This run took 375 seconds.
From caebe5dd170f747aa3f29027a86a4e58d4f4eb8b Mon Sep 17 00:00:00 2001 From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org> Date: Thu, 31 Oct 2024 16:20:50 +0000 Subject: [PATCH] build: Updating ejs to 3.1.10 * https://github.com/advisories/GHSA-ghr5-ch3p-vcr6 Change-Id: I5b7c49fb088e77586ecc4d4398c2f18efe4939d2 --- package-lock.json | 133 ++++++++++++++++++++++++---------------------- 1 file changed, 69 insertions(+), 64 deletions(-) diff --git a/package-lock.json b/package-lock.json index d528b98..43be34f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -7,6 +7,7 @@ "": { "name": "wikibase", "version": "0.1.0", + "hasInstallScript": true, "devDependencies": { "@wdio/cli": "^7.16.13", "@wdio/local-runner": "^7.16.16", @@ -2128,9 +2129,9 @@ "dev": true }, "node_modules/@types/ua-parser-js": { - "version": "0.7.37", - "resolved": "https://registry.npmjs.org/@types/ua-parser-js/-/ua-parser-js-0.7.37.tgz", - "integrity": "sha512-4sOxS3ZWXC0uHJLYcWAaLMxTvjRX3hT96eF4YWUh1ovTaenvibaZOE5uXtIp4mksKMLRwo7YDiCBCw6vBiUPVg==", + "version": "0.7.39", + "resolved": "https://registry.npmjs.org/@types/ua-parser-js/-/ua-parser-js-0.7.39.tgz", + "integrity": "sha512-P/oDfpofrdtF5xw433SPALpdSchtJmY7nsJItf8h3KXqOslkbySh8zq4dSWXH2oTjRvJ5PczVEoCZPow6GicLg==", "dev": true }, "node_modules/@types/which": { @@ -2171,9 +2172,9 @@ "dev": true }, "node_modules/@wdio/cli": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-7.33.0.tgz", - "integrity": "sha512-S5Iy4AVcbcJDMhAP4k/Yf18mKma9NGFM8A5bafcGRpFlIj97rpnb0/cpmJVVEr4v/wr3XCu0k38ooJw0B/D3nw==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-7.36.0.tgz", + "integrity": "sha512-vYL2tB9x7vjK3N7oRFJbUKsU4y04wqk7DQXdbmgBzC9Em4u9yvFxvtiDMCSC8kvFowiIhMtEFk8SQacL8pNszA==", "dev": true, "dependencies": { "@types/ejs": "^3.0.5", @@ -2201,7 +2202,7 @@ "lodash.union": "^4.6.0", "mkdirp": "^3.0.0", "recursive-readdir": "^2.2.2", - "webdriverio": "7.33.0", + "webdriverio": "7.36.0", "yargs": "^17.0.0", "yarn-install": "^1.0.0" }, @@ -2230,15 +2231,15 @@ } }, "node_modules/@wdio/local-runner": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-7.33.0.tgz", - "integrity": "sha512-oZLLyOizlX2mV3FIxRLWgN0J2sDL+6LhC71CwFxcV8iVjXvp16my9jbKrgtkIgdo1BsaWIqq+tZlCr9e9NUUjA==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-7.36.0.tgz", + "integrity": "sha512-01uDD4O5RbtuFE0F7PmtZjYuqCfJ2HvP1b+q8OUm5oINoaQ7djSkHCM01UKu5Rn5I1cQa0vSr5r12puD5Gp+Yw==", "dev": true, "dependencies": { "@types/stream-buffers": "^3.0.3", "@wdio/logger": "7.26.0", "@wdio/repl": "7.33.0", - "@wdio/runner": "7.33.0", + "@wdio/runner": "7.36.0", "@wdio/types": "7.33.0", "async-exit-hook": "^2.0.1", "split2": "^4.0.0", @@ -2359,9 +2360,9 @@ } }, "node_modules/@wdio/runner": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-7.33.0.tgz", - "integrity": "sha512-3B+29EanAdRFh4vT3E4XnHQga/apdLIDZq5pGEbqnDA5LarbIvsNWbJjeJzWM6XaZmEwrPfjOunjOevJt5yvdg==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-7.36.0.tgz", + "integrity": "sha512-EU/0XprH6UEqaYarxuSSLYgsxC6/jLHE7Wj/5FIJyFwdx//Ip8DnTXzbJylskeWX2NkCfJH2VerGSo423c98+Q==", "dev": true, "dependencies": { "@wdio/config": "7.33.0", @@ -2371,7 +2372,7 @@ "deepmerge": "^4.0.0", "gaze": "^1.1.2", "webdriver": "7.33.0", - "webdriverio": "7.33.0" + "webdriverio": "7.36.0" }, "engines": { "node": ">=12.0.0" @@ -4409,9 +4410,9 @@ } }, "node_modules/devtools": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/devtools/-/devtools-7.33.0.tgz", - "integrity": "sha512-9sxWcdZLOUtgvw4kotL8HqvIFkO/yuHUecgqCYXnqIzwdWSoxWCeKAyZhOJNMeFtzjEnHGvIrUIquEuifk2STg==", + "version": "7.35.0", + "resolved": "https://registry.npmjs.org/devtools/-/devtools-7.35.0.tgz", + "integrity": "sha512-7HMZMcJSCK/PaBCWVs4n4ZhtBNdUQj10iPwXvj/JDkqPreEXN/XW9GJAoMuLPFmCEKfxe+LrIbgs8ocGJ6rp/A==", "dev": true, "dependencies": { "@types/node": "^18.0.0", @@ -4433,9 +4434,9 @@ } }, "node_modules/devtools-protocol": { - "version": "0.0.1203626", - "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1203626.tgz", - "integrity": "sha512-nEzHZteIUZfGCZtTiS1fRpC8UZmsfD1SiyPvaUNvS13dvKf666OAm8YTi0+Ca3n1nLEyu49Cy4+dPWpaHFJk9g==", + "version": "0.0.1260888", + "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1260888.tgz", + "integrity": "sha512-9rTIZ4ZjWwalCPiaY+kPiALLfOKgAz5CTi/Zb1L+qSZ8PH3zVo1T8JcgXIIqg1iM3pZ6hF+n9xO5r2jZ/SF+jg==", "dev": true }, "node_modules/devtools/node_modules/debug": { @@ -4740,9 +4741,9 @@ } }, "node_modules/ejs": { - "version": "3.1.9", - "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.9.tgz", - "integrity": "sha512-rC+QVNMJWv+MtPgkt0y+0rVEIdbtxVADApW9JXrUVlzHetgcyczP/E7DJmWJ4fJCZF2cPcBk0laWO9ZHMG3DmQ==", + "version": "3.1.10", + "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz", + "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==", "dev": true, "dependencies": { "jake": "^10.8.5" @@ -6271,6 +6272,7 @@ "version": "7.1.7", "resolved": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", "integrity": "sha512-OvD9ENzPLbegENnYP5UUfJIirTg4+XwMWGaQfQTY0JenxNvvIKP3U3/tAQSPIu/lHxXYSZmpXlUHeqAIdKzBLQ==", + "deprecated": "Glob versions prior to v9 are no longer supported", "dev": true, "dependencies": { "fs.realpath": "^1.0.0", @@ -13146,9 +13148,9 @@ } }, "node_modules/ua-parser-js": { - "version": "1.0.36", - "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.36.tgz", - "integrity": "sha512-znuyCIXzl8ciS3+y3fHJI/2OhQIXbXw9MWC/o3qwyR+RGppjZHrM27CGFSKCJXi2Kctiz537iOu2KnXs1lMQhw==", + "version": "1.0.39", + "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.39.tgz", + "integrity": "sha512-k24RCVWlEcjkdOxYmVJgeD/0a1TiSpqLg+ZalVGV9lsnr4yqu0w7tX/x2xX6G4zpkgQnRf89lxuZ1wsbjXM8lw==", "dev": true, "funding": [ { @@ -13164,6 +13166,9 @@ "url": "https://github.com/sponsors/faisalman" } ], + "bin": { + "ua-parser-js": "script/cli.js" + }, "engines": { "node": "*" } @@ -13429,9 +13434,9 @@ } }, "node_modules/webdriverio": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-7.33.0.tgz", - "integrity": "sha512-9MRPYkOEdsvsBpDJRSMAR+dLID6I65vKjpzNTTFJSjRLSHF6MByOH3mV2trlpIyV+TIp87GysYUVf3Cmufg9eg==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-7.36.0.tgz", + "integrity": "sha512-OTYmKBF7eFKBX39ojUIEzw7AlE1ZRJiFoMTtEQaPMuPzZCP2jUBq6Ey38nuZrYXLkXn3/le9a14pNnKSM0n56w==", "dev": true, "dependencies": { "@types/aria-query": "^5.0.0", @@ -13446,8 +13451,8 @@ "aria-query": "^5.2.1", "css-shorthand-properties": "^1.1.1", "css-value": "^0.0.1", - "devtools": "7.33.0", - "devtools-protocol": "^0.0.1203626", + "devtools": "7.35.0", + "devtools-protocol": "^0.0.1260888", "fs-extra": "^11.1.1", "grapheme-splitter": "^1.0.2", "lodash.clonedeep": "^4.5.0", @@ -15577,9 +15582,9 @@ "dev": true }, "@types/ua-parser-js": { - "version": "0.7.37", - "resolved": "https://registry.npmjs.org/@types/ua-parser-js/-/ua-parser-js-0.7.37.tgz", - "integrity": "sha512-4sOxS3ZWXC0uHJLYcWAaLMxTvjRX3hT96eF4YWUh1ovTaenvibaZOE5uXtIp4mksKMLRwo7YDiCBCw6vBiUPVg==", + "version": "0.7.39", + "resolved": "https://registry.npmjs.org/@types/ua-parser-js/-/ua-parser-js-0.7.39.tgz", + "integrity": "sha512-P/oDfpofrdtF5xw433SPALpdSchtJmY7nsJItf8h3KXqOslkbySh8zq4dSWXH2oTjRvJ5PczVEoCZPow6GicLg==", "dev": true }, "@types/which": { @@ -15620,9 +15625,9 @@ "dev": true }, "@wdio/cli": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-7.33.0.tgz", - "integrity": "sha512-S5Iy4AVcbcJDMhAP4k/Yf18mKma9NGFM8A5bafcGRpFlIj97rpnb0/cpmJVVEr4v/wr3XCu0k38ooJw0B/D3nw==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-7.36.0.tgz", + "integrity": "sha512-vYL2tB9x7vjK3N7oRFJbUKsU4y04wqk7DQXdbmgBzC9Em4u9yvFxvtiDMCSC8kvFowiIhMtEFk8SQacL8pNszA==", "dev": true, "requires": { "@types/ejs": "^3.0.5", @@ -15650,7 +15655,7 @@ "lodash.union": "^4.6.0", "mkdirp": "^3.0.0", "recursive-readdir": "^2.2.2", - "webdriverio": "7.33.0", + "webdriverio": "7.36.0", "yargs": "^17.0.0", "yarn-install": "^1.0.0" } @@ -15670,15 +15675,15 @@ } }, "@wdio/local-runner": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-7.33.0.tgz", - "integrity": "sha512-oZLLyOizlX2mV3FIxRLWgN0J2sDL+6LhC71CwFxcV8iVjXvp16my9jbKrgtkIgdo1BsaWIqq+tZlCr9e9NUUjA==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-7.36.0.tgz", + "integrity": "sha512-01uDD4O5RbtuFE0F7PmtZjYuqCfJ2HvP1b+q8OUm5oINoaQ7djSkHCM01UKu5Rn5I1cQa0vSr5r12puD5Gp+Yw==", "dev": true, "requires": { "@types/stream-buffers": "^3.0.3", "@wdio/logger": "7.26.0", "@wdio/repl": "7.33.0", - "@wdio/runner": "7.33.0", + "@wdio/runner": "7.36.0", "@wdio/types": "7.33.0", "async-exit-hook": "^2.0.1", "split2": "^4.0.0", @@ -15774,9 +15779,9 @@ } }, "@wdio/runner": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-7.33.0.tgz", - "integrity": "sha512-3B+29EanAdRFh4vT3E4XnHQga/apdLIDZq5pGEbqnDA5LarbIvsNWbJjeJzWM6XaZmEwrPfjOunjOevJt5yvdg==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-7.36.0.tgz", + "integrity": "sha512-EU/0XprH6UEqaYarxuSSLYgsxC6/jLHE7Wj/5FIJyFwdx//Ip8DnTXzbJylskeWX2NkCfJH2VerGSo423c98+Q==", "dev": true, "requires": { "@wdio/config": "7.33.0", @@ -15786,7 +15791,7 @@ "deepmerge": "^4.0.0", "gaze": "^1.1.2", "webdriver": "7.33.0", - "webdriverio": "7.33.0" + "webdriverio": "7.36.0" } }, "@wdio/spec-reporter": { @@ -17297,9 +17302,9 @@ "dev": true }, "devtools": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/devtools/-/devtools-7.33.0.tgz", - "integrity": "sha512-9sxWcdZLOUtgvw4kotL8HqvIFkO/yuHUecgqCYXnqIzwdWSoxWCeKAyZhOJNMeFtzjEnHGvIrUIquEuifk2STg==", + "version": "7.35.0", + "resolved": "https://registry.npmjs.org/devtools/-/devtools-7.35.0.tgz", + "integrity": "sha512-7HMZMcJSCK/PaBCWVs4n4ZhtBNdUQj10iPwXvj/JDkqPreEXN/XW9GJAoMuLPFmCEKfxe+LrIbgs8ocGJ6rp/A==", "dev": true, "requires": { "@types/node": "^18.0.0", @@ -17387,9 +17392,9 @@ } }, "devtools-protocol": { - "version": "0.0.1203626", - "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1203626.tgz", - "integrity": "sha512-nEzHZteIUZfGCZtTiS1fRpC8UZmsfD1SiyPvaUNvS13dvKf666OAm8YTi0+Ca3n1nLEyu49Cy4+dPWpaHFJk9g==", + "version": "0.0.1260888", + "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1260888.tgz", + "integrity": "sha512-9rTIZ4ZjWwalCPiaY+kPiALLfOKgAz5CTi/Zb1L+qSZ8PH3zVo1T8JcgXIIqg1iM3pZ6hF+n9xO5r2jZ/SF+jg==", "dev": true }, "diff": { @@ -17534,9 +17539,9 @@ } }, "ejs": { - "version": "3.1.9", - "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.9.tgz", - "integrity": "sha512-rC+QVNMJWv+MtPgkt0y+0rVEIdbtxVADApW9JXrUVlzHetgcyczP/E7DJmWJ4fJCZF2cPcBk0laWO9ZHMG3DmQ==", + "version": "3.1.10", + "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz", + "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==", "dev": true, "requires": { "jake": "^10.8.5" @@ -23803,9 +23808,9 @@ } }, "ua-parser-js": { - "version": "1.0.36", - "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.36.tgz", - "integrity": "sha512-znuyCIXzl8ciS3+y3fHJI/2OhQIXbXw9MWC/o3qwyR+RGppjZHrM27CGFSKCJXi2Kctiz537iOu2KnXs1lMQhw==", + "version": "1.0.39", + "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.39.tgz", + "integrity": "sha512-k24RCVWlEcjkdOxYmVJgeD/0a1TiSpqLg+ZalVGV9lsnr4yqu0w7tX/x2xX6G4zpkgQnRf89lxuZ1wsbjXM8lw==", "dev": true }, "unbox-primitive": { @@ -23997,9 +24002,9 @@ } }, "webdriverio": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-7.33.0.tgz", - "integrity": "sha512-9MRPYkOEdsvsBpDJRSMAR+dLID6I65vKjpzNTTFJSjRLSHF6MByOH3mV2trlpIyV+TIp87GysYUVf3Cmufg9eg==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-7.36.0.tgz", + "integrity": "sha512-OTYmKBF7eFKBX39ojUIEzw7AlE1ZRJiFoMTtEQaPMuPzZCP2jUBq6Ey38nuZrYXLkXn3/le9a14pNnKSM0n56w==", "dev": true, "requires": { "@types/aria-query": "^5.0.0", @@ -24014,8 +24019,8 @@ "aria-query": "^5.2.1", "css-shorthand-properties": "^1.1.1", "css-value": "^0.0.1", - "devtools": "7.33.0", - "devtools-protocol": "^0.0.1203626", + "devtools": "7.35.0", + "devtools-protocol": "^0.0.1260888", "fs-extra": "^11.1.1", "grapheme-splitter": "^1.0.2", "lodash.clonedeep": "^4.5.0", -- 2.39.2
$ date --- stdout --- Thu Oct 31 16:15:31 UTC 2024 --- end --- $ git clone file:///srv/git/mediawiki-extensions-Wikibase.git repo --depth=1 -b REL1_43 --- stderr --- Cloning into 'repo'... --- stdout --- --- end --- $ git config user.name libraryupgrader --- stdout --- --- end --- $ git config user.email tools.libraryupgrader@tools.wmflabs.org --- stdout --- --- end --- $ git submodule update --init --- stderr --- Submodule 'lib/resources/wikibase-api' (https://gerrit.wikimedia.org/r/wikibase/javascript-api) registered for path 'lib/resources/wikibase-api' Submodule 'view/lib/wikibase-data-model' (https://phabricator.wikimedia.org/source/wikibase-data-model.git) registered for path 'view/lib/wikibase-data-model' Submodule 'view/lib/wikibase-data-values' (https://phabricator.wikimedia.org/source/datavalues-javascript.git) registered for path 'view/lib/wikibase-data-values' Submodule 'view/lib/wikibase-data-values-value-view' (https://gerrit.wikimedia.org/r/data-values/value-view) registered for path 'view/lib/wikibase-data-values-value-view' Submodule 'view/lib/wikibase-serialization' (https://phabricator.wikimedia.org/source/wikibase-serialization.git) registered for path 'view/lib/wikibase-serialization' Submodule 'view/lib/wikibase-termbox' (https://gerrit.wikimedia.org/r/wikibase/termbox) registered for path 'view/lib/wikibase-termbox' Cloning into '/src/repo/lib/resources/wikibase-api'... Cloning into '/src/repo/view/lib/wikibase-data-model'... Cloning into '/src/repo/view/lib/wikibase-data-values'... Cloning into '/src/repo/view/lib/wikibase-data-values-value-view'... Cloning into '/src/repo/view/lib/wikibase-serialization'... Cloning into '/src/repo/view/lib/wikibase-termbox'... --- stdout --- Submodule path 'lib/resources/wikibase-api': checked out '7f076e3534686ab35f7807462539fcef08b6e9f2' Submodule path 'view/lib/wikibase-data-model': checked out '6b304daeb804591ddc4520925337429ac086515c' Submodule path 'view/lib/wikibase-data-values': checked out '457733ebe7b0d090a67e2623350be2e4286077fe' Submodule path 'view/lib/wikibase-data-values-value-view': checked out '0bd65f4e0cd4defdc315e15d462a09e8b6d9bf8f' Submodule path 'view/lib/wikibase-serialization': checked out 'e9b9a736f19e42497bfe45cb6f323781b00b5023' Submodule path 'view/lib/wikibase-termbox': checked out '87f5df732da97a7acd29b20bfd4f1aedff509fbf' --- end --- $ grr init --- stdout --- Installed commit-msg hook. --- end --- $ git show-ref refs/heads/REL1_43 --- stdout --- 4abade59837cf3a1acf12ca2af78367328536f18 refs/heads/REL1_43 --- end --- $ /usr/bin/npm audit --json --- stdout --- { "auditReportVersion": 2, "vulnerabilities": { "@wdio/cli": { "name": "@wdio/cli", "severity": "high", "isDirect": true, "via": [ "webdriverio" ], "effects": [], "range": "7.16.5 - 8.40.6", "nodes": [ "node_modules/@wdio/cli" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } }, "@wdio/local-runner": { "name": "@wdio/local-runner", "severity": "high", "isDirect": true, "via": [ "@wdio/runner" ], "effects": [], "range": "7.16.5 - 8.40.6", "nodes": [ "node_modules/@wdio/local-runner" ], "fixAvailable": { "name": "@wdio/local-runner", "version": "9.2.6", "isSemVerMajor": true } }, "@wdio/runner": { "name": "@wdio/runner", "severity": "high", "isDirect": false, "via": [ "webdriverio" ], "effects": [ "@wdio/local-runner" ], "range": "7.16.5 - 8.40.6", "nodes": [ "node_modules/@wdio/runner" ], "fixAvailable": { "name": "@wdio/local-runner", "version": "9.2.6", "isSemVerMajor": true } }, "devtools": { "name": "devtools", "severity": "high", "isDirect": false, "via": [ "puppeteer-core" ], "effects": [], "range": ">=7.16.5", "nodes": [ "node_modules/devtools" ], "fixAvailable": true }, "ejs": { "name": "ejs", "severity": "moderate", "isDirect": false, "via": [ { "source": 1098366, "name": "ejs", "dependency": "ejs", "title": "ejs lacks certain pollution protection", "url": "https://github.com/advisories/GHSA-ghr5-ch3p-vcr6", "severity": "moderate", "cwe": [ "CWE-693", "CWE-1321" ], "cvss": { "score": 4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<3.1.10" } ], "effects": [], "range": "<3.1.10", "nodes": [ "node_modules/ejs" ], "fixAvailable": true }, "mwbot": { "name": "mwbot", "severity": "moderate", "isDirect": false, "via": [ "request" ], "effects": [ "wdio-mediawiki", "wdio-wikibase" ], "range": ">=0.1.6", "nodes": [ "node_modules/mwbot" ], "fixAvailable": false }, "puppeteer-core": { "name": "puppeteer-core", "severity": "high", "isDirect": false, "via": [ "ws" ], "effects": [ "devtools", "webdriverio" ], "range": "11.0.0 - 22.11.1", "nodes": [ "node_modules/devtools/node_modules/puppeteer-core", "node_modules/puppeteer-core" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } }, "request": { "name": "request", "severity": "moderate", "isDirect": false, "via": [ { "source": 1096727, "name": "request", "dependency": "request", "title": "Server-Side Request Forgery in Request", "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6", "severity": "moderate", "cwe": [ "CWE-918" ], "cvss": { "score": 6.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, "range": "<=2.88.2" }, "tough-cookie" ], "effects": [ "mwbot" ], "range": "*", "nodes": [ "node_modules/request" ], "fixAvailable": false }, "tough-cookie": { "name": "tough-cookie", "severity": "moderate", "isDirect": false, "via": [ { "source": 1097682, "name": "tough-cookie", "dependency": "tough-cookie", "title": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "severity": "moderate", "cwe": [ "CWE-1321" ], "cvss": { "score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, "range": "<4.1.3" } ], "effects": [ "request" ], "range": "<4.1.3", "nodes": [ "node_modules/tough-cookie" ], "fixAvailable": false }, "wdio-mediawiki": { "name": "wdio-mediawiki", "severity": "moderate", "isDirect": true, "via": [ "mwbot" ], "effects": [], "range": "*", "nodes": [ "node_modules/wdio-mediawiki" ], "fixAvailable": false }, "wdio-wikibase": { "name": "wdio-wikibase", "severity": "moderate", "isDirect": true, "via": [ "mwbot", "wdio-mediawiki" ], "effects": [], "range": "*", "nodes": [ "node_modules/wdio-wikibase" ], "fixAvailable": false }, "webdriverio": { "name": "webdriverio", "severity": "high", "isDirect": false, "via": [ "devtools", "puppeteer-core" ], "effects": [ "@wdio/cli", "@wdio/runner" ], "range": "7.16.5 - 8.40.6", "nodes": [ "node_modules/webdriverio" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } }, "ws": { "name": "ws", "severity": "high", "isDirect": false, "via": [ { "source": 1098392, "name": "ws", "dependency": "ws", "title": "ws affected by a DoS when handling a request with many HTTP headers", "url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "severity": "high", "cwe": [ "CWE-476" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": ">=8.0.0 <8.17.1" } ], "effects": [ "puppeteer-core" ], "range": "8.0.0 - 8.17.0", "nodes": [ "node_modules/devtools/node_modules/ws", "node_modules/ws" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 6, "high": 7, "critical": 0, "total": 13 }, "dependencies": { "prod": 1, "dev": 1119, "optional": 2, "peer": 1, "peerOptional": 0, "total": 1119 } } } --- end --- $ /usr/bin/composer install --- stderr --- No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information. Loading composer repositories with package information Updating dependencies Lock file operations: 58 installs, 0 updates, 0 removals - Locking composer/installers (v1.12.0) - Locking composer/pcre (3.3.1) - Locking composer/semver (3.4.2) - Locking composer/spdx-licenses (1.5.8) - Locking composer/xdebug-handler (3.0.5) - Locking data-values/common (1.1.0) - Locking data-values/data-values (3.1.0) - Locking data-values/geo (4.4.0) - Locking data-values/interfaces (1.0.0) - Locking data-values/number (0.12.3) - Locking data-values/serialization (1.2.5) - Locking data-values/time (1.1.2) - Locking dealerdirect/phpcodesniffer-composer-installer (v0.7.2) - Locking diff/diff (3.3.1) - Locking felixfbecker/advanced-json-rpc (v3.2.1) - Locking mediawiki/mediawiki-codesniffer (v44.0.0) - Locking mediawiki/mediawiki-phan-config (0.14.0) - Locking mediawiki/minus-x (1.1.3) - Locking mediawiki/phan-taint-check-plugin (6.0.0) - Locking microsoft/tolerant-php-parser (v0.1.2) - Locking monolog/monolog (2.9.3) - Locking netresearch/jsonmapper (v4.5.0) - Locking onoi/message-reporter (1.4.2) - Locking phan/phan (5.4.3) - Locking php-parallel-lint/php-console-color (v1.0.1) - Locking