e388bd7d08
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [lodash](https://lodash.com/)
([source](https://redirect.github.com/lodash/lodash)) | [`4.17.21` →
`4.17.23`](https://renovatebot.com/diffs/npm/lodash/4.17.21/4.17.23) |
|
|
### GitHub Vulnerability Alerts
####
[CVE-2025-13465](https://redirect.github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg)
### Impact
Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype
pollution in the `_.unset` and `_.omit` functions. An attacker can pass
crafted paths which cause Lodash to delete methods from global
prototypes.
The issue permits deletion of properties but does not allow overwriting
their original behavior.
### Patches
This issue is patched on 4.17.23.
---
### Lodash has Prototype Pollution Vulnerability in `_.unset` and
`_.omit` functions
[CVE-2025-13465](https://nvd.nist.gov/vuln/detail/CVE-2025-13465) /
[GHSA-xxjr-mmjv-4gpg](https://redirect.github.com/advisories/GHSA-xxjr-mmjv-4gpg)
<details>
<summary>More information</summary>
#### Details
##### Impact
Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype
pollution in the `_.unset` and `_.omit` functions. An attacker can pass
crafted paths which cause Lodash to delete methods from global
prototypes.
The issue permits deletion of properties but does not allow overwriting
their original behavior.
##### Patches
This issue is patched on 4.17.23.
#### Severity
- CVSS Score: 6.9 / 10 (Medium)
- Vector String:
`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:H/E:P`
#### References
-
[https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg](https://redirect.github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg)
-
[https://nvd.nist.gov/vuln/detail/CVE-2025-13465](https://nvd.nist.gov/vuln/detail/CVE-2025-13465)
-
[edadd45214)
-
[https://github.com/lodash/lodash](https://redirect.github.com/lodash/lodash)
This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-xxjr-mmjv-4gpg) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database)
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).
</details>
---
### Release Notes
<details>
<summary>lodash/lodash (lodash)</summary>
###
[`v4.17.23`](https://redirect.github.com/lodash/lodash/compare/4.17.21...4.17.23)
[Compare
Source](https://redirect.github.com/lodash/lodash/compare/4.17.21...4.17.23)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
## Need help?
You can ask for more help in the following Slack channel:
#proj-renovate-self-hosted. In that channel you can also find ADR and
FAQ docs in the Resources section.
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi44Mi4zIiwidXBkYXRlZEluVmVyIjoiNDIuODIuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlLXNlY3VyaXR5LXVwZGF0ZSIsInNldmVyaXR5Ok1FRElVTSJdfQ==-->
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
116 lines
3.7 KiB
JSON
116 lines
3.7 KiB
JSON
{
|
|
"name": "grafana-zabbix",
|
|
"version": "6.1.1",
|
|
"description": "Zabbix plugin for Grafana",
|
|
"homepage": "http://grafana-zabbix.org",
|
|
"bugs": {
|
|
"url": "https://github.com/grafana/grafana-zabbix/issues"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/grafana/grafana-zabbix.git"
|
|
},
|
|
"license": "Apache-2.0",
|
|
"author": "Grafana Labs",
|
|
"scripts": {
|
|
"build": "webpack -c ./webpack.config.ts --env production",
|
|
"dev": "webpack -w -c ./webpack.config.ts --env development",
