From 8f41d14ff2762d158af88a5193cbed841e03d83d Mon Sep 17 00:00:00 2001 From: Agent Harness Date: Mon, 26 Oct 2026 13:13:08 +0000 Subject: [PATCH 1/2] build(deps): scope audit overrides to the parents that pin dompurify and msal-node No released parent fixes either advisory: monaco-editor (0.57.0 and rc) pins dompurify 3.4.15 exactly, and @azure/identity (4.14.0 and 4.15.0-beta.1) depends on @azure/msal-node ^6. Overrides are scoped to those parents. Co-Authored-By: Claude Sonnet 5.5 --- package.json | 4 +++- pnpm-lock.yaml | 32 +++++++++++++++++--------------- 2 files changed, 20 insertions(+), 16 deletions(-) diff --git a/package.json b/package.json index be1c741..ff630ff 100644 --- a/package.json +++ b/package.json @@ -40,7 +40,9 @@ }, "pnpm": { "overrides": { - "brace-expansion": "^5.0.8" + "brace-expansion": "^5.0.8", + "monaco-editor>dompurify": "^3.4.17", + "@azure/identity>@azure/msal-node": "^7.1.0" }, "onlyBuiltDependencies": [ "@bufbuild/buf", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index d3408e5..fac9088 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -6,6 +6,8 @@ settings: overrides: brace-expansion: ^5.0.8 + monaco-editor>dompurify: ^3.4.17 + '@azure/identity>@azure/msal-node': ^7.1.0 importers: @@ -369,16 +371,16 @@ packages: resolution: {integrity: sha512-NDW2/bz2Pz71EJAlhSw+jg1kpRIWtrzj0gCzcHuG1u7iLvSOHpUc5lICkDA9x0bbeityxTneiunSBluvS+/y4w==} engines: {node: '>=0.8.0'} - '@azure/msal-common@16.14.1': - resolution: {integrity: sha512-Or6xhPNyi4zHW25158yxBoyxuCqNSPa5YBVqfF1J5Ks4MJWBo/USXdp05DQIPu1Zli00YZu6t0+h6KvHJealxQ==} - engines: {node: '>=0.8.0'} - '@azure/msal-common@16.14.2': resolution: {integrity: sha512-HOBR0Gfo39TMrkxNG8k6cfjRkrRjXZc3JQs3ebMWQc9S4cihuknMYra3sgmzbZB752oQBqBN9+WF7c826p2vIQ==} engines: {node: '>=0.8.0'} - '@azure/msal-node@6.0.1': - resolution: {integrity: sha512-ixSO1Y/kCVRthRs+hSx/5qkwaunX1/RAePhlMN0wIpIQ4WEZ6AREGGnGd1AP0qspHVsAwzWQKGubpjh50JyJIQ==} + '@azure/msal-common@16.14.3': + resolution: {integrity: sha512-tz3GvMrR9V/plb2lDdW8qaO8CPpfZevdExBKjltzzbAtyhK0eB2UIvji1aU+gkyHj3fxQ2ie+LNHyMXdmo8wOg==} + engines: {node: '>=0.8.0'} + + '@azure/msal-node@7.1.1': + resolution: {integrity: sha512-zHXTJB38XVrsNaXrPBCMqEUjeyQysFfgmKtUHRDsEKTRjNIPckJ/w6fE5wBXrmJXBim1D3C7O7LOag0msPTrgw==} engines: {node: '>=20'} '@babel/code-frame@7.29.7': @@ -1778,8 +1780,8 @@ packages: resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==} engines: {node: '>=8'} - dompurify@3.4.15: - resolution: {integrity: sha512-EUBjM+B+lkDE41iE82DDSCfkoPGfXx8IxFxPMjNzm/Uk4xDet77rTN9wqlxlVg71kK7XGuUMv6wUxJUwwv+Xyw==} + dompurify@3.4.17: + resolution: {integrity: sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==} dprint-node@1.0.8: resolution: {integrity: sha512-iVKnUtYfGrYcW1ZAlfR/F59cUVL8QIhWoBJoSjkkdua/dkWIgjZfiLMeTjiB06X0ZLkQ0M2C1VbUj/CxkIf1zg==} @@ -3034,7 +3036,7 @@ snapshots: '@azure/core-util': 1.14.0 '@azure/logger': 1.4.0 '@azure/msal-browser': 5.25.1 - '@azure/msal-node': 6.0.1 + '@azure/msal-node': 7.1.1 open: 11.0.4 tslib: 2.8.1 transitivePeerDependencies: @@ -3080,13 +3082,13 @@ snapshots: dependencies: '@azure/msal-common': 16.14.2 - '@azure/msal-common@16.14.1': {} - '@azure/msal-common@16.14.2': {} - '@azure/msal-node@6.0.1': + '@azure/msal-common@16.14.3': {} + + '@azure/msal-node@7.1.1': dependencies: - '@azure/msal-common': 16.14.1 + '@azure/msal-common': 16.14.3 jsonwebtoken: 9.0.3 '@babel/code-frame@7.29.7': @@ -4256,7 +4258,7 @@ snapshots: detect-libc@2.1.2: {} - dompurify@3.4.15: + dompurify@3.4.17: optionalDependencies: '@types/trusted-types': 2.0.7 @@ -4835,7 +4837,7 @@ snapshots: monaco-editor@0.57.0: dependencies: - dompurify: 3.4.15 + dompurify: 3.4.17 marked: 14.0.0 ms@2.1.3: {} From 1113e4936ca4125b0c8aea2dc08aefb88f827059 Mon Sep 17 00:00:00 2001 From: Agent Harness Date: Mon, 26 Oct 2026 13:26:36 +0000 Subject: [PATCH 2/2] ci: re-run the compose smoke to check the enrol timeout is not a flake Co-Authored-By: Claude Sonnet 5.5