From 8cd023caf8ad80e10fdf1d0cba1c5a03b3fe029d Mon Sep 17 00:00:00 2001 From: Manuel Calleriza Date: Tue, 19 May 2026 16:02:10 -0300 Subject: [PATCH 1/2] chore(package): bump rollup to ^2.80.0 to fix DOM clobbering vulnerability Co-Authored-By: Claude Sonnet 4.6 --- package-lock.json | 26 +++++++++----------------- package.json | 2 +- 2 files changed, 10 insertions(+), 18 deletions(-) diff --git a/package-lock.json b/package-lock.json index 3a15220..f8f25d0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1143,12 +1143,9 @@ } }, "@babel/runtime": { - "version": "7.12.5", - "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.12.5.tgz", - "integrity": "sha512-plcc+hbExy3McchJCEQG3knOsuh3HH+Prx1P6cLIkET/0dLuQDEnrT+s27Axgc9bqfsmNUNHfscgMUdBpC9xfg==", - "requires": { - "regenerator-runtime": "^0.13.4" - } + "version": "7.29.2", + "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.2.tgz", + "integrity": "sha512-JiDShH45zKHWyGe4ZNVRrCjBz8Nh9TMmZG1kh4QTK8hCBTWBi8Da+i7s1fJw7/lYpM4ccepSNfqzZ/QvABBi5g==" }, "@babel/template": { "version": "7.18.10", @@ -7245,11 +7242,6 @@ "regenerate": "^1.4.2" } }, - "regenerator-runtime": { - "version": "0.13.7", - "resolved": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.7.tgz", - "integrity": "sha512-a54FxoJDIr27pgf7IgeQGxmqUNYrcV338lf/6gH456HZ/PhX+5BcwHXG9ajESmwe6WRO0tAzRUrRmNONWgkrew==" - }, "regenerator-transform": { "version": "0.15.0", "resolved": "https://registry.npmjs.org/regenerator-transform/-/regenerator-transform-0.15.0.tgz", @@ -7416,18 +7408,18 @@ } }, "rollup": { - "version": "2.77.3", - "resolved": "https://registry.npmjs.org/rollup/-/rollup-2.77.3.tgz", - "integrity": "sha512-/qxNTG7FbmefJWoeeYJFbHehJ2HNWnjkAFRKzWN/45eNBBF/r8lo992CwcJXEzyVxs5FmfId+vTSTQDb+bxA+g==", + "version": "2.80.0", + "resolved": "https://registry.npmjs.org/rollup/-/rollup-2.80.0.tgz", + "integrity": "sha512-cIFJOD1DESzpjOBl763Kp1AH7UE/0fcdHe6rZXUdQ9c50uvgigvW97u3IcSeBwOkgqL/PXPBktBCh0KEu5L8XQ==", "dev": true, "requires": { "fsevents": "~2.3.2" }, "dependencies": { "fsevents": { - "version": "2.3.2", - "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz", - "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==", + "version": "2.3.3", + "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz", + "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", "dev": true, "optional": true } diff --git a/package.json b/package.json index 49e2d96..cdb7789 100644 --- a/package.json +++ b/package.json @@ -72,7 +72,7 @@ "@rollup/plugin-replace": "^2.3.4", "@videojs/generator-helpers": "~2.0.1", "karma": "^5.2.3", - "rollup": "^2.38.0", + "rollup": "^2.80.0", "rollup-plugin-data-files": "^0.1.0", "sinon": "^9.2.3", "videojs-generate-karma-config": "^8.0.1", From 3630ad51aa79562acdeef243e9a4374ac354dc23 Mon Sep 17 00:00:00 2001 From: Manuel Calleriza Date: Wed, 20 May 2026 16:10:47 -0300 Subject: [PATCH 2/2] chore(ci): disable apparmor to fix chromium headless in tests Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/ci.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 3d61203..a2ed492 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,6 +27,9 @@ jobs: BROWSER_STACK_ACCESS_KEY: ${{secrets.BROWSER_STACK_ACCESS_KEY}} runs-on: ${{matrix.os}} steps: + - name: Disable apparmor, which breaks chromium headless + run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 + - name: checkout code uses: actions/checkout@v2