Skip to content

Solve security dependencies for fast-xml-parser, tmp and babel/runtime #959

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion benchmarks/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@
"devDependencies": {
"@babel/core": "7.25.2",
"@babel/preset-env": "7.25.3",
"@babel/runtime": "7.25.0",
"@babel/runtime": "^7.26.10",
"@datadog/datadog-ci": "3.12.0",
"@react-native-community/cli": "15.0.1",
"@react-native-community/cli-platform-android": "15.0.1",
Expand Down
2 changes: 1 addition & 1 deletion example-new-architecture/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
"devDependencies": {
"@babel/core": "^7.25.2",
"@babel/preset-env": "^7.25.3",
"@babel/runtime": "^7.25.0",
"@babel/runtime": "^7.26.10",
"@react-native-community/cli": "15.0.1",
"@react-native-community/cli-platform-android": "15.0.1",
"@react-native-community/cli-platform-ios": "15.0.1",
Expand Down
2 changes: 1 addition & 1 deletion example/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@
"devDependencies": {
"@babel/core": "^7.25.2",
"@babel/preset-env": "^7.25.3",
"@babel/runtime": "^7.25.0",
"@babel/runtime": "^7.26.10",
"@datadog/datadog-ci": "^2.39.0",
"@react-native/babel-preset": "0.76.9",
"@react-native/eslint-config": "0.76.9",
Expand Down
7 changes: 4 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@
"@babel/core": "^7.25.2",
"@babel/plugin-transform-runtime": "^7.25.0",
"@babel/preset-env": "^7.25.3",
"@babel/runtime": "^7.25.0",
"@babel/runtime": "7.26.10",
"@react-native-community/cli": "15.0.1",
"@react-native-community/cli-platform-android": "15.0.1",
"@react-native-community/cli-platform-ios": "15.0.1",
Expand Down Expand Up @@ -89,14 +89,15 @@
"ejs": "3.1.10",
"shell-quote": "^1.7.3",
"cross-spawn": "7.0.5",
"ft-xml-parser": "4.4.1",
"fast-xml-parser": "4.4.1",
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"axios": "1.8.2",
"nanoid": "3.3.8",
"send": "0.19.0",
"serve-static": "1.16.0",
"formidable": "3.5.3",
"snyk": "^1.1297.3",
"form-data": "4.0.4",
"on-headers": "1.1.0"
"on-headers": "1.1.0",
"tmp": "0.2.4"
}
}
78 changes: 20 additions & 58 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -3495,12 +3495,12 @@ __metadata:
languageName: node
linkType: hard

"@babel/runtime@npm:7.25.0":
version: 7.25.0
resolution: "@babel/runtime@npm:7.25.0"
"@babel/runtime@npm:7.26.10":
version: 7.26.10
resolution: "@babel/runtime@npm:7.26.10"
dependencies:
regenerator-runtime: ^0.14.0
checksum: 4a2a374a58eb01aaa65c5762606e90b3a1f448e0c637d42278b6cc0b42a9f5399b5f381ba9f237ee087da2860d14dd2d1de7bddcbe18be6a3cafba97e44bed64
checksum: 22d2e0abb86e90de489ab16bb578db6fe2b63a88696db431198b24963749820c723f1982298cdbbea187f7b2b80fb4d98a514faf114ddb2fdc14a4b96277b955
languageName: node
linkType: hard

Expand All @@ -3511,6 +3511,13 @@ __metadata:
languageName: node
linkType: hard

"@babel/runtime@npm:^7.26.10":
version: 7.28.2
resolution: "@babel/runtime@npm:7.28.2"
checksum: 8673eb2311752929f5b0167f42cff4cc1d5fadddd0394baca27d06c1618680ffcf95e9f01061f5c4dc3f6a32b6bbf500e7762c02dc22bcd273c2947b9774ddad
languageName: node
linkType: hard

"@babel/template@npm:^7.25.0, @babel/template@npm:^7.27.1, @babel/template@npm:^7.27.2, @babel/template@npm:^7.3.3":
version: 7.27.2
resolution: "@babel/template@npm:7.27.2"
Expand Down Expand Up @@ -8228,7 +8235,7 @@ __metadata:
dependencies:
"@babel/core": ^7.25.2
"@babel/preset-env": ^7.25.3
"@babel/runtime": ^7.25.0
"@babel/runtime": ^7.26.10
"@datadog/mobile-react-native": "workspace:packages/core"
"@react-native-community/cli": 15.0.1
"@react-native-community/cli-platform-android": 15.0.1
Expand Down Expand Up @@ -9049,7 +9056,7 @@ __metadata:
dependencies:
"@babel/core": 7.25.2
"@babel/preset-env": 7.25.3
"@babel/runtime": 7.25.0
"@babel/runtime": ^7.26.10
"@datadog/datadog-ci": 3.12.0
"@datadog/mobile-react-native": "workspace:packages/core"
"@datadog/mobile-react-native-session-replay": "workspace:packages/react-native-session-replay"
Expand Down Expand Up @@ -10277,7 +10284,7 @@ __metadata:
dependencies:
"@babel/core": ^7.25.2
"@babel/preset-env": ^7.25.3
"@babel/runtime": ^7.25.0
"@babel/runtime": ^7.26.10
"@datadog/datadog-ci": ^2.39.0
"@datadog/mobile-react-native": "workspace:packages/core"
"@datadog/mobile-react-native-navigation": "workspace:packages/react-native-navigation"
Expand Down Expand Up @@ -10318,7 +10325,7 @@ __metadata:
"@babel/core": ^7.25.2
"@babel/plugin-transform-runtime": ^7.25.0
"@babel/preset-env": ^7.25.3
"@babel/runtime": ^7.25.0
"@babel/runtime": 7.26.10
"@react-native-community/cli": 15.0.1
"@react-native-community/cli-platform-android": 15.0.1
"@react-native-community/cli-platform-ios": 15.0.1
Expand Down Expand Up @@ -11832,28 +11839,6 @@ __metadata:
languageName: node
linkType: hard

