From a24125527de098ebd77a8b39dbaaed4e54c26019 Mon Sep 17 00:00:00 2001
From: elchananarb <elchanan.arbiv@checkmarx.com>
Date: Tue, 10 Dec 2024 18:36:54 +0200
Subject: [PATCH] upgrade azure-pipelines-task-lib and override the semver

---
 cxAstScan/package-lock.json | 37 ++++++++++++++++++++-----------------
 cxAstScan/package.json      |  7 +++++--
 2 files changed, 25 insertions(+), 19 deletions(-)

diff --git a/cxAstScan/package-lock.json b/cxAstScan/package-lock.json
index b3c18b9..b83c912 100644
--- a/cxAstScan/package-lock.json
+++ b/cxAstScan/package-lock.json
@@ -4,10 +4,9 @@
   "requires": true,
   "packages": {
     "": {
-      "name": "cxAstScan",
       "dependencies": {
         "@checkmarxdev/ast-cli-javascript-wrapper-runtime-cli": "1.0.8",
-        "azure-pipelines-task-lib": "4.13.0"
+        "azure-pipelines-task-lib": "4.17.3"
       }
     },
     "node_modules/@checkmarxdev/ast-cli-javascript-wrapper-runtime-cli": {
@@ -134,16 +133,16 @@
       }
     },
     "node_modules/azure-pipelines-task-lib": {
-      "version": "4.13.0",
-      "resolved": "https://registry.npmjs.org/azure-pipelines-task-lib/-/azure-pipelines-task-lib-4.13.0.tgz",
-      "integrity": "sha512-KVguui31If98vgokNepHUxE3/D8UFB4FHV1U6XxjGOkgxxwKxbupC3knVnEiZA/hNl7X+vmj9KrYOx79iwmezQ==",
+      "version": "4.17.3",
+      "resolved": "https://registry.npmjs.org/azure-pipelines-task-lib/-/azure-pipelines-task-lib-4.17.3.tgz",
+      "integrity": "sha512-UxfH5pk3uOHTi9TtLtdDyugQVkFES5A836ZEePjcs3jYyxm3EJ6IlFYq6gbfd6mNBhrM9fxG2u/MFYIJ+Z0cxQ==",
       "license": "MIT",
       "dependencies": {
         "adm-zip": "^0.5.10",
         "minimatch": "3.0.5",
         "nodejs-file-downloader": "^4.11.1",
         "q": "^1.5.1",
-        "semver": "^5.1.0",
+        "semver": "^5.7.2",
         "shelljs": "^0.8.5",
         "uuid": "^3.0.1"
       }
@@ -883,11 +882,15 @@
       }
     },
     "node_modules/semver": {
-      "version": "5.7.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
-      "integrity": "sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==",
+      "version": "7.6.3",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.3.tgz",
+      "integrity": "sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A==",
+      "license": "ISC",
       "bin": {
-        "semver": "bin/semver"
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
       }
     },
     "node_modules/shebang-command": {
@@ -1393,15 +1396,15 @@
       }
     },
     "azure-pipelines-task-lib": {
-      "version": "4.13.0",
-      "resolved": "https://registry.npmjs.org/azure-pipelines-task-lib/-/azure-pipelines-task-lib-4.13.0.tgz",
-      "integrity": "sha512-KVguui31If98vgokNepHUxE3/D8UFB4FHV1U6XxjGOkgxxwKxbupC3knVnEiZA/hNl7X+vmj9KrYOx79iwmezQ==",
+      "version": "4.17.3",
+      "resolved": "https://registry.npmjs.org/azure-pipelines-task-lib/-/azure-pipelines-task-lib-4.17.3.tgz",
+      "integrity": "sha512-UxfH5pk3uOHTi9TtLtdDyugQVkFES5A836ZEePjcs3jYyxm3EJ6IlFYq6gbfd6mNBhrM9fxG2u/MFYIJ+Z0cxQ==",
       "requires": {
         "adm-zip": "^0.5.10",
         "minimatch": "3.0.5",
         "nodejs-file-downloader": "^4.11.1",
         "q": "^1.5.1",
-        "semver": "^5.1.0",
+        "semver": "^7.5.2",
         "shelljs": "^0.8.5",
         "uuid": "^3.0.1"
       }
@@ -1917,9 +1920,9 @@
       }
     },
     "semver": {
-      "version": "5.7.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
-      "integrity": "sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g=="
+      "version": "7.6.3",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.3.tgz",
+      "integrity": "sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A=="
     },
     "shebang-command": {
       "version": "2.0.0",
diff --git a/cxAstScan/package.json b/cxAstScan/package.json
index 2cb72c4..a87c658 100644
--- a/cxAstScan/package.json
+++ b/cxAstScan/package.json
@@ -1,6 +1,9 @@
 {
   "dependencies": {
-    "azure-pipelines-task-lib": "4.13.0",
+    "azure-pipelines-task-lib": "4.17.3",
     "@checkmarxdev/ast-cli-javascript-wrapper-runtime-cli": "1.0.8"
+  },
+  "overrides": {
+    "semver": "^7.5.2"
   }
-}
+}
\ No newline at end of file