Skip to content

Commit 746b0fd

Browse files
GilbertCherrieGilbertCherrie
authored
Merge pull request #9329 from Fryguy/update_npm_excludes
Update the npmAuditExcludePackages due to package updates
2 parents 63161e6 + a9cbee2 commit 746b0fd

File tree

2 files changed

+15
-31
lines changed

2 files changed

+15
-31
lines changed

‎.yarnrc.yml

Lines changed: 12 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -6,39 +6,20 @@ nodeLinker: node-modules
66

77
npmAuditExcludePackages:
88
- angular
9-
# pending | moderate | GHSA-28hp-fgcr-2r4h | angular <1.6.0 | 1.5.11 brought in by angular-patternfly@npm:3.26.0
10-
# pending | moderate | GHSA-5cp4-xmrw-59wf | angular <1.8.0 | 1.5.11, 1.6.10 brought in by angular-patternfly@npm:3.26.0, manageiq-ui-classic@workspace:.
11-
# pending | high | GHSA-89mq-4x47-5v83 | angular <1.7.9 | 1.5.11, 1.6.10 brought in by angular-patternfly@npm:3.26.0, manageiq-ui-classic@workspace:.
12-
# pending | moderate | GHSA-m2h2-264f-f486 | angular >=1.7.0 | 1.8.3 brought in by angular-bootstrap-switch@npm:0.5.2
13-
# pending | moderate | GHSA-mhp6-pxh8-r675 | angular <1.8.0 | 1.5.11, 1.6.10 brought in by angular-patternfly@npm:3.26.0, manageiq-ui-classic@workspace:.
14-
# pending | moderate | GHSA-prc3-vjfx-vhm9 | angular <=1.8.3 | 1.5.11, 1.6.10, 1.8.3 brought in by angular-bootstrap-switch@npm:0.5.2, angular-patternfly@npm:3.26.0, manageiq-ui-classic@workspace:.
15-
# pending | moderate | GHSA-2vrf-hf26-jrp5 | angular <=1.8.3 | 1.5.11, 1.6.10, 1.8.3 brought in by angular-bootstrap-switch@npm:0.5.2, angular-patternfly@npm:3.26.0, manageiq-ui-classic@workspace:.
16-
# pending | moderate | GHSA-2qqx-w9hr-q5gx | angular <=1.8.3 | 1.5.11, 1.6.10, 1.8.3 brought in by angular-bootstrap-switch@npm:0.5.2, angular-patternfly@npm:3.26.0, manageiq-ui-classic@workspace:.
17-
# pending | moderate | GHSA-qwqh-hm9m-p5hr | angular <=1.8.3 | 1.5.11, 1.6.10, 1.8.3 brought in by angular-bootstrap-switch@npm:0.5.2, angular-patternfly@npm:3.26.0, manageiq-ui-classic@workspace:.
18-
# pending | high | GHSA-4w4v-5hc9-xrr2 | angular >=1.3.0 <=1.8.3 | 1.5.11, 1.6.10, 1.8.3 brought in by angular-bootstrap-switch@npm:0.5.2, angular-patternfly@npm:3.26.0, manageiq-ui-classic@workspace:.
9+
# pending | high | GHSA-4w4v-5hc9-xrr2 | angular >=1.3.0 <=1.8.3 | 1.8.3 brought in by manageiq-ui-classic@workspace:.
10+
# pending | moderate | GHSA-m2h2-264f-f486 | angular >=1.7.0 | 1.8.3 brought in by manageiq-ui-classic@workspace:.
11+
# pending | moderate | GHSA-prc3-vjfx-vhm9 | angular <=1.8.3 | 1.8.3 brought in by manageiq-ui-classic@workspace:.
12+
# pending | moderate | GHSA-2vrf-hf26-jrp5 | angular <=1.8.3 | 1.8.3 brought in by manageiq-ui-classic@workspace:.
13+
# pending | moderate | GHSA-2qqx-w9hr-q5gx | angular <=1.8.3 | 1.8.3 brought in by manageiq-ui-classic@workspace:.
14+
# pending | moderate | GHSA-qwqh-hm9m-p5hr | angular <=1.8.3 | 1.8.3 brought in by manageiq-ui-classic@workspace:.
15+
# pending | low | GHSA-m9gf-397r-hwpg | angular >=1.3.0-rc.4 <=1.8.3 | 1.8.3 brought in by manageiq-ui-classic@workspace:.
16+
# pending | low | GHSA-mqm9-c95h-x2p6 | angular <=1.8.3 | 1.8.3 brought in by manageiq-ui-classic@workspace:.
1917
- bootstrap
20-
# pending | moderate | GHSA-9v3m-8fp8-mj99 | bootstrap >=3.0.0 <3.4.1 | 3.3.7 brought in by patternfly@npm:3.31.2
21-
# pending | moderate | GHSA-9mvj-f7w8-pvh2 | bootstrap >=2.0.0 <=3.4.1 | 3.3.7, 3.4.1 brought in by patternfly@npm:3.31.2, patternfly@npm:3.59.5
22-
# pending | moderate | GHSA-3mgp-fx93-9xv5 | bootstrap <3.4.0 | 3.3.7 brought in by patternfly@npm:3.31.2
23-
# pending | moderate | GHSA-ph58-4vrj-w6hr | bootstrap <3.4.0 | 3.3.7 brought in by patternfly@npm:3.31.2
24-
# pending | moderate | GHSA-3wqf-4x89-9g79 | bootstrap >=2.3.0 <3.4.0 | 3.3.7 brought in by patternfly@npm:3.31.2
25-
# pending | moderate | GHSA-7mvr-5x2g-wfc8 | bootstrap >=2.3.0 <3.4.0 | 3.3.7 brought in by patternfly@npm:3.31.2
26-
# pending | moderate | GHSA-4p24-vmcr-4gqj | bootstrap >=2.0.4 <3.4.0 | 3.3.7 brought in by patternfly@npm:3.31.2
27-
- bootstrap-select
28-
# pending | high | GHSA-9r7h-6639-v5mw | bootstrap-select <1.13.6 | 1.12.2 brought in by patternfly@npm:3.59.5
29-
# pending | moderate | GHSA-7c82-mp33-r854 | bootstrap-select <1.13.6 | 1.12.2 brought in by patternfly@npm:3.59.5
18+
# pending | moderate | GHSA-9mvj-f7w8-pvh2 | bootstrap >=2.0.0 <=3.4.1 | 3.4.1 brought in by patternfly@npm:3.59.5
3019
- jquery
3120
# pending | moderate | GHSA-rmxg-73gg-4p98 | jquery >=1.12.3 <3.0.0 | 2.2.4 brought in by manageiq-ui-classic@workspace:.
32-
# pending | moderate | GHSA-gxr4-xjj5-5px2 | jquery >=1.2.0 <3.5.0 | 2.2.4, 3.2.1, 3.4.1 brought in by manageiq-ui-classic@workspace:., patternfly@npm:3.31.2, patternfly@npm:3.59.5
33-
# pending | moderate | GHSA-6c3j-c64m-qhgq | jquery >=1.1.4 <3.4.0 | 2.2.4, 3.2.1 brought in by manageiq-ui-classic@workspace:., patternfly@npm:3.31.2
34-
# pending | moderate | GHSA-jpcq-cgw6-v4j6 | jquery >=1.0.3 <3.5.0 | 2.2.4, 3.2.1, 3.4.1 brought in by manageiq-ui-classic@workspace:., patternfly@npm:3.31.2, patternfly@npm:3.59.5
35-
- lodash
36-
# pending | moderate | GHSA-x5rq-j2xg-h7qm | lodash <4.17.11 | 3.10.1 brought in by angular-patternfly@npm:3.26.0
37-
# pending | high | GHSA-4xc9-xhrj-v574 | lodash <4.17.11 | 3.10.1 brought in by angular-patternfly@npm:3.26.0
38-
# pending | moderate | GHSA-29mw-wpgm-hmr9 | lodash <4.17.21 | 3.10.1 brought in by angular-patternfly@npm:3.26.0
39-
# pending | high | GHSA-p6mc-m468-83gw | lodash >=3.7.0 <4.17.19 | 3.10.1 brought in by angular-patternfly@npm:3.26.0
40-
# pending | high | GHSA-35jh-r3h4-6jhm | lodash <4.17.21 | 3.10.1 brought in by angular-patternfly@npm:3.26.0
41-
# pending | moderate | GHSA-fvqr-27wr-82fm | lodash <4.17.5 | 3.10.1 brought in by angular-patternfly@npm:3.26.0
42-
# pending | critical | GHSA-jf85-cpcp-j695 | lodash <4.17.12 | 3.10.1 brought in by angular-patternfly@npm:3.26.0
21+
# pending | moderate | GHSA-gxr4-xjj5-5px2 | jquery >=1.2.0 <3.5.0 | 2.2.4, 3.4.1 brought in by manageiq-ui-classic@workspace:., patternfly@npm:3.59.5
22+
# pending | moderate | GHSA-6c3j-c64m-qhgq | jquery >=1.1.4 <3.4.0 | 2.2.4 brought in by manageiq-ui-classic@workspace:.
23+
# pending | moderate | GHSA-jpcq-cgw6-v4j6 | jquery >=1.0.3 <3.5.0 | 2.2.4, 3.4.1 brought in by manageiq-ui-classic@workspace:., patternfly@npm:3.59.5
4324

4425
yarnPath: .yarn/releases/yarn-4.5.3.cjs

‎Rakefile

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -119,4 +119,7 @@ namespace :spec do
119119
end
120120
end
121121

122+
desc "Rebuild yarn audit pending list"
123+
task :rebuild_yarn_audit_pending => "app:test:security:rebuild_yarn_audit_pending"
124+
122125
task :default => ENV["TEST_SUITE"] || :spec

0 commit comments

Comments
 (0)