Merge branch 'rush-patch'

D4N14L · Oct 30, 2024 · 871e700 · 871e700
2 parents 5a5b413 + 8d77051
commit 871e700
Show file tree

Hide file tree

Showing 12 changed files with 30 additions and 11 deletions.
diff --git a/apps/rush/CHANGELOG.json b/apps/rush/CHANGELOG.json
@@ -1,6 +1,18 @@
 {
   "name": "@microsoft/rush",
   "entries": [
+    {
+      "version": "5.140.1",
+      "tag": "@microsoft/rush_v5.140.1",
+      "date": "Wed, 30 Oct 2024 21:50:51 GMT",
+      "comments": {
+        "none": [
+          {
+            "comment": "Update the `jsonpath-plus` indirect dependency to mitigate CVE-2024-21534."
+          }
+        ]
+      }
+    },
     {
       "version": "5.140.0",
       "tag": "@microsoft/rush_v5.140.0",

diff --git a/apps/rush/CHANGELOG.md b/apps/rush/CHANGELOG.md
@@ -1,6 +1,13 @@
 # Change Log - @microsoft/rush
 
-This log was last generated on Tue, 22 Oct 2024 23:59:54 GMT and should not be manually modified.
+This log was last generated on Wed, 30 Oct 2024 21:50:51 GMT and should not be manually modified.
+
+## 5.140.1
+Wed, 30 Oct 2024 21:50:51 GMT
+
+### Updates
+
+- Update the `jsonpath-plus` indirect dependency to mitigate CVE-2024-21534.
 
 ## 5.140.0
 Tue, 22 Oct 2024 23:59:54 GMT

diff --git a/apps/rush/package.json b/apps/rush/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/rush",
-  "version": "5.140.0",
+  "version": "5.140.1",
   "description": "A professional solution for consolidating all your JavaScript projects in one Git repo",
   "keywords": [
     "install",

diff --git a/common/config/rush/version-policies.json b/common/config/rush/version-policies.json
@@ -102,7 +102,7 @@
   {
     "policyName": "rush",
     "definitionName": "lockStepVersion",
-    "version": "5.140.0",
+    "version": "5.140.1",
     "nextBump": "minor",
     "mainProject": "@microsoft/rush"
   }

diff --git a/libraries/rush-lib/package.json b/libraries/rush-lib/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/rush-lib",
-  "version": "5.140.0",
+  "version": "5.140.1",
   "description": "A library for writing scripts that interact with the Rush tool",
   "repository": {
     "type": "git",

diff --git a/libraries/rush-sdk/package.json b/libraries/rush-sdk/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/rush-sdk",
-  "version": "5.140.0",
+  "version": "5.140.1",
   "description": "An API for interacting with the Rush engine",
   "repository": {
     "type": "git",

diff --git a/rush-plugins/rush-amazon-s3-build-cache-plugin/package.json b/rush-plugins/rush-amazon-s3-build-cache-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/rush-amazon-s3-build-cache-plugin",
-  "version": "5.140.0",
+  "version": "5.140.1",
   "description": "Rush plugin for Amazon S3 cloud build cache",
   "repository": {
     "type": "git",

diff --git a/rush-plugins/rush-azure-storage-build-cache-plugin/package.json b/rush-plugins/rush-azure-storage-build-cache-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/rush-azure-storage-build-cache-plugin",
-  "version": "5.140.0",
+  "version": "5.140.1",
   "description": "Rush plugin for Azure storage cloud build cache",
   "repository": {
     "type": "git",

diff --git a/rush-plugins/rush-http-build-cache-plugin/package.json b/rush-plugins/rush-http-build-cache-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/rush-http-build-cache-plugin",
-  "version": "5.140.0",
+  "version": "5.140.1",
   "description": "Rush plugin for generic HTTP cloud build cache",
   "repository": {
     "type": "git",

diff --git a/rush-plugins/rush-redis-cobuild-plugin/package.json b/rush-plugins/rush-redis-cobuild-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/rush-redis-cobuild-plugin",
-  "version": "5.140.0",
+  "version": "5.140.1",
   "description": "Rush plugin for Redis cobuild lock",
   "repository": {
     "type": "git",

diff --git a/rush-plugins/rush-resolver-cache-plugin/package.json b/rush-plugins/rush-resolver-cache-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/rush-resolver-cache-plugin",
-  "version": "5.140.0",
+  "version": "5.140.1",
   "description": "A Rush plugin that generates a resolver cache file after successful install.",
   "license": "MIT",
   "repository": {

diff --git a/rush-plugins/rush-serve-plugin/package.json b/rush-plugins/rush-serve-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/rush-serve-plugin",
-  "version": "5.140.0",
+  "version": "5.140.1",
   "description": "A Rush plugin that hooks into a rush action and serves output folders from all projects in the repository.",
   "license": "MIT",
   "repository": {