This run took 86 seconds.
$ date --- stdout --- Sun Jun 30 04:00:01 UTC 2024 --- end --- $ git clone file:///srv/git/mediawiki-extensions-EntitySchema.git repo --depth=1 -b REL1_41 --- stderr --- Cloning into 'repo'... --- stdout --- --- end --- $ git config user.name libraryupgrader --- stdout --- --- end --- $ git config user.email tools.libraryupgrader@tools.wmflabs.org --- stdout --- --- end --- $ git submodule update --init --- stdout --- --- end --- $ grr init --- stdout --- Installed commit-msg hook. --- end --- $ git show-ref refs/heads/REL1_41 --- stdout --- c69bc1feb5bb7c7c9d9f7151a6ec18a1b1fef98f refs/heads/REL1_41 --- end --- $ /usr/bin/npm audit --json --- stdout --- { "auditReportVersion": 2, "vulnerabilities": { "braces": { "name": "braces", "severity": "high", "isDirect": false, "via": [ { "source": 1097496, "name": "braces", "dependency": "braces", "title": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "severity": "high", "cwe": [ "CWE-1050" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<3.0.3" } ], "effects": [], "range": "<3.0.3", "nodes": [ "node_modules/braces" ], "fixAvailable": true }, "eslint-plugin-compat": { "name": "eslint-plugin-compat", "severity": "moderate", "isDirect": false, "via": [ "semver" ], "effects": [], "range": "3.6.0-0 - 4.1.4", "nodes": [ "node_modules/eslint-plugin-compat" ], "fixAvailable": true }, "get-func-name": { "name": "get-func-name", "severity": "high", "isDirect": false, "via": [ { "source": 1094574, "name": "get-func-name", "dependency": "get-func-name", "title": "Chaijs/get-func-name vulnerable to ReDoS", "url": "https://github.com/advisories/GHSA-4q6p-r6v2-jvc5", "severity": "high", "cwe": [ "CWE-400", "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<2.0.1" } ], "effects": [], "range": "<2.0.1", "nodes": [ "node_modules/get-func-name" ], "fixAvailable": true }, "semver": { "name": "semver", "severity": "moderate", "isDirect": false, "via": [ { "source": 1096482, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": ">=7.0.0 <7.5.2" }, { "source": 1096483, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<5.7.2" }, { "source": 1096484, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": ">=6.0.0 <6.3.1" } ], "effects": [ "eslint-plugin-compat" ], "range": "<=5.7.1 || 6.0.0 - 6.3.0 || 7.0.0 - 7.5.1", "nodes": [ "node_modules/eslint-plugin-compat/node_modules/semver", "node_modules/eslint-plugin-node/node_modules/semver", "node_modules/normalize-package-data/node_modules/semver", "node_modules/npm-run-all/node_modules/semver" ], "fixAvailable": true }, "word-wrap": { "name": "word-wrap", "severity": "moderate", "isDirect": false, "via": [ { "source": 1097681, "name": "word-wrap", "dependency": "word-wrap", "title": "word-wrap vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<1.2.4" } ], "effects": [], "range": "<1.2.4", "nodes": [ "node_modules/word-wrap" ], "fixAvailable": true } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 3, "high": 2, "critical": 0, "total": 5 }, "dependencies": { "prod": 1, "dev": 605, "optional": 2, "peer": 0, "peerOptional": 0, "total": 605 } } } --- end --- $ /usr/bin/composer install --- stderr --- No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information. Loading composer repositories with package information Updating dependencies Lock file operations: 37 installs, 0 updates, 0 removals - Locking composer/pcre (3.1.4) - Locking composer/semver (3.3.2) - Locking composer/spdx-licenses (1.5.8) - Locking composer/xdebug-handler (3.0.5) - Locking diff/diff (3.3.1) - Locking doctrine/deprecations (1.1.3) - Locking felixfbecker/advanced-json-rpc (v3.2.1) - Locking mediawiki/mediawiki-codesniffer (v42.0.0) - Locking mediawiki/mediawiki-phan-config (0.13.0) - Locking mediawiki/minus-x (1.1.1) - Locking mediawiki/phan-taint-check-plugin (5.0.0) - Locking microsoft/tolerant-php-parser (v0.1.2) - Locking netresearch/jsonmapper (v4.4.1) - Locking phan/phan (5.4.2) - Locking php-parallel-lint/php-console-color (v1.0.1) - Locking php-parallel-lint/php-console-highlighter (v1.0.0) - Locking php-parallel-lint/php-parallel-lint (v1.3.2) - Locking phpdocumentor/reflection-common (2.2.0) - Locking phpdocumentor/reflection-docblock (5.4.1) - Locking phpdocumentor/type-resolver (1.8.2) - Locking phpstan/phpdoc-parser (1.29.1) - Locking psr/container (2.0.2) - Locking psr/log (2.0.0) - Locking sabre/event (5.1.4) - Locking squizlabs/php_codesniffer (3.7.2) - Locking symfony/console (v5.4.41) - Locking symfony/deprecation-contracts (v3.5.0) - Locking symfony/polyfill-ctype (v1.30.0) - Locking symfony/polyfill-intl-grapheme (v1.30.0) - Locking symfony/polyfill-intl-normalizer (v1.30.0) - Locking symfony/polyfill-mbstring (v1.30.0) - Locking symfony/polyfill-php73 (v1.30.0) - Locking symfony/polyfill-php80 (v1.30.0) - Locking symfony/service-contracts (v3.5.0) - Locking symfony/string (v6.4.9) - Locking tysonandre/var_representation_polyfill (0.1.3) - Locking webmozart/assert (1.11.0) Writing lock file Installing dependencies from lock file (including require-dev) Package operations: 37 installs, 0 updates, 0 removals 0 [>---------------------------] 0 [->--------------------------] - Installing composer/pcre (3.1.4): Extracting archive - Installing diff/diff (3.3.1): Extracting archive - Installing symfony/polyfill-php80 (v1.30.0): Extracting archive - Installing squizlabs/php_codesniffer (3.7.2): Extracting archive - Installing symfony/polyfill-mbstring (v1.30.0): Extracting archive - Installing composer/spdx-licenses (1.5.8): Extracting archive - Installing composer/semver (3.3.2): Extracting archive - Installing mediawiki/mediawiki-codesniffer (v42.0.0): Extracting archive - Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive - Installing symfony/polyfill-intl-normalizer (v1.30.0): Extracting archive - Installing symfony/polyfill-intl-grapheme (v1.30.0): Extracting archive - Installing symfony/polyfill-ctype (v1.30.0): Extracting archive - Installing symfony/string (v6.4.9): Extracting archive - Installing symfony/deprecation-contracts (v3.5.0): Extracting archive - Installing psr/container (2.0.2): Extracting archive - Installing symfony/service-contracts (v3.5.0): Extracting archive - Installing symfony/polyfill-php73 (v1.30.0): Extracting archive - Installing symfony/console (v5.4.41): Extracting archive - Installing sabre/event (5.1.4): Extracting archive - Installing netresearch/jsonmapper (v4.4.1): Extracting archive - Installing microsoft/tolerant-php-parser (v0.1.2): Extracting archive - Installing webmozart/assert (1.11.0): Extracting archive - Installing phpstan/phpdoc-parser (1.29.1): Extracting archive - Installing phpdocumentor/reflection-common (2.2.0): Extracting archive - Installing doctrine/deprecations (1.1.3): Extracting archive - Installing phpdocumentor/type-resolver (1.8.2): Extracting archive - Installing phpdocumentor/reflection-docblock (5.4.1): Extracting archive - Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive - Installing psr/log (2.0.0): Extracting archive - Installing composer/xdebug-handler (3.0.5): Extracting archive - Installing phan/phan (5.4.2): Extracting archive - Installing mediawiki/phan-taint-check-plugin (5.0.0): Extracting archive - Installing mediawiki/mediawiki-phan-config (0.13.0): Extracting archive - Installing mediawiki/minus-x (1.1.1): Extracting archive - Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive - Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive - Installing php-parallel-lint/php-parallel-lint (v1.3.2): Extracting archive 0/37 [>---------------------------] 0% 19/37 [==============>-------------] 51% 30/37 [======================>-----] 81% 37/37 [============================] 100% 3 package suggestions were added by new dependencies, use `composer suggest` to see details. Generating autoload files 15 packages you are using are looking for funding. Use the `composer fund` command to find out more! --- stdout --- --- end --- $ /usr/bin/npm audit --json --- stdout --- { "auditReportVersion": 2, "vulnerabilities": { "braces": { "name": "braces", "severity": "high", "isDirect": false, "via": [ { "source": 1097496, "name": "braces", "dependency": "braces", "title": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "severity": "high", "cwe": [ "CWE-1050" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<3.0.3" } ], "effects": [], "range": "<3.0.3", "nodes": [ "node_modules/braces" ], "fixAvailable": true }, "eslint-plugin-compat": { "name": "eslint-plugin-compat", "severity": "moderate", "isDirect": false, "via": [ "semver" ], "effects": [], "range": "3.6.0-0 - 4.1.4", "nodes": [ "node_modules/eslint-plugin-compat" ], "fixAvailable": true }, "get-func-name": { "name": "get-func-name", "severity": "high", "isDirect": false, "via": [ { "source": 1094574, "name": "get-func-name", "dependency": "get-func-name", "title": "Chaijs/get-func-name vulnerable to ReDoS", "url": "https://github.com/advisories/GHSA-4q6p-r6v2-jvc5", "severity": "high", "cwe": [ "CWE-400", "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<2.0.1" } ], "effects": [], "range": "<2.0.1", "nodes": [ "node_modules/get-func-name" ], "fixAvailable": true }, "semver": { "name": "semver", "severity": "moderate", "isDirect": false, "via": [ { "source": 1096482, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": ">=7.0.0 <7.5.2" }, { "source": 1096483, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<5.7.2" }, { "source": 1096484, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": ">=6.0.0 <6.3.1" } ], "effects": [ "eslint-plugin-compat" ], "range": "<=5.7.1 || 6.0.0 - 6.3.0 || 7.0.0 - 7.5.1", "nodes": [ "node_modules/eslint-plugin-compat/node_modules/semver", "node_modules/eslint-plugin-node/node_modules/semver", "node_modules/normalize-package-data/node_modules/semver", "node_modules/npm-run-all/node_modules/semver" ], "fixAvailable": true }, "word-wrap": { "name": "word-wrap", "severity": "moderate", "isDirect": false, "via": [ { "source": 1097681, "name": "word-wrap", "dependency": "word-wrap", "title": "word-wrap vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<1.2.4" } ], "effects": [], "range": "<1.2.4", "nodes": [ "node_modules/word-wrap" ], "fixAvailable": true } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 3, "high": 2, "critical": 0, "total": 5 }, "dependencies": { "prod": 1, "dev": 605, "optional": 2, "peer": 0, "peerOptional": 