From 94cf685d52189d5775c4a4ce4e95f55f79501d39 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 18 Aug 2026 04:32:58 +0000 Subject: [PATCH 1/4] Initial plan From 1e2a0494a6c041c3ca0b9b1464015c9eb7f28273 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 18 Aug 2026 04:39:38 +0000 Subject: [PATCH 2/4] Update vulnerable js-yaml resolutions Co-authored-by: mikeharder <9459391+mikeharder@users.noreply.github.com> --- package-lock.json | 48 +++++++++-------------------------------------- 1 file changed, 9 insertions(+), 39 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4e29ffe..57e52e2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -851,9 +851,9 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.15.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", - "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, "license": "MIT", "dependencies": { @@ -2054,9 +2054,6 @@ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -2071,9 +2068,6 @@ "arm64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -2088,9 +2082,6 @@ "loong64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -2105,9 +2096,6 @@ "loong64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -2122,9 +2110,6 @@ "ppc64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -2139,9 +2124,6 @@ "riscv64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -2156,9 +2138,6 @@ "riscv64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -2173,9 +2152,6 @@ "s390x" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -2190,9 +2166,6 @@ "x64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -2207,9 +2180,6 @@ "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -4838,9 +4808,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "5.2.3", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.3.tgz", - "integrity": "sha512-n+mUVyUX5bVv7G/G2zyIHOhdxfuU1dY2NOFzTQUWiMUbFss8b57NFlgCCaggU78wSw5KVS9cllzeLyzyR+n5nw==", + "version": "5.3.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.3.0.tgz", + "integrity": "sha512-muutsYr+e2+d3rTgUGslq5rxbBlUy3cJ61IsHag2QNDQV+7zXWjkUpmALIajhrlLlrgRUiymj6U3zUr/TMK84Q==", "funding": [ { "type": "github", @@ -4927,9 +4897,9 @@ } }, "node_modules/json-refs/node_modules/js-yaml": { - "version": "3.15.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", - "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "license": "MIT", "dependencies": { "argparse": "^1.0.7", From 36ef47bd62949e3207ceacce3bff6739cc541798 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 18 Aug 2026 18:30:01 +0000 Subject: [PATCH 3/4] Pin js-yaml to 5.2.3 Co-authored-by: mikeharder <9459391+mikeharder@users.noreply.github.com> --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 57e52e2..d3e50fe 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "@ts-common/source-map": "0.5.0", "@ts-common/string-map": "0.3.0", "autorest": "^3.8.0", - "js-yaml": "^5.2.1", + "js-yaml": "5.2.3", "json-pointer": "0.6.2", "json-refs": "^3.0.15", "lodash": "^4.17.21", @@ -4808,9 +4808,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "5.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.3.0.tgz", - "integrity": "sha512-muutsYr+e2+d3rTgUGslq5rxbBlUy3cJ61IsHag2QNDQV+7zXWjkUpmALIajhrlLlrgRUiymj6U3zUr/TMK84Q==", + "version": "5.2.3", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.3.tgz", + "integrity": "sha512-n+mUVyUX5bVv7G/G2zyIHOhdxfuU1dY2NOFzTQUWiMUbFss8b57NFlgCCaggU78wSw5KVS9cllzeLyzyR+n5nw==", "funding": [ { "type": "github", diff --git a/package.json b/package.json index 7952b92..72de023 100644 --- a/package.json +++ b/package.json @@ -16,7 +16,7 @@ "@ts-common/source-map": "0.5.0", "@ts-common/string-map": "0.3.0", "autorest": "^3.8.0", - "js-yaml": "^5.2.1", + "js-yaml": "5.2.3", "json-pointer": "0.6.2", "json-refs": "^3.0.15", "lodash": "^4.17.21", From 52d18134f7823b88ed380f5d5affcbe53baa559c Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 18 Aug 2026 18:32:45 +0000 Subject: [PATCH 4/4] Revert package manifest change Co-authored-by: mikeharder <9459391+mikeharder@users.noreply.github.com> --- package-lock.json | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package-lock.json b/package-lock.json index d3e50fe..cee9cd2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "@ts-common/source-map": "0.5.0", "@ts-common/string-map": "0.3.0", "autorest": "^3.8.0", - "js-yaml": "5.2.3", + "js-yaml": "^5.2.1", "json-pointer": "0.6.2", "json-refs": "^3.0.15", "lodash": "^4.17.21", diff --git a/package.json b/package.json index 72de023..7952b92 100644 --- a/package.json +++ b/package.json @@ -16,7 +16,7 @@ "@ts-common/source-map": "0.5.0", "@ts-common/string-map": "0.3.0", "autorest": "^3.8.0", - "js-yaml": "5.2.3", + "js-yaml": "^5.2.1", "json-pointer": "0.6.2", "json-refs": "^3.0.15", "lodash": "^4.17.21",