From e9fcd295d33855618975549b304d0647c4bb842f Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 17:12:02 +0000 Subject: [PATCH 1/2] Update dependency @types/yargs to v17 --- docker/client/rundeck-cli/package-lock.json | 8 ++++---- docker/client/rundeck-cli/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/docker/client/rundeck-cli/package-lock.json b/docker/client/rundeck-cli/package-lock.json index 01b8ec2..862f4ff 100644 --- a/docker/client/rundeck-cli/package-lock.json +++ b/docker/client/rundeck-cli/package-lock.json @@ -24,7 +24,7 @@ }, "devDependencies": { "@types/node-fetch": "^2.5.7", - "@types/yargs": "^15.0.4" + "@types/yargs": "^17.0.0" } }, "node_modules/@types/js-yaml": { @@ -63,9 +63,9 @@ "integrity": "sha512-CuEQpGSYKvHr3SQ7C7WkluLg9CFjVORbn8YFRsQ5u6mqGbZVfSOv03ic9t95HtZuMchnlNqnIsQGFOpxqdhjTQ==" }, "node_modules/@types/yargs": { - "version": "15.0.20", - "resolved": "https://registry.npmjs.org/@types/yargs/-/yargs-15.0.20.tgz", - "integrity": "sha512-KIkX+/GgfFitlASYCGoSF+T4XRXhOubJLhkLVtSfsRTe9jWMmuM2g28zQ41BtPTG7TRBb2xHW+LCNVE9QR/vsg==", + "version": "17.0.35", + "resolved": "https://registry.npmjs.org/@types/yargs/-/yargs-17.0.35.tgz", + "integrity": "sha512-qUHkeCyQFxMXg79wQfTtfndEC+N9ZZg76HJftDJp+qH2tV7Gj4OJi7l+PiWwJ+pWtW8GwSmqsDj/oymhrTWXjg==", "dev": true, "license": "MIT", "dependencies": { diff --git a/docker/client/rundeck-cli/package.json b/docker/client/rundeck-cli/package.json index ddbf471..3e5b579 100644 --- a/docker/client/rundeck-cli/package.json +++ b/docker/client/rundeck-cli/package.json @@ -24,7 +24,7 @@ }, "devDependencies": { "@types/node-fetch": "^2.5.7", - "@types/yargs": "^15.0.4" + "@types/yargs": "^17.0.0" }, "overrides": { "axios": "1.18.1", From d193bea8325ee6eeb219d38cbe993ff39a0b54da Mon Sep 17 00:00:00 2001 From: Rundeck CI Date: Thu, 23 Jul 2026 10:14:27 -0700 Subject: [PATCH 2/2] additional CVE fixes --- docker/.env | 2 +- docker/client/rundeck-cli/package-lock.json | 50 ++++----------------- docker/client/rundeck-cli/package.json | 5 ++- 3 files changed, 13 insertions(+), 44 deletions(-) diff --git a/docker/.env b/docker/.env index f77498f..48d1a69 100644 --- a/docker/.env +++ b/docker/.env @@ -1,4 +1,4 @@ ## Set pro options if applicable -RUNDECK_IMAGE=rundeck/rundeck:4.10.1 +RUNDECK_IMAGE=rundeck/rundeck:6.0.1 RUNDECK_USER=admin RUNDECK_PASSWORD=admin diff --git a/docker/client/rundeck-cli/package-lock.json b/docker/client/rundeck-cli/package-lock.json index 862f4ff..58743a4 100644 --- a/docker/client/rundeck-cli/package-lock.json +++ b/docker/client/rundeck-cli/package-lock.json @@ -12,7 +12,6 @@ "@types/js-yaml": "^4.0.0", "@types/node": "^24.0.0", "dotenv": "^17.0.0", - "form-data": "^4.0.0", "js-yaml": "^5.0.0", "node-fetch": "^3.0.0", "ts-node": "^8.10.1", @@ -757,25 +756,6 @@ "integrity": "sha512-KigOCHcocU3XODJxsu8i/j8T9tzT4adHiecwORRQ0ZZFcp7ahwXuRU1m+yuO90C5ZUyGeGfocHDI14M3L3yDAQ==", "license": "MIT" }, - "node_modules/safe-buffer": { - "version": "5.2.1", - "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", - "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/feross" - }, - { - "type": "patreon", - "url": "https://www.patreon.com/feross" - }, - { - "type": "consulting", - "url": "https://feross.org/support" - } - ] - }, "node_modules/sax": { "version": "1.4.1", "resolved": "https://registry.npmjs.org/sax/-/sax-1.4.1.tgz", @@ -908,22 +888,6 @@ "@types/node": "*" } }, - "node_modules/ts-rundeck/node_modules/form-data": { - "version": "2.5.5", - "resolved": "https://registry.npmjs.org/form-data/-/form-data-2.5.5.tgz", - "integrity": "sha512-jqdObeR2rxZZbPSGL+3VckHMYtu+f9//KXBsVny6JSX/pa38Fy+bGjuG8eW/H6USNQWhLi8Num++cU2yOCNz4A==", - "dependencies": { - "asynckit": "^0.4.0", - "combined-stream": "^1.0.8", - "es-set-tostringtag": "^2.1.0", - "hasown": "^2.0.2", - "mime-types": "^2.1.35", - "safe-buffer": "^5.2.1" - }, - "engines": { - "node": ">= 0.12" - } - }, "node_modules/tsconfig-paths": { "version": "3.15.0", "resolved": "https://registry.npmjs.org/tsconfig-paths/-/tsconfig-paths-3.15.0.tgz", @@ -986,12 +950,16 @@ } }, "node_modules/uuid": { - "version": "3.4.0", - "resolved": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz", - "integrity": "sha512-HjSDRw6gZE5JMggctHBcjVak08+KEVhSIiDzFnT9S9aegmp85S/bReBVTb4QTFaRNptJ9kuYaNhnbNEOkbKb/A==", - "deprecated": "Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.", + "version": "11.1.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz", + "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==", + "funding": [ + "https://github.com/sponsors/broofa", + "https://github.com/sponsors/ctavan" + ], + "license": "MIT", "bin": { - "uuid": "bin/uuid" + "uuid": "dist/esm/bin/uuid" } }, "node_modules/web-streams-polyfill": { diff --git a/docker/client/rundeck-cli/package.json b/docker/client/rundeck-cli/package.json index 3e5b579..6d8b770 100644 --- a/docker/client/rundeck-cli/package.json +++ b/docker/client/rundeck-cli/package.json @@ -12,7 +12,6 @@ "@types/js-yaml": "^4.0.0", "@types/node": "^24.0.0", "dotenv": "^17.0.0", - "form-data": "^4.0.0", "js-yaml": "^5.0.0", "node-fetch": "^3.0.0", "ts-node": "^8.10.1", @@ -32,6 +31,8 @@ "tough-cookie": "4.1.4", "xml-js": "1.6.11", "xml2js": "0.6.2", - "diff": "9.0.0" + "diff": "9.0.0", + "uuid": "11.1.1", + "form-data": "^4.0.6" } }