Merge pull request #67477 from efbar/feat/bump-deps-jitsucomjitsu-20250926

feat(jitsucom-jitsu): bump dep to remediate GHSA-33vc-wfww-vjfv

Author: dnegreira

jitsucom-jitsu.yaml

@@ -1,7 +1,7 @@
 package:
   name: jitsucom-jitsu
   version: "2.11.0"
-  epoch: 2 # GHSA-4hjh-wcwx-xvwj
+  epoch: 3 # GHSA-33vc-wfww-vjfv
   description: Jitsu is an open-source Segment alternative. Fully-scriptable data ingestion engine for modern data teams. Set-up a real-time data pipeline in minutes, not days
   copyright:
     - license: MIT
@@ -46,7 +46,7 @@ pipeline:
 
   - uses: patch
     with:
-      patches: consolidated-cve-remedation.patch
+      patches: consolidated-cve-remedation.patch GHSA-33vc-wfww-vjfv.patch
 
   - runs: |
       # isolated-vm 6.x dropped support for NodeJS 18.x, which jitsucom-jitsu

jitsucom-jitsu/GHSA-33vc-wfww-vjfv.patch

@@ -0,0 +1,25 @@
+diff --git a/libs/jsondiffpatch/package.json b/libs/jsondiffpatch/package.json
+index 8bb488942..035dc3a6c 100644
+--- a/libs/jsondiffpatch/package.json
++++ b/libs/jsondiffpatch/package.json
+@@ -1,6 +1,6 @@
+ {
+   "name": "jsondiffpatch",
+-  "version": "0.6.0",
++  "version": "0.7.2",
+   "author": "Benjamin Eidelman <[email protected]>",
+   "description": "Diff & Patch for Javascript objects",
+   "contributors": [
+diff --git a/webapps/console/package.json b/webapps/console/package.json
+index dc8fcbb82..a05ce47e3 100644
+--- a/webapps/console/package.json
++++ b/webapps/console/package.json
+@@ -69,7 +69,7 @@
+     "ioredis": "^5.3.2",
+     "js-yaml": "^4.1.0",
+     "json5": "^2.2.3",
+-    "jsondiffpatch": "^0.5.0",
++    "jsondiffpatch": "^0.7.2",
+     "jsonwebtoken": "^9.0.2",
+     "juava": "workspace:*",
+     "lodash": "^4.17.21",