chores(deps): upgraded jsonpath to fix CVE-2026-1615

[alizard0]

User description

Hey, I just made a Pull Request!

Patched jsonpath to v1.2.1

✔️ Checklist

• A changeset describing the change and affected packages. (more info)
• Added or Updated documentation
• Tests for new functionality and regression tests for bug fixes
• Screenshots attached (for UI changes)

---

PR Type

Bug fix

---

Description

• Upgraded jsonpath dependency to v1.2.1 to address CVE-2026-1615 security vulnerability

• No code changes required, dependency update only

---

Diagram Walkthrough

flowchart LR
  A["jsonpath<br/>previous version"] -- "security patch" --> B["jsonpath<br/>v1.2.1"]

Loading

File Walkthrough

	Relevant files

---

[rhdh-qodo-merge]

PR Compliance Guide 🔍

Below is a summary of compliance checks for this PR:

Security Compliance
🟢	No security concerns identified No security vulnerabilities detected by AI analysis. Human verification advised for critical code.
Ticket Compliance
⚪	🎫 No ticket provided Create ticket/issue
Codebase Duplication Compliance
🟢	No codebase code duplication found No new components were introduced in the PR code
Custom Compliance
⚪	No custom compliance provided Follow the guide to enable custom compliance check.
Update

Compliance status legend

🟢 - Fully Compliant
🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label

[rhdh-qodo-merge]

PR Code Suggestions ✨

No code suggestions found for the PR.

[rhdh-qodo-merge]

CI Feedback 🧐

A test triggered by this PR failed. Here is an AI-generated analysis of the failure:

Action: Workspace scorecard, CI step for node 22.x

Failed stage: lint [❌]

Failed test name: ""

Failure summary: The action failed during linting (exit code 1) in packages/app due to an undeclared import detected by the @backstage/no-undeclared-imports rule. - File/line: packages/app/e2e-tests/utils/scorecardResponseUtils.ts:16:1 - Problem: @red-hat-developer-hub/backstage-plugin-scorecard-common is imported but is not declared in devDependencies of packages/app/package.json. - The log suggests fixing by running: yarn --cwd packages/app add --dev @red-hat-developer-hub/backstage-plugin-scorecard-common