0, "total": 605 } } } --- end --- Attempting to npm audit fix $ /usr/bin/npm audit fix --dry-run --only=dev --json --- stderr --- npm WARN invalid config only="dev" set in command line options npm WARN invalid config Must be one of: null, prod, production npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@es-joy/jsdoccomment@0.23.6', npm WARN EBADENGINE required: { node: '^12 || ^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: 'eslint-plugin-jsdoc@39.2.2', npm WARN EBADENGINE required: { node: '^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } --- stdout --- { "added": 603, "removed": 0, "changed": 0, "audited": 604, "funding": 173, "audit": { "auditReportVersion": 2, "vulnerabilities": { "braces": { "name": "braces", "severity": "high", "isDirect": false, "via": [ { "source": 1097496, "name": "braces", "dependency": "braces", "title": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "severity": "high", "cwe": [ "CWE-1050" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<3.0.3" } ], "effects": [], "range": "<3.0.3", "nodes": [ "" ], "fixAvailable": true }, "eslint-plugin-compat": { "name": "eslint-plugin-compat", "severity": "moderate", "isDirect": false, "via": [ "semver" ], "effects": [], "range": "3.6.0-0 - 4.1.4", "nodes": [ "" ], "fixAvailable": true }, "get-func-name": { "name": "get-func-name", "severity": "high", "isDirect": false, "via": [ { "source": 1094574, "name": "get-func-name", "dependency": "get-func-name", "title": "Chaijs/get-func-name vulnerable to ReDoS", "url": "https://github.com/advisories/GHSA-4q6p-r6v2-jvc5", "severity": "high", "cwe": [ "CWE-400", "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<2.0.1" } ], "effects": [], "range": "<2.0.1", "nodes": [ "" ], "fixAvailable": true }, "semver": { "name": "semver", "severity": "moderate", "isDirect": false, "via": [ { "source": 1096482, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": ">=7.0.0 <7.5.2" }, { "source": 1096483, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<5.7.2" }, { "source": 1096484, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": ">=6.0.0 <6.3.1" } ], "effects": [ "eslint-plugin-compat" ], "range": "<=5.7.1 || 6.0.0 - 6.3.0 || 7.0.0 - 7.5.1", "nodes": [ "", "", "", "" ], "fixAvailable": true }, "word-wrap": { "name": "word-wrap", "severity": "moderate", "isDirect": false, "via": [ { "source": 1097681, "name": "word-wrap", "dependency": "word-wrap", "title": "word-wrap vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "severity": "moderate", "cwe": [ "CWE-1333" ], "cvss": { "score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<1.2.4" } ], "effects": [], "range": "<1.2.4", "nodes": [ "" ], "fixAvailable": true } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 3, "high": 2, "critical": 0, "total": 5 }, "dependencies": { "prod": 1, "dev": 603, "optional": 2, "peer": 0, "peerOptional": 0, "total": 603 } } } } --- end --- {"added": 603, "removed": 0, "changed": 0, "audited": 604, "funding": 173, "audit": {"auditReportVersion": 2, "vulnerabilities": {"braces": {"name": "braces", "severity": "high", "isDirect": false, "via": [{"source": 1097496, "name": "braces", "dependency": "braces", "title": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "severity": "high", "cwe": ["CWE-1050"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.3"}], "effects": [], "range": "<3.0.3", "nodes": [""], "fixAvailable": true}, "eslint-plugin-compat": {"name": "eslint-plugin-compat", "severity": "moderate", "isDirect": false, "via": ["semver"], "effects": [], "range": "3.6.0-0 - 4.1.4", "nodes": [""], "fixAvailable": true}, "get-func-name": {"name": "get-func-name", "severity": "high", "isDirect": false, "via": [{"source": 1094574, "name": "get-func-name", "dependency": "get-func-name", "title": "Chaijs/get-func-name vulnerable to ReDoS", "url": "https://github.com/advisories/GHSA-4q6p-r6v2-jvc5", "severity": "high", "cwe": ["CWE-400", "CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<2.0.1"}], "effects": [], "range": "<2.0.1", "nodes": [""], "fixAvailable": true}, "semver": {"name": "semver", "severity": "moderate", "isDirect": false, "via": [{"source": 1096482, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=7.0.0 <7.5.2"}, {"source": 1096483, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": "<5.7.2"}, {"source": 1096484, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=6.0.0 <6.3.1"}], "effects": ["eslint-plugin-compat"], "range": "<=5.7.1 || 6.0.0 - 6.3.0 || 7.0.0 - 7.5.1", "nodes": ["", "", "", ""], "fixAvailable": true}, "word-wrap": {"name": "word-wrap", "severity": "moderate", "isDirect": false, "via": [{"source": 1097681, "name": "word-wrap", "dependency": "word-wrap", "title": "word-wrap vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": "<1.2.4"}], "effects": [], "range": "<1.2.4", "nodes": [""], "fixAvailable": true}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 3, "high": 2, "critical": 0, "total": 5}, "dependencies": {"prod": 1, "dev": 603, "optional": 2, "peer": 0, "peerOptional": 0, "total": 603}}}} $ /usr/bin/npm audit fix --only=dev --- stderr --- npm WARN invalid config only="dev" set in command line options npm WARN invalid config Must be one of: null, prod, production npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@es-joy/jsdoccomment@0.23.6', npm WARN EBADENGINE required: { node: '^12 || ^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: 'eslint-plugin-jsdoc@39.2.2', npm WARN EBADENGINE required: { node: '^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN deprecated formidable@1.2.6: Please upgrade to latest, formidable@v2 or formidable@v3! Check these notes: https://bit.ly/2ZEqIau npm WARN deprecated superagent@6.1.0: Please upgrade to v7.0.2+ of superagent. We have fixed numerous issues with streams, form-data, attach(), filesystem errors not bubbling up (ENOENT on attach()), and all tests are now passing. See the releases tab for more information at <https://github.com/visionmedia/superagent/releases>. npm ERR! code 1 npm ERR! path /src/repo/node_modules/cypress npm ERR! command failed npm ERR! command sh -c node index.js --exec install npm ERR! Note: Overriding Cypress cache directory to: ./cypress/.cache npm ERR! npm ERR! Previous installs of Cypress may not be found. npm ERR! npm ERR! Installing Cypress (version: 13.3.0) npm ERR! npm ERR! [STARTED] Task without title. npm ERR! [TITLE] Downloading Cypress 0% 0s npm ERR! [TITLE] Downloading Cypress 4% 2s npm ERR! [TITLE] Downloading Cypress 10% 2s npm ERR! [TITLE] Downloading Cypress 16% 2s npm ERR! [TITLE] Downloading Cypress 26% 1s npm ERR! [TITLE] Downloading Cypress 32% 1s npm ERR! [TITLE] Downloading Cypress 39% 1s npm ERR! [TITLE] Downloading Cypress 50% 1s npm ERR! [TITLE] Downloading Cypress 60% 1s npm ERR! [TITLE] Downloading Cypress 70% 0s npm ERR! [TITLE] Downloading Cypress 80% 0s npm ERR! [TITLE] Downloading Cypress 91% 0s npm