[CVE-2024-39338] Bump axios from 1.7.2 to 1.7.7

Bump chokidar from 3.5.3 to 3.6.0 [SNYK-JS-MOCHA-2863123] Bump mocha from 10.2.0 to 10.7.3 [CVE-2024-42459][CVE-2024-42460][CVE-2024-42461] Bump elliptic from 6.5.4 to 6.5.7 Remove blanket override of `minimatch` Signed-off-by: Miki <[email protected]>
AMoo-Miki · Oct 11, 2024 · 5c875d4 · 5c875d4
1 parent 9434dc2
commit 5c875d4
Show file tree

Hide file tree

Showing 3 changed files with 174 additions and 135 deletions.
diff --git a/changelogs/fragments/8490.yml b/changelogs/fragments/8490.yml
@@ -0,0 +1,7 @@
+security:
+- [CVE-2024-39338] Bump axios from 1.7.2 to 1.7.7 ([#8490](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/8490))
+- [SNYK-JS-MOCHA-2863123] Bump mocha from 10.1.0 to 10.7.3 ([#8490](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/8490))
+- [CVE-2024-42459][CVE-2024-42460][CVE-2024-42461] Bump elliptic from 6.5.4 to 6.5.7 ([#8490](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/8490))
+
+chore:
+- Bump chokidar from 3.5.3 to 3.6.0 ([#8490](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/8490))
diff --git a/package.json b/package.json
@@ -124,7 +124,6 @@
     "**/typescript": "4.0.2",
     "**/unset-value": "^2.0.1",
     "**/watchpack-chokidar2/chokidar": "^3.5.3",
-    "**/minimatch": "^3.0.5",
     "**/eslint-plugin-mocha-next/mocha": "npm:mocha@^10.1.0",
     "**/xml2js": "^0.5.0",
     "**/yaml": "^2.2.2",