From df26af0ba68c569de6cbc69dd9d967cc9efe4b70 Mon Sep 17 00:00:00 2001 From: Mark Brophy <36955467+m-brophy@users.noreply.github.com> Date: Fri, 10 May 2024 14:01:02 +0100 Subject: [PATCH] WINDUP-4115 CVE upgrade css-tools (#983) * WINDUP-4115 CVE upgrade css-tools * WINDUP-4115 place css-tools in resolutions section (cherry picked from commit b136f5a88a2845df2ef4dd81d1ffbfa1c79d8c12) --- ui-pf4/src/main/webapp/package.json | 3 ++- ui-pf4/src/main/webapp/yarn.lock | 8 ++++---- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/ui-pf4/src/main/webapp/package.json b/ui-pf4/src/main/webapp/package.json index d28f7c435..1a3f20ef0 100644 --- a/ui-pf4/src/main/webapp/package.json +++ b/ui-pf4/src/main/webapp/package.json @@ -67,7 +67,8 @@ "follow-redirects": "^1.15.6", "semver": "^7.5.4", "tough-cookie": "^4.1.3", - "axios": "^0.28.0" + "axios": "^0.28.0", + "@adobe/css-tools": "^4.3.3" }, "scripts": { "start": "react-scripts start", diff --git a/ui-pf4/src/main/webapp/yarn.lock b/ui-pf4/src/main/webapp/yarn.lock index 4a75c2e75..c579797f2 100644 --- a/ui-pf4/src/main/webapp/yarn.lock +++ b/ui-pf4/src/main/webapp/yarn.lock @@ -2,10 +2,10 @@ # yarn lockfile v1 -"@adobe/css-tools@^4.0.1": - version "4.0.1" - resolved "https://registry.yarnpkg.com/@adobe/css-tools/-/css-tools-4.0.1.tgz#b38b444ad3aa5fedbb15f2f746dcd934226a12dd" - integrity sha512-+u76oB43nOHrF4DDWRLWDCtci7f3QJoEBigemIdIeTi1ODqjx6Tad9NCVnPRwewWlKkVab5PlK8DCtPTyX7S8g== +"@adobe/css-tools@^4.0.1", "@adobe/css-tools@^4.3.3": + version "4.3.3" + resolved "https://registry.yarnpkg.com/@adobe/css-tools/-/css-tools-4.3.3.tgz#90749bde8b89cd41764224f5aac29cd4138f75ff" + integrity sha512-rE0Pygv0sEZ4vBWHlAgJLGDU7Pm8xoO6p3wsEceb7GYAjScrOHpEo8KK/eVkAcnSM+slAEtXjA2JpdjLp4fJQQ== "@ampproject/remapping@^2.1.0": version "2.2.0"