Skip to content

Commit 9422769

Browse files
authored
fix: Force async version 3.2.2 (#13547)
Force async version 3.2.2 to get fix for Prototype Pollution in async
1 parent 56886e4 commit 9422769

File tree

6 files changed

+88
-66
lines changed

6 files changed

+88
-66
lines changed

flow-server/src/main/java/com/vaadin/flow/server/frontend/NodeUpdater.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -420,6 +420,7 @@ Map<String, String> getDefaultDevDependencies() {
420420
defaults.put("workbox-core", WORKBOX_VERSION);
421421
defaults.put("workbox-precaching", WORKBOX_VERSION);
422422
defaults.put("glob", "7.1.6");
423+
defaults.put("async", "3.2.2");
423424

424425
return defaults;
425426
}

flow-tests/test-frontend/test-npm/package-lock.json

Lines changed: 48 additions & 35 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

flow-tests/test-frontend/test-pnpm/pnpm-lock.yaml

Lines changed: 6 additions & 10 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

flow-tests/test-frontend/vite-basics/package.json

Lines changed: 27 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@
1919
},
2020
"devDependencies": {
2121
"@rollup/plugin-replace": "3.1.0",
22+
"async": "3.2.2",
2223
"glob": "7.1.6",
2324
"mkdirp": "1.0.4",
2425
"rollup-plugin-brotli": "3.1.0",
@@ -29,24 +30,6 @@
2930
"workbox-core": "6.5.0",
3031
"workbox-precaching": "6.5.0"
3132
},
32-
"overrides": {
33-
"@testscope/all": "$@testscope/all",
34-
"@testscope/button": "$@testscope/button",
35-
"@vaadin/bundles": "$@vaadin/bundles",
36-
"copy-to-clipboard": "$copy-to-clipboard",
37-
"package-outside-npm": "$package-outside-npm",
38-
"package2-outside-npm": "$package2-outside-npm",
39-
"glob": "$glob",
40-
"mkdirp": "$mkdirp",
41-
"rollup-plugin-brotli": "$rollup-plugin-brotli",
42-
"typescript": "$typescript",
43-
"vite": "$vite",
44-
"vite-plugin-checker": "$vite-plugin-checker",
45-
"workbox-build": "$workbox-build",
46-
"workbox-core": "$workbox-core",
47-
"workbox-precaching": "$workbox-precaching",
48-
"@rollup/plugin-replace": "$@rollup/plugin-replace"
49-
},
5033
"vaadin": {
5134
"dependencies": {
5235
"@polymer/polymer": "3.4.1",
@@ -59,6 +42,7 @@
5942
},
6043
"devDependencies": {
6144
"@rollup/plugin-replace": "3.1.0",
45+
"async": "3.2.2",
6246
"glob": "7.1.6",
6347
"mkdirp": "1.0.4",
6448
"rollup-plugin-brotli": "3.1.0",
@@ -69,6 +53,30 @@
6953
"workbox-core": "6.5.0",
7054
"workbox-precaching": "6.5.0"
7155
},
72-
"hash": "dc4619814206e4dc257425a00b057ad9a9cff83a993020e0c534d1c4aedbcbde"
56+
"hash": "44f86e6049ac654c8a85a7d04f95147e2f087973a41b2d8f806009b624948c02"
57+
},
58+
"overrides": {
59+
"@polymer/polymer": "$@polymer/polymer",
60+
"@testscope/all": "$@testscope/all",
61+
"@testscope/button": "$@testscope/button",
62+
"@vaadin/bundles": "$@vaadin/bundles",
63+
"@vaadin/common-frontend": "$@vaadin/common-frontend",
64+
"@vaadin/router": "$@vaadin/router",
65+
"@vaadin/vaadin-lumo-styles": "$@vaadin/vaadin-lumo-styles",
66+
"construct-style-sheets-polyfill": "$construct-style-sheets-polyfill",
67+
"copy-to-clipboard": "$copy-to-clipboard",
68+
"lit": "$lit",
69+
"package-outside-npm": "$package-outside-npm",
70+
"package2-outside-npm": "$package2-outside-npm",
71+
"glob": "$glob",
72+
"mkdirp": "$mkdirp",
73+
"rollup-plugin-brotli": "$rollup-plugin-brotli",
74+
"typescript": "$typescript",
75+
"vite": "$vite",
76+
"vite-plugin-checker": "$vite-plugin-checker",
77+
"workbox-build": "$workbox-build",
78+
"workbox-core": "$workbox-core",
79+
"workbox-precaching": "$workbox-precaching",
80+
"@rollup/plugin-replace": "$@rollup/plugin-replace"
7381
}
7482
}

0 commit comments

Comments
 (0)