afs opened a new issue, #3353: URL: https://github.com/apache/jena/issues/3353
### Change `on-headers` is an indirect dependency of `json-server`. `json-sever` is a development dependency, not part of the Fuseki UI release itself. We are on the latest `json-server` (1.7.4) although there is 1.0.0-beta-3 (released September 2024). Updating to `json-server` 1.0.0-beta-3 does not work. `json-sever` (1.7.4 at least) has an indirect dependency on `on-header` which has a vulnerability. This task is to add a resolution of on-headers to be 1.1.0 or later which has a fix for the vulnerability. ### Are you interested in contributing a pull request for this task? Yes -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