ERR! [TITLE] Downloading Cypress 99% 0s npm ERR! [TITLE] Downloaded Cypress npm ERR! [SUCCESS] Downloaded Cypress npm ERR! [STARTED] Task without title. npm ERR! [TITLE] Unzipping Cypress 0% 0s npm ERR! [TITLE] Unzipping Cypress 1% 322s npm ERR! [TITLE] Unzipping Cypress 1% 323s npm ERR! [TITLE] Unzipping Cypress 1% 324s npm ERR! [TITLE] Unzipping Cypress 1% 325s npm ERR! [TITLE] Unzipping Cypress 1% 328s npm ERR! [TITLE] Unzipping Cypress 1% 329s npm ERR! [TITLE] Unzipping Cypress 1% 330s npm ERR! [TITLE] Unzipping Cypress 1% 331s npm ERR! [TITLE] Unzipping Cypress 1% 334s npm ERR! [TITLE] Unzipping Cypress 1% 335s npm ERR! [TITLE] Unzipping Cypress 1% 336s npm ERR! [TITLE] Unzipping Cypress 1% 337s npm ERR! [TITLE] Unzipping Cypress 1% 342s npm ERR! [TITLE] Unzipping Cypress 1% 348s npm ERR! [TITLE] Unzipping Cypress 1% 349s npm ERR! [TITLE] Unzipping Cypress 2% 173s npm ERR! [TITLE] Unzipping Cypress 2% 174s npm ERR! [TITLE] Unzipping Cypress 2% 175s npm ERR! [TITLE] Unzipping Cypress 2% 176s npm ERR! [TITLE] Unzipping Cypress 3% 116s npm ERR! [TITLE] Unzipping Cypress 3% 117s npm ERR! [TITLE] Unzipping Cypress 4% 87s npm ERR! [TITLE] Unzipping Cypress 4% 88s npm ERR! [TITLE] Unzipping Cypress 5% 70s npm ERR! [TITLE] Unzipping Cypress 6% 58s npm ERR! [TITLE] Unzipping Cypress 7% 50s npm ERR! [TITLE] Unzipping Cypress 8% 43s npm ERR! [TITLE] Unzipping Cypress 8% 44s npm ERR! [TITLE] Unzipping Cypress 9% 38s npm ERR! [TITLE] Unzipping Cypress 9% 39s npm ERR! [TITLE] Unzipping Cypress 9% 45s npm ERR! [TITLE] Unzipping Cypress 10% 40s npm ERR! [TITLE] Unzipping Cypress 10% 41s npm ERR! [TITLE] Unzipping Cypress 11% 37s npm ERR! [TITLE] Unzipping Cypress 12% 33s npm ERR! [TITLE] Unzipping Cypress 12% 34s npm ERR! [TITLE] Unzipping Cypress 13% 31s npm ERR! [TITLE] Unzipping Cypress 14% 28s npm ERR! [TITLE] Unzipping Cypress 14% 30s npm ERR! [TITLE] Unzipping Cypress 15% 28s npm ERR! [TITLE] Unzipping Cypress 16% 26s npm ERR! [TITLE] Unzipping Cypress 17% 24s npm ERR! [TITLE] Unzipping Cypress 18% 23s npm ERR! [TITLE] Unzipping Cypress 19% 21s npm ERR! [TITLE] Unzipping Cypress 20% 20s npm ERR! [TITLE] Unzipping Cypress 21% 19s npm ERR! [TITLE] Unzipping Cypress 22% 18s npm ERR! [TITLE] Unzipping Cypress 23% 17s npm ERR! [TITLE] Unzipping Cypress 23% 18s npm ERR! [TITLE] Unzipping Cypress 24% 17s npm ERR! [TITLE] Unzipping Cypress 25% 16s npm ERR! [TITLE] Unzipping Cypress 26% 15s npm ERR! [TITLE] Unzipping Cypress 27% 14s npm ERR! [TITLE] Unzipping Cypress 28% 14s npm ERR! [TITLE] Unzipping Cypress 29% 13s npm ERR! [TITLE] Unzipping Cypress 30% 13s npm ERR! [TITLE] Unzipping Cypress 31% 12s npm ERR! [TITLE] Unzipping Cypress 32% 12s npm ERR! [TITLE] Unzipping Cypress 33% 11s npm ERR! [TITLE] Unzipping Cypress 34% 11s npm ERR! [TITLE] Unzipping Cypress 34% 12s npm ERR! [TITLE] Unzipping Cypress 34% 17s npm ERR! [TITLE] Unzipping Cypress 34% 26s npm ERR! [TITLE] Unzipping Cypress 34% 27s npm ERR! [TITLE] Unzipping Cypress 34% 28s npm ERR! [TITLE] Unzipping Cypress 34% 29s npm ERR! [TITLE] Unzipping Cypress 34% 30s npm ERR! [TITLE] Unzipping Cypress 34% 31s npm ERR! [TITLE] Unzipping Cypress 35% 30s npm ERR! [TITLE] Unzipping Cypress 35% 31s npm ERR! [TITLE] Unzipping Cypress 35% 32s npm ERR! [TITLE] Unzipping Cypress 35% 33s npm ERR! [TITLE] Unzipping Cypress 36% 32s npm ERR! [TITLE] Unzipping Cypress 36% 33s npm ERR! [TITLE] Unzipping Cypress 36% 34s npm ERR! [TITLE] Unzipping Cypress 36% 35s npm ERR! [TITLE] Unzipping