From 58fb1529e2cf7ad74b4f5708c5a4103df6d0cb0b Mon Sep 17 00:00:00 2001
From: TakahikoKawakami <53943902+shabaraba@users.noreply.github.com>
Date: Thu, 25 Jul 2024 19:15:34 +0900
Subject: [PATCH] chore: fix security of deps(ws) (#2894)

---
 package.json   |  3 ++-
 pnpm-lock.yaml | 32 +++-----------------------------
 2 files changed, 5 insertions(+), 30 deletions(-)

diff --git a/package.json b/package.json
index 8bc23e24d5..5251177122 100644
--- a/package.json
+++ b/package.json
@@ -61,7 +61,8 @@
       "braces": ">=3.0.3",
       "pac-resolver": ">=7.0.1",
       "socks": ">=2.8.3",
-      "express": ">=4.19.2"
+      "express": ">=4.19.2",
+      "ws": ">=8.17.1"
     }
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9d645ba813..a1f3f97a21 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -11,6 +11,7 @@ overrides:
   pac-resolver: '>=7.0.1'
   socks: '>=2.8.3'
   express: '>=4.19.2'
+  ws: '>=8.17.1'
 
 importers:
 
@@ -8216,7 +8217,7 @@ packages:
       whatwg-encoding: 2.0.0
       whatwg-mimetype: 3.0.0
       whatwg-url: 11.0.0
-      ws: 8.17.0
+      ws: 8.18.0
       xml-name-validator: 4.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -11805,7 +11806,7 @@ packages:
       webpack: 5.93.0(webpack-cli@5.1.4)
       webpack-cli: 5.1.4(webpack-dev-server@5.0.4)(webpack@5.93.0)
       webpack-dev-middleware: 7.1.1(webpack@5.93.0)
-      ws: 8.16.0
+      ws: 8.18.0
     transitivePeerDependencies:
       - bufferutil
       - debug
@@ -12023,32 +12024,6 @@ packages:
       signal-exit: 3.0.7
     dev: true
 
-  /ws@8.16.0:
-    resolution: {integrity: sha512-HS0c//TP7Ina87TfiPUz1rQzMhHrl/SG2guqRcTOIUYD2q8uhUdNHZYJUaQ8aTGPzCh+c6oawMKW35nFl1dxyQ==}
-    engines: {node: '>=10.0.0'}
-    peerDependencies:
-      bufferutil: ^4.0.1
-      utf-8-validate: '>=5.0.2'
-    peerDependenciesMeta:
-      bufferutil:
-        optional: true
-      utf-8-validate:
-        optional: true
-    dev: true
-
-  /ws@8.17.0:
-    resolution: {integrity: sha512-uJq6108EgZMAl20KagGkzCKfMEjxmKvZHG7Tlq0Z6nOky7YF7aq4mOx6xK8TJ/i1LeK4Qus7INktacctDgY8Ow==}
-    engines: {node: '>=10.0.0'}
-    peerDependencies:
-      bufferutil: ^4.0.1
-      utf-8-validate: '>=5.0.2'
-    peerDependenciesMeta:
-      bufferutil:
-        optional: true
-      utf-8-validate:
-        optional: true
-    dev: true
-
   /ws@8.18.0:
     resolution: {integrity: sha512-8VbfWfHLbbwu3+N6OKsOMpBdT4kXPDDB9cJk2bJ6mh9ucxdlnNvH1e+roYkKmN9Nxw2yjz7VzeO9oOz2zJ04Pw==}
     engines: {node: '>=10.0.0'}
@@ -12060,7 +12035,6 @@ packages:
         optional: true
       utf-8-validate:
         optional: true
-    dev: false
 
   /xml-name-validator@4.0.0:
     resolution: {integrity: sha512-ICP2e+jsHvAj2E2lIHxa5tjXRlKDJo4IdvPvCXbXQGdzSfmSpNVyIKMvoZHjDY9DP0zV17iI85o90vRFXNccRw==}