From f39978383d853431964bd94ea627bcc020b79c81 Mon Sep 17 00:00:00 2001
From: chetan-contentstack <chetan.narkhede@contentstack>
Date: Mon, 10 Aug 2026 11:15:37 +0530
Subject: [PATCH] chore(deps): bump immutable to clear Snyk SLA breach

immutable@5.1.5 (transitive via sass) has two high-severity CVEs
(CVE-2026-59880, CVE-2026-59879) with fixes available since 5.1.6.
Bumps the ui override floor to >=5.1.9 (latest).
---
 ui/package-lock.json | 7 +++----
 ui/package.json      | 2 +-
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/ui/package-lock.json b/ui/package-lock.json
index 80f9dc77..0a9948f7 100644
--- a/ui/package-lock.json
+++ b/ui/package-lock.json
@@ -6362,10 +6362,9 @@
       }
     },
     "node_modules/immutable": {
-      "version": "5.1.5",
-      "resolved": "https://registry.npmjs.org/immutable/-/immutable-5.1.5.tgz",
-      "integrity": "sha512-t7xcm2siw+hlUM68I+UEOK+z84RzmN59as9DZ7P1l0994DKUWV7UXBMQZVxaoMSRQ+PBZbHCOoBt7a2wxOMt+A==",
-      "license": "MIT"
+      "version": "5.1.9",
+      "resolved": "https://registry.npmjs.org/immutable/-/immutable-5.1.9.tgz",
+      "integrity": "sha512-m8nVez3rwrgmWxtLMt1ZYXB2Lv7OKYn/disyxAlSDYAlKSlFoPPfIAmAM/M5xqL4m4C/wAPw7S2/CNaUii1Hxg=="
     },
     "node_modules/import-fresh": {
       "version": "3.3.1",
diff --git a/ui/package.json b/ui/package.json
index 75ab8f4a..270486df 100644
--- a/ui/package.json
+++ b/ui/package.json
@@ -61,7 +61,7 @@
   },
   "overrides": {
     "@babel/runtime": ">=7.26.10",
-    "immutable": ">=5.1.5",
+    "immutable": ">=5.1.9",
     "lodash-es": "^4.18.1",
     "minimatch": ">=10.2.3",
     "rollup": ">=4.59.0",