Skip to content

chore(deps): resolve various dependency vulnerabilities #8474

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
adi-herwana-nus merged 1 commit into from
Jul 7, 2026
Merged

chore(deps): resolve various dependency vulnerabilities #8474

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions Gemfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ source 'https://rubygems.org'
ruby '3.3.5'

# These gems are included in Ruby defaults for now,
# but they will have to be included separately in future versions.
# but they will have to be included separately in future versions (Ruby 3.4+).
gem 'ostruct'
gem 'csv'

Expand Down Expand Up @@ -187,7 +187,7 @@ gem 'http_accept_language'
gem 'devise', '4.9.4'
gem 'devise-multi_email'
gem 'keycloak'
gem 'jwt'
gem 'jwt', '~> 2.10.3'

# Use cancancan for authorization
gem 'cancancan'
Expand All @@ -201,7 +201,7 @@ gem 'mini_magick'
# Library for reading and writing zip files
gem 'rubyzip', '~> 3.3', require: 'zip'
# Manipulating XML files, needed for programming evaluation test report parsing.
gem 'nokogiri', '>= 1.19.3'
gem 'nokogiri', '>= 1.19.4'

# Polyglot support
gem 'coursemology-polyglot', git: 'https://github.com/Coursemology/polyglot'
Expand Down
12 changes: 6 additions & 6 deletions Gemfile.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -196,7 +196,7 @@ GEM
cgi (0.5.1)
childprocess (5.1.0)
logger (~> 1.5)
concurrent-ruby (1.3.6)
concurrent-ruby (1.3.7)
connection_pool (2.5.5)
consistency_fail (0.3.7)
crass (1.0.6)
Expand Down Expand Up @@ -246,7 +246,7 @@ GEM
factory_bot_rails (6.5.1)
factory_bot (~> 6.5)
railties (>= 6.1.0)
faraday (2.14.1)
faraday (2.14.3)
faraday-net_http (>= 2.0, < 3.5)
json
logger
Expand Down Expand Up @@ -337,7 +337,7 @@ GEM
json-schema (5.2.2)
addressable (~> 2.8)
bigdecimal (~> 3.1)
jwt (2.10.1)
jwt (2.10.3)
base64
kaminari (1.2.2)
activesupport (>= 4.1.0)
Expand Down Expand Up @@ -423,7 +423,7 @@ GEM
net-protocol
netrc (0.11.0)
nio4r (2.7.4)
nokogiri (1.19.3)
nokogiri (1.19.4)
mini_portile2 (~> 2.8.2)
racc (~> 1.4)
orm_adapter (0.5.0)
Expand Down Expand Up @@ -746,7 +746,7 @@ DEPENDENCIES
i18n-tasks
image_optim_rails
jbuilder
jwt
jwt (~> 2.10.3)
kaminari
keycloak
langchainrb
Expand All @@ -758,7 +758,7 @@ DEPENDENCIES
mimemagic (= 0.4.3)
mini_magick
neighbor
nokogiri (>= 1.19.3)
nokogiri (>= 1.19.4)
ostruct
parallel_tests
pdf-reader
Expand Down
4 changes: 2 additions & 2 deletions client/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -91,7 +91,7 @@
"react-player": "^2.16.0",
"react-redux": "^8.1.3",
"react-resizable": "^3.1.3",
"react-router-dom": "^6.30.3",
"react-router-dom": "^6.30.4",
"react-scroll": "^1.9.0",
"react-toastify": "^11.1.0",
"react-tooltip": "^5.26.0",
Expand Down Expand Up @@ -202,7 +202,7 @@
"typescript": "^5.4.3",
"webpack": "^5.106.2",
"webpack-cli": "^5.1.4",
"webpack-dev-server": "^5.2.5",
"webpack-dev-server": "^5.2.6",
"webpack-merge": "^6.0.1"
},
"resolutions": {
Expand Down
42 changes: 21 additions & 21 deletions client/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3286,10 +3286,10 @@
redux-thunk "^2.4.2"
reselect "^4.1.8"