php-parallel-lint/php-console-highlighter (v1.0.0) - Locking php-parallel-lint/php-parallel-lint (v1.4.0) - Locking phpat/phpat (0.10.18) - Locking phpcsstandards/phpcsextra (1.2.1) - Locking phpcsstandards/phpcsutils (1.0.11) - Locking phpdocumentor/reflection-common (2.2.0) - Locking phpdocumentor/reflection-docblock (5.3.0) - Locking phpdocumentor/type-resolver (1.6.2) - Locking phpstan/phpdoc-parser (0.4.9) - Locking phpstan/phpstan (1.12.7) - Locking psr/container (2.0.2) - Locking psr/http-message (1.1) - Locking psr/log (1.1.4) - Locking psr/simple-cache (1.0.1) - Locking sabre/event (5.1.7) - Locking serialization/serialization (4.0.0) - Locking slevomat/coding-standard (6.4.1) - Locking squizlabs/php_codesniffer (3.9.0) - Locking swaggest/json-diff (v3.11.0) - Locking symfony/console (v7.1.6) - Locking symfony/deprecation-contracts (v3.5.0) - Locking symfony/polyfill-ctype (v1.31.0) - Locking symfony/polyfill-intl-grapheme (v1.31.0) - Locking symfony/polyfill-intl-normalizer (v1.31.0) - Locking symfony/polyfill-mbstring (v1.31.0) - Locking symfony/polyfill-php80 (v1.31.0) - Locking symfony/service-contracts (v3.5.0) - Locking symfony/string (v7.1.6) - Locking tysonandre/var_representation_polyfill (0.1.3) - Locking webmozart/assert (1.11.0) - Locking wikimedia/at-ease (v3.0.0) - Locking wikimedia/purtle (v1.0.8) - Locking wikimedia/timestamp (v4.2.0) Writing lock file Installing dependencies from lock file (including require-dev) Package operations: 58 installs, 0 updates, 0 removals 0 [>---------------------------] 0 [->--------------------------] - Installing composer/installers (v1.12.0): Extracting archive - Installing squizlabs/php_codesniffer (3.9.0): Extracting archive - Installing dealerdirect/phpcodesniffer-composer-installer (v0.7.2): Extracting archive - Installing composer/pcre (3.3.1): Extracting archive - Installing symfony/polyfill-php80 (v1.31.0): Extracting archive - Installing data-values/interfaces (1.0.0): Extracting archive - Installing data-values/data-values (3.1.0): Extracting archive - Installing data-values/geo (4.4.0): Extracting archive - Installing data-values/common (1.1.0): Extracting archive - Installing data-values/number (0.12.3): Extracting archive - Installing serialization/serialization (4.0.0): Extracting archive - Installing data-values/serialization (1.2.5): Extracting archive - Installing data-values/time (1.1.2): Extracting archive - Installing diff/diff (3.3.1): Extracting archive - Installing phpcsstandards/phpcsutils (1.0.11): Extracting archive - Installing phpcsstandards/phpcsextra (1.2.1): Extracting archive - Installing symfony/polyfill-mbstring (v1.31.0): Extracting archive - Installing composer/spdx-licenses (1.5.8): Extracting archive - Installing composer/semver (3.4.2): Extracting archive - Installing mediawiki/mediawiki-codesniffer (v44.0.0): Extracting archive - Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive - Installing symfony/polyfill-intl-normalizer (v1.31.0): Extracting archive - Installing symfony/polyfill-intl-grapheme (v1.31.0): Extracting archive - Installing symfony/polyfill-ctype (v1.31.0): Extracting archive - Installing symfony/string (v7.1.6): Extracting archive - Installing symfony/deprecation-contracts (v3.5.0): Extracting archive - Installing psr/container (2.0.2): Extracting archive - Installing symfony/service-contracts (v3.5.0): Extracting archive - Installing symfony/console (v7.1.6): Extracting archive - Installing sabre/event (5.1.7): Extracting archive - Installing netresearch/jsonmapper (v4.5.0): Extracting archive - Installing microsoft/tolerant-php-parser (v0.1.2): Extracting archive - Installing webmozart/assert (1.11.0): Extracting archive - Installing phpdocumentor/reflection-common (2.2.0): Extracting archive - Installing phpdocumentor/type-resolver (1.6.2): Extracting archive - Installing phpdocumentor/reflection-docblock (5.3.0): Extracting archive - Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive - Installing psr/log (1.1.4): Extracting archive - Installing composer/xdebug-handler (3.0.5): Extracting archive - Installing phan/phan (5.4.3): Extracting archive - Installing mediawiki/phan-taint-check-plugin (6.0.0): Extracting archive - Installing mediawiki/mediawiki-phan-config (0.14.0): Extracting archive - Installing mediawiki/minus-x (1.1.3): Extracting archive - Installing monolog/monolog (2.9.3): Extracting archive - Installing onoi/message-reporter (1.4.2): Extracting archive - Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive - Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive - Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive - Installing phpstan/phpstan (1.12.7): Extracting archive - Installing phpat/phpat (0.10.18): Extracting archive - Installing psr/http-message (1.1): Extracting archive - Installing psr/simple-cache (1.0.1): Extracting archive - Installing phpstan/phpdoc-parser (0.4.9): Extracting archive - Installing slevomat/coding-standard (6.4.1): Extracting archive - Installing swaggest/json-diff (v3.11.0): Extracting archive - Installing wikimedia/at-ease (v3.0.0): Extracting archive - Installing wikimedia/purtle (v1.0.8): Extracting archive - Installing wikimedia/timestamp (v4.2.0): Extracting archive 0/55 [>---------------------------] 0% 21/55 [==========>-----------------] 38% 32/55 [================>-----------] 58% 44/55 [======================>-----] 80% 55/55 [============================] 100% 10 package suggestions were added by new dependencies, use `composer suggest` to see details. Generating autoload files 23 packages you are using are looking for funding. Use the `composer fund` command to find out more! --- stdout --- PHP CodeSniffer Config installed_paths set to ../../../repo,../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils,../../slevomat/coding-standard --- end --- $ /usr/bin/npm audit --json --- stdout --- { "auditReportVersion": 2, "vulnerabilities": { "@wdio/cli": { "name": "@wdio/cli", "severity": "high", "isDirect": true, "via": [ "webdriverio" ], "effects": [], "range": "7.16.5 - 8.40.6", "nodes": [ "node_modules/@wdio/cli" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } }, "@wdio/local-runner": { "name": "@wdio/local-runner", "severity": "high", "isDirect": true, "via": [ "@wdio/runner" ], "effects": [], "range": "7.16.5 - 8.40.6", "nodes": [ "node_modules/@wdio/local-runner" ], "fixAvailable": { "name": "@wdio/local-runner", "version": "9.2.6", "isSemVerMajor": true } }, "@wdio/runner": { "name": "@wdio/runner", "severity": "high", "isDirect": false, "via": [ "webdriverio" ], "effects": [ "@wdio/local-runner" ], "range": "7.16.5 - 8.40.6", "nodes": [ "node_modules/@wdio/runner" ], "fixAvailable": { "name": "@wdio/local-runner", "version": "9.2.6", "isSemVerMajor": true } }, "devtools": { "name": "devtools", "severity": "high", "isDirect": false, "via": [ "puppeteer-core" ], "effects": [], "range": ">=7.16.5", "nodes": [ "node_modules/devtools" ], "fixAvailable": true }, "ejs": { "name": "ejs", "severity": "moderate", "isDirect": false, "via": [ { "source": 1098366, "name": "ejs", "dependency": "ejs", "title": "ejs lacks certain pollution protection", "url": "https://github.com/advisories/GHSA-ghr5-ch3p-vcr6", "severity": "moderate", "cwe": [ "CWE-693", "CWE-1321" ], "cvss": { "score": 4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<3.1.10" } ], "effects": [], "range": "<3.1.10", "nodes": [ "node_modules/ejs" ], "fixAvailable": true }, "mwbot": { "name": "mwbot", "severity": "moderate", "isDirect": false, "via": [ "request" ], "effects": [ "wdio-mediawiki", "wdio-wikibase" ], "range": ">=0.1.6", "nodes": [ "node_modules/mwbot" ], "fixAvailable": false }, "puppeteer-core": { "name": "puppeteer-core", "severity": "high", "isDirect": false, "via": [ "ws" ], "effects": [ "devtools", "webdriverio" ], "range": "11.0.0 - 22.11.1", "nodes": [ "node_modules/devtools/node_modules/puppeteer-core", "node_modules/puppeteer-core" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } }, "request": { "name": "request", "severity": "moderate", "isDirect": false, "via": [ { "source": 1096727, "name": "request", "dependency": "request", "title": "Server-Side Request Forgery in Request", "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6", "severity": "moderate", "cwe": [ "CWE-918" ], "cvss": { "score": 6.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, "range": "<=2.88.2" }, "tough-cookie" ], "effects": [ "mwbot" ], "range": "*", "nodes": [ "node_modules/request" ], "fixAvailable": false }, "tough-cookie": { "name": "tough-cookie", "severity": "moderate", "isDirect": false, "via": [ { "source": 1097682, "name": "tough-cookie", "dependency": "tough-cookie", "title": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "severity": "moderate", "cwe": [ "CWE-1321" ], "cvss": { "score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, "range": "<4.1.3" } ], "effects": [ "request" ], "range": "<4.1.3", "nodes": [ "node_modules/tough-cookie" ], "fixAvailable": false }, "wdio-mediawiki": { "name": "wdio-mediawiki", "severity": "moderate", "isDirect": true, "via": [ "mwbot" ], "effects": [], "range": "*", "nodes": [ "node_modules/wdio-mediawiki" ], "fixAvailable": false }, "wdio-wikibase": { "name": "wdio-wikibase", "severity": "moderate", "isDirect": true, "via": [ "mwbot", "wdio-mediawiki" ], "effects": [], "range": "*", "nodes": [ "node_modules/wdio-wikibase" ], "fixAvailable": false }, "webdriverio": { "name": "webdriverio", "severity": "high", "isDirect": false, "via": [ "devtools", "puppeteer-core" ], "effects": [ "@wdio/cli", "@wdio/runner" ], "range": "7.16.5 - 8.40.6", "nodes": [ "node_modules/webdriverio" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } }, "ws": { "name": "ws", "severity": "high", "isDirect": false, "via": [ { "source": 1098392, "name": "ws", "dependency": "ws", "title": "ws affected by a DoS when handling a request with many HTTP headers", "url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "severity": "high", "cwe": [ "CWE-476" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": ">=8.0.0 <8.17.1" } ], "effects": [ "puppeteer-core" ], "range": "8.0.0 - 8.17.0", "nodes": [ "node_modules/devtools/node_modules/ws", "node_modules/ws" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 6, "high": 7, "critical": 0, "total": 13 }, "dependencies": { "prod": 1, "dev": 1119, "optional": 2, "peer": 1, "peerOptional": 0, "total": 1119 } } } --- end --- Attempting to npm audit fix $ /usr/bin/npm audit fix --dry-run --only=dev --json --- stderr --- npm WARN invalid config only="dev" set in command line options npm WARN invalid config Must be one of: null, prod, production npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@es-joy/jsdoccomment@0.23.6', npm WARN EBADENGINE required: { node: '^12 || ^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: 'eslint-plugin-jsdoc@39.2.2', npm WARN EBADENGINE required: { node: '^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } --- stdout --- { "added": 1119, "removed": 0, "changed": 0, "audited": 1120, "funding": 180, "audit": { "auditReportVersion": 2, "vulnerabilities": { "@wdio/cli": { "name": "@wdio/cli", "severity": "high", "isDirect": true, "via": [ "webdriverio" ], "effects": [], "range": "7.16.5 - 8.40.6", "nodes": [ "", "node_modules/@wdio/cli" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } }, "@wdio/local-runner": { "name": "@wdio/local-runner", "severity": "high", "isDirect": false, "via": [ "@wdio/runner" ], "effects": [], "range": "7.16.5 - 8.40.6", "nodes": [ "" ], "fixAvailable": { "name": "@wdio/local-runner", "version": "9.2.6", "isSemVerMajor": true } }, "@wdio/runner": { "name": "@wdio/runner", "severity": "high", "isDirect": false, "via": [ "webdriverio" ], "effects": [ "@wdio/local-runner" ], "range": "7.16.5 - 8.40.6", "nodes": [ "" ], "fixAvailable": { "name": "@wdio/local-runner", "version": "9.2.6", "isSemVerMajor": true } }, "devtools": { "name": "devtools", "severity": "high", "isDirect": false, "via": [ "puppeteer-core" ], "effects": [], "range": ">=7.16.5", "nodes": [ "" ], "fixAvailable": true }, "ejs": { "name": "ejs", "severity": "moderate", "isDirect": false, "via": [ { "source": 1098366, "name": "ejs", "dependency": "ejs", "title": "ejs lacks certain pollution protection", "url": "https://github.com/advisories/GHSA-ghr5-ch3p-vcr6", "severity": "moderate", "cwe": [ "CWE-693", "CWE-1321" ], "cvss": { "score": 4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "range": "<3.1.10" } ], "effects": [], "range": "<3.1.10", "nodes": [ "" ], "fixAvailable": true }, "mwbot": { "name": "mwbot", "severity": "moderate", "isDirect": false, "via": [ "request" ], "effects": [ "wdio-mediawiki", "wdio-wikibase" ], "range": ">=0.1.6", "nodes": [ "node_modules/mwbot" ], "fixAvailable": false }, "puppeteer-core": { "name": "puppeteer-core", "severity": "high", "isDirect": false, "via": [ "ws" ], "effects": [ "devtools", "webdriverio" ], "range": "11.0.0 - 22.11.1", "nodes": [ "", "node_modules/puppeteer-core" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } }, "request": { "name": "request", "severity": "moderate", "isDirect": false, "via": [ { "source": 1096727, "name": "request", "dependency": "request", "title": "Server-Side Request Forgery in Request", "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6", "severity": "moderate", "cwe": [ "CWE-918" ], "cvss": { "score": 6.