"fast-xml-parser@npm:5.2.5":
version: 5.2.5
resolution: "fast-xml-parser@npm:5.2.5"
dependencies:
strnum: ^2.1.0
bin:
fxparser: src/cli/cli.js
checksum: b12daa933bc226bd7df1e1ecbd305e561c83fd6e4a234b5e2728901deca25a9b9522b9d3ebafde41b1f4d87ab814e3efe18c636638580795fdbe4670a556be88
languageName: node
linkType: hard

"fast-xml-parser@npm:^4.4.1":
version: 4.5.3
resolution: "fast-xml-parser@npm:4.5.3"
dependencies:
strnum: ^1.1.1
bin:
fxparser: src/cli/cli.js
checksum: cd6a184941ec6c23f9e6b514421a3f396cfdff5f4a8c7c27bd0eff896edb4a2b55c27da16f09b789663613dfc4933602b9b71ac3e9d1d2ddcc0492fc46c8fa52
languageName: node
linkType: hard

"fastest-levenshtein@npm:^1.0.7":
version: 1.0.16
resolution: "fastest-levenshtein@npm:1.0.16"
Expand Down Expand Up @@ -17138,13 +17123,6 @@ __metadata:
languageName: node
linkType: hard

"os-tmpdir@npm:~1.0.2":
version: 1.0.2
resolution: "os-tmpdir@npm:1.0.2"
checksum: 5666560f7b9f10182548bf7013883265be33620b1c1b4a4d405c25be2636f970c5488ff3e6c48de75b55d02bde037249fe5dbfbb4c0fb7714953d56aed062e6d
languageName: node
linkType: hard

"own-keys@npm:^1.0.1":
version: 1.0.1
resolution: "own-keys@npm:1.0.1"
Expand Down Expand Up @@ -20089,20 +20067,13 @@ __metadata:
languageName: node
linkType: hard

"strnum@npm:^1.0.5, strnum@npm:^1.1.1":
"strnum@npm:^1.0.5":
version: 1.1.2
resolution: "strnum@npm:1.1.2"
checksum: a85219eda13e97151c95e343a9e5960eacfb0a0ff98104b4c9cb7a212e3008bddf0c9714c9c37c2e508be78e741a04afc80027c2dc18509d1b5ffd4c37191fc2
languageName: node
linkType: hard

"strnum@npm:^2.1.0":
version: 2.1.1
resolution: "strnum@npm:2.1.1"
checksum: 566139b218ef13bdde2a69c744852ac41ea167588f624d46c3b3bebb5d1d1775c55bca4702a0ad2a6a66eb4b3b7de4cbbc83e8d40c5835feabebf6f9cc468993
languageName: node
linkType: hard

"strong-log-transformer@npm:2.1.0, strong-log-transformer@npm:^2.1.0":
version: 2.1.0
resolution: "strong-log-transformer@npm:2.1.0"
Expand Down Expand Up @@ -20402,19 +20373,10 @@ __metadata:
languageName: node
linkType: hard

"tmp@npm:^0.0.33":
version: 0.0.33
resolution: "tmp@npm:0.0.33"
dependencies:
os-tmpdir: ~1.0.2
checksum: 902d7aceb74453ea02abbf58c203f4a8fc1cead89b60b31e354f74ed5b3fb09ea817f94fb310f884a5d16987dd9fa5a735412a7c2dd088dd3d415aa819ae3a28
languageName: node
linkType: hard

"tmp@npm:^0.2.3, tmp@npm:~0.2.1":
version: 0.2.3
resolution: "tmp@npm:0.2.3"
checksum: 73b5c96b6e52da7e104d9d44afb5d106bb1e16d9fa7d00dbeb9e6522e61b571fbdb165c756c62164be9a3bbe192b9b268c236d370a2a0955c7689cd2ae377b95
"tmp@npm:0.2.4":
version: 0.2.4
resolution: "tmp@npm:0.2.4"
checksum: fde5fcdbd741c957458d6f7310750879172b399ac62b468c6707cef6fd0e77d0e632dd05471f607530a248c483abaa00187a6eee8561030268ac98bfb5e41720
languageName: node
linkType: hard

Expand Down
Loading