Skip to content

Commit f046e9f

Browse files
authored
chore(ui): Upgrade dagre-d3-es version (#26422)
## Description Upgrade the patch version of dagre-d3-es to the [latest release](tbo47/dagre-es#54) to address a critical vulnerability ([CVE-2025-57347](GHSA-cc8p-78qf-8p7q)) identified in recent security scans. ## Motivation and Context ## Impact N/A ## Test Plan Manual test ## Contributor checklist - [x] Please make sure your submission complies with our [contributing guide](https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md), in particular [code style](https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md#code-style) and [commit standards](https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md#commit-standards). - [x] PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced. - [ ] Documented new properties (with its default value), SQL syntax, functions, or other functionality. - [ ] If release notes are required, they follow the [release notes guidelines](https://github.com/prestodb/presto/wiki/Release-Notes-Guidelines). - [ ] Adequate tests were added if applicable. - [ ] CI passed. - [ ] If adding new dependencies, verified they have an [OpenSSF Scorecard](https://securityscorecards.dev/#the-checks) score of 5.0 or higher (or obtained explicit TSC approval for lower scores). ## Release Notes Please follow [release notes guidelines](https://github.com/prestodb/presto/wiki/Release-Notes-Guidelines) and fill in the release notes below. ``` == RELEASE NOTES == General Changes * Upgrade dagre-d3-es to 7.0.13 in response to `CVE-2025-57347 <https://github.com/advisories/GHSA-cc8p-78qf-8p7q>`_.
1 parent 228ac66 commit f046e9f

File tree

2 files changed

+6
-6
lines changed

2 files changed

+6
-6
lines changed

presto-ui/src/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@
3636
"clsx": "^2.1.0",
3737
"copy-webpack-plugin": "^12.0.2",
3838
"d3": "^7.9.0",
39-
"dagre-d3-es": "^7.0.10",
39+
"dagre-d3-es": "7.0.13",
4040
"prismjs": "^1.30.0",
4141
"react": "18.3.1",
4242
"react-data-table-component": "^7.6.2",
@@ -62,4 +62,4 @@
6262
"resolutions": {
6363
"d3-color": "3.1.0"
6464
}
65-
}
65+
}

presto-ui/src/yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2268,10 +2268,10 @@ d3@^7.9.0:
22682268
d3-transition "3"
22692269
d3-zoom "3"
22702270

2271-
dagre-d3-es@^7.0.10:
2272-
version "7.0.11"
2273-
resolved "https://registry.yarnpkg.com/dagre-d3-es/-/dagre-d3-es-7.0.11.tgz#2237e726c0577bfe67d1a7cfd2265b9ab2c15c40"
2274-
integrity sha512-tvlJLyQf834SylNKax8Wkzco/1ias1OPw8DcUMDE7oUIoSEW25riQVuiu/0OWEFqT0cxHT3Pa9/D82Jr47IONw==
2271+
2272+
version "7.0.13"
2273+
resolved "https://registry.yarnpkg.com/dagre-d3-es/-/dagre-d3-es-7.0.13.tgz#acfb4b449f6dcdd48d8ea8081a6d8c59bc8128c3"
2274+
integrity sha512-efEhnxpSuwpYOKRm/L5KbqoZmNNukHa/Flty4Wp62JRvgH2ojwVgPgdYyr4twpieZnyRDdIH7PY2mopX26+j2Q==
22752275
dependencies:
22762276
d3 "^7.9.0"
22772277
lodash-es "^4.17.21"

0 commit comments

Comments
 (0)