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, "range": "<=2.88.2" }, "tough-cookie" ], "effects": [ "mwbot" ], "range": "*", "nodes": [ "node_modules/request" ], "fixAvailable": false }, "tough-cookie": { "name": "tough-cookie", "severity": "moderate", "isDirect": false, "via": [ { "source": 1097682, "name": "tough-cookie", "dependency": "tough-cookie", "title": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "severity": "moderate", "cwe": [ "CWE-1321" ], "cvss": { "score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, "range": "<4.1.3" } ], "effects": [ "request" ], "range": "<4.1.3", "nodes": [ "node_modules/tough-cookie" ], "fixAvailable": false }, "wdio-mediawiki": { "name": "wdio-mediawiki", "severity": "moderate", "isDirect": true, "via": [ "mwbot" ], "effects": [], "range": "*", "nodes": [ "node_modules/wdio-mediawiki" ], "fixAvailable": false }, "wdio-wikibase": { "name": "wdio-wikibase", "severity": "moderate", "isDirect": true, "via": [ "mwbot", "wdio-mediawiki" ], "effects": [], "range": "*", "nodes": [ "node_modules/wdio-wikibase" ], "fixAvailable": false }, "webdriverio": { "name": "webdriverio", "severity": "high", "isDirect": false, "via": [ "devtools", "puppeteer-core" ], "effects": [ "@wdio/cli", "@wdio/runner" ], "range": "7.16.5 - 8.40.6", "nodes": [ "", "node_modules/webdriverio" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } }, "ws": { "name": "ws", "severity": "high", "isDirect": false, "via": [ { "source": 1098392, "name": "ws", "dependency": "ws", "title": "ws affected by a DoS when handling a request with many HTTP headers", "url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "severity": "high", "cwe": [ "CWE-476" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": ">=8.0.0 <8.17.1" } ], "effects": [ "puppeteer-core" ], "range": "8.0.0 - 8.17.0", "nodes": [ "", "node_modules/ws" ], "fixAvailable": { "name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 6, "high": 7, "critical": 0, "total": 13 }, "dependencies": { "prod": 1, "dev": 1119, "optional": 2, "peer": 1, "peerOptional": 0, "total": 1119 } } } } --- end --- {"added": 1119, "removed": 0, "changed": 0, "audited": 1120, "funding": 180, "audit": {"auditReportVersion": 2, "vulnerabilities": {"@wdio/cli": {"name": "@wdio/cli", "severity": "high", "isDirect": true, "via": ["webdriverio"], "effects": [], "range": "7.16.5 - 8.40.6", "nodes": ["", "node_modules/@wdio/cli"], "fixAvailable": {"name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true}}, "@wdio/local-runner": {"name": "@wdio/local-runner", "severity": "high", "isDirect": false, "via": ["@wdio/runner"], "effects": [], "range": "7.16.5 - 8.40.6", "nodes": [""], "fixAvailable": {"name": "@wdio/local-runner", "version": "9.2.6", "isSemVerMajor": true}}, "@wdio/runner": {"name": "@wdio/runner", "severity": "high", "isDirect": false, "via": ["webdriverio"], "effects": ["@wdio/local-runner"], "range": "7.16.5 - 8.40.6", "nodes": [""], "fixAvailable": {"name": "@wdio/local-runner", "version": "9.2.6", "isSemVerMajor": true}}, "devtools": {"name": "devtools", "severity": "high", "isDirect": false, "via": ["puppeteer-core"], "effects": [], "range": ">=7.16.5", "nodes": [""], "fixAvailable": true}, "ejs": {"name": "ejs", "severity": "moderate", "isDirect": false, "via": [{"source": 1098366, "name": "ejs", "dependency": "ejs", "title": "ejs lacks certain pollution protection", "url": "https://github.com/advisories/GHSA-ghr5-ch3p-vcr6", "severity": "moderate", "cwe": ["CWE-693", "CWE-1321"], "cvss": {"score": 4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": "<3.1.10"}], "effects": [], "range": "<3.1.10", "nodes": [""], "fixAvailable": true}, "mwbot": {"name": "mwbot", "severity": "moderate", "isDirect": false, "via": ["request"], "effects": ["wdio-mediawiki", "wdio-wikibase"], "range": ">=0.1.6", "nodes": ["node_modules/mwbot"], "fixAvailable": false}, "puppeteer-core": {"name": "puppeteer-core", "severity": "high", "isDirect": false, "via": ["ws"], "effects": ["devtools", "webdriverio"], "range": "11.0.0 - 22.11.1", "nodes": ["", "node_modules/puppeteer-core"], "fixAvailable": {"name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true}}, "request": {"name": "request", "severity": "moderate", "isDirect": false, "via": [{"source": 1096727, "name": "request", "dependency": "request", "title": "Server-Side Request Forgery in Request", "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6", "severity": "moderate", "cwe": ["CWE-918"], "cvss": {"score": 6.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}, "range": "<=2.88.2"}, "tough-cookie"], "effects": ["mwbot"], "range": "*", "nodes": ["node_modules/request"], "fixAvailable": false}, "tough-cookie": {"name": "tough-cookie", "severity": "moderate", "isDirect": false, "via": [{"source": 1097682, "name": "tough-cookie", "dependency": "tough-cookie", "title": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "severity": "moderate", "cwe": ["CWE-1321"], "cvss": {"score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}, "range": "<4.1.3"}], "effects": ["request"], "range": "<4.1.3", "nodes": ["node_modules/tough-cookie"], "fixAvailable": false}, "wdio-mediawiki": {"name": "wdio-mediawiki", "severity": "moderate", "isDirect": true, "via": ["mwbot"], "effects": [], "range": "*", "nodes": ["node_modules/wdio-mediawiki"], "fixAvailable": false}, "wdio-wikibase": {"name": "wdio-wikibase", "severity": "moderate", "isDirect": true, "via": ["mwbot", "wdio-mediawiki"], "effects": [], "range": "*", "nodes": ["node_modules/wdio-wikibase"], "fixAvailable": false}, "webdriverio": {"name": "webdriverio", "severity": "high", "isDirect": false, "via": ["devtools", "puppeteer-core"], "effects": ["@wdio/cli", "@wdio/runner"], "range": "7.16.5 - 8.40.6", "nodes": ["", "node_modules/webdriverio"], "fixAvailable": {"name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true}}, "ws": {"name": "ws", "severity": "high", "isDirect": false, "via": [{"source": 1098392, "name": "ws", "dependency": "ws", "title": "ws affected by a DoS when handling a request with many HTTP headers", "url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "severity": "high", "cwe": ["CWE-476"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=8.0.0 <8.17.1"}], "effects": ["puppeteer-core"], "range": "8.0.0 - 8.17.0", "nodes": ["", "node_modules/ws"], "fixAvailable": {"name": "@wdio/cli", "version": "9.2.6", "isSemVerMajor": true}}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 6, "high": 7, "critical": 0, "total": 13}, "dependencies": {"prod": 1, "dev": 1119, "optional": 2, "peer": 1, "peerOptional": 0, "total": 1119}}}} $ /usr/bin/npm audit fix --only=dev --- stderr --- npm WARN invalid config only="dev" set in command line options npm WARN invalid config Must be one of: null, prod, production npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@es-joy/jsdoccomment@0.23.6', npm WARN EBADENGINE