chore: Update Axios, Velocity, and Send to avoid components with a se…

…curity vulnerability (#3851) * update Signed-off-by: Pavel Jareš <[email protected]> * update send Signed-off-by: Pavel Jareš <[email protected]> --------- Signed-off-by: Pavel Jareš <[email protected]>
zowe · Oct 16, 2024 · 86c3eda · 86c3eda
1 parent 999d062
commit 86c3eda
Show file tree

Hide file tree

Showing 7 changed files with 20 additions and 18 deletions.
diff --git a/api-catalog-ui/frontend/package-lock.json b/api-catalog-ui/frontend/package-lock.json
diff --git a/api-catalog-ui/frontend/package.json b/api-catalog-ui/frontend/package.json
@@ -143,7 +143,8 @@
         "@babel/traverse": "7.24.7",
         "dompurify": "3.1.6",
         "serve-static": "1.16.0",
-        "body-parser": "1.20.3"
+        "body-parser": "1.20.3",
+        "axios": "1.7.4"
     },
     "engines": {
         "npm": "=9.3.1",

diff --git a/gradle/versions.gradle b/gradle/versions.gradle
@@ -130,7 +130,7 @@ dependencyResolutionManagement {
             version('swaggerJaxrs2', '2.2.23')
             version('thymeleaf', '3.1.2.RELEASE')
             version('tomcat', '9.0.93')
-            version('velocity', '2.3')
+            version('velocity', '2.4')
             version('woodstoxCore', '6.7.0')
             version('woodstoxStax2', '4.2.2')
             version('xstream') {

diff --git a/metrics-service-ui/frontend/package-lock.json b/metrics-service-ui/frontend/package-lock.json
diff --git a/metrics-service-ui/frontend/package.json b/metrics-service-ui/frontend/package.json
@@ -7,7 +7,7 @@
         "@material-ui/core": "4.12.4",
         "@material-ui/icons": "4.11.3",
         "@wojtekmaj/enzyme-adapter-react-17": "0.6.7",
-        "axios": "1.6.4",
+        "axios": "1.7.4",
         "history": "4.10.1",
         "lodash": "4.17.21",
         "loglevel": "1.7.1",

diff --git a/onboarding-enabler-nodejs-sample-app/package-lock.json b/onboarding-enabler-nodejs-sample-app/package-lock.json
diff --git a/onboarding-enabler-nodejs-sample-app/package.json b/onboarding-enabler-nodejs-sample-app/package.json
@@ -21,7 +21,8 @@
     "tough-cookie": "4.1.4",
     "ms": "2.1.3",
     "serve-static": "1.16.0",
-    "body-parser": "1.20.3"
+    "body-parser": "1.20.3",
+    "send": "0.19.0"
   },
   "engines": {
     "npm": "=8.19.4",