diff --git a/CHANGELOG.md b/CHANGELOG.md index 83a60b15607f..9880bd670422 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -36,6 +36,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) - [CVE-2022-1537] Bump grunt from `1.4.1` to `1.5.3` ([#3723](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3723)) - [CVE-2022-0436] Bump grunt from `1.4.1` to `1.5.3` ([#3723](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3723)) - [CVE-2023-26136] Resolve `tough-cookie` to `4.1.3` ([#4682](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/4682)) +- [CVE-2021-23364] Bump `browserslist` from `2.11.3` to `4.21.10` and `autoprefixer` from `7.2.6` to `10.4.15` ([#5023](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/5023)) ### 📈 Features/Enhancements diff --git a/package.json b/package.json index 7a28d6b555d2..8ee0012535f5 100644 --- a/package.json +++ b/package.json @@ -88,6 +88,8 @@ "**/ajv": "^6.12.6", "**/ansi-html": "^0.0.8", "**/ansi-regex": "^5.0.1", + "**/autoprefixer": "^10.4.1", + "**/browserslist": "^4.21.10", "!chromedriver/**/axios": "^0.21.4", "chromedriver/**/axios": "^0.27.2", "**/ejs": "^3.1.6", diff --git a/packages/osd-optimizer/package.json b/packages/osd-optimizer/package.json index 31e107812151..c8a60fc8fab8 100644 --- a/packages/osd-optimizer/package.json +++ b/packages/osd-optimizer/package.json @@ -17,7 +17,7 @@ "@osd/dev-utils": "1.0.0", "@osd/std": "1.0.0", "@osd/ui-shared-deps": "1.0.0", - "autoprefixer": "^9.7.4", + "autoprefixer": "^10.4.1", "clean-webpack-plugin": "^3.0.0", "compression-webpack-plugin": "^4.0.0", "cpy": "^8.0.0", diff --git a/packages/osd-optimizer/postcss.config.js b/packages/osd-optimizer/postcss.config.js index c4f0b6885346..2a2906a7eb84 100644 --- a/packages/osd-optimizer/postcss.config.js +++ b/packages/osd-optimizer/postcss.config.js @@ -31,5 +31,7 @@ */ module.exports = { - plugins: [require('autoprefixer')()], + plugins: [ + /*require('autoprefixer')()*/ + ], }; diff --git a/packages/osd-optimizer/src/integration_tests/__snapshots__/basic_optimization.test.ts.snap b/packages/osd-optimizer/src/integration_tests/__snapshots__/basic_optimization.test.ts.snap index 06f75b8981d6..5b09eae37fd0 100644 --- a/packages/osd-optimizer/src/integration_tests/__snapshots__/basic_optimization.test.ts.snap +++ b/packages/osd-optimizer/src/integration_tests/__snapshots__/basic_optimization.test.ts.snap @@ -78,4 +78,4 @@ exports[`prepares assets for distribution: bar bundle 1`] = `"(function(modules) exports[`prepares assets for distribution: foo async bundle 1`] = `"(window[\\"foo_bundle_jsonpfunction\\"]=window[\\"foo_bundle_jsonpfunction\\"]||[]).push([[1],{3:function(module,__webpack_exports__,__webpack_require__){\\"use strict\\";__webpack_require__.r(__webpack_exports__);__webpack_require__.d(__webpack_exports__,\\"foo\\",(function(){return foo}));function foo(){}}}]);"`; -exports[`prepares assets for distribution: foo bundle 1`] = `"(function(modules){function webpackJsonpCallback(data){var chunkIds=data[0];var moreModules=data[1];var moduleId,chunkId,i=0,resolves=[];for(;i { info running @osd/optimizer │ info initialized, 0 bundles cached │ info starting worker [1 bundle] - │ warn worker stderr Browserslist: caniuse-lite is outdated. Please run: - │ warn worker stderr npx browserslist@latest --update-db + │ warn worker stderr You did not set any plugins, parser, or stringifier. Right now, PostCSS does nothing. Pick plugins for your case on https://www.postcss.parts/ and use them in postcss.config.js. + │ warn worker stderr You did not set any plugins, parser, or stringifier. Right now, PostCSS does nothing. Pick plugins for your case on https://www.postcss.parts/ and use them in postcss.config.js. + │ warn worker stderr You did not set any plugins, parser, or stringifier. Right now, PostCSS does nothing. Pick plugins for your case on https://www.postcss.parts/ and use them in postcss.config.js. + │ warn worker stderr You did not set any plugins, parser, or stringifier. Right now, PostCSS does nothing. Pick plugins for your case on https://www.postcss.parts/ and use them in postcss.config.js. │ succ 1 bundles compiled successfully after