Cypress 37% 33s npm ERR! [TITLE] Unzipping Cypress 37% 34s npm ERR! [TITLE] Unzipping Cypress 38% 32s npm ERR! [TITLE] Unzipping Cypress 38% 33s npm ERR! [TITLE] Unzipping Cypress 39% 31s npm ERR! [TITLE] Unzipping Cypress 39% 32s npm ERR! [TITLE] Unzipping Cypress 40% 31s npm ERR! [TITLE] Unzipping Cypress 41% 30s npm ERR! [TITLE] Unzipping Cypress 42% 29s npm ERR! [TITLE] Unzipping Cypress 42% 30s npm ERR! [TITLE] Unzipping Cypress 43% 29s npm ERR! [TITLE] Unzipping Cypress 44% 28s npm ERR! [TITLE] Unzipping Cypress 45% 27s npm ERR! [TITLE] Unzipping Cypress 45% 28s npm ERR! [TITLE] Unzipping Cypress 46% 27s npm ERR! [TITLE] Unzipping Cypress 47% 26s npm ERR! [TITLE] Unzipping Cypress 47% 28s npm ERR! [TITLE] Unzipping Cypress 48% 27s npm ERR! [TITLE] Unzipping Cypress 49% 26s npm ERR! [TITLE] Unzipping Cypress 50% 25s npm ERR! [TITLE] Unzipping Cypress 50% 26s npm ERR! [TITLE] Unzipping Cypress 51% 25s npm ERR! [TITLE] Unzipping Cypress 52% 24s npm ERR! [TITLE] Unzipping Cypress 53% 23s npm ERR! [TITLE] Unzipping Cypress 53% 24s npm ERR! [TITLE] Unzipping Cypress 54% 23s npm ERR! [TITLE] Unzipping Cypress 55% 22s npm ERR! [TITLE] Unzipping Cypress 56% 21s npm ERR! [TITLE] Unzipping Cypress 56% 22s npm ERR! [TITLE] Unzipping Cypress 57% 21s npm ERR! [TITLE] Unzipping Cypress 58% 20s npm ERR! [TITLE] Unzipping Cypress 58% 21s npm ERR! [TITLE] Unzipping Cypress 59% 20s npm ERR! [TITLE] Unzipping Cypress 60% 19s npm ERR! [TITLE] Unzipping Cypress 61% 19s npm ERR! [TITLE] Unzipping Cypress 62% 18s npm ERR! [TITLE] Unzipping Cypress 63% 18s npm ERR! [TITLE] Unzipping Cypress 64% 17s npm ERR! [TITLE] Unzipping Cypress 65% 16s npm ERR! [TITLE] Unzipping Cypress 65% 17s npm ERR! [TITLE] Unzipping Cypress 66% 16s npm ERR! [TITLE] Unzipping Cypress 67% 15s npm ERR! [TITLE] Unzipping Cypress 67% 16s npm ERR! [TITLE] Unzipping Cypress 68% 15s npm ERR! [TITLE] Unzipping Cypress 69% 14s npm ERR! [TITLE] Unzipping Cypress 69% 15s npm ERR! [TITLE] Unzipping Cypress 70% 14s npm ERR! [TITLE] Unzipping Cypress 71% 13s npm ERR! [TITLE] Unzipping Cypress 71% 14s npm ERR! [TITLE] Unzipping Cypress 72% 13s npm ERR! [TITLE] Unzipping Cypress 73% 12s npm ERR! [TITLE] Unzipping Cypress 73% 13s npm ERR! [TITLE] Unzipping Cypress 74% 12s npm ERR! [TITLE] Unzipping Cypress 75% 11s npm ERR! [TITLE] Unzipping Cypress 75% 12s npm ERR! [TITLE] Unzipping Cypress 76% 11s npm ERR! [TITLE] Unzipping Cypress 77% 11s npm ERR! [TITLE] Unzipping Cypress 78% 10s npm ERR! The Cypress App could not be unzipped. npm ERR! npm ERR! Search for an existing issue or open a GitHub issue at npm ERR! npm ERR! https://github.com/cypress-io/cypress/issues npm ERR! npm ERR! ---------- npm ERR! npm ERR! Error: ENOSPC: no space left on device, open '/src/repo/cypress/.cache/13.3.0/Cypress/resources/app/node_modules/lodash/_getTag.js' npm ERR! npm ERR! ---------- npm ERR! npm ERR! Platform: linux-x64 (Debian - 12.5) npm ERR! Cypress Version: 13.3.0 npm ERR! [FAILED] The Cypress App could not be unzipped. npm ERR! [FAILED] npm ERR! [FAILED] Search for an existing issue or open a GitHub issue at npm ERR! [FAILED] npm ERR! [FAILED] https://github.com/cypress-io/cypress/issues npm ERR! [FAILED] npm ERR! [FAILED] ---------- npm ERR! [FAILED] npm ERR! [FAILED] Error: ENOSPC: no space left on device, open '/src/repo/cypress/.cache/13.3.0/Cypress/resources/app/node_modules/lodash/_getTag.js' npm ERR! [FAILED] npm ERR! [FAILED] ---------- npm ERR! [FAILED] npm