Relevant error logs: 1: ##[group]Runner Image Provisioner 2: Hosted Compute Agent ... 266: �[93m➤�[39m YN0002: │ �[38;5;173mapp�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:packages/app�[39m doesn't provide �[38;5;166m@types/�[39m�[38;5;173mreact�[39m (�[38;5;111mpceee16�[39m), requested by �[38;5;166m@backstage-community/�[39m�[38;5;173mplugin-rbac�[39m and other dependencies. 267: �[93m➤�[39m YN0002: │ �[38;5;173mapp�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:packages/app�[39m doesn't provide �[38;5;173mplaywright-core�[39m (�[38;5;111mp7d9526�[39m), requested by �[38;5;166m@axe-core/�[39m�[38;5;173mplaywright�[39m. 268: �[93m➤�[39m YN0002: │ �[38;5;173mapp�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:packages/app�[39m doesn't provide �[38;5;173mwebpack�[39m (�[38;5;111mp299d9a�[39m), requested by �[38;5;166m@backstage/�[39m�[38;5;173mcli�[39m. 269: �[93m➤�[39m YN0002: │ �[38;5;173mbackend�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:packages/backend�[39m doesn't provide �[38;5;173mwebpack�[39m (�[38;5;111mp00f29e�[39m), requested by �[38;5;166m@backstage/�[39m�[38;5;173mcli�[39m. 270: �[93m➤�[39m YN0086: │ Some peer dependencies are incorrectly met by your project; run �[38;5;111myarn explain peer-requirements <hash>�[39m for details, where �[38;5;111m<hash>�[39m is the six-letter p-prefixed code. 271: �[93m➤�[39m YN0086: │ Some peer dependencies are incorrectly met by dependencies; run �[38;5;111myarn explain peer-requirements�[39m for details. 272: ##[endgroup] 273: �[94m➤�[39m �[90mYN0000�[39m: └ Completed 274: �[94m➤�[39m �[90mYN0000�[39m: ┌ Fetch step 275: ##[group]Fetch step 276: �[94m➤�[39m YN0013: │ �[38;5;220m3109�[39m packages were added to the project (�[38;5;160m+ 1.18 GiB�[39m). 277: ##[endgroup] 278: �[94m➤�[39m �[90mYN0000�[39m: └ Completed in 17s 662ms 279: �[94m➤�[39m �[90mYN0000�[39m: ┌ Link step 280: ##[group]Link step 281: �[94m➤�[39m YN0007: │ �[38;5;166m@swc/�[39m�[38;5;173mcore�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.11.1 [7f486]�[39m must be built because it never has been before or the last one failed 282: �[94m➤�[39m YN0007: │ �[38;5;173mesbuild�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.25.0�[39m must be built because it never has been before or the last one failed 283: �[94m➤�[39m YN0007: │ �[38;5;173mcore-js�[39m�[38;5;111m@�[39m�[38;5;111mnpm:3.40.0�[39m must be built because it never has been before or the last one failed 284: �[94m➤�[39m YN0007: │ �[38;5;173mbetter-sqlite3�[39m�[38;5;111m@�[39m�[38;5;111mnpm:12.2.0�[39m must be built because it never has been before or the last one failed 285: �[94m➤�[39m YN0007: │ �[38;5;173mmsw�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.3.5 [518a2]�[39m must be built because it never has been before or the last one failed 286: �[94m➤�[39m YN0007: │ �[38;5;166m@nestjs/�[39m�[38;5;173mcore�[39m�[38;5;111m@�[39m�[38;5;111mnpm:10.4.15 [2d948]�[39m must be built because it never has been before or the last one failed 287: �[94m➤�[39m YN0007: │ �[38;5;173misolated-vm�[39m�[38;5;111m@�[39m�[38;5;111mnpm:5.0.4�[39m must be built because it never has been before or the last one failed 288: �[94m➤�[39m YN0007: │ �[38;5;166m@scarf/�[39m�[38;5;173mscarf�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.4.0�[39m must be built because it never has been before or the last one failed 289: �[94m➤�[39m YN0007: │ �[38;5;173mprotobufjs�[39m�[38;5;111m@�[39m�[38;5;111mnpm:7.5.4�[39m must be built because it never has been before or the last one failed 290: �[94m➤�[39m YN0007: │ �[38;5;173mcore-js-pure�[39m�[38;5;111m@�[39m�[38;5;111mnpm:3.46.0�[39m must be built because it never has been before or the last one failed 291: �[94m➤�[39m YN0007: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m must be built because it never has been before or the last one failed 292: �[94m➤�[39m YN0007: │ �[38;5;173mtree-sitter�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.22.4�[39m must be built because it never has been before or the last one failed 293: �[94m➤�[39m YN0007: │ �[38;5;173mtree-sitter�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.21.1�[39m must be built because it never has been before or the last one failed 294: �[94m➤�[39m YN0007: │ �[38;5;173mcore-js�[39m�[38;5;111m@�[39m�[38;5;111mnpm:2.6.12�[39m must be built because it never has been before or the last one failed 295: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m gyp info it worked if it ends with ok ... 