TrizTech/ohif-viewer
15
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(deps): bump glob from 10.4.5 to 10.5.0 (#5572)

Browse Source 
Ignore CVE-2025-64756 (aka GHSA-5j98-mcp5-4vw2) in bun audit.

Co-authored-by: Joe Boccanfuso <joe.boccanfuso@radicalimaging.com>
This commit is contained in:
dependabot[bot] 2025-11-19 08:43:58 -05:00 committed by GitHub
parent b15c002f60
commit 62797acd9a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
4 changed files with 12 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.circleci/config.yml
View File

@ -119,7 +119,8 @@ jobs:
echo "🔍 Running bun audit for security vulnerabilities..." echo "🔍 Running bun audit for security vulnerabilities..."
echo "Checking for HIGH-RISK vulnerabilities..." echo "Checking for HIGH-RISK vulnerabilities..."
if bun audit --audit-level high; then # Ignore CVE-2025-64756 (aka GHSA-5j98-mcp5-4vw2) - glob is not used on the command line
if bun audit --ignore=GHSA-5j98-mcp5-4vw2 --audit-level high; then
echo "✅ No high-risk vulnerabilities found" echo "✅ No high-risk vulnerabilities found"
echo "🎉 Security audit passed!" echo "🎉 Security audit passed!"
else else
@ -135,7 +136,10 @@ jobs:
echo " 5. Re-run: bun audit --audit-level high" echo " 5. Re-run: bun audit --audit-level high"
echo "" echo ""
echo "📋 Full audit report:" echo "📋 Full audit report:"
bun audit --audit-level low || true
# Ignore CVE-2025-64756 (aka GHSA-5j98-mcp5-4vw2) - glob is not used on the command line
bun audit --ignore=GHSA-5j98-mcp5-4vw2 --audit-level low || true
echo "" echo ""
echo "❌ This build cannot proceed until high-risk vulnerabilities are resolved." echo "❌ This build cannot proceed until high-risk vulnerabilities are resolved."
exit 1 exit 1

2
package.json
View File

@ -48,7 +48,7 @@
"install:dev": "cp -f yarn.lock addOns/yarn.lock && cd addOns && yarn install --frozen-lockfile --modules-folder ../node_modules", "install:dev": "cp -f yarn.lock addOns/yarn.lock && cd addOns && yarn install --frozen-lockfile --modules-folder ../node_modules",
"install:update-lockfile": "yarn install && bun install --config=./bunfig.update-lockfile.toml", "install:update-lockfile": "yarn install && bun install --config=./bunfig.update-lockfile.toml",
"install:yarn:frozen-lockfile": "yarn install --frozen-lockfile", "install:yarn:frozen-lockfile": "yarn install --frozen-lockfile",
"audit": "yarn audit || bun audit", "audit": "bun audit --ignore=GHSA-5j98-mcp5-4vw2",
"preinstall": "node preinstall.js", "preinstall": "node preinstall.js",
"start": "yarn run dev", "start": "yarn run dev",
"test": "yarn run test:unit", "test": "yarn run test:unit",

2
platform/docs/package.json
View File

@ -76,7 +76,7 @@
"docusaurus-plugin-image-zoom": "1.0.1", "docusaurus-plugin-image-zoom": "1.0.1",
"file-loader": "6.2.0", "file-loader": "6.2.0",
"framer-motion": "6.2.4", "framer-motion": "6.2.4",
"glob": "10.4.5", "glob": "10.5.0",
"lucide-react": "0.379.0", "lucide-react": "0.379.0",
"next-themes": "0.3.0", "next-themes": "0.3.0",
"postcss": "8.5.6", "postcss": "8.5.6",

8
platform/docs/yarn.lock
View File

@ -6535,10 +6535,10 @@ glob-to-regexp@^0.4.1:
resolved "https://registry.yarnpkg.com/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz#c75297087c851b9a578bd217dd59a92f59fe546e" resolved "https://registry.yarnpkg.com/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz#c75297087c851b9a578bd217dd59a92f59fe546e"
integrity sha512-lkX1HJXwyMcprw/5YUZc2s7DrpAiHB21/V+E1rHUrVNokkvB6bqMzT0VfV6/86ZNabt1k14YOIaT7nDvOX3Iiw== integrity sha512-lkX1HJXwyMcprw/5YUZc2s7DrpAiHB21/V+E1rHUrVNokkvB6bqMzT0VfV6/86ZNabt1k14YOIaT7nDvOX3Iiw==
glob@10.4.5, glob@^10.3.10: glob@10.5.0, glob@^10.3.10:
version "10.4.5" version "10.5.0"
resolved "https://registry.yarnpkg.com/glob/-/glob-10.4.5.tgz#f4d9f0b90ffdbab09c9d77f5f29b4262517b0956" resolved "https://registry.yarnpkg.com/glob/-/glob-10.5.0.tgz#8ec0355919cd3338c28428a23d4f24ecc5fe738c"
integrity sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg== integrity sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==
dependencies: dependencies:
foreground-child "^3.1.0" foreground-child "^3.1.0"
jackspeak "^3.1.2" jackspeak "^3.1.2"