From 42be72d7aa83b7dec29e0582f6c51559f2c73f48 Mon Sep 17 00:00:00 2001
From: Asad Raza <asad.raza@usercentrics-ext.com>
Date: Mon, 28 Sep 2026 16:01:54 +0100
Subject: [PATCH] fix(sample): bump transitive ws to patched versions

MSDK-4150: ws 7.5.10 (via react-devtools-core, metro) upgraded to 7.5.11
MSDK-4148: ws 6.2.3 (via @react-native-community/cli) upgraded to 6.2.4

Both resolve CVE-2026-48779 in the ws sub-dependency, using scoped
npm overrides so each ws major line is patched independently.
---
 sample/package-lock.json | 20 ++++++++++----------
 sample/package.json      |  4 +++-
 2 files changed, 13 insertions(+), 11 deletions(-)

diff --git a/sample/package-lock.json b/sample/package-lock.json
index 42c5183..35300ae 100644
--- a/sample/package-lock.json
+++ b/sample/package-lock.json
@@ -9813,9 +9813,9 @@
       }
     },
     "node_modules/metro/node_modules/ws": {
-      "version": "7.5.10",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-7.5.10.tgz",
-      "integrity": "sha512-+dbF1tHwZpXcbOJdVOkzLDxZP1ailvSxM6ZweXTegylPny803bFhA+vqBYw4s31NSAk4S2Qz+AKXK9a4wkdjcQ==",
+      "version": "7.5.11",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-7.5.11.tgz",
+      "integrity": "sha512-zS54Oen9bITtp7kp2XM3AydrCIq1D+HwJOuH+c+e4LfpL/lotP5osijd+UoMnxwAam1GN8R4KtLAyIrIcBNpiA==",
       "license": "MIT",
       "engines": {
         "node": ">=8.3.0"
@@ -10913,9 +10913,9 @@
       }
     },
     "node_modules/react-devtools-core/node_modules/ws": {
-      "version": "7.5.10",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-7.5.10.tgz",
-      "integrity": "sha512-+dbF1tHwZpXcbOJdVOkzLDxZP1ailvSxM6ZweXTegylPny803bFhA+vqBYw4s31NSAk4S2Qz+AKXK9a4wkdjcQ==",
+      "version": "7.5.11",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-7.5.11.tgz",
+      "integrity": "sha512-zS54Oen9bITtp7kp2XM3AydrCIq1D+HwJOuH+c+e4LfpL/lotP5osijd+UoMnxwAam1GN8R4KtLAyIrIcBNpiA==",
       "license": "MIT",
       "engines": {
         "node": ">=8.3.0"
@@ -12515,7 +12515,7 @@
       "version": "5.3.3",
       "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.3.3.tgz",
       "integrity": "sha512-pXWcraxM0uxAS+tN0AG/BF2TyqmHO014Z070UsJ+pFvYuRSq8KH8DmWpnbXe0pEPDHXZV3FcAbJkijJ5oNEnWw==",
-      "dev": true,
+      "devOptional": true,
       "license": "Apache-2.0",
       "bin": {
         "tsc": "bin/tsc",
@@ -12906,9 +12906,9 @@
       }
     },
     "node_modules/ws": {
-      "version": "6.2.3",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-6.2.3.tgz",
-      "integrity": "sha512-jmTjYU0j60B+vHey6TfR3Z7RD61z/hmxBS3VMSGIrroOWXQEneK1zNuotOUrGyBHQj0yrpsLHPWtigEFd13ndA==",
+      "version": "6.2.4",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-6.2.4.tgz",
+      "integrity": "sha512-PNIUUyLI5YpkJZj60YBzX1o0ByQ4ovvfmq9N/Kig/PAYbVlGyz4R6G0SEWrD0O9acc0sT2+IdMBVLFv8FSi0Nw==",
       "license": "MIT",
       "dependencies": {
         "async-limiter": "~1.0.0"
diff --git a/sample/package.json b/sample/package.json
index bf4dd66..cd36854 100644
--- a/sample/package.json
+++ b/sample/package.json
@@ -61,7 +61,9 @@
     "typescript": "~5.3.0"
   },
   "overrides": {
-    "shell-quote": ">=1.9.0"
+    "shell-quote": ">=1.9.0",
+    "ws@6.2.3": "6.2.4",
+    "ws@7.5.10": "7.5.11"
   },
   "engines": {
     "node": ">=20.19.4"