chore: security update deps

package.json

@@ -53,22 +53,23 @@
     "@types/debug": "^4.1.7",
     "@types/express": "^4.17.13",
     "@types/source-map": "^0.5.7",
-    "@types/supertest": "^2.0.12",
+    "@types/supertest": "^6.0.3",
     "@typescript-eslint/eslint-plugin": "^7.10.0",
     "@typescript-eslint/parser": "^7.10.0",
-    "@vitest/coverage-v8": "^3.0.9",
+    "@vitest/coverage-v8": "^4.0.18",
     "busboy": "^1.6.0",
     "eslint": "^8.5.6",
     "eslint-config-prettier": "^8.3.0",
     "eslint-plugin-prettier": "^4.0.0",
-    "express": "^4.18.1",
+    "express": "^5.2.1",
     "husky": "^7.0.2",
+    "js-yaml": "4.1.1",
     "pinst": "^2.1.6",
     "pprof-format": "^2.1.0",
     "prettier": "^2.4.0",
-    "supertest": "^6.2.3",
-    "typescript": "^4.4.3",
-    "vitest": "^3.0.9"
+    "supertest": "^7.2.2",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18"
   },
   "engines": {
     "node": ">=v18"

src/pyroscope-api-exporter.ts

@@ -77,16 +77,32 @@ export class PyroscopeApiExporter implements ProfileExporter {
     return headers;
   }
 
+  private buildArrayBuffer(profileBuffer: Buffer): Uint8Array<ArrayBuffer> {
+    // A narrowing conversion since the profileBuffer can be an ArrayBuffer or SharedArrayBuffer
+    // (in practice, it's expected to be an ArrayBuffer).
+    let arrayBuffer: Uint8Array<ArrayBuffer>;
+    const { buffer, byteOffset, byteLength } = profileBuffer;
+    if (buffer instanceof ArrayBuffer) {
+      // Avoid a copy
+      arrayBuffer = new Uint8Array(buffer, byteOffset, byteLength);
+    } else {
+      // Need a copy if underlying buffer is shared
+      arrayBuffer = new Uint8Array(buffer, byteOffset, byteLength).slice();
+    }
+
+    return arrayBuffer;
+  }
+
   private async buildUploadProfileFormData(
     profile: Profile
   ): Promise<FormData> {
     const processedProfile: Profile = processProfile(profile);
-
     const profileBuffer: Buffer = await encode(processedProfile);
+    const arrayBuffer: Uint8Array<ArrayBuffer> =
+      this.buildArrayBuffer(profileBuffer);
 
     const formData: FormData = new FormData();
-
-    formData.append('profile', new Blob([profileBuffer]), 'profile');
+    formData.append('profile', new Blob([arrayBuffer]), 'profile');
 
     return formData;
   }