chore(deps): bump kumahq/kuma-gui to 116404ca118db5d874a88b52200579b0…

…f5972c1b

Bumps kumahq/kuma-gui to version [master@116404ca118db5d874a88b52200579b0f5972c1b](https://github.com/kumahq/kuma-gui/tree/116404ca118db5d874a88b52200579b0f5972c1b)

Signed-off-by: GitHub <[email protected]>

app/kuma-ui/pkg/resources/data/mockServiceWorker.js

@@ -8,8 +8,8 @@
  * - Please do NOT serve this file on production.
  */
 
-const PACKAGE_VERSION = '2.6.0'
-const INTEGRITY_CHECKSUM = '07a8241b182f8a246a7cd39894799a9e'
+const PACKAGE_VERSION = '2.6.4'
+const INTEGRITY_CHECKSUM = 'ca7800994cc8bfb5eb961e037c877074'
 const IS_MOCKED_RESPONSE = Symbol('isMockedResponse')
 const activeClientIds = new Set()
 
@@ -192,12 +192,14 @@ async function getResponse(event, client, requestId) {
   const requestClone = request.clone()
 
   function passthrough() {
-    const headers = Object.fromEntries(requestClone.headers.entries())
-
-    // Remove internal MSW request header so the passthrough request
-    // complies with any potential CORS preflight checks on the server.
-    // Some servers forbid unknown request headers.
-    delete headers['x-msw-intention']
+    // Cast the request headers to a new Headers instance
+    // so the headers can be manipulated with.
+    const headers = new Headers(requestClone.headers)
+
+    // Remove the "accept" header value that marked this request as passthrough.
+    // This prevents request alteration and also keeps it compliant with the
+    // user-defined CORS policies.
+    headers.delete('accept', 'msw/passthrough')
 
     return fetch(requestClone, { headers })
   }

app/kuma-ui/pkg/resources/kuma-gui-cve-report.json

@@ -153,6 +153,6 @@
    "checksum": "sha256:95b9ee56ee04133b02c73090a4a543f642d3b53333a3546ff7e67e11dc067070",
    "error": null
   },
-  "timestamp": "2024-11-12T10:50:57.6420155Z"
+  "timestamp": "2024-11-12T11:31:12.818582449Z"
  }
 }