From 8cae93514b61ef866ad8d207ebf031d75f72244d Mon Sep 17 00:00:00 2001
From: Phil Renaud <phil@riotindustries.com>
Date: Thu, 12 Sep 2024 09:48:25 -0400
Subject: [PATCH] Codemirror pinned

---
 .changelog/21715.txt | 3 +++
 ui/package.json      | 3 ++-
 ui/yarn.lock         | 8 ++++----
 3 files changed, 9 insertions(+), 5 deletions(-)
 create mode 100644 .changelog/21715.txt

diff --git a/.changelog/21715.txt b/.changelog/21715.txt
new file mode 100644
index 000000000000..1b9402193232
--- /dev/null
+++ b/.changelog/21715.txt
@@ -0,0 +1,3 @@
+```release-note:security
+ui: Pin a newer resolution of Codemirror
+```
diff --git a/ui/package.json b/ui/package.json
index cd95329705a8..8bcb89b941d9 100644
--- a/ui/package.json
+++ b/ui/package.json
@@ -23,7 +23,8 @@
     "xmlhttprequest-ssl": "^1.6.3",
     "ember-basic-dropdown": "3.0.21",
     "glob": "7.2.3",
-    "braces": "^3.0.0"
+    "braces": "^3.0.0",
+    "codemirror": "5.58.2"
   },
   "engines": {
     "node": "18"
diff --git a/ui/yarn.lock b/ui/yarn.lock
index b4196ad2eb6d..dc236b5a2217 100644
--- a/ui/yarn.lock
+++ b/ui/yarn.lock
@@ -5281,10 +5281,10 @@ code-point-at@^1.0.0:
   resolved "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz#0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
   integrity sha512-RpAVKQA5T63xEj6/giIbUEtZwJ4UFIc3ZtvEkiaUERylqe8xb5IvqcgOurZLahv93CLKfxcw5YI+DZcUBRyLXA==
 
-codemirror@~5.15.0:
-  version "5.15.2"
-  resolved "https://registry.npmjs.org/codemirror/-/codemirror-5.15.2.tgz#58b3dc732c6d10d7aae806f4c7cdd56a9b87fe8f"
-  integrity sha512-QHZClCGimKVK86/+K1YcKwa2/9pzy5OfAsv0nsXlPxxoWOhGc+HxPWQISnIrYMHwA5QCtiObxo5O/tmV4fzOSQ==
+codemirror@5.58.2, codemirror@~5.15.0:
+  version "5.58.2"
+  resolved "https://registry.npmjs.org/codemirror/-/codemirror-5.58.2.tgz#ed54a1796de1498688bea1cdd4e9eeb187565d1b"
+  integrity sha512-K/hOh24cCwRutd1Mk3uLtjWzNISOkm4fvXiMO7LucCrqbh6aJDdtqUziim3MZUI6wOY0rvY1SlL1Ork01uMy6w==
 
 collection-visit@^1.0.0:
   version "1.0.0"