ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-05 03:12:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(ui): patch vulnerable dependencies (#11581)

Browse Source 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
This commit is contained in:
Alejandro Bailo
2026-06-15 11:50:08 +02:00
committed by GitHub
co-authored by Pepe Fagoaga
parent 9465b82747
commit 6db8ce672c
6 changed files with 2339 additions and 2335 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ui/CHANGELOG.md
+8
View File
@@ -2,6 +2,14 @@
All notable changes to the **Prowler UI** are documented in this file.
## [1.31.0] (Prowler UNRELEASED)
### 🔐 Security
- Bump vulnerable `Next.js`, React, AI SDK, `postcss`, `hono`, `qs`, `esbuild`, and Alpine OpenSSL packages (`libcrypto3` and `libssl3`) [(#11581)](https://github.com/prowler-cloud/prowler/pull/11581)
---
## [1.30.1] (Prowler v5.30.1)
### 🐞 Fixed
ui/Dockerfile
+2 -2
View File
@@ -3,8 +3,8 @@ FROM node:24.13.0-alpine@sha256:cd6fb7efa6490f039f3471a189214d5f548c11df1ff9e5b1
LABEL maintainer="https://github.com/prowler-cloud"
# Enable corepack for pnpm
RUN corepack enable
# Patch Alpine OpenSSL runtime packages before all stages inherit the base image.
RUN apk upgrade --no-cache libcrypto3 libssl3 && corepack enable
# Install dependencies only when needed
FROM base AS deps
ui/dependency-log.json
+24 -24
View File
@@ -2,10 +2,10 @@
{
"section": "dependencies",
"name": "@ai-sdk/react",
"from": "2.0.106",
"to": "2.0.111",
"from": "2.0.111",
"to": "3.0.207",
"strategy": "installed",
"generatedAt": "2025-12-15T08:24:46.195Z"
"generatedAt": "2026-06-15T07:44:51.977Z"
},
{
"section": "dependencies",
@@ -114,10 +114,10 @@
{
"section": "dependencies",
"name": "@next/third-parties",
"from": "16.2.3",
"to": "16.2.6",
"from": "16.2.6",
"to": "16.2.9",
"strategy": "installed",
"generatedAt": "2026-05-14T10:09:04.901Z"
"generatedAt": "2026-06-15T07:49:41.143Z"
},
{
"section": "dependencies",
@@ -362,10 +362,10 @@
{
"section": "dependencies",
"name": "ai",
"from": "5.0.59",
"to": "5.0.109",
"from": "5.0.109",
"to": "6.0.205",
"strategy": "installed",
"generatedAt": "2025-12-15T08:24:46.195Z"
"generatedAt": "2026-06-15T07:44:51.977Z"
},
{
"section": "dependencies",
@@ -482,10 +482,10 @@
{
"section": "dependencies",
"name": "next",
"from": "16.2.3",
"to": "16.2.6",
"from": "16.2.6",
"to": "16.2.9",
"strategy": "installed",
"generatedAt": "2026-05-14T10:09:04.901Z"
"generatedAt": "2026-06-15T07:49:41.143Z"
},
{
"section": "dependencies",
@@ -506,10 +506,10 @@
{
"section": "dependencies",
"name": "react",
"from": "19.2.5",
"to": "19.2.6",
"from": "19.2.6",
"to": "19.2.7",
"strategy": "installed",
"generatedAt": "2026-05-14T10:34:34.526Z"
"generatedAt": "2026-06-15T07:53:01.462Z"
},
{
"section": "dependencies",
@@ -522,10 +522,10 @@
{
"section": "dependencies",
"name": "react-dom",
"from": "19.2.5",
"to": "19.2.6",
"from": "19.2.6",
"to": "19.2.7",
"strategy": "installed",
"generatedAt": "2026-05-14T10:34:34.526Z"
"generatedAt": "2026-06-15T07:53:01.462Z"
},
{
"section": "dependencies",
@@ -658,10 +658,10 @@
{
"section": "devDependencies",
"name": "@next/eslint-plugin-next",
"from": "16.2.3",
"to": "16.2.6",
"from": "16.2.6",
"to": "16.2.9",