|
|
"e2e": "playwright test",
|
|
"lint": "eslint --cache .",
|
|
"lint:fix": "yarn run lint --fix && prettier --write --list-different .",
|
|
"server": "docker compose up --build",
|
|
"server:down": "docker compose --file ./devenv/default/docker-compose.yml down",
|
|
"server:stop": "docker compose --file ./devenv/default/docker-compose.yml stop",
|
|
"sign": "npx --yes @grafana/sign-plugin@latest",
|
|
"spellcheck": "cspell -c cspell.config.json \"**/*.{ts,tsx,js,go,md,mdx,yml,yaml,json,scss,css}\"",
|
|
"test": "jest --watch --onlyChanged",
|
|
"test:ci": "jest --passWithNoTests --maxWorkers 4",
|
|
"typecheck": "tsc --noEmit"
|
|
},
|
|
"dependencies": {
|
|
"@emotion/css": "11.13.5",
|
|
"@grafana/data": "12.3.1",
|
|
"@grafana/i18n": "12.3.1",
|
|
"@grafana/plugin-ui": "0.12.1",
|
|
"@grafana/runtime": "12.3.1",
|
|
"@grafana/schema": "12.3.1",
|
|
"@grafana/ui": "12.3.1",
|
|
"react": "18.3.1",
|
|
"react-dom": "18.3.1",
|
|
"react-use": "17.6.0",
|
|
"rxjs": "7.8.2",
|
|
"tslib": "2.8.1"
|
|
},
|
|
"devDependencies": {
|
|
"@babel/core": "7.28.6",
|
|
"@changesets/cli": "2.29.8",
|
|
"@grafana/e2e-selectors": "12.3.1",
|
|
"@grafana/eslint-config": "9.0.0",
|
|
"@grafana/plugin-e2e": "3.1.2",
|
|
"@grafana/tsconfig": "2.0.1",
|
|
"@playwright/test": "1.57.0",
|
|
"@stylistic/eslint-plugin-ts": "4.4.1",
|
|
"@swc/core": "1.15.8",
|
|
"@swc/helpers": "0.5.18",
|
|
"@swc/jest": "0.2.39",
|
|
"@tanstack/react-table": "8.21.3",
|
|
"@testing-library/dom": "10.4.1",
|
|
"@testing-library/jest-dom": "6.9.1",
|
|
"@testing-library/react": "16.3.1",
|
|
"@types/grafana": "github:CorpGlory/types-grafana",
|
|
"@types/jest": "30.0.0",
|
|
"@types/lodash": "4.17.23",
|
|
"@types/node": "25.0.9",
|
|
"@types/react": "18.3.27",
|
|
"@types/react-dom": "18.3.7",
|
|
"@typescript-eslint/eslint-plugin": "8.53.0",
|
|
"@typescript-eslint/parser": "8.53.0",
|
|
"autoprefixer": "10.4.23",
|
|
"copy-webpack-plugin": "13.0.1",
|
|
"cspell": "9.6.0",
|
|
"css-loader": "7.1.2",
|
|
"eslint": "9.39.2",
|
|
"eslint-config-prettier": "10.1.8",
|
|
"eslint-plugin-jsdoc": "62.1.0",
|
|
"eslint-plugin-prettier": "5.5.5",
|
|
"eslint-plugin-react": "7.37.5",
|
|
"eslint-plugin-react-hooks": "7.0.1",
|
|
"eslint-webpack-plugin": "5.0.2",
|
|
"fork-ts-checker-webpack-plugin": "9.1.0",
|
|
"glob": "13.0.0",
|
|
"identity-obj-proxy": "3.0.0",
|
|
"imports-loader": "5.0.0",
|
|
"jest": "30.2.0",
|
|
"jest-environment-jsdom": "30.2.0",
|
|
"lodash": "4.17.23",
|
|
"mini-css-extract-plugin": "2.10.0",
|
|
"moment": "2.30.1",
|
|
"postcss": "8.5.6",
|
|
"postcss-loader": "8.2.0",
|
|
"postcss-reporter": "7.1.0",
|
|
"postcss-scss": "4.0.9",
|
|
"prettier": "3.8.0",
|
|
"replace-in-file-webpack-plugin": "1.0.6",
|
|
"sass": "1.97.2",
|
|
"sass-loader": "16.0.6",
|
|
"semver": "7.7.3",
|
|
"style-loader": "4.0.0",
|
|
"swc-loader": "0.2.7",
|
|
"terser-webpack-plugin": "5.3.16",
|
|
"ts-node": "10.9.2",
|
|
"tsconfig-paths": "4.2.0",
|
|
"typescript": "5.9.3",
|
|
"webpack": "5.104.1",
|
|
"webpack-cli": "6.0.1",
|
|
"webpack-livereload-plugin": "3.0.2",
|
|
"webpack-remove-empty-scripts": "1.1.1",
|
|
"webpack-subresource-integrity": "5.1.0",
|
|
"webpack-virtual-modules": "0.6.2"
|
|
},
|
|
"resolutions": {
|
|
"glob": "^13.0.0",
|
|
"js-yaml": "4.1.1"
|
|
},
|
|
"packageManager": "yarn@4.12.0"
|
|
}
|