(security)(RCE) Upgrade jsonpath-plus to @^10.0.0

[adrsimon]

Hello,

Snyk reported a security issue in one of my repos, because of one of the dependencies used by dd-trace-js.
You can find the report here : https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-7945884

dd-trace-js uses jsonpath-plus@^9.0.0 which contains a RCE.

The only thing to do is upgrade the lib.

Thanks !

[AidenPoultonProlific]

We're using pnpm and adding the following to package.json at least bumped the dependency for us, a quick ephemeral deployment shows tracing is still working however it's hard to say there aren't side-effects from this, so I would tread carefully if you're pushing this out to production. (especially ahead of the weekend)

 "pnpm": {
    "overrides": {
      "jsonpath-plus": "10.0.0"
    }
  }

[monwolf]

For searching purposes, this relates to CVE-2024-21534