This is an automated email from the ASF dual-hosted git repository.
hainenber pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git
The following commit(s) were added to refs/heads/master by this push:
new a268040ccbc chore(deps): bump the security group across 2 directories
with 3 updates (#45679)
a268040ccbc is described below
commit a268040ccbcd52e41d6d2406a345d53c6f3a232c
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sat Oct 24 10:49:26 2026 +0700
chore(deps): bump the security group across 2 directories with 3 updates
(#45679)
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
docs/yarn.lock | 12 ++++++------
superset-frontend/package-lock.json | 16 ++++++++--------
superset-frontend/packages/superset-ui-core/package.json | 2 +-
.../plugins/plugin-chart-echarts/package.json | 2 +-
4 files changed, 16 insertions(+), 16 deletions(-)
diff --git a/docs/yarn.lock b/docs/yarn.lock
index f0d82176f51..a9a575602e2 100644
--- a/docs/yarn.lock
+++ b/docs/yarn.lock
@@ -6561,17 +6561,17 @@ boxen@^7.0.0:
wrap-ansi "^8.1.0"
brace-expansion@^1.1.7:
- version "1.1.18"
- resolved
"https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.18.tgz#3ce74d89885136be1535341f8c3d4425c29a5cab";
- integrity
sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==
+ version "1.1.21"
+ resolved
"https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.21.tgz#edf4fab5c64d051aea5a8def49aba1c7522279f3";
+ integrity
sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==
dependencies:
balanced-match "^1.0.0"
concat-map "0.0.1"
brace-expansion@^5.0.8:
- version "5.0.9"
- resolved
"https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-5.0.9.tgz#7c72438809b5fa5babf54199a1f1c281a6984fcf";
- integrity
sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==
+ version "5.0.12"
+ resolved
"https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-5.0.12.tgz#995fbb4750a77c4d16a7dc942ff2ca6ef8e675ec";
+ integrity
sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==
dependencies:
balanced-match "^4.0.2"
diff --git a/superset-frontend/package-lock.json
b/superset-frontend/package-lock.json
index 8817f36fd6f..3493b358750 100644
--- a/superset-frontend/package-lock.json
+++ b/superset-frontend/package-lock.json
@@ -19229,9 +19229,9 @@
}
},
"node_modules/dompurify": {
- "version": "3.4.16",
- "resolved":
"https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz";,
- "integrity":
"sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==",
+ "version": "3.4.17",
+ "resolved":
"https://registry.npmjs.org/dompurify/-/dompurify-3.4.17.tgz";,
+ "integrity":
"sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==",
"license": "(MPL-2.0 OR Apache-2.0)",
"optionalDependencies": {
"@types/trusted-types": "^2.0.7"
@@ -41941,9 +41941,9 @@
}
},
"node_modules/zod": {
- "version": "4.6.5",
- "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.5.tgz";,
- "integrity":
"sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==",
+ "version": "4.6.6",
+ "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.6.tgz";,
+ "integrity":
"sha512-4UmzQUF5fxvfcYHlbjBmejU+w+hbDnWFx4aS8kBx7nPBHcO2SqPbpAG8snbdg+Xse4pRefR98hgjFgIMCI/UhA==",
"license": "MIT",
"funding": {
"url": "https://github.com/sponsors/colinhacks";
@@ -42109,7 +42109,7 @@
"d3-time": "^3.1.0",
"d3-time-format": "^4.1.0",
"dayjs": "^1.11.23",
- "dompurify": "^3.4.16",
+ "dompurify": "^3.4.17",
"fetch-retry": "^6.0.0",
"handlebars": "^4.7.10",
"jed": "^1.1.1",
@@ -42400,7 +42400,7 @@
"d3-array": "^3.2.4",
"lodash": "^4.18.1",
"lodash-es": "^4.18.1",
- "zod": "^4.6.5"
+ "zod": "^4.6.6"
},
"peerDependencies": {
"@apache-superset/core": "*",
diff --git a/superset-frontend/packages/superset-ui-core/package.json
b/superset-frontend/packages/superset-ui-core/package.json
index 23b4ab782d2..49af09a21ff 100644
--- a/superset-frontend/packages/superset-ui-core/package.json
+++ b/superset-frontend/packages/superset-ui-core/package.json
@@ -69,7 +69,7 @@
"d3-time": "^3.1.0",
"d3-time-format": "^4.1.0",
"dayjs": "^1.11.23",
- "dompurify": "^3.4.16",
+ "dompurify": "^3.4.17",
"fetch-retry": "^6.0.0",
"handlebars": "^4.7.10",
"jed": "^1.1.1",
diff --git a/superset-frontend/plugins/plugin-chart-echarts/package.json
b/superset-frontend/plugins/plugin-chart-echarts/package.json
index 3c4edebcdcb..4c052268565 100644
--- a/superset-frontend/plugins/plugin-chart-echarts/package.json
+++ b/superset-frontend/plugins/plugin-chart-echarts/package.json
@@ -33,7 +33,7 @@
"d3-array": "^3.2.4",
"lodash": "^4.18.1",
"lodash-es": "^4.18.1",
- "zod": "^4.6.5"
+ "zod": "^4.6.6"
},
"peerDependencies": {
"@apache-superset/core": "*",
