fix for CVE-2026-27904

[rhdmalone]

fix for CVE-2026-27904
https://www.cve.org/CVERecord?id=CVE-2026-27904

Summary by CodeRabbit

• Chores
  • Updated frontend dependency resolution constraints to use more recent versions for improved compatibility and stability.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 990cf32e-0ac8-4649-9edb-824c019f6884

📥 Commits

Reviewing files that changed from the base of the PR and between 21101de and d6e658f.

⛔ Files ignored due to path filters (1)

• frontend/yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (1)

• frontend/package.json

---

📝 Walkthrough

Walkthrough

The pull request extends the resolutions block in frontend/package.json with seven new minimatch overrides. These entries map various minimatch version specifiers (3.0.4, 3.0.5, ^3.0.2, ^3.0.4, ^3.1.1, ^9.0.4, ^10.1.2) to resolved versions (3.1.4, 9.0.7, 10.2.3). The changes enforce consistent minimatch versions across the dependency tree by pinning transitive dependencies. No functional code modifications or script changes are introduced; this is purely a dependency resolution constraint update affecting package resolution behavior.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'fix for CVE-2026-27904' directly addresses the changeset's primary objective—updating minimatch dependency resolutions to patch a known vulnerability.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[rhdmalone]

/test e2e-gcp-console

[rhdmalone]

/test e2e-gcp-console

[openshift-ci]

@rhdmalone: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-gcp-console	d6e658f	link	true	/test e2e-gcp-console

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.