Skip to content

chore: bump source-map-js to >=1.2.2 - #5628

Merged
openshift-merge-bot[bot] merged 1 commit into
redhat-developer:release-1.10from
Omar-AlJaljuli:src-map-js_1.10
Oct 8, 2026
Merged

openshift-merge-bot[bot] merged 1 commit into
redhat-developer:release-1.10from
Omar-AlJaljuli:src-map-js_1.10

Conversation

@Omar-AlJaljuli

Copy link
Copy Markdown
Contributor

Description

source-map-js is vulnerable due to CVE-2026-93749. Fix issue by bumping package to version >=1.2.2 using simple 'yarn up -R ...'

Which issue(s) does this PR fix

PR acceptance criteria

Please make sure that the following steps are complete:

  • GitHub Actions are completed and successful
  • Unit Tests are updated and passing
  • E2E Tests are updated and passing
  • Documentation is updated if necessary (requirement for new features)
  • Add a screenshot if the change is UX/UI related

How to test changes / Special notes to the reviewer

@openshift-ci
openshift-ci Bot requested review from lholmquist and nickboldt October 8, 2026 17:08
@sonarqubecloud

sonarqubecloud Bot commented Oct 8, 2026

Copy link
Copy Markdown

@github-actions

github-actions Bot commented Oct 8, 2026

Copy link
Copy Markdown
Contributor

Image was built and published successfully. It is available at:

@codecov

codecov Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.32%. Comparing base (00e7c8c) to head (25f3d34).
⚠️ Report is 4 commits behind head on release-1.10.

Additional details and impacted files
@@                Coverage Diff                @@
##           release-1.10    #5628       +/-   ##
=================================================
+ Coverage         41.03%   69.32%   +28.29%     
=================================================
  Files               121      123        +2     
  Lines              2220     4933     +2713     
  Branches            538      562       +24     
=================================================
+ Hits                911     3420     +2509     
- Misses             1304     1507      +203     
- Partials              5        6        +1     
Flag Coverage Δ
install-dynamic-plugins 92.48% <ø> (?)
rhdh 41.03% <ø> (ø)

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 00e7c8c...25f3d34. Read the comment docs.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@kim-tsao

kim-tsao commented Oct 8, 2026

Copy link
Copy Markdown
Member

/lgtm

@openshift-merge-bot
openshift-merge-bot Bot merged commit beb04de into redhat-developer:release-1.10 Oct 8, 2026
21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants