diff --git a/grafana-image-renderer.yaml b/grafana-image-renderer.yaml index 33b6908f8e6..0ae4f2c6136 100644 --- a/grafana-image-renderer.yaml +++ b/grafana-image-renderer.yaml @@ -1,12 +1,10 @@ package: name: grafana-image-renderer - version: "3.12.7" + version: "3.12.8" epoch: 0 description: A Grafana backend plugin that handles rendering of panels & dashboards to PNGs using headless browser (Chromium/Chrome) copyright: - license: Apache-2.0 - target-architecture: - - x86_64 dependencies: runtime: - busybox @@ -30,15 +28,9 @@ pipeline: with: repository: https://github.com/grafana/grafana-image-renderer tag: v${{package.version}} - expected-commit: e8cb05ca1f74285a629110f06492268a30e2a172 - - - uses: patch - with: - patches: GHSA-rhx6-c78j-4q9w.patch + expected-commit: c167468de9bca504ea203912384259b3de998fd8 - runs: | - # Bump CVE-2024-21538 - yarn add cross-spawn@^7.0.5 yarn upgrade yarn build yarn install --production diff --git a/grafana-image-renderer/GHSA-rhx6-c78j-4q9w.patch b/grafana-image-renderer/GHSA-rhx6-c78j-4q9w.patch deleted file mode 100644 index 36ca1f43f73..00000000000 --- a/grafana-image-renderer/GHSA-rhx6-c78j-4q9w.patch +++ /dev/null @@ -1,25 +0,0 @@ -From ca4d0e9b36aecfecb88c436663d53656f9197d8a Mon Sep 17 00:00:00 2001 -From: Kyle Steere -Date: Wed, 26 Feb 2025 15:37:48 -0600 -Subject: [PATCH] fixes: GHSA-rhx6-c78j-4q9w - ---- - package.json | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/package.json b/package.json -index 9a52c75..f4b6dab 100644 ---- a/package.json -+++ b/package.json -@@ -76,7 +76,8 @@ - }, - "resolutions": { - "@types/express": "^4.17.14", -- "xml2js": "^0.6.2" -+ "xml2js": "^0.6.2", -+ "path-to-regexp": "^0.1.12" - }, - "lint-staged": { - "*.ts": [ --- -2.43.0