[Snyk] Security upgrade @kubernetes/client-node from 0.12.3 to 0.22.1

[svcsnyksanity]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Resource Exhaustion SNYK-JS-JOSE-6419224	No	No Known Exploit
	858/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 9.3	Remote Code Execution (RCE) SNYK-JS-JSONPATHPLUS-7945884	No	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-WS-7266574	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @kubernetes/client-node

The new version differs by 250 commits.

• 5a69713 Merge pull request #1932 from kubernetes-client/dependabot/npm_and_yarn/jasmine-5.4.0
• 63b3d94 Merge pull request #1931 from kubernetes-client/dependabot/npm_and_yarn/mock-fs-5.4.0
• e0cbd15 Merge pull request #1930 from kubernetes-client/dependabot/npm_and_yarn/typedoc-0.26.9
• d2102b3 build(deps-dev): bump jasmine from 5.3.1 to 5.4.0
• 121f00f build(deps-dev): bump mock-fs from 5.3.0 to 5.4.0
• 37c4cbc build(deps-dev): bump typedoc from 0.26.8 to 0.26.9
• b05ab87 Merge pull request #1920 from kubernetes-client/ms/prepare-patch-0.22.1
• c4c52c7 Merge pull request #1918 from kubernetes-client/ms/update-node-in-workflow
• 81fb6ea chore: prepare patch release 0.22.1
• f4dbc08 Revert "chore: prepare patch release"
• 7f21ab9 chore: prepare patch release
• f8f7f55 ci: use node LTS in workflows
• f632838 Merge pull request #1917 from kubernetes-client/dependabot/npm_and_yarn/typescript-5.6.3
• ea5c066 Merge pull request #1916 from kubernetes-client/dependabot/npm_and_yarn/jsonpath-plus-10.0.0
• b6f7071 build(deps-dev): bump typescript from 5.6.2 to 5.6.3
• 3f6e803 build(deps): bump jsonpath-plus from 9.0.0 to 10.0.0
• d842799 Merge pull request #1913 from kubernetes-client/dependabot/npm_and_yarn/types/mocha-10.0.9
• d12aec4 Merge pull request #1912 from kubernetes-client/dependabot/npm_and_yarn/types/node-22.7.5
• d546f4d build(deps-dev): bump @ types/mocha from 10.0.8 to 10.0.9
• b3e4100 build(deps): bump @ types/node from 22.7.4 to 22.7.5
• cddd8c7 Merge pull request #1909 from kubernetes-client/dependabot/npm_and_yarn/typedoc-0.26.8
• 5f0be80 build(deps-dev): bump typedoc from 0.26.7 to 0.26.8
• bd6ab58 Merge pull request #1905 from kubernetes-client/dependabot/npm_and_yarn/jasmine-5.3.1
• 22bf230 build(deps-dev): bump jasmine from 5.3.0 to 5.3.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Resource Exhaustion
🦉 Remote Code Execution (RCE)

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@isaacs/[email protected]	None	0	27.8 kB	isaacs
npm/@isaacs/[email protected]	filesystem	0	101 kB	isaacs
npm/@jsep-plugin/[email protected]	None	0	39 kB	smekkie
npm/@jsep-plugin/[email protected]	None	0	25.9 kB	smekkie
npm/@kubernetes/[email protected]	environment, filesystem, network, shell	+5	13.3 MB	brendandburns
npm/@pkgjs/[email protected]	None	0	74.2 kB	oss-bot
npm/@types/[email protected]	None	0	9.12 kB	types
npm/@types/[email protected]	None	0	21.2 kB	types
npm/[email protected]	None	0	5.61 kB	qix
npm/[email protected]	None	0	22 kB	isaacs
npm/[email protected]	None	0	13.6 kB	komagata
npm/[email protected]	None	0	4.04 kB	heineiuo
npm/[email protected]	network	0	549 kB	panva
npm/[email protected]	None	0	391 kB	smekkie
npm/[email protected]	unsafe	0	660 kB	brettz9
npm/[email protected]	Transitive: environment, filesystem, shell	+11	1.78 MB	isaacs
npm/[email protected]	None	0	59 kB	addaleax
npm/[email protected]	None	0	8.43 kB	panva
npm/[email protected]	network	+1	151 kB	panva
npm/[email protected]	None	0	36.5 kB	isaacs
npm/[email protected]	filesystem	0	535 kB	isaacs
npm/string-width-cjs@npm:[email protected]	None	0	0 B
npm/strip-ansi-cjs@npm:[email protected]	None	0	0 B
npm/[email protected]	environment, filesystem	+2	1.43 MB	isaacs
npm/[email protected]	None	0	84.2 kB	matteo.collina
npm/wrap-ansi-cjs@npm:[email protected]	None	0	0 B

🚮 Removed packages: npm/@kubernetes/[email protected], npm/@panva/[email protected], npm/@sindresorhus/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