"@remix-run/router@1.23.2":
version "1.23.2"
resolved "https://registry.yarnpkg.com/@remix-run/router/-/router-1.23.2.tgz#156c4b481c0bee22a19f7924728a67120de06971"
integrity sha512-Ic6m2U/rMjTkhERIa/0ZtXJP17QUi2CbWE7cqx4J58M8aA3QTfW+2UlQ4psvTX9IO1RfNVhK3pcpdjej7L+t2w==
"@remix-run/router@1.23.3":
version "1.23.3"
resolved "https://registry.yarnpkg.com/@remix-run/router/-/router-1.23.3.tgz#957c098d4393d301a8aa7dccf3ef28ea5430e36a"
integrity sha512-4An71tdz9X8+3sI4Qqqd2LWd9vS39J7sqd9EU4Scw7TJE/qB10Flv/UuqbPVgfQV9XoK8Np6jNquZitnZq5i+Q==

"@rollbar/react@^0.11.2":
version "0.11.2"
Expand Down Expand Up @@ -9564,7 +9564,7 @@ language-tags@^1.0.9:
dependencies:
language-subtag-registry "^0.3.20"

launch-editor@^2.6.1:
launch-editor@^2.14.1:
version "2.14.1"
resolved "https://registry.yarnpkg.com/launch-editor/-/launch-editor-2.14.1.tgz#f7e0da3f58aaea03fea01074d840b5f739ed7ddc"
integrity sha512-QWBrQsMpH7gPr965dsKD/3cKWiNoTjpATQf++Xq63N6sKRGMwlVXz41O1IZTMfZQgBctD/K5Zt06+/I6pP6+HA==
Expand Down Expand Up @@ -11890,20 +11890,20 @@ react-resizable@^3.1.3:
prop-types "15.x"
react-draggable "^4.5.0"

react-router-dom@^6.30.3:
version "6.30.3"
resolved "https://registry.yarnpkg.com/react-router-dom/-/react-router-dom-6.30.3.tgz#42ae6dc4c7158bfb0b935f162b9621b29dddf740"
integrity sha512-pxPcv1AczD4vso7G4Z3TKcvlxK7g7TNt3/FNGMhfqyntocvYKj+GCatfigGDjbLozC4baguJ0ReCigoDJXb0ag==
react-router-dom@^6.30.4:
version "6.30.4"
resolved "https://registry.yarnpkg.com/react-router-dom/-/react-router-dom-6.30.4.tgz#f7167bf3da6c7d9132130ea985dd06def25e84d5"
integrity sha512-q4HvNl+mmDdkS0g+MqiBZNteQJCuimWoOyHMy4T/RQLAn9Z29+E91QXRaxOujeMl2HTzRSS0KFPd7lxX3PjV0Q==
dependencies:
"@remix-run/router" "1.23.2"
react-router "6.30.3"
"@remix-run/router" "1.23.3"
react-router "6.30.4"

react-router@6.30.3:
version "6.30.3"
resolved "https://registry.yarnpkg.com/react-router/-/react-router-6.30.3.tgz#994b3ccdbe0e81fe84d4f998100f62584dfbf1cf"
integrity sha512-XRnlbKMTmktBkjCLE8/XcZFlnHvr2Ltdr1eJX4idL55/9BbORzyZEaIkBFDhFGCEWBBItsVrDxwx3gnisMitdw==
react-router@6.30.4:
version "6.30.4"
resolved "https://registry.yarnpkg.com/react-router/-/react-router-6.30.4.tgz#638f35176527bd243d96d81d35d33b757bad46c2"
integrity sha512-SVUsDe+DybHM/WmYKIVYhZh1o5Dcuf16yM6WjG02Q9XVFMZIJyHYhwrr6bFBXZkVP6z69kNkMyBCujt8FaFLJA==
dependencies:
"@remix-run/router" "1.23.2"
"@remix-run/router" "1.23.3"

react-scroll@^1.9.0:
version "1.9.0"
Expand Down Expand Up @@ -14019,10 +14019,10 @@ webpack-dev-middleware@^7.4.2:
range-parser "^1.2.1"
schema-utils "^4.0.0"

