This is an automated email from the ASF dual-hosted git repository. vatsrahul1001 pushed a commit to branch backport-2060ff3-v3-3-test in repository https://gitbox.apache.org/repos/asf/airflow.git
commit 9716f4514f907a7250c5d7963691c30f59e48ceb Author: Vincent <[email protected]> AuthorDate: Wed Jul 22 13:15:26 2026 -0400 Fix NPM vulenaribilities in simple auth manager (#70191) (cherry picked from commit 2060ff322b9eeba378ffd5598b17a5d8e3c75801) --- .../api_fastapi/auth/managers/simple/ui/package.json | 3 ++- .../api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml | 13 +++++++------ 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json index dd670aa8494..ae347e79261 100644 --- a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json +++ b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/package.json @@ -91,7 +91,8 @@ "axios@<1.15.0": ">=1.15.0", "esbuild@>=0.17.0 <0.28.1": ">=0.28.1", "@babel/core@<=7.29.0": ">=7.29.6", - "js-yaml@>=4.0.0 <4.3.0": ">=4.3.0" + "js-yaml@>=4.0.0 <4.3.0": "^4.3.0", + "@hey-api/openapi-ts@<0.97.3": ">=0.97.3" } } } diff --git a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml index 7aaa76185de..8053bc04d35 100644 --- a/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml +++ b/airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui/pnpm-lock.yaml @@ -26,7 +26,8 @@ overrides: axios@<1.15.0: '>=1.15.0' esbuild@>=0.17.0 <0.28.1: '>=0.28.1' '@babel/core@<=7.29.0': '>=7.29.6' - js-yaml@>=4.0.0 <4.3.0: '>=4.3.0' + js-yaml@>=4.0.0 <4.3.0: ^4.3.0 + '@hey-api/openapi-ts@<0.97.3': '>=0.97.3' importers: @@ -463,7 +464,7 @@ packages: resolution: {integrity: sha512-fvpOdnEz6tu5T2+IMNZW3g9mAZwaXavqpsvtapEZNtYxyYtQ+lQs9wJn/VPhZEvdXAXu8HPTCRpmfa0t1aRATA==} deprecated: Starting with v0.73.0, this package is bundled directly inside @hey-api/openapi-ts. peerDependencies: - '@hey-api/openapi-ts': < 2 + '@hey-api/openapi-ts': '>=0.97.3' axios: '>=1.15.0' '@hey-api/[email protected]': @@ -2061,8 +2062,8 @@ packages: [email protected]: resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} - [email protected]: - resolution: {integrity: sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==} + [email protected]: + resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==} hasBin: true [email protected]: @@ -3345,7 +3346,7 @@ snapshots: dependencies: '@jsdevtools/ono': 7.1.3 '@types/json-schema': 7.0.15 - js-yaml: 5.2.1 + js-yaml: 4.3.0 '@hey-api/[email protected]([email protected])([email protected])': dependencies: @@ -5388,7 +5389,7 @@ snapshots: [email protected]: {} - [email protected]: + [email protected]: dependencies: argparse: 2.0.1
