plasma-infra: Fix vulnerabilities #861

Yakutoc · 2023-11-21T04:35:36Z

Release Notes

Обновлены зависимости:

vite to 4.5.0
default-browser-id to 2.0.0
@microsoft/api-extractor to 7.38.3 (several moderate)

Исправлены все critical и high vulnerabilities в plasma-{b2c, web, hope, new-hope, asdk} библиотеках

🐤 Download canary assets:

borderRadius

borderRadius_default_react-native--canary.861.6939308474.ts
borderRadius_plasma_b2c_react-native--canary.861.6939308474.ts
borderRadius_plasma_web_react-native--canary.861.6939308474.ts
borderRadius_sberHealth_react-native--canary.861.6939308474.ts
borderRadius_sbermarket_business_react-native--canary.861.6939308474.ts
borderRadius_sbermarket_metro_react-native--canary.861.6939308474.ts
borderRadius_sbermarket_react-native--canary.861.6939308474.ts
borderRadius_sbermarket_selgros_react-native--canary.861.6939308474.ts
borderRadius_sbermarket_wlbusiness_react-native--canary.861.6939308474.ts
borderRadius_sberonline_react-native--canary.861.6939308474.ts
borderRadius_sberprime_react-native--canary.861.6939308474.ts
borderRadius_stylesSalute_react-native--canary.861.6939308474.ts

color

color_default_ios-swift--canary.861.6939308474.swift
color_default_kotlin--canary.861.6939308474.kt
color_default_react-native--canary.861.6939308474.ts
color_default_xml--canary.861.6939308474.xml
color_plasma_b2c_ios-swift--canary.861.6939308474.swift
color_plasma_b2c_kotlin--canary.861.6939308474.kt
color_plasma_b2c_react-native--canary.861.6939308474.ts
color_plasma_b2c_xml--canary.861.6939308474.xml
color_plasma_web_ios-swift--canary.861.6939308474.swift
color_plasma_web_kotlin--canary.861.6939308474.kt
color_plasma_web_react-native--canary.861.6939308474.ts
color_plasma_web_xml--canary.861.6939308474.xml
color_sberHealth_ios-swift--canary.861.6939308474.swift
color_sberHealth_kotlin--canary.861.6939308474.kt
color_sberHealth_react-native--canary.861.6939308474.ts
color_sberHealth_xml--canary.861.6939308474.xml
color_sbermarket_business_ios-swift--canary.861.6939308474.swift
color_sbermarket_business_kotlin--canary.861.6939308474.kt
color_sbermarket_business_react-native--canary.861.6939308474.ts
color_sbermarket_business_xml--canary.861.6939308474.xml
color_sbermarket_ios-swift--canary.861.6939308474.swift
color_sbermarket_kotlin--canary.861.6939308474.kt
color_sbermarket_metro_ios-swift--canary.861.6939308474.swift
color_sbermarket_metro_kotlin--canary.861.6939308474.kt
color_sbermarket_metro_react-native--canary.861.6939308474.ts
color_sbermarket_metro_xml--canary.861.6939308474.xml
color_sbermarket_react-native--canary.861.6939308474.ts
color_sbermarket_selgros_ios-swift--canary.861.6939308474.swift
color_sbermarket_selgros_kotlin--canary.861.6939308474.kt
color_sbermarket_selgros_react-native--canary.861.6939308474.ts
color_sbermarket_selgros_xml--canary.861.6939308474.xml
color_sbermarket_wlbusiness_ios-swift--canary.861.6939308474.swift
color_sbermarket_wlbusiness_kotlin--canary.861.6939308474.kt
color_sbermarket_wlbusiness_react-native--canary.861.6939308474.ts
color_sbermarket_wlbusiness_xml--canary.861.6939308474.xml
color_sbermarket_xml--canary.861.6939308474.xml
color_sberonline_ios-swift--canary.861.6939308474.swift
color_sberonline_kotlin--canary.861.6939308474.kt
color_sberonline_react-native--canary.861.6939308474.ts
color_sberonline_xml--canary.861.6939308474.xml
color_sberprime_ios-swift--canary.861.6939308474.swift
color_sberprime_kotlin--canary.861.6939308474.kt
color_sberprime_react-native--canary.861.6939308474.ts
color_sberprime_xml--canary.861.6939308474.xml
color_stylesSalute_ios-swift--canary.861.6939308474.swift
color_stylesSalute_kotlin--canary.861.6939308474.kt
color_stylesSalute_react-native--canary.861.6939308474.ts
color_stylesSalute_xml--canary.861.6939308474.xml

shadow

shadow_default_react-native--canary.861.6939308474.ts
shadow_plasma_b2c_react-native--canary.861.6939308474.ts
shadow_plasma_web_react-native--canary.861.6939308474.ts
shadow_sberHealth_react-native--canary.861.6939308474.ts
shadow_sbermarket_business_react-native--canary.861.6939308474.ts
shadow_sbermarket_metro_react-native--canary.861.6939308474.ts
shadow_sbermarket_react-native--canary.861.6939308474.ts
shadow_sbermarket_selgros_react-native--canary.861.6939308474.ts
shadow_sbermarket_wlbusiness_react-native--canary.861.6939308474.ts
shadow_sberonline_react-native--canary.861.6939308474.ts
shadow_sberprime_react-native--canary.861.6939308474.ts
shadow_stylesSalute_react-native--canary.861.6939308474.ts

spacing

spacing_default_react-native--canary.861.6939308474.ts
spacing_plasma_b2c_react-native--canary.861.6939308474.ts
spacing_plasma_web_react-native--canary.861.6939308474.ts
spacing_sberHealth_react-native--canary.861.6939308474.ts
spacing_sbermarket_business_react-native--canary.861.6939308474.ts
spacing_sbermarket_metro_react-native--canary.861.6939308474.ts
spacing_sbermarket_react-native--canary.861.6939308474.ts
spacing_sbermarket_selgros_react-native--canary.861.6939308474.ts
spacing_sbermarket_wlbusiness_react-native--canary.861.6939308474.ts
spacing_sberonline_react-native--canary.861.6939308474.ts
spacing_sberprime_react-native--canary.861.6939308474.ts
spacing_stylesSalute_react-native--canary.861.6939308474.ts

typo

typo_mage_ios-swift--canary.861.6939308474.swift
typo_mage_kotlin--canary.861.6939308474.kt
typo_mage_react-native--canary.861.6939308474.ts
typo_plasma_ios-swift--canary.861.6939308474.swift
typo_plasma_kotlin--canary.861.6939308474.kt
typo_plasma_react-native--canary.861.6939308474.ts
typo_ruler_ios-swift--canary.861.6939308474.swift
typo_ruler_kotlin--canary.861.6939308474.kt
typo_ruler_react-native--canary.861.6939308474.ts
typo_sage_ios-swift--canary.861.6939308474.swift
typo_sage_kotlin--canary.861.6939308474.kt
typo_sage_react-native--canary.861.6939308474.ts
typo_sbermarket_ios-swift--canary.861.6939308474.swift
typo_sbermarket_kotlin--canary.861.6939308474.kt
typo_sbermarket_react-native--canary.861.6939308474.ts
typo_soulmate_ios-swift--canary.861.6939308474.swift
typo_soulmate_kotlin--canary.861.6939308474.kt
typo_soulmate_react-native--canary.861.6939308474.ts

📦 Published PR as canary version: Canary Versions

✨ Test out this PR locally via:

npm install @salutejs/[email protected]
npm install @salutejs/[email protected]
npm install @salutejs/[email protected]
npm install @salutejs/[email protected]
npm install @salutejs/[email protected]
# or 
yarn add @salutejs/[email protected]
yarn add @salutejs/[email protected]
yarn add @salutejs/[email protected]
yarn add @salutejs/[email protected]
yarn add @salutejs/[email protected]

fix vulnerabilities several moderate

fix GHSA-7p7h-4mm5-852v

Salute-Eva · 2023-11-21T04:38:08Z

Theme Builder app deployed!

http://plasma.sberdevices.ru/pr/plasma-theme-builder-pr-861/

Salute-Eva · 2023-11-21T04:47:58Z

Documentation preview deployed!

website: http://plasma.sberdevices.ru/pr/pr-861/
b2c storybook: http://plasma.sberdevices.ru/pr/pr-861/b2c-storybook/
web storybook: http://plasma.sberdevices.ru/pr/pr-861/web-storybook/
new-hope storybook: http://plasma.sberdevices.ru/pr/pr-861/new-hope-storybook/
asdk storybook: http://plasma.sberdevices.ru/pr/pr-861/asdk-storybook/

github-actions · 2023-11-21T04:58:49Z

⚡ Component performance testing

Result: 🟢 OK

Salute-Eva · 2023-11-22T13:33:01Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:04Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:07Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:10Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:14Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:16Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:19Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:22Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:25Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:28Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:31Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:34Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:37Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:43Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-22T13:33:46Z

