[Bug] CVE fix for ag (opensearch-project#1989)

* update package to fix CVEs Signed-off-by: Adam Tackett <[email protected]> * include yarnlock Signed-off-by: Adam Tackett <[email protected]> * change ag for cve Signed-off-by: Adam Tackett <[email protected]> * update release notes Signed-off-by: Adam Tackett <[email protected]> --------- Signed-off-by: Adam Tackett <[email protected]> Signed-off-by: Shenoy Pratik <[email protected]> Co-authored-by: Adam Tackett <[email protected]> Co-authored-by: Shenoy Pratik <[email protected]> (cherry picked from commit 196dd35)
TackAdam · Jul 24, 2024 · 5b77174 · 5b77174
1 parent 46657ee
commit 5b77174
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 6 deletions.
diff --git a/package.json b/package.json
@@ -16,13 +16,13 @@
     "cypress:parallel": "cypress-parallel -s cypress:run -t 2 -d .cypress/integration"
   },
   "dependencies": {
-    "@ag-grid-community/styles": "^31.2.0",
+    "@ag-grid-community/styles": "^31.3.4",
     "@algolia/autocomplete-core": "^1.4.1",
     "@algolia/autocomplete-theme-classic": "^1.2.1",
     "@nteract/outputs": "^3.0.11",
     "@nteract/presentational-components": "^3.4.3",
     "@reduxjs/toolkit": "^1.6.1",
-    "ag-grid-react": "^31.2.0",
+    "ag-grid-react": "^31.3.4",
     "ajv": "^8.11.0",
     "antlr4": "4.8.0",
     "antlr4ts": "^0.5.0-alpha.4",

diff --git a/release-notes/dashboards-observability.release-notes-2.16.0.0.md b/release-notes/dashboards-observability.release-notes-2.16.0.0.md
@@ -22,3 +22,5 @@ Compatible with OpenSearch and OpenSearch Dashboards version 2.16.0
 
 ### Maintenance
 * updated java version from 11 to 21 ([#1940](https://github.com/opensearch-project/dashboards-observability/pull/1940))
+* [Bug] Fix CVEs for ag-grid, ws and braces packages ([#1987](https://github.com/opensearch-project/dashboards-observability/pull/1987))
+* [Bug] CVE fix for ag ([#1989](https://github.com/opensearch-project/dashboards-observability/pull/1989))
diff --git a/yarn.lock b/yarn.lock
@@ -2,10 +2,10 @@
 # yarn lockfile v1
 
 
-"@ag-grid-community/styles@^31.2.0":
-  version "31.2.0"
-  resolved "https://registry.yarnpkg.com/@ag-grid-community/styles/-/styles-31.2.0.tgz#7605338f2e0f3a3c2e7952f0e96360600033316c"
-  integrity sha512-fU6wDpK0//dJLp5pwojuTUQPi4nVZ4iTBF1yaQw+6NXeGi0ma7rz7IOS6Idw0XXE3ELKGTuO7QUJmxxdL7kykw==
+"@ag-grid-community/styles@^31.3.4":
+  version "31.3.4"
+  resolved "https://registry.yarnpkg.com/@ag-grid-community/styles/-/styles-31.3.4.tgz#e88a36a8c68456ba78479f56e74a225396d44a68"
+  integrity sha512-5pgt/Qq/GxiJi59UA17ltG5U4r0J+GB3S/QCysJFi6kmgmCDsbCfisekTwSh0xxOGO+OIhejoqsOuEnTcw78kg==
 
 "@algolia/autocomplete-core@^1.4.1":
   version "1.11.0"
@@ -359,6 +359,7 @@ acorn@^7.1.1:
   resolved "https://registry.yarnpkg.com/acorn/-/acorn-7.4.1.tgz#feaed255973d2e77555b83dbc08851a6c63520fa"
   integrity sha512-nQyp0o1/mNdbTO1PO6kHkwSrmgZ0MT/jCCpNiwbUjGoRN4dlBhqJtoQuCnEOKzgTVwg0ZWiCoQy6SxMebQVh8A==
 
+<<<<<<< HEAD
 [email protected]:
   version "31.2.0"
   resolved "https://registry.yarnpkg.com/ag-grid-community/-/ag-grid-community-31.2.0.tgz#376f07a3a7dd5c87d8cb6f660e4e338ec70663d1"
@@ -370,6 +371,19 @@ ag-grid-react@^31.2.0:
   integrity sha512-ObFdPmF3EC7/xWZX8NjrZjURePyFa72MWjb1ZgUqDP7Wq09OSXXyKBN1qXmfUIT3h4o5+os6tCQEqoo7Op+3ZA==
   dependencies:
     ag-grid-community "31.2.0"
+=======
+[email protected]:
+  version "31.3.4"
+  resolved "https://registry.yarnpkg.com/ag-grid-community/-/ag-grid-community-31.3.4.tgz#d9397672d6941aebc633a37b2b32e3637aa05642"
+  integrity sha512-jOxQO86C6eLnk1GdP24HB6aqaouFzMWizgfUwNY5MnetiWzz9ZaAmOGSnW/XBvdjXvC5Fpk3gSbvVKKQ7h9kBw==
+
+ag-grid-react@^31.3.4:
+  version "31.3.4"
+  resolved "https://registry.yarnpkg.com/ag-grid-react/-/ag-grid-react-31.3.4.tgz#3e0659c455cbf0facb5af457f260fccb8eb87bea"
+  integrity sha512-WmPASHRFGSTxCMRStWG5bRtln0Ugsdqbb3+Y8sEyGHeLw4hXqfpqie3lT9kqCOl7wPWUjCpwmFdXzRnWPmyyeg==
+  dependencies:
+    ag-grid-community "31.3.4"
+>>>>>>> 196dd35b ([Bug] CVE fix for ag (#1989))
     prop-types "^15.8.1"
 
 aggregate-error@^3.0.0: