devspace

devspace copied to clipboard

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /ui

1

Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.3.2. Changelog Sourced from node-forge's changelog. 1.3.2 - 2025-11-25 Security HIGH: ASN.1 Validator Desynchronization An Interpretation Conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and below...

dependabot[bot]

chore(deps-dev): bump min-document from 2.19.0 to 2.19.2 in /ui

1

Bumps [min-document](https://github.com/Raynos/min-document) from 2.19.0 to 2.19.2. Commits 0d14150 2.19.2 49c2e06 Merge pull request #56 from wasabina67/fix/prototype-pollution-removeAttribut... 9666461 Fix prototype pollution vulnerability in removeAttributeNS 4490b40 2.19.1 2cd5871 update ignore fe32e8d Merge...

dependabot[bot]

Helm v3 dependency downloader use very old version

1

https://github.com/loft-sh/utils/blob/main/pkg/downloader/commands/helm_v3.go has version 3.12.3 (very old), but the currently used version in DevSpace is even older (v3.11.1).

abh

chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.45.0

1

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.40.0 to 0.45.0. Commits 4e0068c go.mod: update golang.org/x dependencies e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs f91f7a7 ssh/agent: prevent panic on malformed...

dependabot[bot]

chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 in /examples/kind

1

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.12. Release notes Sourced from brace-expansion's releases. v1.1.12 pkg: publish on tag 1.x c460dbd fmt ccb8ac6 Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)...

dependabot[bot]

chore(deps): bump ts-jest from 24.3.0 to 29.4.5 in /ui

1

Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 24.3.0 to 29.4.5. Release notes Sourced from ts-jest's releases. v29.4.5 Please refer to CHANGELOG.md for details. v29.4.4 Please refer to CHANGELOG.md for details. v29.4.3 Please refer to...

dependabot[bot]

chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 in /examples/quickstart

1

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.12. Release notes Sourced from brace-expansion's releases. v1.1.12 pkg: publish on tag 1.x c460dbd fmt ccb8ac6 Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)...

dependabot[bot]

chore(deps): bump js-yaml from 4.1.0 to 4.1.1 in /ui

1

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. Changelog Sourced from js-yaml's changelog. [4.1.1] - 2025-11-12 Security Fix prototype pollution issue in yaml merge (<<) operator. Commits cc482e7 4.1.1 released 50968b8 dist...

dependabot[bot]

[Snyk] Security upgrade redocusaurus from 1.6.3 to 2.0.0

1

 ### Snyk has created this PR to fix 1 vulnerabilities in the yarn dependencies of this project. #### Snyk changed the following file(s): - `docs/package.json` - `docs/yarn.lock` #### Note...

lizardruss

[Snyk] Fix for 1 vulnerabilities

1

 ### Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project. #### Snyk changed the following file(s): - `ui/package.json` - `ui/package-lock.json` #### Vulnerabilities...

caniszczyk