ERR! [FAILED] Platform: linux-x64 (Debian - 12.5) npm ERR! [FAILED] Cypress Version: 13.3.0 npm ERR! A complete log of this run can be found in: npm ERR! /cache/_logs/2024-06-30T04_00_08_753Z-debug-0.log --- stdout --- --- end --- $ package-lock-lint package-lock.json --- stdout --- Checking package-lock.json --- end --- Verifying that tests still pass $ /usr/bin/npm ci --- stderr --- npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@es-joy/jsdoccomment@0.23.6', npm WARN EBADENGINE required: { node: '^12 || ^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: 'eslint-plugin-jsdoc@39.2.2', npm WARN EBADENGINE required: { node: '^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN deprecated formidable@1.2.6: Please upgrade to latest, formidable@v2 or formidable@v3! Check these notes: https://bit.ly/2ZEqIau npm WARN deprecated superagent@6.1.0: Please upgrade to v7.0.2+ of superagent. We have fixed numerous issues with streams, form-data, attach(), filesystem errors not bubbling up (ENOENT on attach()), and all tests are now passing. See the releases tab for more information at <https://github.com/visionmedia/superagent/releases>. --- stdout --- added 605 packages, and audited 606 packages in 6s 173 packages are looking for funding run `npm fund` for details 5 vulnerabilities (3 moderate, 2 high) To address all issues, run: npm audit fix Run `npm audit` for details. --- end --- $ /usr/bin/npm test --- stdout --- > test > npm-run-all test:* > test:lint > eslint --cache --no-fix --max-warnings 0 --ignore-path .gitignore . > test:lintcss > stylelint "**/*.{css,less}" --ignore-path .gitignore > test:linti18n > banana-checker i18n/ Checked 1 message directory. --- end --- {"1097496": {"source": 1097496, "name": "braces", "dependency": "braces", "title": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "severity": "high", "cwe": ["CWE-1050"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.3"}} {"1096482": {"source": 1096482, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=7.0.0 <7.5.2"}, "1096483": {"source": 1096483, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": "<5.7.2"}, "1096484": {"source": 1096484, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=6.0.0 <6.3.1"}} {"1094574": {"source": 1094574, "name": "get-func-name", "dependency": "get-func-name", "title": "Chaijs/get-func-name vulnerable to ReDoS", "url": "https://github.com/advisories/GHSA-4q6p-r6v2-jvc5", "severity": "high", "cwe": ["CWE-400", "CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<2.0.1"}} {"1096482": {"source": 1096482, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=7.0.0 <7.5.2"}, "1096483": {"source": 1096483, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": "<5.7.2"}, "1096484": {"source": 1096484, "name": "semver", "dependency": "semver", "title": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=6.0.0 <6.3.1"}} {"1097681": {"source": 1097681, "name": "word-wrap", "dependency": "word-wrap", "title": "word-wrap vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "severity": "moderate", "cwe": ["CWE-1333"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": "<1.2.4"}} $ package-lock-lint package-lock.json --- stdout --- Checking package-lock.json --- end --- [DNM] there are no updates $ git add . --- stdout --- --- end --- $ git commit -F /tmp/tmpwf5w4lyn --- stdout --- On branch REL1_41 Your branch is up to date with 'origin/REL1_41'. nothing to commit, working tree clean --- end ---