fix: Force async version 3.2.2

force async version 3.2.2 to get fix for Prototype Pollution in async
vaadin · Apr 14, 2022 · d87178f · d87178f
1 parent 1e25918
commit d87178f
Show file tree

Hide file tree

Showing 6 changed files with 76 additions and 65 deletions.
diff --git a/flow-server/src/main/java/com/vaadin/flow/server/frontend/NodeUpdater.java b/flow-server/src/main/java/com/vaadin/flow/server/frontend/NodeUpdater.java
@@ -420,6 +420,7 @@ Map<String, String> getDefaultDevDependencies() {
         defaults.put("workbox-core", WORKBOX_VERSION);
         defaults.put("workbox-precaching", WORKBOX_VERSION);
         defaults.put("glob", "7.1.6");
+        defaults.put("async", "3.2.2");
 
         return defaults;
     }

diff --git a/flow-tests/test-frontend/test-npm/package-lock.json b/flow-tests/test-frontend/test-npm/package-lock.json
diff --git a/flow-tests/test-frontend/test-pnpm/pnpm-lock.yaml b/flow-tests/test-frontend/test-pnpm/pnpm-lock.yaml