PromucFlow_constructor/app
subratadeypappu d1dfa4436c
fix: resolve CVE-2025-9288 and CVE-2025-9287 in sha.js and cipher-base (#41284)
## Description
EE Shadow PR: https://github.com/appsmithorg/appsmith-ee/pull/8226

Fixes CVE-2025-9288
Fixes CVE-2025-9287

## Automation

/ok-to-test tags="@tag.All"

### 🔍 Cypress test results
<!-- This is an auto-generated comment: Cypress test results  -->
> [!TIP]
> 🟢 🟢 🟢 All cypress tests have passed! 🎉 🎉 🎉
> Workflow run:
<https://github.com/appsmithorg/appsmith/actions/runs/18306326151>
> Commit: 75166362114f950aa5e4d5f53793329a495b404c
> <a
href="https://internal.appsmith.com/app/cypress-dashboard/rundetails-65890b3c81d7400d08fa9ee5?branch=master&workflowId=18306326151&attempt=5"
target="_blank">Cypress dashboard</a>.
> Tags: `@tag.All`
> Spec:
> <hr>Tue, 07 Oct 2025 13:45:02 UTC
<!-- end of auto-generated comment: Cypress test results  -->


## Communication
Should the DevRel and Marketing teams inform users about this change?
- [ ] Yes
- [x] No


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* Chores
* Updated client-side dependencies and locked specific versions to
improve app stability and compatibility.
* Added resolution overrides to ensure consistent builds across
environments and reduce dependency-related issues.
* These updates are behind the scenes and do not change the user
interface or workflows.
* No impact on exported APIs; functionality remains unchanged for
end-users.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-10-08 12:25:24 +06:00
..
client fix: resolve CVE-2025-9288 and CVE-2025-9287 in sha.js and cipher-base (#41284) 2025-10-08 12:25:24 +06:00
server fix(oauth2): ensure single-valued hd parameter for Spring Boot 3.3.13+ compatibility (#41271) 2025-09-29 19:25:37 +06:00
util