From 74fdd0a891f60170fe64d2514e8a4646b5faa0fd Mon Sep 17 00:00:00 2001 From: "wiz-inc-7d3bcbf2f7[bot]" <180449637+wiz-inc-7d3bcbf2f7[bot]@users.noreply.github.com> Date: Wed, 2 Sep 2026 08:07:25 +0000 Subject: [PATCH] Remediate vulnerabilities --- demo/package.json | 28 +++++++++---------- .../instrumentation-fetch/package.json | 2 +- experimental/instrumentation-xhr/package.json | 2 +- packages/core/package.json | 2 +- packages/react/package.json | 4 +-- packages/web-sdk/package.json | 2 +- packages/web-tracing/package.json | 16 +++++------ 7 files changed, 28 insertions(+), 28 deletions(-) diff --git a/demo/package.json b/demo/package.json index 81e342014..fcc1b5a18 100644 --- a/demo/package.json +++ b/demo/package.json @@ -35,25 +35,25 @@ "quality:circular-deps": "madge --circular ." }, "dependencies": { - "@grafana/faro-core": "^1.12.2", - "@grafana/faro-react": "^1.12.2", - "@grafana/faro-web-sdk": "^1.12.2", - "@grafana/faro-web-tracing": "^1.12.2", + "@grafana/faro-core": "2.8.0", + "@grafana/faro-react": "2.0.0-beta", + "@grafana/faro-web-sdk": "2.0.0-beta", + "@grafana/faro-web-tracing": "2.8.0", "@grpc/grpc-js": "^1.9.0", "@opentelemetry/api": "^1.9.0", - "@opentelemetry/core": "^1.26.0", - "@opentelemetry/exporter-trace-otlp-grpc": "^0.53.0", + "@opentelemetry/core": "2.8.0", + "@opentelemetry/exporter-trace-otlp-grpc": "0.200.0-dev.0", "@opentelemetry/instrumentation": "^0.53.0", - "@opentelemetry/instrumentation-express": "^0.41.1", - "@opentelemetry/instrumentation-http": "^0.53.0", - "@opentelemetry/instrumentation-pg": "^0.43.0", + "@opentelemetry/instrumentation-express": "0.48.0", + "@opentelemetry/instrumentation-http": "0.200.0-dev.0", + "@opentelemetry/instrumentation-pg": "0.52.0", "@opentelemetry/instrumentation-winston": "^0.39.0", - "@opentelemetry/resources": "^1.26.0", - "@opentelemetry/sdk-node": "^0.53.0", - "@opentelemetry/sdk-trace-node": "^1.26.0", + "@opentelemetry/resources": "2.0.0-dev.0", + "@opentelemetry/sdk-node": "0.217.0", + "@opentelemetry/sdk-trace-node": "2.0.0-dev.0", "@opentelemetry/semantic-conventions": "^1.27.0", "@reduxjs/toolkit": "^2.3.0", - "bcrypt": "^5.1.0", + "bcrypt": "6.0.0", "body-parser": "^1.20.1", "bootstrap": "^5.2.3", "compression": "^1.7.4", @@ -73,7 +73,7 @@ "react-hook-form": "^8.0.0-alpha.4", "react-redux": "^8.0.5", "react-router-bootstrap": "^0.26.2", - "react-router-dom": "^6.23.0", + "react-router-dom": "7.0.0-pre.0", "redux": "^5.0.1", "sass": "^1.57.1", "sequelize": "^6.32.1", diff --git a/experimental/instrumentation-fetch/package.json b/experimental/instrumentation-fetch/package.json index bffe84822..1e2877c7d 100644 --- a/experimental/instrumentation-fetch/package.json +++ b/experimental/instrumentation-fetch/package.json @@ -48,7 +48,7 @@ }, "homepage": "https://github.com/grafana/faro-web-sdk", "dependencies": { - "@grafana/faro-core": "^1.12.2" + "@grafana/faro-core": "2.8.0" }, "devDependencies": { "@remix-run/web-fetch": "^4.3.4" diff --git a/experimental/instrumentation-xhr/package.json b/experimental/instrumentation-xhr/package.json index 3acf96aba..86877ee33 100644 --- a/experimental/instrumentation-xhr/package.json +++ b/experimental/instrumentation-xhr/package.json @@ -38,7 +38,7 @@ "quality:circular-deps": "madge --circular ." }, "dependencies": { - "@grafana/faro-core": "^1.12.2" + "@grafana/faro-core": "2.8.0" }, "devDependencies": { "@remix-run/web-fetch": "^4.3.4" diff --git a/packages/core/package.json b/packages/core/package.json index 546bfce65..e14bd40ea 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -52,7 +52,7 @@ }, "dependencies": { "@opentelemetry/api": "^1.9.0", - "@opentelemetry/otlp-transformer": "^0.53.0" + "@opentelemetry/otlp-transformer": "0.200.0-dev.0" }, "publishConfig": { "access": "public" diff --git a/packages/react/package.json b/packages/react/package.json index 02046db47..0fbf5f38a 100644 --- a/packages/react/package.json +++ b/packages/react/package.json @@ -52,8 +52,8 @@ "quality:circular-deps": "madge --circular ." }, "dependencies": { - "@grafana/faro-web-sdk": "^1.12.2", - "@grafana/faro-web-tracing": "^1.12.2", + "@grafana/faro-web-sdk": "2.0.0-beta", + "@grafana/faro-web-tracing": "2.8.0", "hoist-non-react-statics": "^3.3.2" }, "devDependencies": { diff --git a/packages/web-sdk/package.json b/packages/web-sdk/package.json index da51b4a2a..96b508439 100644 --- a/packages/web-sdk/package.json +++ b/packages/web-sdk/package.json @@ -52,7 +52,7 @@ "quality:circular-deps": "madge --circular ." }, "dependencies": { - "@grafana/faro-core": "^1.12.2", + "@grafana/faro-core": "2.8.0", "ua-parser-js": "^1.0.32", "web-vitals": "^4.0.1" }, diff --git a/packages/web-tracing/package.json b/packages/web-tracing/package.json index 0a9b0981d..362e4481a 100644 --- a/packages/web-tracing/package.json +++ b/packages/web-tracing/package.json @@ -52,17 +52,17 @@ "quality:circular-deps": "madge --circular ." }, "dependencies": { - "@grafana/faro-web-sdk": "^1.12.2", + "@grafana/faro-web-sdk": "2.0.0-beta", "@opentelemetry/api": "^1.9.0", "@opentelemetry/context-zone": "1.26.0", - "@opentelemetry/core": "^1.26.0", - "@opentelemetry/exporter-trace-otlp-http": "^0.53.0", + "@opentelemetry/core": "2.8.0", + "@opentelemetry/exporter-trace-otlp-http": "0.200.0-dev.0", "@opentelemetry/instrumentation": "^0.53.0", - "@opentelemetry/instrumentation-fetch": "^0.53.0", - "@opentelemetry/instrumentation-xml-http-request": "^0.53.0", - "@opentelemetry/otlp-transformer": "^0.53.0", - "@opentelemetry/resources": "^1.26.0", - "@opentelemetry/sdk-trace-web": "^1.26.0", + "@opentelemetry/instrumentation-fetch": "0.200.0-dev.0", + "@opentelemetry/instrumentation-xml-http-request": "0.200.0-dev.0", + "@opentelemetry/otlp-transformer": "0.200.0-dev.0", + "@opentelemetry/resources": "2.0.0-dev.0", + "@opentelemetry/sdk-trace-web": "2.0.0-dev.0", "@opentelemetry/semantic-conventions": "^1.27.0" }, "publishConfig": {