From 0c69517e64263ae1d86426effa0f859709be3008 Mon Sep 17 00:00:00 2001 From: "opensearch-trigger-bot[bot]" <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com> Date: Wed, 11 Dec 2024 13:44:36 -0800 Subject: [PATCH] Upgrade JSON11 from 1.1.2 to 2.0.0 (#8603) (#8608) (#9044) * Upgrade JSON11 from 1.1.2 to 2.0.0 * Changeset file for PR #8603 created/updated --------- (cherry picked from commit 2f23e1ef6416768791305012fbeb76887eb4d502) (cherry picked from commit 14a4ba762ec50d6f3d26f28cdc2a607e13710ef2) Signed-off-by: Miki Signed-off-by: github-actions[bot] Co-authored-by: github-actions[bot] Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com> --- changelogs/fragments/8603.yml | 2 ++ package.json | 2 +- packages/osd-std/package.json | 2 +- yarn.lock | 8 ++++---- 4 files changed, 8 insertions(+), 6 deletions(-) create mode 100644 changelogs/fragments/8603.yml diff --git a/changelogs/fragments/8603.yml b/changelogs/fragments/8603.yml new file mode 100644 index 000000000000..38c4ceea441b --- /dev/null +++ b/changelogs/fragments/8603.yml @@ -0,0 +1,2 @@ +fix: +- Upgrade JSON11 from 1.1.2 to 2.0.0 to ensure UTF-8 safety when stringifying JSON data ([#8603](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/8603)) \ No newline at end of file diff --git a/package.json b/package.json index 0737282c4d7c..ca412ce94f99 100644 --- a/package.json +++ b/package.json @@ -106,7 +106,7 @@ "**/jest-config": "npm:@amoo-miki/jest-config@27.5.1", "**/jest-jasmine2": "npm:@amoo-miki/jest-jasmine2@27.5.1", "**/joi/hoek": "npm:@amoo-miki/hoek@6.1.3", - "**/json11": "^1.1.2", + "**/json11": "^2.0.0", "**/json-schema": "^0.4.0", "**/kind-of": ">=6.0.3", "**/load-bmfont/phin": "^3.7.1", diff --git a/packages/osd-std/package.json b/packages/osd-std/package.json index d0d859217c08..d23c5d6f6a8d 100644 --- a/packages/osd-std/package.json +++ b/packages/osd-std/package.json @@ -8,7 +8,7 @@ "private": true, "sideEffects": false, "dependencies": { - "json11": "^1.1.2", + "json11": "^2.0.0", "lodash": "^4.17.21" }, "devDependencies": { diff --git a/yarn.lock b/yarn.lock index a27f4bbe3d3d..d798cdb426fe 100644 --- a/yarn.lock +++ b/yarn.lock @@ -11223,10 +11223,10 @@ json-stringify-safe@5.0.1, json-stringify-safe@^5.0.1: resolved "https://registry.yarnpkg.com/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz#1296a2d58fd45f19a0f6ce01d65701e2c735b6eb" integrity sha512-ZClg6AaYvamvYEE82d3Iyd3vSSIjQ+odgjaTzRuO3s7toCdFKczob2i0zCh7JE8kWn17yvAWhUVxvqGwUalsRA== -json11@^1.0.4, json11@^1.1.2: - version "1.1.2" - resolved "https://registry.yarnpkg.com/json11/-/json11-1.1.2.tgz#35ffd3ee5073b0cc09ef826b0a0dc005ebef2b5b" - integrity sha512-5r1RHT1/Gr/jsI/XZZj/P6F11BKM8xvTaftRuiLkQI9Z2PFDukM82Ysxw8yDszb3NJP/NKnRlSGmhUdG99rlBw== +json11@^1.0.4, json11@^2.0.0: + version "2.0.0" + resolved "https://registry.yarnpkg.com/json11/-/json11-2.0.0.tgz#06c4ad0a40b50c5de99a87f6d3028593137e5641" + integrity sha512-VuKJKUSPEJape+daTm70Nx7vdcdorf4S6LCyN2z0jUVH4UrQ4ftXo2kC0bnHpCREmxHuHqCNVPA75BjI3CB6Ag== json5@^1.0.1: version "1.0.2"