From 28bc23bdd355371d65c864a5e570cce9a002b38a Mon Sep 17 00:00:00 2001 From: dkarpele Date: Fri, 16 Oct 2026 17:29:53 +0200 Subject: [PATCH] chore: update pnpm 10.33.2 -> 10.34.6 to fix CVE-2026-101043 Signed-off-by: dkarpele --- .konflux/Containerfile.plugin | 2 +- Dockerfile | 2 +- package.json | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.konflux/Containerfile.plugin b/.konflux/Containerfile.plugin index 2abce6a1e..87410bdbc 100644 --- a/.konflux/Containerfile.plugin +++ b/.konflux/Containerfile.plugin @@ -19,7 +19,7 @@ FROM registry.access.redhat.com/ubi9/nodejs-22 AS builder USER root # Install pnpm -RUN npm install --global pnpm@10.33.2 +RUN npm install --global pnpm@10.34.6 WORKDIR /usr/src/app diff --git a/Dockerfile b/Dockerfile index 7b02a04fd..dda84c07d 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ FROM docker.io/library/node:23 AS build -RUN corepack enable && corepack prepare pnpm@10.33.2 --activate +RUN corepack enable && corepack prepare pnpm@10.34.6 --activate ADD . /usr/src/app WORKDIR /usr/src/app diff --git a/package.json b/package.json index 7ecc82866..e47c4894c 100644 --- a/package.json +++ b/package.json @@ -3,7 +3,7 @@ "description": "OpenShift Console plugin for GitOps.", "version": "1.0.0", "private": true, - "packageManager": "pnpm@10.33.2", + "packageManager": "pnpm@10.34.6", "license": "Apache-2.0", "scripts": { "preinstall": "npx only-allow pnpm",