348: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[32mSTDOUT�[39m CXX(target) Release/obj.target/cpufeatures/src/binding.o 349: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m In file included from ../src/binding.cc:1: 350: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m /home/runner/.cache/node-gyp/22.22.0/include/node/node.h:1244:7: warning: cast between incompatible function types from ‘void (*)(Nan::ADDON_REGISTER_FUNCTION_ARGS_TYPE)’ {aka ‘void (*)(v8::Local<v8::Object>)’} to ‘node::addon_register_func’ {aka ‘void (*)(v8::Local<v8::Object>, v8::Local<v8::Value>, void*)’} [-Wcast-function-type] 351: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m 1244 | (node::addon_register_func) (regfunc), \ 352: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 353: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m /home/runner/.cache/node-gyp/22.22.0/include/node/node.h:1278:3: note: in expansion of macro ‘NODE_MODULE_X’ 354: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m 1278 | NODE_MODULE_X(modname, regfunc, NULL, 0) // NOLINT (readability/null_usage) 355: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m | ^~~~~~~~~~~~~ 356: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m ../src/binding.cc:151:1: note: in expansion of macro ‘NODE_MODULE’ 357: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m 151 | NODE_MODULE(cpufeatures, init) 358: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m | ^~~~~~~~~~~ 359: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[32mSTDOUT�[39m SOLINK_MODULE(target) Release/obj.target/cpufeatures.node 360: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[32mSTDOUT�[39m COPY Release/cpufeatures.node 361: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[32mSTDOUT�[39m make: Leaving directory '/home/runner/work/rhdh-plugins/rhdh-plugins/workspaces/scorecard/node_modules/cpu-features/build' 362: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mcpu-features�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.0.10�[39m �[31mSTDERR�[39m gyp info ok 363: �[94m➤�[39m YN0007: │ �[38;5;166m@openapitools/�[39m�[38;5;173mopenapi-generator-cli�[39m�[38;5;111m@�[39m�[38;5;111mnpm:2.16.3�[39m must be built because it never has been before or the last one failed 364: �[94m➤�[39m YN0007: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m must be built because it never has been before or the last one failed 365: �[94m➤�[39m YN0007: │ �[38;5;166m@tree-sitter-grammars/�[39m�[38;5;173mtree-sitter-yaml�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.7.1 [1938f]�[39m must be built because it never has been before or the last one failed 366: �[94m➤�[39m YN0007: │ �[38;5;173mtree-sitter-json�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.24.8 [1a14f]�[39m must be built because it never has been before or the last one failed 367: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[31mSTDERR�[39m gyp info it worked if it ends with ok ... 392: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[31mSTDERR�[39m gyp info spawn args '--depth=.', 393: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[31mSTDERR�[39m gyp info spawn args '--no-parallel', 394: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[31mSTDERR�[39m gyp info spawn args '--generator-output', 395: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[31mSTDERR�[39m gyp info spawn args 'build', 396: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[31mSTDERR�[39m gyp info spawn args '-Goutput_dir=.' 397: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[31mSTDERR�[39m gyp info spawn args ] 398: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[31mSTDERR�[39m gyp info spawn make 399: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[31mSTDERR�[39m gyp info spawn args [ 'BUILDTYPE=Release', '-C', 'build' ] 400: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[32mSTDOUT�[39m make: Entering directory '/home/runner/work/rhdh-plugins/rhdh-plugins/workspaces/scorecard/node_modules/ssh2/lib/protocol/crypto/build' 401: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[32mSTDOUT�[39m CXX(target) Release/obj.target/sshcrypto/src/binding.o 402: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[32mSTDOUT�[39m SOLINK_MODULE(target) Release/obj.target/sshcrypto.node 403: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[32mSTDOUT�[39m COPY Release/sshcrypto.node 404: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[32mSTDOUT�[39m make: Leaving directory '/home/runner/work/rhdh-plugins/rhdh-plugins/workspaces/scorecard/node_modules/ssh2/lib/protocol/crypto/build' 405: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[31mSTDERR�[39m gyp info ok 406: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;173mssh2�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.16.0�[39m �[32mSTDOUT�[39m Succeeded in building optional crypto binding 407: �[94m➤�[39m YN0007: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m must be built because it never has been before or the last one failed 408: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[93m➤�[39m YN0000: Yarn detected that the current workflow is executed from a public pull request. For safety the hardened mode has been enabled. ... 416: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m �[90mYN0000�[39m: ┌ Post-resolution validation 417: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m ::group::Post-resolution validation 418: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[93m➤�[39m YN0060: │ �[38;5;173mprettier�[39m is listed by your project with version �[38;5;111m3.7.4�[39m (�[38;5;111mpc2ecd8�[39m), which doesn't satisfy what �[38;5;166m@spotify/�[39m�[38;5;173mprettier-config�[39m and other dependencies request (�[38;5;37m^2.0.0�[39m). 