Merge pull request #1490 from rocketstack-matt/on-headers-patch

Resolve on-headers vulnerability

Author: markscott-ms

docs/package.json

@@ -1,56 +1,57 @@
 {
-  "name": "docs",
-  "version": "0.0.0",
-  "private": true,
-  "license": "Apache-2.0",
-  "scripts": {
-    "docusaurus": "docusaurus",
-    "start": "docusaurus start",
-    "build": "docusaurus build",
-    "swizzle": "docusaurus swizzle",
-    "deploy": "docusaurus deploy",
-    "clear": "docusaurus clear",
-    "serve": "docusaurus serve",
-    "write-translations": "docusaurus write-translations",
-    "write-heading-ids": "docusaurus write-heading-ids",
-    "dependency-check": "dependency-check --project 'calm-docs' --scan . --out ./dependency-check-report --format ALL --suppression ../.github/node-cve-ignore-list.xml"
-  },
-  "dependencies": {
-    "@docusaurus/core": "3.8.1",
-    "@docusaurus/preset-classic": "3.8.1",
-    "@docusaurus/react-loadable": "6.0.0",
-    "@mdx-js/react": "^3.1.0",
-    "clsx": "^2.1.1",
-    "prism-react-renderer": "^2.4.1",
-    "react": "^19.1.0",
-    "react-dom": "^19.1.0",
-    "webpack": "^5.99.5"
-  },
-  "overrides": {
-    "serve-handler": {
-      "path-to-regexp": "3.3.0"
+    "name": "docs",
+    "version": "0.0.0",
+    "private": true,
+    "license": "Apache-2.0",
+    "scripts": {
+        "docusaurus": "docusaurus",
+        "start": "docusaurus start",
+        "build": "docusaurus build",
+        "swizzle": "docusaurus swizzle",
+        "deploy": "docusaurus deploy",
+        "clear": "docusaurus clear",
+        "serve": "docusaurus serve",
+        "write-translations": "docusaurus write-translations",
+        "write-heading-ids": "docusaurus write-heading-ids",
+        "dependency-check": "dependency-check --project 'calm-docs' --scan . --out ./dependency-check-report --format ALL --suppression ../.github/node-cve-ignore-list.xml"
     },
-    "cross-spawn": "^7.0.5"
-  },
-  "devDependencies": {
-    "@docusaurus/module-type-aliases": "3.8.0",
-    "@docusaurus/types": "3.8.0",
-    "express": "^5.1.0",
-    "webpack-dev-server": "^5.2.2"
-  },
-  "browserslist": {
-    "production": [
-      ">0.5%",
-      "not dead",
-      "not op_mini all"
-    ],
-    "development": [
-      "last 3 chrome version",
-      "last 3 firefox version",
-      "last 5 safari version"
-    ]
-  },
-  "engines": {
-    "node": ">=18.0"
-  }
+    "dependencies": {
+        "@docusaurus/core": "3.8.1",
+        "@docusaurus/preset-classic": "3.8.1",
+        "@docusaurus/react-loadable": "6.0.0",
+        "@mdx-js/react": "^3.1.0",
+        "clsx": "^2.1.1",
+        "prism-react-renderer": "^2.4.1",
+        "react": "^19.1.0",
+        "react-dom": "^19.1.0",
+        "webpack": "^5.99.5"
+    },
+    "overrides": {
+        "serve-handler": {
+            "path-to-regexp": "3.3.0"
+        },
+        "cross-spawn": "^7.0.5",
+        "on-headers": "^1.1.0"
+    },
+    "devDependencies": {
+        "@docusaurus/module-type-aliases": "3.8.0",
+        "@docusaurus/types": "3.8.0",
+        "express": "^5.1.0",
+        "webpack-dev-server": "^5.2.2"
+    },
+    "browserslist": {
+        "production": [
+            ">0.5%",
+            "not dead",
+            "not op_mini all"
+        ],
+        "development": [
+            "last 3 chrome version",
+            "last 3 firefox version",
+            "last 5 safari version"
+        ]
+    },
+    "engines": {
+        "node": ">=18.0"
+    }
 }

package-lock.json

@@ -31,6 +31,9 @@
         "npm-run-all2": "^8.0.0",
         "vitest": "^3.1.1"
     },
+    "overrides": {
+        "on-headers": "^1.1.0"
+    },
     "dependencies": {
         "@finos/calm-shared": "^0.2.2"
     }