[
https://issues.apache.org/jira/browse/FLINK-40998?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Martijn Visser resolved FLINK-40998.
------------------------------------
Resolution: Fixed
Fixed in apache/flink:master 298a860634773a9efc7997adaeb3ff8eaf0f960a
> Web dashboard: Update dependencies with open Dependabot advisories
> ------------------------------------------------------------------
>
> Key: FLINK-40998
> URL: https://issues.apache.org/jira/browse/FLINK-40998
> Project: Flink
> Issue Type: Technical Debt
> Components: Runtime / Web Frontend
> Reporter: Martijn Visser
> Assignee: Martijn Visser
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.4.0
>
>
> Dependabot drops the optional peer entry for less from the lockfile in
> flink-runtime-web/web-dashboard, which breaks ng build, so none of its open
> npm PRs can be merged as is.
> We should declare less as a devDependency and update the affected packages
> within the Angular v21 LTS line, including monaco-editor 0.57.0 (DOMPurify
> 3.4.15). DOMPurify still needs 3.4.16, which no monaco-editor release ships
> yet.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