419: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[93m➤�[39m YN0002: │ �[38;5;166m@redhat-developer/�[39m�[38;5;173mrhdh-plugins�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m doesn't provide �[38;5;166m@typescript-eslint/�[39m�[38;5;173mparser�[39m (�[38;5;111mp8d7c5c�[39m), requested by �[38;5;166m@spotify/�[39m�[38;5;173meslint-plugin�[39m. 420: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[93m➤�[39m YN0086: │ Some peer dependencies are incorrectly met by your project; run �[38;5;111myarn explain peer-requirements <hash>�[39m for details, where �[38;5;111m<hash>�[39m is the six-letter p-prefixed code. 421: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[93m➤�[39m YN0086: │ Some peer dependencies are incorrectly met by dependencies; run �[38;5;111myarn explain peer-requirements�[39m for details. 422: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m ::endgroup:: 423: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m �[90mYN0000�[39m: └ Completed 424: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m �[90mYN0000�[39m: ┌ Fetch step 425: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m ::group::Fetch step 426: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m YN0013: │ �[38;5;220m568�[39m packages were added to the project (�[38;5;160m+ 217.19 MiB�[39m). 427: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m ::endgroup:: 428: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m �[90mYN0000�[39m: └ Completed in 3s 562ms 429: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m �[90mYN0000�[39m: ┌ Link step 430: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m ::group::Link step 431: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m YN0007: │ �[38;5;173mesbuild�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.21.5�[39m must be built because it never has been before or the last one failed 432: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m YN0007: │ �[38;5;166m@swc/�[39m�[38;5;173mcore�[39m�[38;5;111m@�[39m�[38;5;111mnpm:1.4.13 [366d3]�[39m must be built because it never has been before or the last one failed 433: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m YN0007: │ �[38;5;173mesbuild�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.23.1�[39m must be built because it never has been before or the last one failed 434: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m YN0007: │ �[38;5;173mesbuild�[39m�[38;5;111m@�[39m�[38;5;111mnpm:0.20.2�[39m must be built because it never has been before or the last one failed 435: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m YN0007: │ �[38;5;173mcore-js-pure�[39m�[38;5;111m@�[39m�[38;5;111mnpm:3.36.1�[39m must be built because it never has been before or the last one failed 436: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m �[94m➤�[39m YN0007: │ �[38;5;166m@redhat-developer/�[39m�[38;5;173mrhdh-plugins�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m must be built because it never has been before or the last one failed 437: �[94m➤�[39m �[90mYN0000�[39m: │ �[38;5;166m@internal/�[39m�[38;5;173mscorecard�[39m�[38;5;111m@�[39m�[38;5;111mworkspace:.�[39m �[32mSTDOUT�[39m ::endgroup:: ... 912: env: 913: CI: true 914: NODE_OPTIONS: --max-old-space-size=8192 915: NPM_CONFIG_USERCONFIG: /home/runner/work/_temp/.npmrc 916: NODE_AUTH_TOKEN: XXXXX-XXXXX-XXXXX-XXXXX 917: ##[endgroup] 918: Checked 1 files in packages/backend 1.45s 919: Checked 19 files in packages/app 2.30s 920: Checked 57 files in plugins/scorecard 1.55s 921: Checked 11 files in plugins/scorecard-backend-module-github 0.14s 922: Checked 53 files in plugins/scorecard-backend 1.11s 923: Checked 22 files in plugins/scorecard-backend-module-jira 0.31s 924: Checked 9 files in plugins/scorecard-backend-module-openssf 0.12s 925: Checked 15 files in plugins/scorecard-node 0.18s 926: Checked 6 files in plugins/scorecard-common 0.07s 927: Lint failed in packages/app 928: �[31m✘�[39m �[4m�[90mhttps://google.com/#q=�[37m%40backstage%2Fno-undeclared-imports�[90m�[39m�[24m 929: @red-hat-developer-hub/backstage-plugin-scorecard-common must be declared in devDependencies of packages/app/package.json, run 'yarn --cwd packages/app add --dev @red-hat-developer-hub/backstage-plugin-scorecard-common' from the project root 930: �[4m�[90me2e-tests/utils/scorecardResponseUtils.ts:16:1�[39m�[24m 931: �[0m �[90m 14 | �[39m�[90m * limitations under the License.�[39m�[0m 932: �[0m �[90m 15 | �[39m�[90m */�[39m�[0m 933: �[0m�[31m�[1m>�[22m�[39m�[90m 16 | �[39m�[36mimport�[39m { �[33mDEFAULT_NUMBER_THRESHOLDS�[39m } �[36mfrom�[39m �[32m'@red-hat-developer-hub/backstage-plugin-scorecard-common'�[39m�[33m;�[39m�[0m 934: �[0m �[90m | �[39m�[31m�[1m^�[22m�[39m�[0m 935: �[0m �[90m 17 | �[39m�[0m 936: �[0m �[90m 18 | �[39m�[36mexport�[39m �[36mconst�[39m customScorecardResponse �[33m=�[39m [�[0m 937: �[0m �[90m 19 | �[39m {�[0m 938: �[31m�[1m✘ 1 problem (1 error, 0 warnings)�[22m�[39m�[37m�[39m 939: �[37m�[39m 940: �[31mErrors:�[39m�[37m�[39m 941: �[37m�[39m 1 �[4m�[90mhttps://google.com/#q=�[37m%40backstage%2Fno-undeclared-imports�[90m�[39m�[24m 942: ##[error]Process completed with exit code 1. 943: Post job cleanup.

[rhdh-gh-app]

Changed Packages

Package Name	Package Path	Changeset Bump	Current Version
app	workspaces/scorecard/packages/app	none	v0.0.0

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[kim-tsao]

/lgtm