webpack-dev-server@^5.2.5:
version "5.2.5"
resolved "https://registry.yarnpkg.com/webpack-dev-server/-/webpack-dev-server-5.2.5.tgz#648fceaac6a5736b0935e5c1e55d6aa1d0626119"
integrity sha512-4wZtCquSuv9CKX8oybo+mqxtxZqWz47uM1Ch94lxowBztOhWCbhqvRbfC/mODOwxgV2brY+JGZpHq58/SuVFYg==
webpack-dev-server@^5.2.6:
version "5.2.6"
resolved "https://registry.yarnpkg.com/webpack-dev-server/-/webpack-dev-server-5.2.6.tgz#3a5d41233cbb7504f814d19e59a59173fb8ae23d"
integrity sha512-HNLRmamRvVavZQ+avceZifmv8hmdUjg43t6MI4SqJDwFdW7RPQwH5vzGhDRZSX59SgfbeHhLnq3g+uooWo7pVw==
dependencies:
"@types/bonjour" "^3.5.13"
"@types/connect-history-api-fallback" "^1.5.4"
Expand All @@ -14042,7 +14042,7 @@ webpack-dev-server@^5.2.5:
graceful-fs "^4.2.6"
http-proxy-middleware "^2.0.9"
ipaddr.js "^2.1.0"
launch-editor "^2.6.1"
launch-editor "^2.14.1"
open "^10.0.3"
p-retry "^6.2.0"
schema-utils "^4.2.0"
Expand Down
4 changes: 4 additions & 0 deletions tests/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,12 @@
"devDependencies": {
"@playwright/test": "^1.60.0",
"@types/node": "^25.9.2",
"istanbul-lib-processinfo": "^3.0.1",
"nyc": "^18.0.0"
},
"resolutions": {
"istanbul-lib-processinfo": "^3.0.1"
},
"scripts": {
"clean-install": "yarn install --force --frozen-lockfile",
"prepare": "npx playwright install --with-deps",
Expand Down
14 changes: 4 additions & 10 deletions tests/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -592,17 +592,16 @@ istanbul-lib-instrument@^6.0.2:
istanbul-lib-coverage "^3.2.0"
semver "^7.5.4"

istanbul-lib-processinfo@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/istanbul-lib-processinfo/-/istanbul-lib-processinfo-3.0.0.tgz#1b95ce9ccbac979a718de17ab33b940e2ce5b75f"
integrity sha512-P7nLXRRlo7Sqinty6lNa7+4o9jBUYGpqtejqCOZKfgXlRoxY/QArflcB86YO500Ahj4pDJEG34JjMRbQgePLnQ==
istanbul-lib-processinfo@^3.0.0, istanbul-lib-processinfo@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/istanbul-lib-processinfo/-/istanbul-lib-processinfo-3.0.1.tgz#2d5eaa48df7ea081fe816bceaf4b41591c079b4e"
integrity sha512-s3mX05h5wGZeScG6XnOanygPh4SJu5ujMc9YbvpnLGXWy1cRiGbp0NdVcjHxgoZt3WfQppfBsa0y+gWdYJ2pGQ==
dependencies:
archy "^1.0.0"
cross-spawn "^7.0.3"
istanbul-lib-coverage "^3.2.0"
p-map "^3.0.0"
rimraf "^6.1.3"
uuid "^8.3.2"

istanbul-lib-report@^3.0.0:
version "3.0.1"
Expand Down Expand Up @@ -1016,11 +1015,6 @@ update-browserslist-db@^1.1.1:
escalade "^3.2.0"
picocolors "^1.1.0"

uuid@^8.3.2:
version "8.3.2"
resolved "https://registry.yarnpkg.com/uuid/-/uuid-8.3.2.tgz#80d5b5ced271bb9af6c445f21a1a04c606cefbe2"
integrity sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==

which-module@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/which-module/-/which-module-2.0.1.tgz#776b1fe35d90aebe99e8ac15eb24093389a4a409"
Expand Down