fix: Force async version 3.2.2

force async version 3.2.2 to get fix for Prototype Pollution in async
vaadin · Apr 19, 2022 · b1a341e · b1a341e
1 parent 56886e4
commit b1a341e
Show file tree

Hide file tree

Showing 6 changed files with 88 additions and 66 deletions.
diff --git a/flow-server/src/main/java/com/vaadin/flow/server/frontend/NodeUpdater.java b/flow-server/src/main/java/com/vaadin/flow/server/frontend/NodeUpdater.java
@@ -420,6 +420,7 @@ Map<String, String> getDefaultDevDependencies() {
         defaults.put("workbox-core", WORKBOX_VERSION);
         defaults.put("workbox-precaching", WORKBOX_VERSION);
         defaults.put("glob", "7.1.6");
+        defaults.put("async", "3.2.2");
 
         return defaults;
     }

diff --git a/flow-tests/test-frontend/test-npm/package-lock.json b/flow-tests/test-frontend/test-npm/package-lock.json
diff --git a/flow-tests/test-frontend/test-pnpm/pnpm-lock.yaml b/flow-tests/test-frontend/test-pnpm/pnpm-lock.yaml
diff --git a/flow-tests/test-frontend/vite-basics/package.json b/flow-tests/test-frontend/vite-basics/package.json
@@ -19,6 +19,7 @@
   },
   "devDependencies": {
     "@rollup/plugin-replace": "3.1.0",
+    "async": "3.2.2",
     "glob": "7.1.6",
     "mkdirp": "1.0.4",
     "rollup-plugin-brotli": "3.1.0",
@@ -29,24 +30,6 @@
     "workbox-core": "6.5.0",
     "workbox-precaching": "6.5.0"
   },
-  "overrides": {
-    "@testscope/all": "$@testscope/all",
-    "@testscope/button": "$@testscope/button",
-    "@vaadin/bundles": "$@vaadin/bundles",
-    "copy-to-clipboard": "$copy-to-clipboard",
-    "package-outside-npm": "$package-outside-npm",
-    "package2-outside-npm": "$package2-outside-npm",
-    "glob": "$glob",
-    "mkdirp": "$mkdirp",
-    "rollup-plugin-brotli": "$rollup-plugin-brotli",
-    "typescript": "$typescript",
-    "vite": "$vite",
-    "vite-plugin-checker": "$vite-plugin-checker",
-    "workbox-build": "$workbox-build",
-    "workbox-core": "$workbox-core",
-    "workbox-precaching": "$workbox-precaching",
-    "@rollup/plugin-replace": "$@rollup/plugin-replace"
-  },
   "vaadin": {
     "dependencies": {
       "@polymer/polymer": "3.4.1",
@@ -59,6 +42,7 @@
     },
     "devDependencies": {
       "@rollup/plugin-replace": "3.1.0",
+      "async": "3.2.2",
       "glob": "7.1.6",
       "mkdirp": "1.0.4",
       "rollup-plugin-brotli": "3.1.0",
@@ -69,6 +53,30 @@
       "workbox-core": "6.5.0",
       "workbox-precaching": "6.5.0"
     },
-    "hash": "dc4619814206e4dc257425a00b057ad9a9cff83a993020e0c534d1c4aedbcbde"
+    "hash": "44f86e6049ac654c8a85a7d04f95147e2f087973a41b2d8f806009b624948c02"
+  },
+  "overrides": {
+    "@polymer/polymer": "$@polymer/polymer",
+    "@testscope/all": "$@testscope/all",
+    "@testscope/button": "$@testscope/button",
+    "@vaadin/bundles": "$@vaadin/bundles",
+    "@vaadin/common-frontend": "$@vaadin/common-frontend",
+    "@vaadin/router": "$@vaadin/router",
+    "@vaadin/vaadin-lumo-styles": "$@vaadin/vaadin-lumo-styles",
+    "construct-style-sheets-polyfill": "$construct-style-sheets-polyfill",
+    "copy-to-clipboard": "$copy-to-clipboard",
+    "lit": "$lit",
+    "package-outside-npm": "$package-outside-npm",
+    "package2-outside-npm": "$package2-outside-npm",
+    "glob": "$glob",
+    "mkdirp": "$mkdirp",
+    "rollup-plugin-brotli": "$rollup-plugin-brotli",
+    "typescript": "$typescript",
+    "vite": "$vite",
+    "vite-plugin-checker": "$vite-plugin-checker",
+    "workbox-build": "$workbox-build",
+    "workbox-core": "$workbox-core",
+    "workbox-precaching": "$workbox-precaching",
+    "@rollup/plugin-replace": "$@rollup/plugin-replace"
   }
 }