From 42dfebd6d65137ff47a3d30de947cb6a9f7580b1 Mon Sep 17 00:00:00 2001
From: jurgenhaas <juergen.haas@lakedrops.com>
Date: Wed, 26 Jun 2024 12:12:07 +0200
Subject: [PATCH] Remove 2 packages that may be impacted by the polyfill
backdoor.
---
mixins.yml | 3 +++
1 file changed, 3 insertions(+)
diff --git a/mixins.yml b/mixins.yml
index 3858204..721edc3 100644
--- a/mixins.yml
+++ b/mixins.yml
@@ -70,6 +70,9 @@ stages:
- sed -i "s/DDQG-unsupported-drupal-views_menu_children_filter-3.0.0.0-RC2/DDQG-unsupported-drupal-views_menu_children_filter-3.0.0.0-RC4/g" composer.json
- sed -i "s/DDQG-unsupported-drupal-login_destination-2.0.0.0-beta6/DDQG-unsupported-drupal-login_destination-2.0.0.0-beta7/g" composer.json
#- sed -i "s/###/###/g" composer.json
+ # Remove 2 packages that may be impacted by the polyfill backdoor.
+ - sed -i "s/\"algolia.places\": \"https:\/\/registry.npmjs.org\/places.js\/-\/places.js-1.19.0.tgz\",//g" composer.json
+ - sed -i "s/\"choices\": \"https:\/\/github.com\/Choices-js\/Choices\/archive\/refs\/tags\/v9.0.1.zip\",//g" composer.json
# Finally!!! Normalize composer.json by pretty printing it to ensure consistent structure.
# Disabled for now, since this sometimes creates an empty file: cat composer.json | jq -M . | tee composer.json >/dev/null
--
GitLab