From 170c13a3722a52a96b0d7969cf75869f1431079b Mon Sep 17 00:00:00 2001
From: AlmaLinux RelEng Bot <eabdullin@almalinux.org>
Date: Wed, 27 May 2026 12:35:30 -0400
Subject: [PATCH] import UBI cockpit-356.1-1.el10_2

---
 .gitignore   | 4 ++--
 cockpit.spec | 9 +++++++--
 sources      | 4 ++--
 3 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/.gitignore b/.gitignore
index ec865ad..7f70eff 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,2 @@
-cockpit-356.tar.xz
-cockpit-node-356.tar.xz
+cockpit-356.1.tar.xz
+cockpit-node-356.1.tar.xz
diff --git a/cockpit.spec b/cockpit.spec
index e2ad29f..bd43d13 100644
--- a/cockpit.spec
+++ b/cockpit.spec
@@ -55,7 +55,7 @@ Summary:        Web Console for Linux servers
 License:        LGPL-2.1-or-later AND GPL-3.0-or-later AND MIT AND CC-BY-SA-3.0 AND BSD-3-Clause
 URL:            https://cockpit-project.org/
 
-Version:        356
+Version:        356.1
 Release:        1%{?dist}
 Source0:        https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-%{version}.tar.xz
 Source1:        https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-node-%{version}.tar.xz
@@ -381,7 +381,7 @@ Provides: bundled(npm(dequal)) = 2.0.3
 Provides: bundled(npm(focus-trap)) = 7.6.4
 Provides: bundled(npm(ipaddr.js)) = 2.3.0
 Provides: bundled(npm(json-stable-stringify-without-jsonify)) = 1.0.1
-Provides: bundled(npm(lodash)) = 4.17.23
+Provides: bundled(npm(lodash)) = 4.18.1
 Provides: bundled(npm(prop-types)) = 15.8.1
 Provides: bundled(npm(react)) = 18.3.1
 Provides: bundled(npm(react-dom)) = 18.3.1
@@ -665,6 +665,11 @@ via PackageKit.
 
 # The changelog is automatically generated and merged
 %changelog
+* Mon Apr 13 2026 Tomas Matus <tmatus@redhat.com> - 356.1-1
+- ws: Prevent remote code execution with SSH argument injection (RHEL-158306)
+- node: update lodash dependency (RHEL-164067)
+
+
 * Wed Feb 11 2026 Packit <hello@packit.dev> - 356-1
 - systemd: Allow editing timers created by Cockpit
 - Convert license headers to SPDX format
diff --git a/sources b/sources
index aca9848..836eeeb 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (cockpit-356.tar.xz) = 302fbe91657b136a2ed6a4361815d7f709851d19aaccf3801774142c7d08d7362ac60e4febb35f3068261b285dcbdf70399b542c5d5bc1f25159d2724cc44aa6
-SHA512 (cockpit-node-356.tar.xz) = b3e6cb71b7c76e850e7c7816954afe0de9d836d89d10ab3e136ac558b338d77e532103b514322161907af0e60a447da4056741f235e990999a740f7462313f03
+SHA512 (cockpit-356.1.tar.xz) = dd0e94d960e7b29b8c2b3cb4360f71744fd8c868bbb9e6a5d51af90791ee1d9aff2d14421ae2f2b1e1684816cae78e434d1ab9c28901212e634421e67235ef11
+SHA512 (cockpit-node-356.1.tar.xz) = a44a7295b44024eddaf92f82e4a29c44b2dcdea2babc568a4faf7a4ade052a0bec33d6ab546c0aff53799a54f9ae17795c20102bd83ad576aa4c2a407345a62b