Skip to content

Full rush update and override for vulnerable minimatch versions#417

Merged
ben-polinsky merged 4 commits intomasterfrom
gytis/audit-issues
Feb 26, 2026
Merged

Full rush update and override for vulnerable minimatch versions#417
ben-polinsky merged 4 commits intomasterfrom
gytis/audit-issues

Conversation

@GytisCepk
Copy link
Contributor

No description provided.

…ush.json

�[1mRush Multi-Project Build Tool 5.112.2�[22m�[36m - https://rushjs.io�[39m
Node.js version is 22.22.0 (LTS)

Starting "rush update"

�[1mFound files in the "common/git-hooks" folder.�[22m
Successfully installed these Git hook scripts: pre-commit

Trying to acquire lock for pnpm-7.32.2
Acquired lock for pnpm-7.32.2
Found pnpm version 7.32.2 in /Users/gytis.cepkauskas/.rush/node-v22.22.0/pnpm-7.32.2

Symlinking "/Users/gytis.cepkauskas/repos/viewer/common/temp/pnpm-local"
  --> "/Users/gytis.cepkauskas/.rush/node-v22.22.0/pnpm-7.32.2"
Transforming /Users/gytis.cepkauskas/repos/viewer/common/config/rush/.npmrc
  --> "/Users/gytis.cepkauskas/repos/viewer/common/temp/.npmrc"

�[1mUpdating workspace files in /Users/gytis.cepkauskas/repos/viewer/common/temp�[22m
Copying "/Users/gytis.cepkauskas/repos/viewer/common/config/rush/pnpm-lock.yaml"
  --> "/Users/gytis.cepkauskas/repos/viewer/common/temp/pnpm-lock.yaml"
Copying "/Users/gytis.cepkauskas/repos/viewer/common/config/rush/pnpm-lock.yaml"
  --> "/Users/gytis.cepkauskas/repos/viewer/common/temp/pnpm-lock-preinstall.yaml"

�[1mChecking installation in "/Users/gytis.cepkauskas/repos/viewer/common/temp"�[22m

�[1mRunning "pnpm install" in /Users/gytis.cepkauskas/repos/viewer/common/temp�[22m

Scope: all 11 workspace projects
Progress: resolved �[96m0�[39m, reused �[96m1�[39m, downloaded �[96m0�[39m, added �[96m0�[39m
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m rimraf@3.0.2
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m @itwin/itwinui-css@1.12.10
../../packages/modules/viewer-react      | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m lodash.isequal@4.5.0
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m glob@10.5.0
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m rimraf@2.7.1
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m 7zip@0.0.6
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m glob@7.2.3
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m @itwin/itwinui-react@2.12.26
../../packages/modules/viewer-react      | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m whatwg-encoding@3.1.1
Progress: resolved �[96m484�[39m, reused �[96m451�[39m, downloaded �[96m0�[39m, added �[96m0�[39m
../scripts                               | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m @babel/plugin-proposal-nullish-coalescing-operator@7.18.6
../scripts                               | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m @babel/plugin-proposal-class-properties@7.18.6
../scripts                               | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m @babel/plugin-proposal-private-methods@7.18.6
../scripts                               | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m @babel/plugin-proposal-numeric-separator@7.18.6
../scripts                               | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m @babel/plugin-proposal-private-property-in-object@7.21.11
../scripts                               | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m @babel/plugin-proposal-optional-chaining@7.21.0
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m glob@11.1.0
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m inflight@1.0.6
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m @types/base64-js@1.5.0
.../modules/test-local-extension         | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m rollup-plugin-inject@3.0.2
../../packages/modules/web-viewer-react  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m source-map-resolve@0.5.3
../../packages/modules/web-viewer-react  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m urix@0.1.0
../../packages/modules/web-viewer-react  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m source-map-url@0.4.1
../../packages/modules/web-viewer-react  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m resolve-url@0.2.1
.../modules/test-local-extension         | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m sourcemap-codec@1.4.8
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m boolean@3.2.0
../../packages/apps/desktop-viewer-test  | �[43m�[30m WARN �[39m�[49m �[31mdeprecated�[39m node-domexception@1.0.0
Progress: resolved �[96m1614�[39m, reused �[96m1537�[39m, downloaded �[96m0�[39m, added �[96m0�[39m, done
�[43m�[30m WARN �[39m�[49m Issues with peer dependencies found
�[37m../../packages/apps/desktop-viewer-test�[39m
└─┬ @itwin/imodel-browser-react �[90m1.3.1�[39m
  ├── �[93m✕ unmet peer�[39m react@"^16.13.0 || ^17.0.2": found 18.3.1
  └── �[93m✕ unmet peer�[39m react-dom@"^16.13.0 || ^17.0.2": found 18.3.1

�[37m../../packages/modules/desktop-viewer-react�[39m
└─┬ @itwin/unified-selection-react �[90m1.0.5�[39m
  └── �[31m✕ missing peer�[39m @itwin/unified-selection@^1.3.0
Peer dependencies that should be installed:
  @itwin/unified-selection@^1.3.0

�[37m../../packages/modules/test-local-extension�[39m
└─┬ @itwin/core-extension �[90m5.6.1�[39m
  └─┬ @itwin/core-frontend �[90m5.6.1�[39m
    ├── �[31m✕ missing peer�[39m @itwin/ecschema-metadata@5.6.1
    └── �[31m✕ missing peer�[39m @itwin/ecschema-rpcinterface-common@5.6.1
Peer dependencies that should be installed:
  @itwin/ecschema-metadata@5.6.1
  @itwin/ecschema-rpcinterface-common@5.6.1

�[37m../../packages/modules/test-remote-extension�[39m
└─┬ @itwin/core-extension �[90m5.6.1�[39m
  └─┬ @itwin/core-frontend �[90m5.6.1�[39m
    ├── �[31m✕ missing peer�[39m @itwin/ecschema-metadata@5.6.1
    └── �[31m✕ missing peer�[39m @itwin/ecschema-rpcinterface-common@5.6.1
Peer dependencies that should be installed:
  @itwin/ecschema-metadata@5.6.1
  @itwin/ecschema-rpcinterface-common@5.6.1

�[37m../../packages/modules/viewer-react�[39m
└─┬ @testing-library/user-event �[90m7.2.1�[39m
  └── �[31m✕ missing peer�[39m @testing-library/dom@>=5
Peer dependencies that should be installed:
  @testing-library/dom@>=5

�[37m../../packages/modules/web-viewer-react�[39m
└─┬ @testing-library/user-event �[90m7.2.1�[39m
  └── �[31m✕ missing peer�[39m @testing-library/dom@>=5
Peer dependencies that should be installed:
  @testing-library/dom@>=5

�[37m../../packages/templates/desktop�[39m
└─┬ @itwin/imodel-browser-react �[90m1.3.1�[39m
  ├── �[93m✕ unmet peer�[39m react@"^16.13.0 || ^17.0.2": found 18.3.1
  └── �[93m✕ unmet peer�[39m react-dom@"^16.13.0 || ^17.0.2": found 18.3.1

