This is an automated email from the ASF dual-hosted git repository.
voidmatcha pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/zeppelin.git
The following commit(s) were added to refs/heads/master by this push:
new 6dfdadaab0 [HOTFIX] Refresh zeppelin-react lockfile for npm audit
6dfdadaab0 is described below
commit 6dfdadaab07f40121fef1e60a7c8bc25b54f898a
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Thu Sep 3 18:16:32 2026 +0900
[HOTFIX] Refresh zeppelin-react lockfile for npm audit
### What is this PR for?
Refresh the zeppelin-react lockfile with compatible updates suggested by
`npm audit fix`.
The daily audit remediation workflow generated this change after the
required high-severity audit began failing.
### What type of PR is it?
Hot Fix
### What is the Jira issue?
N/A - automated dependency maintenance.
### How should this be tested?
- `npm ci --ignore-scripts --no-audit` in `zeppelin-web-angular`
- `npm ci --ignore-scripts --no-audit` in
`zeppelin-web-angular/projects/zeppelin-react`
- `npm audit --audit-level=high`
- `npm run lint`
- `npm test`
- `npm run build`
All commands passed before this PR was created.
Closes #5452 from
github-actions[bot]/automation/npm-audit-fix-zeppelin-react.
Signed-off-by: YONGJAE LEE <[email protected]>
---
.../projects/zeppelin-react/package-lock.json | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/zeppelin-web-angular/projects/zeppelin-react/package-lock.json
b/zeppelin-web-angular/projects/zeppelin-react/package-lock.json
index 8293a598fb..0cc55535ae 100644
--- a/zeppelin-web-angular/projects/zeppelin-react/package-lock.json
+++ b/zeppelin-web-angular/projects/zeppelin-react/package-lock.json
@@ -5008,9 +5008,9 @@
"license": "MIT"
},
"node_modules/fast-uri": {
- "version": "3.1.5",
- "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz",
- "integrity":
"sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==",
+ "version": "3.1.7",
+ "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
+ "integrity":
"sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==",
"dev": true,
"funding": [
{
@@ -8023,9 +8023,9 @@
}
},
"node_modules/qs": {
- "version": "6.15.3",
- "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.3.tgz",
- "integrity":
"sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==",
+ "version": "6.16.0",
+ "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
+ "integrity":
"sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
"dev": true,
"license": "BSD-3-Clause",
"dependencies": {