@red-hat-developer-hub/plugin-cost-management 2.2.0 → 2.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +37 -0
- package/config.schema.json +15 -0
- package/package.json +6 -5
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,42 @@
|
|
|
1
1
|
# @red-hat-developer-hub/plugin-cost-management
|
|
2
2
|
|
|
3
|
+
## 2.2.1
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- 558b7c3: fix: patch transitive dependency CVEs via yarn resolutions
|
|
8
|
+
|
|
9
|
+
Pins vulnerable transitive dependencies to patched versions to address open Dependabot alerts:
|
|
10
|
+
|
|
11
|
+
- 815580b: fix: additional CVE patches and dependency updates for 2.2.1
|
|
12
|
+
|
|
13
|
+
Covers the following changes merged after the initial CVE patch (558b7c3):
|
|
14
|
+
|
|
15
|
+
- chore(deps): update rhdh cost management dependencies (patch) (#3000) — bumps
|
|
16
|
+
`@aws-sdk/core/fast-xml-parser` to 4.5.6, `request/form-data` to 2.5.5,
|
|
17
|
+
`request/tough-cookie` to 4.1.4, `typeorm` to 0.3.29, and `file-type` to 21.3.4
|
|
18
|
+
via yarn resolutions
|
|
19
|
+
|
|
20
|
+
- fix: resolve lodash CVEs via workspace resolution (#3135) — pins lodash to 4.18.1
|
|
21
|
+
to address GHSA-r5fr-rjxr-66jc (Code Injection via _.template, CVSS 8.1) and
|
|
22
|
+
GHSA-f23m-r3pf-42rh (Prototype Pollution via _.unset/\_.omit, CVSS 6.5)
|
|
23
|
+
|
|
24
|
+
- fix: update lodash direct deps to 4.18.1 to close Dependabot alerts (#3142) —
|
|
25
|
+
updates pinned lodash versions in individual plugin package.json files so
|
|
26
|
+
Dependabot can detect the fix for GHSA-r5fr-rjxr-66jc and GHSA-f23m-r3pf-42rh
|
|
27
|
+
|
|
28
|
+
- fix: CVE patches for casbin/minimatch and fast-xml-parser (#3143) — adds
|
|
29
|
+
`casbin/minimatch` resolution to 7.4.8 and bumps `fast-xml-parser` to 5.7.3
|
|
30
|
+
|
|
31
|
+
- fix: upgrade @backstage-community/plugin-rbac-backend to ^7.12.4 (#3161) —
|
|
32
|
+
upgrades rbac-backend and rbac-common to address a Backstage backend CVE
|
|
33
|
+
|
|
34
|
+
- chore(deps): update linkifyjs to v4.3.3 (#3155) — patch version bump
|
|
35
|
+
|
|
36
|
+
- Updated dependencies [558b7c3]
|
|
37
|
+
- Updated dependencies [815580b]
|
|
38
|
+
- @red-hat-developer-hub/plugin-cost-management-common@2.2.1
|
|
39
|
+
|
|
3
40
|
## 2.2.0
|
|
4
41
|
|
|
5
42
|
### Minor Changes
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
3
|
+
"type": "object",
|
|
4
|
+
"properties": {
|
|
5
|
+
"costManagement": {
|
|
6
|
+
"type": "object",
|
|
7
|
+
"properties": {
|
|
8
|
+
"optimizationWorkflowId": {
|
|
9
|
+
"type": "string",
|
|
10
|
+
"visibility": "frontend"
|
|
11
|
+
}
|
|
12
|
+
}
|
|
13
|
+
}
|
|
14
|
+
}
|
|
15
|
+
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@red-hat-developer-hub/plugin-cost-management",
|
|
3
|
-
"version": "2.2.
|
|
3
|
+
"version": "2.2.2",
|
|
4
4
|
"backstage": {
|
|
5
5
|
"pluginId": "cost-management",
|
|
6
6
|
"pluginPackages": [
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
],
|
|
11
11
|
"role": "frontend-plugin"
|
|
12
12
|
},
|
|
13
|
-
"configSchema": "config.
|
|
13
|
+
"configSchema": "config.schema.json",
|
|
14
14
|
"dependencies": {
|
|
15
15
|
"@backstage/core-components": "^0.18.8",
|
|
16
16
|
"@backstage/core-plugin-api": "^1.12.4",
|
|
@@ -23,9 +23,9 @@
|
|
|
23
23
|
"@material-ui/lab": "4.0.0-alpha.61",
|
|
24
24
|
"@patternfly/react-charts": "^8.3.0",
|
|
25
25
|
"@patternfly/react-tokens": "^6.1.0",
|
|
26
|
-
"@red-hat-developer-hub/plugin-cost-management-common": "^2.2.
|
|
26
|
+
"@red-hat-developer-hub/plugin-cost-management-common": "^2.2.2",
|
|
27
27
|
"date-fns": "^3.6.0",
|
|
28
|
-
"lodash": "^4.
|
|
28
|
+
"lodash": "^4.18.1",
|
|
29
29
|
"react-intl": "^6.6.8",
|
|
30
30
|
"react-use": "^17.2.4",
|
|
31
31
|
"victory-area": "^37.3.4",
|
|
@@ -70,7 +70,8 @@
|
|
|
70
70
|
},
|
|
71
71
|
"files": [
|
|
72
72
|
"app-config.dynamic.yaml",
|
|
73
|
-
"dist"
|
|
73
|
+
"dist",
|
|
74
|
+
"config.schema.json"
|
|
74
75
|
],
|
|
75
76
|
"license": "Apache-2.0",
|
|
76
77
|
"main": "./dist/index.esm.js",
|