mirror of
https://github.com/tiennm99/litellm.git
synced 2026-06-17 22:48:35 +00:00
Krish Dholakia
e7714f0ce6
* fix(docker): bump tar/minimatch/pypdf for CVE fixes + harden SBOM patching
- Bump tar 7.5.8→7.5.10, minimatch 10.2.1→10.2.4, pypdf 6.6.2→6.7.3
- Add sed-based SBOM metadata patching with properly indented find/sed
- Add npm package manager cleanup (apk del / apt-get purge) to remove
stale SBOM entries from image scanners
- Scope || true to only apk del via brace grouping { ... || true; }
- Guard npm root -g with non-empty assertion to prevent silent failures
- Scope minimatch sed regex to ^10.x to avoid matching other major versions
Addresses: CVE-2026-27903, CVE-2026-27904, GHSA-qffp-2rhf-9h96, CVE-2026-27888
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix(docker): scope find to /usr/local/lib /usr/lib, drop autoremove
- Replace `find /` with `find /usr/local/lib /usr/lib` to avoid
traversing /proc, /sys, /dev during SBOM metadata patching
- Remove `apt-get autoremove -y` from Debian-based Dockerfiles to
prevent nodejs from being removed as an auto-installed dependency
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
43 lines
1.2 KiB
JSON
43 lines
1.2 KiB
JSON
{
|
|
"name": "ui-unit-tests",
|
|
"version": "1.0.0",
|
|
"scripts": {
|
|
"test": "jest",
|
|
"test:watch": "jest --watch"
|
|
},
|
|
"devDependencies": {
|
|
"@testing-library/react": "^14.0.0",
|
|
"@testing-library/jest-dom": "^6.0.0",
|
|
"@types/jest": "^29.5.0",
|
|
"@types/react": "^18.2.0",
|
|
"@types/react-dom": "^18.2.0",
|
|
"identity-obj-proxy": "^3.0.0",
|
|
"jest": "^29.5.0",
|
|
"jest-environment-jsdom": "^29.5.0",
|
|
"ts-jest": "^29.1.0",
|
|
"typescript": "^5.0.0"
|
|
},
|
|
"dependencies": {
|
|
"antd": "^5.12.5",
|
|
"@ant-design/icons": "^5.0.0",
|
|
"react": "^18.2.0",
|
|
"react-dom": "^18.2.0"
|
|
},
|
|
"overrides": {
|
|
"glob": ">=11.1.0",
|
|
"tar": ">=7.5.10",
|
|
"minimatch": ">=10.2.4",
|
|
"diff": ">=8.0.3",
|
|
"@isaacs/brace-expansion": ">=5.0.1",
|
|
"@babel/traverse": ">=7.23.2",
|
|
"ws": ">=7.5.10",
|
|
"http-proxy-middleware": ">=2.0.9",
|
|
"tar-fs": ">=2.1.4",
|
|
"webpack-dev-middleware": ">=5.3.4",
|
|
"braces": ">=3.0.3",
|
|
"axios": ">=0.30.2",
|
|
"webpack": ">=5.94.0",
|
|
"serve-static": ">=1.16.0",
|
|
"path-to-regexp": ">=0.1.12"
|
|
}
|
|
} |