Skip to content

Upgrade @apidevtools/json-schema-ref-parser#229184

Merged
afharo merged 1 commit intoelastic:mainfrom
afharo:upgrade-apidevtools/json-schema-ref-parser
Jul 25, 2025
Merged

Upgrade @apidevtools/json-schema-ref-parser#229184
afharo merged 1 commit intoelastic:mainfrom
afharo:upgrade-apidevtools/json-schema-ref-parser

Conversation

@afharo
Copy link
Member

@afharo afharo commented Jul 23, 2025 •
edited by kibanamachine
Loading

Summary

Part of the packages listed in #201607

APIDevTools/json-schema-ref-parser (@​apidevtools/json-schema-ref-parser)

v14.1.1

Compare Source

Bug Fixes
  • bundle: don't look for a $ref pointer on a null value (#​393) (c1b2916)

v14.1.0

Compare Source

Features

v14.0.3

Compare Source

Bug Fixes
  • targets: upgrade targets to support Node 20 (current maintenace node), change typescript config to match, dont ship vite config (6c77265)

v14.0.2

Compare Source

Bug Fixes

v14.0.1

Compare Source

Bug Fixes
  • options: make safe url resolver optional and boolean (171e30f)

v14.0.0

Compare Source

Bug Fixes
  • safety: assume browsers are safe urls (5ffea78)
Fix
  • Dont allow internal URL resolution, and add flag to reenable internal / private URL resolution (0a06a78)
BREAKING CHANGES
  • Fix security vulnerability allowing default http resolver to make requests to internal hostnames

v13.0.5

Compare Source

Bug Fixes

v13.0.4

Compare Source

Bug Fixes
  • url: ensure url is resolvable (bf4edf9)

v13.0.3

Compare Source

Bug Fixes
  • location: use explicit window.location (45bcd17)

v13.0.2

Compare Source

Bug Fixes
  • location: add better url and window.location checking, fall beck to root path (3de416d)

v13.0.1

Compare Source

Bug Fixes

v13.0.0

Compare Source

Bug Fixes
  • ono: remove dependency on ono (3902889)
BREAKING CHANGES
  • ono: going to make this a breaking change in case there are people depending on the stack traces / benefits of ono

v12.0.2

Compare Source

Bug Fixes
  • allow $defs and fix circular pointers issue with $ref in root (#​383) (382e927)

v12.0.1

Compare Source

Bug Fixes
  • dereference: cache poisoning when dereferencing external schemas (#​381) (69cfcf6)

v12.0.0

Compare Source

Bug Fixes
  • BREAKING CHANGE: dereference caching to prevent infinite loops on circular schemas (#​380) (50414c3)
BREAKING CHANGES
  • BREAKING CHANGE: dereference caching to prevent infinite loops on circular schemas

Checklist

  • The PR description includes the appropriate Release Notes section, and the correct release_note:* label is applied per the guidelines
  • Review the backport guidelines and apply applicable backport:* labels.

@afharo afharo self-assigned this Jul 23, 2025
@afharo afharo added Team:Core Platform Core services: plugins, logging, config, saved objects, http, ES client, i18n, etc t// release_note:skip Skip the PR/issue when compiling release notes backport:all-open Backport to all branches that could still receive a release labels Jul 23, 2025
@elasticmachine
Copy link
Contributor

elasticmachine commented Jul 23, 2025

💚 Build Succeeded

Metrics [docs]

✅ unchanged

cc @afharo

@afharo afharo marked this pull request as ready for review July 23, 2025 22:59
@elasticmachine
Copy link
Contributor

elasticmachine commented Jul 23, 2025

Pinging @elastic/kibana-core (Team:Core)

@afharo afharo requested a review from a team July 23, 2025 22:59
@afharo afharo merged commit bba9fe5 into elastic:main Jul 25, 2025
25 checks passed
@afharo afharo deleted the upgrade-apidevtools/json-schema-ref-parser branch July 25, 2025 09:41
@kibanamachine
Copy link
Contributor

kibanamachine commented Jul 25, 2025

Starting backport for target branches: 8.17, 8.18, 8.19, 9.0, 9.1

https://github.com/elastic/kibana/actions/runs/16518923541

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Jul 25, 2025
@afharo
Upgrade @apidevtools/json-schema-ref-parser (elastic#229184)
ccec3d4 
(cherry picked from commit bba9fe5)
@kibanamachine kibanamachine mentioned this pull request Jul 25, 2025
Merged
@kibanamachine
Copy link
Contributor

kibanamachine commented Jul 25, 2025

💔 Some backports could not be created

Status Branch Result
❌ 8.17 Backport failed because of merge conflicts
❌ 8.18 Backport failed because of merge conflicts

You might need to backport the following PRs to 8.18:
- Update sinon (main) (#206229)
❌ 8.19 Backport failed because of merge conflicts

You might need to backport the following PRs to 8.19:
- [ska] relocate cypress & plugin functional tests (#228681)
- [ska] relocate kibana-security FTR tests (#228452)
- Update dependency msw to ~2.10.3 (main) (#227672)
- [ska] relocate platform banner, cloud, so, custom branding tests (#227269)
❌ 9.0 Backport failed because of merge conflicts
✅ 9.1

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

node scripts/backport --pr 229184

Questions ?

Please refer to the Backport tool documentation

@afharo
Copy link
Member Author

afharo commented Jul 25, 2025

This package is only present in 9.1: #212495. Skipping the backport of everything else

@afharo afharo added backport:prev-minor and removed backport:all-open Backport to all branches that could still receive a release labels Jul 25, 2025
@kibanamachine
Copy link
Contributor

kibanamachine commented Jul 25, 2025

Starting backport for target branches: 9.1

https://github.com/elastic/kibana/actions/runs/16530419184

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Jul 25, 2025
@afharo
Upgrade @apidevtools/json-schema-ref-parser (elastic#229184)
1f55a1f 
(cherry picked from commit bba9fe5)
@kibanamachine
Copy link
Contributor

kibanamachine commented Jul 25, 2025

💚 All backports created successfully

Status Branch Result
✅ 9.1

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

kibanamachine added a commit that referenced this pull request Jul 25, 2025
@kibanamachine @afharo
[9.1] Upgrade @apidevtools/json-schema-ref-parser (#229184) (#229426)
065ae05 
# Backport

This will backport the following commits from `main` to `9.1`:
- [Upgrade @apidevtools/json-schema-ref-parser
(#229184)](#229184)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Alejandro Fernández
Haro","email":"alejandro.haro@elastic.co"},"sourceCommit":{"committedDate":"2025-07-25T09:41:15Z","message":"Upgrade
@apidevtools/json-schema-ref-parser
(#229184)","sha":"bba9fe5c1e8067f4a6f7b2440bc0f72273609e12","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Core","release_note:skip","backport:all-open","v9.2.0"],"title":"Upgrade
@apidevtools/json-schema-ref-parser","number":229184,"url":"https://github.com/elastic/kibana/pull/229184","mergeCommit":{"message":"Upgrade
@apidevtools/json-schema-ref-parser
(#229184)","sha":"bba9fe5c1e8067f4a6f7b2440bc0f72273609e12"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/229184","number":229184,"mergeCommit":{"message":"Upgrade
@apidevtools/json-schema-ref-parser
(#229184)","sha":"bba9fe5c1e8067f4a6f7b2440bc0f72273609e12"}}]}]
BACKPORT-->

Co-authored-by: Alejandro Fernández Haro <alejandro.haro@elastic.co>
@mistic mistic added v9.1.1 and removed v9.1.0 labels Jul 29, 2025
delanni pushed a commit to delanni/kibana that referenced this pull request Aug 5, 2025
@afharo @delanni
Upgrade @apidevtools/json-schema-ref-parser (elastic#229184)
d600bb3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jloleysens jloleysens jloleysens approved these changes

Assignees

@afharo afharo

Labels

release_note:skip Skip the PR/issue when compiling release notes Team:Core Platform Core services: plugins, logging, config, saved objects, http, ES client, i18n, etc t// v9.1.1 v9.2.0

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@afharo @elasticmachine @kibanamachine @jloleysens @mistic