Skip to content

chore(ui-security): bump uuid and dompurify#27696

Open
harsh-vador wants to merge 3 commits intomainfrom
fix-uuid-vulnerability
Open

chore(ui-security): bump uuid and dompurify#27696
harsh-vador wants to merge 3 commits intomainfrom
fix-uuid-vulnerability

Conversation

@harsh-vador
Copy link
Copy Markdown
Contributor

@harsh-vador harsh-vador commented Apr 24, 2026

Describe your changes:

Description

  • This PR updates UI dependency versions and lockfiles to address security advisories and Dependabot alerts affecting uuid and dompurify.

Type of change:

  • Bug fix
  • Improvement
  • New feature
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation

Checklist:

  • I have read the CONTRIBUTING document.
  • My PR title is Fixes <issue-number>: <short explanation>
  • I have commented on my code, particularly in hard-to-understand areas.
  • For JSON Schema changes: I updated the migration scripts or explained why it is not needed.

Summary by Gitar

  • Dependency management:
    • Updated uuid to ^14.0.0 in both openmetadata-ui and openmetadata-ui-core-components packages.
  • Refactoring:
    • Included changes from unrelated commits that introduce fixes for rdf indexing and restore connector-audit functionality in the ingestion service.

This will update automatically on new commits.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 24, 2026

Jest test Coverage

UI tests summary

Lines Statements Branches Functions
Coverage: 61%
61.94% (61763/99708) 42.06% (33022/78508) 45.09% (9763/21648)

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 24, 2026

🔴 Playwright Results — 2 failure(s), 18 flaky

✅ 3953 passed · ❌ 2 failed · 🟡 18 flaky · ⏭️ 86 skipped

Shard Passed Failed Flaky Skipped
🟡 Shard 1 298 0 1 4
🟡 Shard 2 756 0 3 8
🟡 Shard 3 729 0 3 7
🟡 Shard 4 753 0 6 18
✅ Shard 5 687 0 0 41
🔴 Shard 6 730 2 5 8

Genuine Failures (failed on all attempts)

Pages/Users.spec.ts › Permissions for table details page for Data Consumer (shard 6)
�[31mTest timeout of 60000ms exceeded while setting up "dataConsumerPage".�[39m
Pages/Users.spec.ts › Should display persona dropdown with pagination (shard 6)
TimeoutError: page.goto: Timeout 60000ms exceeded.
Call log:
�[2m  - navigating to "http://localhost:8585/", waiting until "load"�[22m

🟡 18 flaky test(s) (passed on retry)
  • Pages/UserCreationWithPersona.spec.ts › Create user with persona and verify on profile (shard 1, 1 retry)
  • Features/ActivityAPI.spec.ts › Activity event is created when description is updated (shard 2, 1 retry)
  • Features/ActivityAPI.spec.ts › Activity event shows the actor who made the change (shard 2, 1 retry)
  • Features/Glossary/GlossaryHierarchy.spec.ts › should cancel move operation (shard 2, 1 retry)
  • Features/RTL.spec.ts › Verify Following widget functionality (shard 3, 1 retry)
  • Features/Workflows/WorkflowOssRestrictions.spec.ts › create-workflow-button absent on OSS (shard 3, 1 retry)
  • Flow/PersonaFlow.spec.ts › Set default persona for team should work properly (shard 3, 1 retry)
  • Pages/DataContracts.spec.ts › Create Data Contract and validate for Chart (shard 4, 1 retry)
  • Pages/Domains.spec.ts › Verify clicking All Domains sets active domain to default value (shard 4, 1 retry)
  • Pages/Entity.spec.ts › Tag and Glossary Selector should close vice versa (shard 4, 2 retries)
  • Pages/Entity.spec.ts › Update displayName (shard 4, 2 retries)
  • Pages/Entity.spec.ts › Update description (shard 4, 1 retry)
  • Pages/Entity.spec.ts › Tag Add, Update and Remove (shard 4, 1 retry)
  • Features/AutoPilot.spec.ts › Agents created by AutoPilot should be deleted (shard 6, 1 retry)
  • Pages/Lineage/LineageFilters.spec.ts › Verify lineage schema filter selection (shard 6, 1 retry)
  • Pages/Lineage/LineageRightPanel.spec.ts › Verify custom properties tab IS visible for supported type: searchIndex (shard 6, 1 retry)
  • Pages/Teams.spec.ts › Add New Team in BusinessUnit Team (shard 6, 1 retry)
  • Pages/Users.spec.ts › Create and Delete user (shard 6, 1 retry)

📦 Download artifacts

How to debug locally
# Download playwright-test-results-<shard> artifact and unzip
npx playwright show-trace path/to/trace.zip    # view trace

@gitar-bot
Copy link
Copy Markdown

gitar-bot Bot commented Apr 26, 2026

Code Review ✅ Approved

Updates uuid and dompurify dependencies to their latest secure versions. No issues found.

Options

Display: compact → Showing less information.

Comment with these commands to change:

Compact
gitar display:verbose         

Was this helpful? React with 👍 / 👎 | Gitar

@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

safe to test Add this label to run secure Github workflows on PRs To release Will cherry-pick this PR into the release branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant