIF,aAAK,oBAAoB,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,MAAM,CAAC;CAC3B,CAAC;AAEF,aAAK,SAAS,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;AA+K1D,eAAO,MAAM,qBAAqB,cAAe,iBAAiB,cAAc,SAAS,KAAG,MAAM,EAYjG,CAAC;AAMF,eAAO,MAAM,kCAAkC,UAAiE,CAAC;AAEjH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,aAAa;IAmCrB,OAAO,CAAC,iBAAiB;IAuElB,gBAAgB;4BAUD,UAAU;mBACnB,iBAAiB;;;;;;;UAO1B,MAAM,EAAE,CA+FV;CACH"}
@@ -139,7 +139,8 @@ const getAtlassianImageHost = (microsEnv, icOptions) => {
139
139
  getAtlassianHost('ATLASSIAN_EMOJIS_HOST', microsEnv, icOptions),
140
140
  getAtlassianHost('ATLASSIAN_TEAM_AVATAR_HOST', microsEnv, icOptions),
141
141
  getAtlassianHost('ATLASSIAN_TEAM_HEADER_HOST', microsEnv, icOptions),
142
- ...getFOSHostDownload(microsEnv, icOptions)
142
+ ...getFOSHostDownload(microsEnv, icOptions),
143
+ ...getFOSCDNUrls(microsEnv, icOptions)
143
144
  ];
144
145
  };
145
146
  exports.getAtlassianImageHost = getAtlassianImageHost;
@@ -179,7 +180,6 @@ class CSPInjectionService {
179
180
  hostname,
180
181
  ...exports.EXTERNAL_ALLOW_LISTED_IMAGES_HOSTS,
181
182
  ...(0, exports.getAtlassianImageHost)(microsEnv, icOptions),
182
- ...fosCDNUrls,
183
183
  ...this.getExistingCSPDetails(types_1.ExternalCspType.IMG_SRC, existingCSPDetails)
184
184
  ]
185
185
  .filter((a) => a)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@forge/csp",
3
- "version": "5.9.0-next.1",
3
+ "version": "5.9.0-next.2-experimental-44b7a12",
4
4
  "description": "Contains the CSP configuration for Custom UI resources in Forge",
5
5
  "main": "out/index.js",
6
6
  "author": "Atlassian",
@@ -11,8 +11,8 @@
11
11
  "clean": "rm -rf ./out && rm -f tsconfig.tsbuildinfo"
12
12
  },
13
13
  "devDependencies": {
14
- "@forge/cli-shared": "8.24.1-next.2",
15
- "@forge/manifest": "12.10.0-next.1",
14
+ "@forge/cli-shared": "8.25.0-next.5-experimental-44b7a12",
15
+ "@forge/manifest": "12.10.0-next.1-experimental-44b7a12",
16
16
  "@types/jest": "^29.5.14",
17
17
  "@types/node": "20.19.1",
18
18
  "cheerio": "^1.2.0"