From 428cc3170d87be112f0d603237410c35340de094 Mon Sep 17 00:00:00 2001 From: Abhishek Pal Date: Wed, 1 Apr 2026 00:57:27 +0530 Subject: [PATCH 1/3] HDDS-14948. Pin axios version to 1.13.5 Axios 1.14.1 line has been compromised. Even though we use '~' as the semver specifier we should pin this version to complete avoid any way of upgrading to the 1.14.x release lines. This PR pins the version to 1.13.5 --- .../main/resources/webapps/recon/ozone-recon-web/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/package.json b/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/package.json index d58cb895a67d..14db006e7d1a 100644 --- a/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/package.json +++ b/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/package.json @@ -16,7 +16,7 @@ "ag-charts-community": "^7.3.0", "ag-charts-react": "^7.3.0", "antd": "~4.10.3", - "axios": "~1.13.5", + "axios": "1.13.5", "classnames": "^2.3.2", "echarts": "^5.5.0", "filesize": "^6.4.0", From d491c2eca82bff9b1572d75a146174d7d584228a Mon Sep 17 00:00:00 2001 From: Abhishek Pal Date: Wed, 1 Apr 2026 01:09:35 +0530 Subject: [PATCH 2/3] Add lockfile --- .../webapps/recon/ozone-recon-web/pnpm-lock.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/pnpm-lock.yaml b/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/pnpm-lock.yaml index 4ddeeb137f88..2a00f8362393 100644 --- a/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/pnpm-lock.yaml +++ b/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/pnpm-lock.yaml @@ -24,8 +24,8 @@ importers: specifier: ~4.10.3 version: 4.10.3(react-dom@16.14.0(react@16.14.0))(react@16.14.0) axios: - specifier: ~1.13.5 - version: 1.13.6 + specifier: 1.13.5 + version: 1.13.5 classnames: specifier: ^2.3.2 version: 2.5.1 @@ -1178,8 +1178,8 @@ packages: aws4@1.13.2: resolution: {integrity: sha512-lHe62zvbTB5eEABUVi/AwVh0ZKY9rMMDhmm+eeyuuUQbQ3+J+fONVQOZyj+DdrvD4BY33uYniyRJ4UJIaSKAfw==} - axios@1.13.6: - resolution: {integrity: sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==} + axios@1.13.5: + resolution: {integrity: sha512-cz4ur7Vb0xS4/KUN0tPWe44eqxrIu31me+fbang3ijiNscE129POzipJJA6zniq2C/Z6sJCjMimjS8Lc/GAs8Q==} babel-plugin-emotion@10.2.2: resolution: {integrity: sha512-SMSkGoqTbTyUTDeuVuPIWifPdUGkTk1Kf9BWRiXIOIcuyMfsdp2EjeiiFvOzX8NOBvEh/ypKYvUh2rkgAJMCLA==} @@ -5036,7 +5036,7 @@ snapshots: aws4@1.13.2: {} - axios@1.13.6: + axios@1.13.5: dependencies: follow-redirects: 1.15.11 form-data: 4.0.5 From 6386d7ebfccde1ace78cbdc46eb8f8c2e1f37ed7 Mon Sep 17 00:00:00 2001 From: Abhishek Pal Date: Wed, 1 Apr 2026 01:14:43 +0530 Subject: [PATCH 3/3] Update to 1.13.6 --- .../webapps/recon/ozone-recon-web/package.json | 2 +- .../webapps/recon/ozone-recon-web/pnpm-lock.yaml | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/package.json b/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/package.json index 14db006e7d1a..f6bc5a549bf4 100644 --- a/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/package.json +++ b/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/package.json @@ -16,7 +16,7 @@ "ag-charts-community": "^7.3.0", "ag-charts-react": "^7.3.0", "antd": "~4.10.3", - "axios": "1.13.5", + "axios": "1.13.6", "classnames": "^2.3.2", "echarts": "^5.5.0", "filesize": "^6.4.0", diff --git a/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/pnpm-lock.yaml b/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/pnpm-lock.yaml index 2a00f8362393..7ced8062bc9c 100644 --- a/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/pnpm-lock.yaml +++ b/hadoop-ozone/recon/src/main/resources/webapps/recon/ozone-recon-web/pnpm-lock.yaml @@ -24,8 +24,8 @@ importers: specifier: ~4.10.3 version: 4.10.3(react-dom@16.14.0(react@16.14.0))(react@16.14.0) axios: - specifier: 1.13.5 - version: 1.13.5 + specifier: 1.13.6 + version: 1.13.6 classnames: specifier: ^2.3.2 version: 2.5.1 @@ -1178,8 +1178,8 @@ packages: aws4@1.13.2: resolution: {integrity: sha512-lHe62zvbTB5eEABUVi/AwVh0ZKY9rMMDhmm+eeyuuUQbQ3+J+fONVQOZyj+DdrvD4BY33uYniyRJ4UJIaSKAfw==} - axios@1.13.5: - resolution: {integrity: sha512-cz4ur7Vb0xS4/KUN0tPWe44eqxrIu31me+fbang3ijiNscE129POzipJJA6zniq2C/Z6sJCjMimjS8Lc/GAs8Q==} + axios@1.13.6: + resolution: {integrity: sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==} babel-plugin-emotion@10.2.2: resolution: {integrity: sha512-SMSkGoqTbTyUTDeuVuPIWifPdUGkTk1Kf9BWRiXIOIcuyMfsdp2EjeiiFvOzX8NOBvEh/ypKYvUh2rkgAJMCLA==} @@ -5036,7 +5036,7 @@ snapshots: aws4@1.13.2: {} - axios@1.13.5: + axios@1.13.6: dependencies: follow-redirects: 1.15.11 form-data: 4.0.5