From 0ce33ee72bf529a351d193093f3918a9df384a99 Mon Sep 17 00:00:00 2001 From: Venkata Charan Sunku Date: Thu, 8 Oct 2026 20:40:09 +0530 Subject: [PATCH] OCPBUGS-115228: Bump immutable pkg for 3.x series to address CVE-2026-59879 Signed-off-by: Venkata Charan Sunku --- package-lock.json | 28 ++++++++++++++-------------- package.json | 6 ++---- 2 files changed, 16 insertions(+), 18 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9015799e..005fec28 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2709,16 +2709,6 @@ "typescript": ">=4.5.5" } }, - "node_modules/@openshift-console/dynamic-plugin-sdk/node_modules/immutable": { - "version": "3.8.3", - "resolved": "https://registry.npmjs.org/immutable/-/immutable-3.8.3.tgz", - "integrity": "sha512-AUY/VyX0E5XlibOmWt10uabJzam1zlYjwiEgQSDc5+UIkFNaF9WM0JxXKaNMGf+F/ffUF+7kRKXM9A7C0xXqMg==", - "dev": true, - "license": "MIT", - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/@openshift/dynamic-plugin-sdk": { "version": "5.0.1", "resolved": "https://registry.npmjs.org/@openshift/dynamic-plugin-sdk/-/dynamic-plugin-sdk-5.0.1.tgz", @@ -11265,11 +11255,14 @@ } }, "node_modules/immutable": { - "version": "5.1.8", - "resolved": "https://registry.npmjs.org/immutable/-/immutable-5.1.8.tgz", - "integrity": "sha512-TM5YqrGeTsVIPPpILzeqZ8D2Zc2TvNgSDi88zPF2a4cyqQdWV/wVWBDRDbNzzrLeRWScrFcOX9lW2iX6GOtUDw==", + "version": "3.8.4", + "resolved": "https://registry.npmjs.org/immutable/-/immutable-3.8.4.tgz", + "integrity": "sha512-ZQv17KolYrYmsDoDB8N67zhIKsNi9mGYlk96y/yuxyAqJB2hLzSGSM7k/sB0/ZvO4kx27U9+fBeD/XlLGh/uXQ==", "dev": true, - "license": "MIT" + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } }, "node_modules/import-fresh": { "version": "3.3.1", @@ -17780,6 +17773,13 @@ "node": ">=0.10" } }, + "node_modules/sass/node_modules/immutable": { + "version": "5.1.8", + "resolved": "https://registry.npmjs.org/immutable/-/immutable-5.1.8.tgz", + "integrity": "sha512-TM5YqrGeTsVIPPpILzeqZ8D2Zc2TvNgSDi88zPF2a4cyqQdWV/wVWBDRDbNzzrLeRWScrFcOX9lW2iX6GOtUDw==", + "dev": true, + "license": "MIT" + }, "node_modules/sass/node_modules/readdirp": { "version": "4.1.2", "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-4.1.2.tgz", diff --git a/package.json b/package.json index 9c2e3427..9071d880 100644 --- a/package.json +++ b/package.json @@ -98,10 +98,8 @@ "overrides": { "@parcel/watcher": "2.5.1", "lodash": "4.18.1", - "immutable": "5.1.8", - "@openshift-console/dynamic-plugin-sdk": { - "immutable": "3.8.3" - }, + "immutable@3": "3.8.4", + "immutable@5": "5.1.8", "qs": "6.14.2", "@remix-run/router": "1.23.2", "js-yaml": "5.2.2",