chore: Override @azure/identity version to address CVE-2024-35255 (#15564)

This commit is contained in:
Iván Ovejero
2025-05-21 11:40:39 +02:00
committed by GitHub
parent bca03ca739
commit 23ab61c0c7
2 changed files with 26 additions and 47 deletions

View File

@@ -79,6 +79,7 @@
"sqlite3"
],
"overrides": {
"@azure/identity": "^4.3.0",
"@types/node": "^18.16.16",
"chokidar": "^4.0.1",
"esbuild": "^0.24.0",

72
pnpm-lock.yaml generated
View File

@@ -162,6 +162,7 @@ catalogs:
version: 4.5.0
overrides:
'@azure/identity': ^4.3.0
'@types/node': ^18.16.16
chokidar: ^4.0.1
esbuild: ^0.24.0
@@ -728,11 +729,11 @@ importers:
specifier: 3.808.0
version: 3.808.0
'@azure/identity':
specifier: 4.3.0
specifier: ^4.3.0
version: 4.3.0
'@getzep/zep-cloud':
specifier: 1.0.12
version: 1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(b4eb53fe8b825d6e8edd96cc3d942586))
version: 1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(7f2a4b9c5436679ca8b0df05212b4905))
'@getzep/zep-js':
specifier: 0.9.0
version: 0.9.0
@@ -759,7 +760,7 @@ importers:
version: 0.3.2(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)
'@langchain/community':
specifier: 'catalog:'
version: 0.3.24(67fb36bad0bcdd2b0df3579415b33a93)
version: 0.3.24(0b620065402de60ffbc4ade3af2d8197)
'@langchain/core':
specifier: 'catalog:'
version: 0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))
@@ -864,7 +865,7 @@ importers:
version: 23.0.1
langchain:
specifier: 0.3.11
version: 0.3.11(b4eb53fe8b825d6e8edd96cc3d942586)
version: 0.3.11(7f2a4b9c5436679ca8b0df05212b4905)
lodash:
specifier: 'catalog:'
version: 4.17.21
@@ -1090,7 +1091,7 @@ importers:
specifier: 3.808.0
version: 3.808.0
'@azure/identity':
specifier: 4.3.0
specifier: ^4.3.0
version: 4.3.0
'@azure/keyvault-secrets':
specifier: 4.8.0
@@ -2974,10 +2975,6 @@ packages:
resolution: {integrity: sha512-gT4H8mTaSXRz7eGTuQyq1aIJnJqeXzpOe9Ay7Z3FrCouer14CbV3VzjnJrNrQfbBpGBLO9oy8BmrY75A0p53cA==}
engines: {node: '>=18.0.0'}
'@azure/identity@3.4.2':
resolution: {integrity: sha512-0q5DL4uyR0EZ4RXQKD8MadGH6zTIcloUoS/RVbCpNpej4pwte0xpqYxk8K97Py2RiuUvI7F4GXpoT4046VfufA==}
engines: {node: '>=14.0.0'}
'@azure/identity@4.3.0':
resolution: {integrity: sha512-LHZ58/RsIpIWa4hrrE2YuJ/vzG1Jv9f774RfTTAVDZDriubvJ0/S5u4pnw4akJDlS0TiJb6VMphmVUFsWmgodQ==}
engines: {node: '>=18.0.0'}
@@ -15231,7 +15228,7 @@ snapshots:
dependencies:
'@azure/abort-controller': 1.1.0
'@azure/core-client': 1.9.2
'@azure/core-rest-pipeline': 1.9.2
'@azure/core-rest-pipeline': 1.20.0
transitivePeerDependencies:
- supports-color
@@ -15306,33 +15303,14 @@ snapshots:
fast-xml-parser: 5.2.3
tslib: 2.6.2
'@azure/identity@3.4.2':
dependencies:
'@azure/abort-controller': 1.1.0
'@azure/core-auth': 1.6.0
'@azure/core-client': 1.9.2
'@azure/core-rest-pipeline': 1.9.2
'@azure/core-tracing': 1.0.1
'@azure/core-util': 1.7.0
'@azure/logger': 1.0.3
'@azure/msal-browser': 3.19.0
'@azure/msal-node': 2.11.0
events: 3.3.0
jws: 4.0.0
open: 8.4.0
stoppable: 1.1.0
tslib: 2.6.2
transitivePeerDependencies:
- supports-color
'@azure/identity@4.3.0':
dependencies:
'@azure/abort-controller': 1.1.0
'@azure/core-auth': 1.6.0
'@azure/core-auth': 1.9.0
'@azure/core-client': 1.9.2
'@azure/core-rest-pipeline': 1.9.2
'@azure/core-tracing': 1.0.1
'@azure/core-util': 1.7.0
'@azure/core-rest-pipeline': 1.20.0
'@azure/core-tracing': 1.2.0
'@azure/core-util': 1.12.0
'@azure/logger': 1.0.3
'@azure/msal-browser': 3.19.0
'@azure/msal-node': 2.11.0
@@ -15347,14 +15325,14 @@ snapshots:
'@azure/keyvault-keys@4.6.0':
