[CVE-2022-25851][1.x] Bump jpeg-js from 0.4.1 to 0.4.4

[ananzh]

Issue Resolve

#1725

Backport PR

#1753

Description

The package jpeg-js before 0.4.4 is vulnerable to Denial of Service (DoS) where a particular piece of input will cause to enter an infinite loop and never return. In 1.x, we are currently using 0.4.1.

ubuntu@ip-172-31-55-237:~/work/OpenSearch-Dashboards$ yarn why jpeg-js
yarn why v1.22.19
[1/4] Why do we have the module "jpeg-js"...?
[2/4] Initialising dependency graph...
warning Resolution field "typescript@4.0.2" is incompatible with requested version "typescript@~3.7.2"
warning Resolution field "shelljs@0.8.5" is incompatible with requested version "shelljs@^0.6.0"
[3/4] Finding dependency...
[4/4] Calculating file sizes...
=> Found "jpeg-js@0.4.1"
info Reasons this module exists
   - "_project_#jimp#@jimp#types#@jimp#jpeg" depends on it
   - Hoisted from "_project_#jimp#@jimp#types#@jimp#jpeg#jpeg-js"
info Disk size without dependencies: "252KB"
info Disk size with unique dependencies: "252KB"
info Disk size with transitive dependencies: "252KB"
info Number of shared dependencies: 0
Done in 1.03s.

There is no breaking change between 0.4.1 and 0.4.4. Just backport this fix PR here to 1.x.

Check List

• All tests pass
  • yarn test:jest
  • yarn test:jest_integration
  • yarn test:ftr
• New functionality includes testing.
• New functionality has been documented.
• Update CHANGELOG.md
• Commits are signed per the DCO using --signoff

[codecov-commenter]

Codecov Report

Merging #3741 (27ec0f6) into 1.x (53d2d91) will increase coverage by 0.00%.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@           Coverage Diff           @@
##              1.x    #3741   +/-   ##
=======================================
  Coverage   67.49%   67.50%           
=======================================
  Files        3044     3044           
  Lines       58692    58692           
  Branches     8902     8902           
=======================================
+ Hits        39617    39619    +2     
+ Misses      16926    16925    -1     
+ Partials     2149     2148    -1     

Flag	Coverage Δ
Linux	67.45% <ø> (ø)
Windows	67.45% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

see 1 file with indirect coverage changes

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.