From 7ab085526d7463d460a97eb6812a5ca62c226ced Mon Sep 17 00:00:00 2001
From: "anna.shakhova" <68295572+anna-shakhova@users.noreply.github.com>
Date: Thu, 8 Oct 2026 12:01:17 +0200
Subject: [PATCH] chore(security): override compression and
 http-cache-semantics in sbom package

---
 packages/sbom/pnpm-lock.yaml      | 26 ++++++++++++++++++--------
 packages/sbom/pnpm-workspace.yaml |  2 ++
 pnpm-lock.yaml                    |  2 +-
 pnpm-workspace.yaml               |  2 +-
 4 files changed, 22 insertions(+), 10 deletions(-)

diff --git a/packages/sbom/pnpm-lock.yaml b/packages/sbom/pnpm-lock.yaml
index fa8fe94c5048..5911d9e48edb 100644
--- a/packages/sbom/pnpm-lock.yaml
+++ b/packages/sbom/pnpm-lock.yaml
@@ -10,6 +10,8 @@ overrides:
   body-parser@>=2.0.0 <2.3.0: ^2.3.0
   fast-uri@>=3.0.0 <3.1.8: ^3.1.8
   undici@>=7.0.0 <7.29.1: ^7.29.1
+  compression@<1.8.2: ^1.8.2
+  http-cache-semantics@<=4.2.0: ^4.3.0
 
 importers:
 
@@ -304,8 +306,8 @@ packages:
     resolution: {integrity: sha512-AF3r7P5dWxL8MxyITRMlORQNaOA2IkAFaTr4k7BUumjPtRpGDTZpl0Pb1XCO6JeDCBdp126Cgs9sMxqSjgYyRg==}
     engines: {node: '>= 0.6'}
 
-  compression@1.8.1:
-    resolution: {integrity: sha512-9mAqGPHLakhCLeNyxPkK4xVo746zQ/czLH1Ky+vkitMnWfWZps8r0qXuwhwizagCRttsL4lfG4pIOvaWLpAP0w==}
+  compression@1.8.2:
+    resolution: {integrity: sha512-o8vI5RE5A6EVVOd9o41jKp41aJom+QTEO/Bx8MYNjexMo/Bv2WOjUfZr+aL0WnYSgymUy6zeguqLTsIhV0gMvQ==}
     engines: {node: '>= 0.8.0'}
 
   connect@3.7.0:
@@ -348,6 +350,10 @@ packages:
     resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
     engines: {node: '>= 0.8'}
 
+  destroy@1.2.0:
+    resolution: {integrity: sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==}
+    engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
+
   dom-serializer@2.0.0:
     resolution: {integrity: sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==}
 
@@ -483,8 +489,8 @@ packages:
   htmlparser2@10.1.0:
     resolution: {integrity: sha512-VTZkM9GWRAtEpveh7MSF6SjjrpNVNNVJfFup7xTY3UpFtm67foy9HDVXneLtFVt4pMz5kZtgNcvCniNFb1hlEQ==}
 
-  http-cache-semantics@4.2.0:
-    resolution: {integrity: sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==}
+  http-cache-semantics@4.3.0:
+    resolution: {integrity: sha512-M5t5LlJpS1UHMjvwRQVdFHvPISGeLAxNcrWuJkeGh0KxsqCHZ1O3NXZU/8x7cD0BDcGW8kapxMKTvwlqrNkHkA==}
 
   http-errors@2.0.1:
     resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
@@ -1051,7 +1057,7 @@ snapshots:
       '@cdxgen/cdxgen-plugins-bin-windows-amd64': 2.3.0
       '@cdxgen/cdxgen-plugins-bin-windows-arm64': 2.3.0
       body-parser: 2.3.0
-      compression: 1.8.1
+      compression: 1.8.2
       connect: 3.7.0
       jsonata: 2.2.1
     transitivePeerDependencies:
@@ -1197,7 +1203,7 @@ snapshots:
     dependencies:
       '@types/http-cache-semantics': 4.2.0
       get-stream: 9.0.1
-      http-cache-semantics: 4.2.0
+      http-cache-semantics: 4.3.0
       keyv: 5.6.0
       mimic-response: 4.0.0
       normalize-url: 8.1.1
@@ -1255,11 +1261,12 @@ snapshots:
       mime-db: 1.54.0
     optional: true
 
-  compression@1.8.1:
+  compression@1.8.2:
     dependencies:
       bytes: 3.1.2
       compressible: 2.0.18
       debug: 2.6.9
+      destroy: 1.2.0
       negotiator: 0.6.4
       on-headers: 1.1.0
       safe-buffer: 5.2.1
@@ -1307,6 +1314,9 @@ snapshots:
   depd@2.0.0:
     optional: true
 
+  destroy@1.2.0:
+    optional: true
+
   dom-serializer@2.0.0:
     dependencies:
       domelementtype: 2.3.0
@@ -1471,7 +1481,7 @@ snapshots:
       domutils: 3.2.2
       entities: 7.0.1
 
-  http-cache-semantics@4.2.0: {}
+  http-cache-semantics@4.3.0: {}
 
   http-errors@2.0.1:
     dependencies:
diff --git a/packages/sbom/pnpm-workspace.yaml b/packages/sbom/pnpm-workspace.yaml
index 4d9ed448708f..bf613be32690 100644
--- a/packages/sbom/pnpm-workspace.yaml
+++ b/packages/sbom/pnpm-workspace.yaml
@@ -10,3 +10,5 @@ overrides:
   body-parser@>=2.0.0 <2.3.0: ^2.3.0
   fast-uri@>=3.0.0 <3.1.8: ^3.1.8
   undici@>=7.0.0 <7.29.1: ^7.29.1
+  compression@<1.8.2: ^1.8.2
+  http-cache-semantics@<=4.2.0: ^4.3.0
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6ad1b0348d7a..ff5570dc22b5 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -209,7 +209,7 @@ overrides:
   axios@>=1.0.0 <1.20.0: ^1.20.0
   compression@<1.8.2: ^1.8.2
   dompurify@>=3.4.13 <=3.4.15: ^3.4.16
-  http-cache-semantics@<=4.2.0: ^4.2.1
+  http-cache-semantics@<=4.2.0: ^4.3.0
   nx@>=14.0.0 <22.7.10: ^22.7.10
   pbkdf2@<=3.1.6: ^3.1.7
   piscina@>=5.0.0 <5.3.2: ^5.3.2
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 2916f8efb0f7..d2be56852ad8 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -54,7 +54,7 @@ overrides:
   axios@>=1.0.0 <1.20.0: ^1.20.0
   compression@<1.8.2: ^1.8.2
   dompurify@>=3.4.13 <=3.4.15: ^3.4.16
-  http-cache-semantics@<=4.2.0: ^4.2.1
+  http-cache-semantics@<=4.2.0: ^4.3.0
   nx@>=14.0.0 <22.7.10: ^22.7.10
   pbkdf2@<=3.1.6: ^3.1.7
   piscina@>=5.0.0 <5.3.2: ^5.3.2