🚀 This PR is included in version: @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected], @salutejs/[email protected] 🚀

Salute-Eva · 2023-11-30T03:58:58Z

Yakutoc added 16 commits November 20, 2023 19:58

chore(plasma-b2c): bump "vite" to 4.5.0

93e7653

chore(plasma-new-hope): bump "vite" to 4.5.0

7761fe3

chore(plasma-web): bump "vite" to 4.5.0

934c795

chore(plasma-web): fix vulnerabilities: high, critical

85e61a9

chore(plasma-new-hope): fix vulnerabilities: high, critical

07b10a5

chore(plasma-b2c): fix vulnerabilities: high, critical

43cbbfb

chore(plasma-b2c): bump "@microsoft/api-extractor" to 7.38.3

234e66b

fix vulnerabilities several moderate

chore(plasma-web): bump "@microsoft/api-extractor" to 7.38.3

8f814d1

fix vulnerabilities several moderate

chore(plasma-hope): bump "@microsoft/api-extractor" to 7.38.3

aeeab53

fix vulnerabilities several moderate

chore(plasma-asdk): bump "vite" to 4.5.0

edc774c

chore(plasma-asdk): bump "@microsoft/api-extractor" to 7.38.3

99a0fbf

fix vulnerabilities several moderate

chore(plasma-asdk): fix vulnerabilities: high, critical

e7e63b3

chore(plasma-asdk): bump "default-browser-id" to 2.0.0

93bccd0

fix GHSA-7p7h-4mm5-852v

chore(plasma-b2c): bump "default-browser-id" to 2.0.0

1202e56

fix GHSA-7p7h-4mm5-852v

chore(plasma-web): bump "default-browser-id" to 2.0.0

c1a63ff

fix GHSA-7p7h-4mm5-852v

chore(plasma-new-hope): bump "default-browser-id" to 2.0.0

46e1b15

fix GHSA-7p7h-4mm5-852v

Yakutoc added plasma-infra vulnerabilities vulnerabilities alerts labels Nov 21, 2023

Yakutoc self-assigned this Nov 21, 2023

Yakutoc temporarily deployed to internal November 21, 2023 04:35 — with GitHub Actions Inactive

Yakutoc marked this pull request as ready for review November 21, 2023 05:03

Yakutoc requested review from Yeti-or, neretin-trike and kayman233 as code owners November 21, 2023 05:03

Yakutoc requested review from TitanKuzmich and removed request for neretin-trike November 21, 2023 05:03

TitanKuzmich approved these changes Nov 21, 2023

View reviewed changes

kayman233 approved these changes Nov 21, 2023

View reviewed changes

Yeti-or approved these changes Nov 21, 2023

View reviewed changes

Yakutoc added this pull request to the merge queue Nov 22, 2023

Merged via the queue into dev with commit 27ea3a4 Nov 22, 2023
23 checks passed

Yakutoc deleted the chore-fix-vulnerabilities branch November 22, 2023 05:22

Salute-Eva added the prerelease label Nov 22, 2023

Salute-Eva added released and removed prerelease labels Nov 30, 2023

Salute-Eva mentioned this pull request Jan 18, 2024

Release by 18.01.2024 #972

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

plasma-infra: Fix vulnerabilities #861

plasma-infra: Fix vulnerabilities #861

Yakutoc commented Nov 21, 2023 •

edited

Loading

Salute-Eva commented Nov 21, 2023

Salute-Eva commented Nov 21, 2023

github-actions bot commented Nov 21, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 30, 2023

plasma-infra: Fix vulnerabilities #861

plasma-infra: Fix vulnerabilities #861

Conversation

Yakutoc commented Nov 21, 2023 • edited Loading

Release Notes

Salute-Eva commented Nov 21, 2023

Salute-Eva commented Nov 21, 2023

github-actions bot commented Nov 21, 2023

⚡ Component performance testing

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 22, 2023

Salute-Eva commented Nov 30, 2023

Yakutoc commented Nov 21, 2023 •

edited

Loading