chore: regenerate pnpm-lock.yaml with lodash >=4.18.0 override

Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix: override lodash >=4.18.0 to patch code injection vulnerability
2026-05-03 18:07:29 +00:00 · 2026-04-23 10:58:22 +00:00 · 2026-04-15 04:00:53 +00:00
3 changed files with 929 additions and 845 deletions
@@ -1,4 +1,4 @@
-version: "1.0.1"
+version: "1.0.2"
 name: headlamp-kube-vip
 displayName: kube-vip
 createdAt: "2026-03-04T00:00:00Z"
@@ -25,8 +25,8 @@ maintainers:
 provider:
  name: privilegedescalation
 annotations:
-  headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-kube-vip-plugin/releases/download/v1.0.1/kube-vip-1.0.1.tar.gz"
-  headlamp/plugin/archive-checksum: sha256:b5568aa3706a75edfa80ba60335587107df0eea2efedc2123ebbffd2934d25d9
+  headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-kube-vip-plugin/releases/download/v1.0.2/kube-vip-1.0.2.tar.gz"
+  headlamp/plugin/archive-checksum: sha256:cb6b8b6d93a41c129304c57ed705cdafbcb4d6e7511ce5bad0aa05d5762c3fbf
  headlamp/plugin/version-compat: ">=0.26"
  headlamp/plugin/distro-compat: "in-cluster"
 changes:
@@ -1,6 +1,6 @@
 {
  "name": "kube-vip",
-  "version": "1.0.1",
+  "version": "1.0.2",
  "description": "Headlamp plugin for kube-vip virtual IP and load balancer visibility",
  "repository": {
    "type": "git",
@@ -31,7 +31,8 @@
  },
  "overrides": {
    "tar": "^7.5.11",
-    "undici": "^7.24.3"
+    "undici": "^7.24.3",
+    "lodash": ">=4.18.0"
  },
  "devDependencies": {
    "@headlamp-k8s/eslint-config": "^0.6.0",
Author	SHA1	Message	Date
Chris Farhood	9af291a8fb	chore: regenerate pnpm-lock.yaml with lodash >=4.18.0 override Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-03 18:07:29 +00:00
Gandalf the Greybeard	a7daabe4a0	fix: override lodash >=4.18.0 to patch code injection vulnerability GHSA-r5fr-rjxr-66jc is a code injection vulnerability in lodash below 4.18.0. The vulnerable transitive dependency comes through @kinvolk/headlamp-plugin. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-23 10:58:22 +00:00
privilegedescalation-engineer[bot]	ac3d9e87ca	release: v1.0.2 (#38 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-15 04:00:53 +00:00