dependencies:
'@azure/abort-controller': 1.1.0
'@azure/core-auth': 1.6.0
'@azure/core-auth': 1.9.0
'@azure/core-client': 1.9.2
'@azure/core-http-compat': 1.3.0
'@azure/core-lro': 2.4.0
'@azure/core-paging': 1.3.0
'@azure/core-rest-pipeline': 1.9.2
'@azure/core-tracing': 1.0.1
'@azure/core-util': 1.7.0
'@azure/core-rest-pipeline': 1.20.0
'@azure/core-tracing': 1.2.0
'@azure/core-util': 1.12.0
'@azure/logger': 1.0.3
tslib: 2.6.2
transitivePeerDependencies:
@@ -16527,7 +16505,7 @@ snapshots:
'@gar/promisify@1.1.3':
optional: true
'@getzep/zep-cloud@1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(b4eb53fe8b825d6e8edd96cc3d942586))':
'@getzep/zep-cloud@1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(7f2a4b9c5436679ca8b0df05212b4905))':
dependencies:
form-data: 4.0.0
node-fetch: 2.7.0(encoding@0.1.13)
@@ -16536,7 +16514,7 @@ snapshots:
zod: 3.24.1
optionalDependencies:
'@langchain/core': 0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))
langchain: 0.3.11(b4eb53fe8b825d6e8edd96cc3d942586)
langchain: 0.3.11(7f2a4b9c5436679ca8b0df05212b4905)
transitivePeerDependencies:
- encoding
@@ -17048,7 +17026,7 @@ snapshots:
- aws-crt
- encoding
'@langchain/community@0.3.24(67fb36bad0bcdd2b0df3579415b33a93)':
'@langchain/community@0.3.24(0b620065402de60ffbc4ade3af2d8197)':
dependencies:
'@browserbasehq/stagehand': 1.9.0(@playwright/test@1.49.1)(deepmerge@4.3.1)(dotenv@16.4.5)(encoding@0.1.13)(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))(zod@3.24.1)
'@ibm-cloud/watsonx-ai': 1.1.2
@@ -17059,7 +17037,7 @@ snapshots:
flat: 5.0.2
ibm-cloud-sdk-core: 5.3.2
js-yaml: 4.1.0
langchain: 0.3.11(b4eb53fe8b825d6e8edd96cc3d942586)
langchain: 0.3.11(7f2a4b9c5436679ca8b0df05212b4905)
langsmith: 0.2.15(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))
openai: 4.78.1(encoding@0.1.13)(zod@3.24.1)
uuid: 10.0.0
@@ -17074,7 +17052,7 @@ snapshots:
'@aws-sdk/credential-provider-node': 3.808.0
'@azure/storage-blob': 12.26.0
'@browserbasehq/sdk': 2.0.0(encoding@0.1.13)
'@getzep/zep-cloud': 1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(b4eb53fe8b825d6e8edd96cc3d942586))
'@getzep/zep-cloud': 1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(7f2a4b9c5436679ca8b0df05212b4905))
'@getzep/zep-js': 0.9.0
'@google-ai/generativelanguage': 2.6.0(encoding@0.1.13)
'@google-cloud/storage': 7.12.1(encoding@0.1.13)
@@ -23258,7 +23236,7 @@ snapshots:
'@types/debug': 4.1.12
'@types/node': 18.16.16
'@types/tough-cookie': 4.0.2
axios: 1.8.3(debug@4.4.0)
axios: 1.8.3
camelcase: 6.3.0
debug: 4.4.0(supports-color@8.1.1)
dotenv: 16.4.5
@@ -23268,7 +23246,7 @@ snapshots:
isstream: 0.1.2
jsonwebtoken: 9.0.2
mime-types: 2.1.35
retry-axios: 2.6.0(axios@1.8.3)
retry-axios: 2.6.0(axios@1.8.3(debug@4.4.0))
tough-cookie: 4.1.3
transitivePeerDependencies:
- supports-color
@@ -24262,7 +24240,7 @@ snapshots:
kuler@2.0.0: {}
langchain@0.3.11(b4eb53fe8b825d6e8edd96cc3d942586):
langchain@0.3.11(7f2a4b9c5436679ca8b0df05212b4905):
dependencies:
'@langchain/core': 0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))
'@langchain/openai': 0.3.17(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)
@@ -26639,7 +26617,7 @@ snapshots:
onetime: 5.1.2
signal-exit: 3.0.7
retry-axios@2.6.0(axios@1.8.3):
retry-axios@2.6.0(axios@1.8.3(debug@4.4.0)):
dependencies:
axios: 1.8.3
@@ -27579,7 +27557,7 @@ snapshots:
tedious@16.7.1:
dependencies:
'@azure/identity': 3.4.2
'@azure/identity': 4.3.0
'@azure/keyvault-keys': 4.6.0
'@js-joda/core': 5.6.1
bl: 6.0.12