Skip to content

Fix Orchestrator CVEs for RHDH 1.9.6 Release#3480

Merged
karthikjeeyar merged 4 commits into
workspace/orchestratorfrom
orchestrator/release-1.9
Jun 22, 2026
Merged

Fix Orchestrator CVEs for RHDH 1.9.6 Release#3480
karthikjeeyar merged 4 commits into
workspace/orchestratorfrom
orchestrator/release-1.9

Conversation

@JessicaJHee

Copy link
Copy Markdown
Member

Hey, I just made a Pull Request!

Fixes RHIDP-14959

  • See Jira description for details on each dependency and relavant notes
  • axios, shell-quote, ws couldn't be fully patched but because the vulnerable versions are of dev dependencies like cli and repo-tools we are safe

✔️ Checklist

  • A changeset describing the change and affected packages. (more info)
  • Added or Updated documentation
  • Tests for new functionality and regression tests for bug fixes
  • Screenshots attached (for UI changes)

…r workspace (#3422)

Signed-off-by: Jessica He <jhe@redhat.com>
…rkspace (#3453)

* [release-1.9] chore(deps): bumps ip-address in Orchestrator workspace

Signed-off-by: Jessica He <jhe@redhat.com>

* bump ws to 8.21.0

Signed-off-by: Jessica He <jhe@redhat.com>

---------

Signed-off-by: Jessica He <jhe@redhat.com>
Signed-off-by: Jessica He <jhe@redhat.com>
* Revert "[release-1.9] chore(deps): bumps axios and shell-quote in Orchestrator workspace (#3422)"

This reverts commit 49015c5.

* [release-1.9] chore(deps): bumps non-dev axios and shell-quote in Orchestrator workspace

Signed-off-by: Jessica He <jhe@redhat.com>

---------

Signed-off-by: Jessica He <jhe@redhat.com>
@alizard0

Copy link
Copy Markdown
Member

/lgtm

@karthikjeeyar karthikjeeyar left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verified the plugin locally

Image

@karthikjeeyar karthikjeeyar merged commit 5e3e7b3 into workspace/orchestrator Jun 22, 2026
11 checks passed
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants