From be6f80d11a21a5f072c3487c5d3e4308a38c9cb8 Mon Sep 17 00:00:00 2001 From: seanlandsman Date: Mon, 23 Mar 2026 11:31:54 +0000 Subject: [PATCH] Snyk issues (#13366) --- .snyk | 22 ++++++++++++++++++++++ community-modules/styles/.snyk | 6 ++++++ documentation/ag-grid-docs/.snyk | 18 ++++++++++++++++++ packages/ag-grid-angular/.snyk | 12 ++++++++++++ testing/module-size/.snyk | 6 ++++++ 5 files changed, 64 insertions(+) diff --git a/.snyk b/.snyk index 3dbb3d10846..cd13e7ff8f8 100644 --- a/.snyk +++ b/.snyk @@ -2,6 +2,28 @@ version: v1.25.1 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: + SNYK-JS-FLATTED-15700433: + - '@nx/react@20.3.1 > @nx/module-federation@20.3.1 > @module-federation/enhanced@0.7.6 > @module-federation/dts-plugin@0.7.6 > log4js@6.9.1 > flatted@3.4.0': + reason: >- + Used in build & dev - not included in final production build + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:14:46.789Z + - stylelint@16.25.0 > file-entry-cache@10.1.4 > flat-cache@6.1.18 > flatted@3.4.0: + reason: >- + Test dependency - not included in final production build + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:12:23.301Z + - eslint@9.39.1 > file-entry-cache@8.0.0 > flat-cache@4.0.1 > flatted@3.4.0: + reason: >- + Test dependency - not included in final production build + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:10:57.432Z + SNYK-JS-EFFECT-15746380: + - rulesync@7.0.0 > effect@3.19.16: + reason: >- + Used in build & dev - not included in final production build + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:10:48.076Z SNYK-JS-UNDICI-15518070: - rulesync@7.0.0 > fastmcp@3.31.0 > undici@6.21.3: reason: >- diff --git a/community-modules/styles/.snyk b/community-modules/styles/.snyk index 9e3df0db142..2a82a864416 100644 --- a/community-modules/styles/.snyk +++ b/community-modules/styles/.snyk @@ -2,6 +2,12 @@ version: v1.25.1 ignore: + SNYK-JS-FLATTED-15700433: + - stylelint@14.9.1 > file-entry-cache@6.0.1 > flat-cache@3.2.0 > flatted@3.4.0: + reason: >- + Test dependency - not included in final production build + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:12:23.306Z SNYK-JS-TAR-15456201: - '@vusion/webfonts-generator@0.8.0 > ttf2woff2@4.0.5 > node-gyp@9.4.1 > make-fetch-happen@10.2.1 > cacache@16.1.3 > tar@6.2.1': reason: >- diff --git a/documentation/ag-grid-docs/.snyk b/documentation/ag-grid-docs/.snyk index 62d97bcd7b8..46dd542c84f 100644 --- a/documentation/ag-grid-docs/.snyk +++ b/documentation/ag-grid-docs/.snyk @@ -2,6 +2,24 @@ version: v1.25.1 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: + SNYK-JS-H3-15745711: + - astro@5.16.6 > unstorage@1.17.3 > h3@1.15.5: + reason: >- + H3 is not used for production + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:14:33.937Z + SNYK-JS-H3-15692482: + - astro@5.16.6 > unstorage@1.17.3 > h3@1.15.5: + reason: >- + H3 is not used for production + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:14:29.419Z + SNYK-JS-H3-15683856: + - astro@5.16.6 > unstorage@1.17.3 > h3@1.15.5: + reason: >- + H3 is not used for production + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:14:25.461Z SNYK-JS-UNDICI-15518068: - cheerio@1.1.2 > undici@6.21.3: reason: >- diff --git a/packages/ag-grid-angular/.snyk b/packages/ag-grid-angular/.snyk index 18980aea5f6..6f9ea561acc 100644 --- a/packages/ag-grid-angular/.snyk +++ b/packages/ag-grid-angular/.snyk @@ -2,6 +2,18 @@ version: v1.25.1 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: + SNYK-JS-SOCKETIOPARSER-15680278: + - karma@6.4.4 > socket.io@4.8.1 > socket.io-parser@4.2.4: + reason: >- + Test dependency - not included in final production build + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:12:14.254Z + SNYK-JS-FLATTED-15700433: + - karma@6.4.4 > log4js@6.9.1 > flatted@3.4.0: + reason: >- + Test dependency - not included in final production build + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:11:13.114Z SNYK-JS-TAR-15456201: - ng-packagr@18.2.1 > cacache@18.0.4 > tar@6.2.1: reason: >- diff --git a/testing/module-size/.snyk b/testing/module-size/.snyk index e4f8137a833..4ebd902d93f 100644 --- a/testing/module-size/.snyk +++ b/testing/module-size/.snyk @@ -2,6 +2,12 @@ version: v1.25.1 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: + SNYK-JS-FLATTED-15700433: + - eslint@9.39.1 > file-entry-cache@8.0.0 > flat-cache@4.0.1 > flatted@3.4.0: + reason: >- + Test dependency - not included in final production build + expires: 2026-06-08T00:00:00.000Z + created: 2026-03-23T10:10:57.436Z SNYK-JS-FLATTED-15518041: - eslint@9.39.1 > file-entry-cache@8.0.0 > flat-cache@4.0.1 > flatted@3.3.3: reason: >-