�[37m../scripts�[39m
├─┬ @typescript-eslint/eslint-plugin �[90m8.56.1�[39m
│ ├── �[31m✕ missing peer�[39m typescript@">=4.8.4 <6.0.0"
│ ├─┬ ts-api-utils �[90m2.4.0�[39m
│ │ └── �[31m✕ missing peer�[39m typescript@>=4.8.4
│ └─┬ @typescript-eslint/type-utils �[90m8.56.1�[39m
│   ├── �[31m✕ missing peer�[39m typescript@">=4.8.4 <6.0.0"
│   ├─┬ @typescript-eslint/typescript-estree �[90m8.56.1�[39m
│   │ ├── �[31m✕ missing peer�[39m typescript@">=4.8.4 <6.0.0"
│   │ └─┬ @typescript-eslint/project-service �[90m8.56.1�[39m
│   │   ├── �[31m✕ missing peer�[39m typescript@">=4.8.4 <6.0.0"
│   │   └─┬ @typescript-eslint/tsconfig-utils �[90m8.56.1�[39m
│   │     └── �[31m✕ missing peer�[39m typescript@">=4.8.4 <6.0.0"
│   └─┬ @typescript-eslint/utils �[90m8.56.1�[39m
│     └── �[31m✕ missing peer�[39m typescript@">=4.8.4 <6.0.0"
├─┬ @typescript-eslint/parser �[90m8.56.1�[39m
│ └── �[31m✕ missing peer�[39m typescript@">=4.8.4 <6.0.0"
├─┬ @itwin/eslint-plugin �[90m5.2.1�[39m
│ ├── �[31m✕ missing peer�[39m typescript@"^3.7.0 || ^4.0.0 || ^5.0.0"
│ └─┬ @typescript-eslint/eslint-plugin �[90m8.56.1�[39m
│   └── �[31m✕ missing peer�[39m typescript@">=4.8.4 <6.0.0"
├─┬ eslint-config-react-app �[90m7.0.1�[39m
│ ├── �[93m✕ unmet peer�[39m eslint@^8.0.0: found 9.39.3
│ ├─┬ @typescript-eslint/eslint-plugin �[90m5.62.0�[39m
│ │ ├── �[31m✕ missing peer�[39m typescript@"*"
│ │ ├── �[93m✕ unmet peer�[39m eslint@"^6.0.0 || ^7.0.0 || ^8.0.0": found 9.39.3
│ │ └─┬ @typescript-eslint/type-utils �[90m5.62.0�[39m
│ │   ├── �[31m✕ missing peer�[39m typescript@"*"
│ │   ├─┬ @typescript-eslint/typescript-estree �[90m5.62.0�[39m
│ │   │ ├── �[31m✕ missing peer�[39m typescript@"*"
│ │   │ └─┬ tsutils �[90m3.21.0�[39m
│ │   │   └── �[31m✕ missing peer�[39m typescript@">=2.8.0 || >= 3.2.0-dev || >= 3.3.0-dev || >= 3.4.0-dev || >= 3.5.0-dev || >= 3.6.0-dev || >= 3.6.0-beta || >= 3.7.0-dev || >= 3.7.0-beta"
│ │   └─┬ @typescript-eslint/utils �[90m5.62.0�[39m
│ │     └── �[93m✕ unmet peer�[39m eslint@"^6.0.0 || ^7.0.0 || ^8.0.0": found 9.39.3
│ ├─┬ @typescript-eslint/parser �[90m5.62.0�[39m
│ │ ├── �[31m✕ missing peer�[39m typescript@"*"
│ │ └── �[93m✕ unmet peer�[39m eslint@"^6.0.0 || ^7.0.0 || ^8.0.0": found 9.39.3
│ ├─┬ eslint-plugin-flowtype �[90m8.0.3�[39m
│ │ ├── �[31m✕ missing peer�[39m @babel/plugin-syntax-flow@^7.14.5
│ │ ├── �[31m✕ missing peer�[39m @babel/plugin-transform-react-jsx@^7.14.9
│ │ └── �[93m✕ unmet peer�[39m eslint@^8.1.0: found 9.39.3
│ ├─┬ eslint-plugin-jest �[90m25.7.0�[39m
│ │ ├── �[93m✕ unmet peer�[39m eslint@"^6.0.0 || ^7.0.0 || ^8.0.0": found 9.39.3
│ │ └─┬ @typescript-eslint/experimental-utils �[90m5.62.0�[39m
│ │   └── �[93m✕ unmet peer�[39m eslint@"^6.0.0 || ^7.0.0 || ^8.0.0": found 9.39.3
│ ├─┬ eslint-plugin-react-hooks �[90m4.6.2�[39m
│ │ └── �[93m✕ unmet peer�[39m eslint@"^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0": found 9.39.3
│ └─┬ eslint-plugin-testing-library �[90m5.11.1�[39m
│   └── �[93m✕ unmet peer�[39m eslint@"^7.5.0 || ^8.0.0": found 9.39.3
├─┬ typescript-eslint �[90m8.56.1�[39m
│ ├── �[31m✕ missing peer�[39m typescript@">=4.8.4 <6.0.0"
│ └─┬ @typescript-eslint/eslint-plugin �[90m8.56.1�[39m
│   └── �[31m✕ missing peer�[39m typescript@">=4.8.4 <6.0.0"
├─┬ stylelint �[90m16.26.1�[39m
│ └─┬ cosmiconfig �[90m9.0.0�[39m
│   └── �[31m✕ missing peer�[39m typescript@>=4.9.5
├─┬ stylelint-config-sass-guidelines �[90m12.1.0�[39m
│ ├── �[31m✕ missing peer�[39m postcss@^8.4.21
│ └─┬ postcss-scss �[90m4.0.9�[39m
│   └── �[31m✕ missing peer�[39m postcss@^8.4.29
└─┬ stylelint-config-prettier �[90m9.0.5�[39m
  └── �[93m✕ unmet peer�[39m stylelint@">= 11.x < 15": found 16.26.1
Peer dependencies that should be installed:
  @babel/plugin-syntax-flow@^7.14.5
  @babel/plugin-transform-react-jsx@^7.14.9
  postcss@">=8.4.29 <9.0.0"
  typescript@">=4.9.5 <5.0.0 || >=5.0.0 <6.0.0"

Done in 2.3s

�[32mRush update finished successfully. (2.56 seconds)�[39m + overrides for vulnerable  versions
@GytisCepk
Copy link
Contributor Author

@copilot , explain why build failed

Copy link

Copilot AI commented Feb 25, 2026

@GytisCepk I've opened a new pull request, #418, to work on those changes. Once the pull request is ready, I'll request review from you.

@ben-polinsky ben-polinsky marked this pull request as draft February 26, 2026 15:11
@ben-polinsky ben-polinsky marked this pull request as ready for review February 26, 2026 15:11
@GytisCepk GytisCepk changed the title Full rush update and override for volnerable minimatch versions Full rush update and override for vulnerable minimatch versions Feb 26, 2026
@ben-polinsky
Copy link
Contributor

@ben-polinsky
Copy link
Contributor

I'll force once CI passes. No idea what's up with codeql...

@ben-polinsky ben-polinsky merged commit bee51c2 into master Feb 26, 2026
2 of 3 checks passed
@ben-polinsky ben-polinsky deleted the gytis/audit-issues branch February 26, 2026 19:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants