From 9abdfec5cca961c18343b63463f729a84f582098 Mon Sep 17 00:00:00 2001 From: Sergio Moya <1083296+smoya@users.noreply.github.com> Date: Wed, 12 Feb 2025 20:10:04 +0100 Subject: [PATCH 1/2] feat!(multi-parser): force json-path-plus to be ^10.0.7 due to security bugfix --- .changeset/six-boats-exercise.md | 5 +++++ packages/multi-parser/package.json | 11 +++++++++++ 2 files changed, 16 insertions(+) create mode 100644 .changeset/six-boats-exercise.md diff --git a/.changeset/six-boats-exercise.md b/.changeset/six-boats-exercise.md new file mode 100644 index 000000000..60155977c --- /dev/null +++ b/.changeset/six-boats-exercise.md @@ -0,0 +1,5 @@ +--- +"@asyncapi/multi-parser": major +--- + +Ensure jsonpath-plus version is ^10.0.7 due to a security fixed bug diff --git a/packages/multi-parser/package.json b/packages/multi-parser/package.json index 4755b5087..17772629d 100644 --- a/packages/multi-parser/package.json +++ b/packages/multi-parser/package.json @@ -64,5 +64,16 @@ "ts-loader": "^9.3.1", "ts-node": "^10.9.1", "typescript": "^4.8.2" + }, + "engines": { + "node": ">=18" + }, + "overrides": { + "parserapiv1": { + "jsonpath-plus": "^10.0.7" + }, + "parserapiv2": { + "jsonpath-plus": "^10.0.7" + } } } From 769ab822ab72f631b3e799cc5f79f394a50056ab Mon Sep 17 00:00:00 2001 From: Sergio Moya <1083296+smoya@users.noreply.github.com> Date: Wed, 12 Feb 2025 20:18:36 +0100 Subject: [PATCH 2/2] ci: update changeset --- .changeset/six-boats-exercise.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.changeset/six-boats-exercise.md b/.changeset/six-boats-exercise.md index 60155977c..e6dc85b01 100644 --- a/.changeset/six-boats-exercise.md +++ b/.changeset/six-boats-exercise.md @@ -2,4 +2,7 @@ "@asyncapi/multi-parser": major --- -Ensure jsonpath-plus version is ^10.0.7 due to a security fixed bug + +Ensure jsonpath-plus version is ^10.0.7 due to a security fixed bug. +The reason this is a major release is because we now require Node +v18 or greater since this required jsonpath-plus version requires it.