"strategy": "installed",
"generatedAt": "2026-05-14T10:09:04.901Z"
"generatedAt": "2026-06-15T07:49:41.143Z"
},
{
"section": "devDependencies",
@@ -722,10 +722,10 @@
{
"section": "devDependencies",
"name": "@types/react",
"from": "19.1.13",
"to": "19.2.8",
"from": "19.2.8",
"to": "19.2.17",
"strategy": "installed",
"generatedAt": "2026-01-19T13:54:24.770Z"
"generatedAt": "2026-06-15T07:53:01.462Z"
},
{
"section": "devDependencies",
ui/package.json
+8 -8
View File
@@ -34,7 +34,7 @@
"typecheck": "tsc"
},
"dependencies": {
"@ai-sdk/react": "2.0.111",
"@ai-sdk/react": "3.0.205",
"@aws-sdk/client-bedrock-runtime": "3.1045.0",
"@codemirror/language": "6.12.2",
"@codemirror/state": "6.6.0",
@@ -48,7 +48,7 @@
"@langchain/mcp-adapters": "1.1.3",
"@langchain/openai": "1.4.5",
"@lezer/highlight": "1.2.3",
"@next/third-parties": "16.2.6",
"@next/third-parties": "16.2.9",
"@radix-ui/react-alert-dialog": "1.1.14",
"@radix-ui/react-avatar": "1.1.11",
"@radix-ui/react-checkbox": "1.3.3",
@@ -79,7 +79,7 @@
"@types/js-yaml": "4.0.9",
"@uiw/react-codemirror": "4.25.8",
"@xyflow/react": "12.10.2",
"ai": "5.0.109",
"ai": "6.0.203",
"class-variance-authority": "0.7.1",
"clsx": "2.1.1",
"cmdk": "1.1.1",
@@ -94,12 +94,12 @@
"marked": "15.0.12",
"modern-screenshot": "4.7.0",
"nanoid": "5.1.6",
"next": "16.2.6",
"next": "16.2.9",
"next-auth": "5.0.0-beta.30",
"next-themes": "0.2.1",
"react": "19.2.6",
"react": "19.2.7",
"react-day-picker": "9.13.0",
"react-dom": "19.2.6",
"react-dom": "19.2.7",
"react-hook-form": "7.62.0",
"react-markdown": "10.1.0",
"recharts": "2.15.4",
@@ -118,7 +118,7 @@
},
"devDependencies": {
"@iconify/react": "5.2.1",
"@next/eslint-plugin-next": "16.2.6",
"@next/eslint-plugin-next": "16.2.9",
"@playwright/test": "1.56.1",
"@testing-library/jest-dom": "6.9.1",
"@testing-library/react": "16.3.2",
@@ -126,7 +126,7 @@
"@types/d3": "7.4.3",
"@types/geojson": "7946.0.16",
"@types/node": "24.10.8",
"@types/react": "19.2.8",
"@types/react": "19.2.17",
"@types/react-dom": "19.2.3",
"@types/topojson-client": "3.1.5",
"@types/topojson-specification": "1.0.5",
ui/pnpm-lock.yaml
Generated
+2289 -2295
View File
File diff suppressed because it is too large Load Diff
ui/pnpm-workspace.yaml
+8 -6
View File
@@ -17,24 +17,26 @@ saveExact: true
overrides:
"@react-types/shared": "3.26.0"
"@internationalized/date": "3.10.0"
"@react-aria/ssr>react": "19.2.6"
"@react-aria/ssr>react-dom": "19.2.6"
"@react-aria/visually-hidden>react": "19.2.6"
"@react-aria/interactions>react": "19.2.6"
"@react-aria/ssr>react": "19.2.7"
"@react-aria/ssr>react-dom": "19.2.7"
"@react-aria/visually-hidden>react": "19.2.7"
"@react-aria/interactions>react": "19.2.7"
"lodash": "4.18.1"
"lodash-es": "4.18.1"
"hono": "4.12.18"
"hono": "4.12.21"
"@hono/node-server": "1.19.14"
"@isaacs/brace-expansion": "5.0.1"
"fast-xml-parser": "5.8.0"
"serialize-javascript": "7.0.5"
"postcss": "8.5.14"
"esbuild": "0.28.1"
"rollup@>=4": "4.59.0"
"minimatch@<4": "3.1.4"
"minimatch@>=9 <10": "9.0.7"
"minimatch@>=10": "10.2.3"
"ajv@<7": "6.14.0"
"ajv@>=8": "8.18.0"
"qs": "6.14.2"
"qs": "6.15.2"
# 8.2.2 dropped provenance attestation; 8.3.1+ restored it. Pinned to skip 8.2.2
# under `trustPolicy: no-downgrade`.
"express-rate-limit": "8.5.1"