required: { node: '^12 || ^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: 'eslint-plugin-jsdoc@39.2.2', npm WARN EBADENGINE required: { node: '^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN deprecated har-validator@5.1.5: this library is no longer supported npm WARN deprecated glob@7.1.7: Glob versions prior to v9 are no longer supported npm WARN deprecated formidable@1.2.6: Please upgrade to latest, formidable@v2 or formidable@v3! Check these notes: https://bit.ly/2ZEqIau npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details. npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142 npm WARN deprecated superagent@6.1.0: Please upgrade to v7.0.2+ of superagent. We have fixed numerous issues with streams, form-data, attach(), filesystem errors not bubbling up (ENOENT on attach()), and all tests are now passing. See the releases tab for more information at <https://github.com/visionmedia/superagent/releases>. --- stdout --- added 1118 packages, and audited 1119 packages in 14s 180 packages are looking for funding run `npm fund` for details # npm audit report request * Severity: moderate Server-Side Request Forgery in Request - https://github.com/advisories/GHSA-p8p7-x288-28g6 Depends on vulnerable versions of tough-cookie No fix available node_modules/request mwbot >=0.1.6 Depends on vulnerable versions of request node_modules/mwbot wdio-mediawiki * Depends on vulnerable versions of mwbot node_modules/wdio-mediawiki wdio-wikibase * Depends on vulnerable versions of mwbot Depends on vulnerable versions of wdio-mediawiki node_modules/wdio-wikibase tough-cookie <4.1.3 Severity: moderate tough-cookie Prototype Pollution vulnerability - https://github.com/advisories/GHSA-72xf-g2v4-qvf3 No fix available node_modules/tough-cookie ws 8.0.0 - 8.17.0 Severity: high ws affected by a DoS when handling a request with many HTTP headers - https://github.com/advisories/GHSA-3h5v-q93c-6h6q fix available via `npm audit fix --force` Will install @wdio/cli@9.2.6, which is a breaking change node_modules/devtools/node_modules/ws node_modules/ws puppeteer-core 11.0.0 - 22.11.1 Depends on vulnerable versions of ws node_modules/devtools/node_modules/puppeteer-core node_modules/puppeteer-core devtools >=7.16.5 Depends on vulnerable versions of puppeteer-core node_modules/devtools webdriverio 7.16.5 - 8.40.6 Depends on vulnerable versions of devtools Depends on vulnerable versions of puppeteer-core node_modules/webdriverio @wdio/cli 7.16.5 - 8.40.6 Depends on vulnerable versions of webdriverio node_modules/@wdio/cli @wdio/runner 7.16.5 - 8.40.6 Depends on vulnerable versions of webdriverio node_modules/@wdio/runner @wdio/local-runner 7.16.5 - 8.40.6 Depends on vulnerable versions of @wdio/runner node_modules/@wdio/local-runner 12 vulnerabilities (5 moderate, 7 high) To address issues that do not require attention, run: npm audit fix To address all issues possible (including breaking changes), run: npm audit fix --force Some issues need review, and may require choosing a different dependency. --- end --- Verifying that tests still pass $ /usr/bin/npm ci --- stderr --- npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@es-joy/jsdoccomment@0.23.6', npm WARN EBADENGINE required: { node: '^12 || ^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: 'eslint-plugin-jsdoc@39.2.2', npm WARN EBADENGINE required: { node: '^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN deprecated har-validator@5.1.5: this library is no longer supported npm WARN deprecated glob@7.1.7: Glob versions prior to v9 are no longer supported npm WARN deprecated formidable@1.2.6: Please upgrade to latest, formidable@v2 or formidable@v3! Check these notes: https://bit.ly/2ZEqIau npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details. npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142 npm WARN deprecated superagent@6.1.0: Please upgrade to v7.0.2+ of superagent. We have fixed numerous issues with streams, form-data, attach(), filesystem errors not bubbling up (ENOENT on attach()), and all tests are now passing. See the releases tab for more information at <https://github.com/visionmedia/superagent/releases>. npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: @vue/server-renderer@3.2.23 npm WARN Found: vue@3.3.9 npm WARN node_modules/vue npm WARN vue@"3.3.9" from the root project npm WARN 6 more (@vue/babel-preset-app, @vue/cli-plugin-typescript, ...) npm WARN npm WARN Could not resolve dependency: npm WARN peer vue@"3.2.23" from @vue/server-renderer@3.2.23 npm WARN node_modules/@vue/server-renderer npm WARN optional @vue/server-renderer@"^3.0.1" from @vue/test-utils@2.3.0 npm WARN node_modules/@vue/test-utils npm WARN npm WARN Conflicting peer dependency: vue@3.2.23 npm WARN node_modules/vue npm WARN peer vue@"3.2.23" from @vue/server-renderer@3.2.23 npm WARN node_modules/@vue/server-renderer npm WARN optional @vue/server-renderer@"^3.0.1" from @vue/test-utils@2.3.0 npm WARN node_modules/@vue/test-utils npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: cache-loader@4.1.0 npm WARN Found: webpack@5.66.0 npm WARN node_modules/webpack npm WARN peer webpack@"^4.0.0 || ^5.0.0" from @soda/friendly-errors-webpack-plugin@1.8.1 npm WARN node_modules/@soda/friendly-errors-webpack-plugin npm WARN @soda/friendly-errors-webpack-plugin@"^1.8.0" from @vue/cli-service@5.0.0-rc.2 npm WARN node_modules/@vue/cli-service npm WARN 25 more (@vue/cli-plugin-babel, @vue/cli-plugin-eslint, ...) npm WARN npm WARN Could not resolve dependency: npm WARN peer webpack@"^4.0.0" from cache-loader@4.1.0 npm WARN node_modules/cache-loader npm WARN cache-loader@"^4.1.0" from @vue/cli-plugin-typescript@5.0.0-rc.2 npm WARN node_modules/@vue/cli-plugin-typescript npm WARN 1 more (@vue/cli-service) npm WARN npm WARN Conflicting peer dependency: webpack@4.47.0 npm WARN node_modules/webpack npm WARN peer webpack@"^4.0.0" from cache-loader@4.1.0 npm WARN node_modules/cache-loader npm WARN cache-loader@"^4.1.0" from @vue/cli-plugin-typescript@5.0.0-rc.2 npm WARN node_modules/@vue/cli-plugin-typescript npm WARN 1 more (@vue/cli-service) npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@es-joy/jsdoccomment@0.23.6', npm WARN EBADENGINE required: { node: '^12 || ^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: 'eslint-plugin-jsdoc@39.2.2', npm WARN EBADENGINE required: { node: '^14 || ^16 || ^17' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful. npm WARN deprecated rimraf@2.7.1: Rimraf versions prior to v4 are no longer supported npm WARN deprecated @humanwhocodes/config-array@0.11.14: Use @eslint/config-array instead npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported npm WARN deprecated glob@7.2.0: Glob versions prior to v9 are no longer supported npm WARN deprecated @apidevtools/swagger-cli@4.0.4: This package has been abandoned. Please switch to using the actively maintained @redocly/cli npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead npm WARN deprecated glob@8.1.0: Glob versions prior to v9 are no longer supported npm WARN deprecated formidable@1.2.6: Please upgrade to latest, formidable@v2 or formidable@v3! Check these notes: https://bit.ly/2ZEqIau npm WARN deprecated superagent@6.1.0: Please upgrade to v9.0.0+ as we have fixed a public vulnerability with formidable dependency. Note that v9.0.0+ requires Node.js v14.18.0+. See https://github.com/ladjs/superagent/pull/1800 for insight. This project is supported and maintained by the team at Forward Email @ https://forwardemail.net npm WARN deprecated stylelint-processor-html@1.0.0: Please use stylelint-processor-arbitrary-tags https://github.com/mapbox/stylelint-processor-arbitrary-tags npm WARN deprecated @stylelint/postcss-markdown@0.36.2: Use the original unforked package instead: postcss-markdown npm WARN deprecated @hapi/bourne@1.3.2: This version has been deprecated and is no longer supported or maintained npm WARN deprecated @hapi/topo@3.1.6: This version has been deprecated and is no longer supported or maintained npm WARN deprecated urix@0.1.0: Please see https://github.com/lydell/urix#deprecated npm WARN deprecated har-validator@5.1.3: this library is no longer supported npm WARN deprecated resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated npm WARN deprecated chokidar@2.1.8: Chokidar 2 will break on node v14+. Upgrade to chokidar 3 with 15x less dependencies. npm WARN deprecated querystring@0.2.0: The querystring API is considered Legacy. new code should use the URLSearchParams API instead. npm WARN deprecated html-webpack-plugin@3.2.0: 3.x is no longer supported npm WARN deprecated babel-eslint@10.1.0: babel-eslint is now @babel/eslint-parser. This package will no longer receive updates. npm WARN deprecated @hapi/address@2.1.4: Moved to 'npm install @sideway/address' npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details. npm WARN deprecated uuid@3.3.3: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details. npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142 npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142 npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142 npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142 npm WARN deprecated @hapi/hoek@8.5.1: This version has been deprecated and is no longer supported or maintained npm WARN deprecated @hapi/joi@15.1.1: Switch to 'npm install joi' npm WARN deprecated svgo@1.3.2: This SVGO version is no longer supported. Upgrade to v2.x.x. npm WARN deprecated popper.js@1.16.1: You can find the new Popper v2 at @popperjs/core, this package is dedicated to the legacy v1 --- stdout --- > wikibase@0.1.0 postinstall > npm-run-all -p install:* > wikibase@0.1.0 install:rest-api > npm --prefix repo/rest-api ci > wikibase@0.1.0 install:bridge > npm --prefix client/data-bridge ci > wikibase@0.1.0 install:tainted-ref > npm --prefix view/lib/wikibase-tainted-ref ci > tainted-ref@0.1.0 prepare > node build/wikimedia-ui-base.js added 2727 packages, and audited 2728 packages in 2m 160 packages are looking for funding run `npm fund` for details 145 vulnerabilities (4 low, 80 moderate, 47 high, 14 critical) To address issues that do not require attention, run: npm audit fix To address all issues possible (including breaking changes), run: npm audit fix --force Some issues need review, and may require choosing a different dependency. Run `npm audit` for details. added 917 packages, and audited 918 packages in 2m 194 packages are looking for funding run `npm fund` for details 14 vulnerabilities (2 low, 6 moderate, 6 high) To address issues that do not require attention, run: npm audit fix To address all issues (including breaking changes), run: npm audit fix --force Run `npm audit` for details. > data-bridge@0.1.0 prepare > node build/wikimedia-ui-base.js added 2390 packages, and audited 2391 packages in 2m 238 packages are looking for funding run `npm fund` for details 84 vulnerabilities (2 low, 37 moderate, 41 high, 4 critical) To address issues that do not require attention, run: npm audit fix To address all issues (including breaking changes), run: npm audit fix --force Run `npm audit` for details. added 1118 packages, and audited 1119 packages in 2m 180 packages are looking for funding run `npm fund` for details 12 vulnerabilities (5 moderate, 7 high) To address issues that do not require attention, run: npm audit fix To address all issues possible (including breaking changes), run: npm audit fix --force Some issues need review, and may require choosing a different dependency. Run `npm audit` for details. --- end --- $ /usr/bin/npm test --- stderr --- PASS repo/tests/jest/wikibase.vector.searchClient.spec.js Vector Search Client ✓ test construction and fetchByTitle behavior (30 ms) ✓ test construction and loadMore behavior (4 ms) ✓ doesn't show an extra match for a search hit on the label (29 ms) ✓ supports showing a match of a label in a different language (3 ms) Test Suites: 1 passed, 1 total Tests: 4 passed, 4 total Snapshots: 0 total Time: 4.057 s Ran all test suites matching /repo\/tests\/jest\//i. PASS tests/unit/StatementTracker.spec.ts (8.917 s) PASS tests/unit/MWHookHandler.spec.ts (8.449 s) PASS tests/unit/store/mutations.spec.ts PASS tests/unit/store/actions.spec.ts PASS tests/unit/Popper.spec.ts PASS tests/unit/TaintedIcon.spec.ts PASS tests/unit/TaintedPopper.spec.ts (11.821 s) PASS tests/unit/store/getters.spec.ts PASS tests/unit/ReferenceListChangeCounter.spec.ts PASS tests/unit/TaintedChecker.spec.ts PASS tests/unit/App.spec.ts PASS tests/unit/store/index.spec.ts Test Suites: 12 passed, 12 total Tests: 68 passed, 68 total Snapshots: 0 total Time: 16.612 s Ran all test suites. PASS tests/unit/store/getters.spec.ts (11.705 s) PASS tests/unit/services/createServices.spec.ts PASS tests/unit/store/actions.spec.ts (12.842 s) PASS tests/unit/data-access/ApiWritingRepository.spec.ts PASS tests/unit/presentation/components/ErrorPermission.spec.ts (14.308 s) PASS tests/unit/data-access/ApiPageEditPermissionErrorsRepository.spec.ts PASS tests/unit/presentation/components/AppHeader.spec.ts PASS tests/unit/presentation/components/Loading.spec.ts PASS tests/unit/data-access/CombiningPermissionsRepository.spec.ts PASS tests/unit/store/statements/getters.spec.ts PASS tests/unit/presentation/App.spec.ts (5.838 s) [Vue warn]: Invalid prop: custom validator check failed for prop "type". at <EventEmittingButton type="potato" size="L" message="click me" ... > at <VTUROOT> PASS tests/unit/presentation/components/EventEmittingButton.spec.ts PASS tests/unit/mediawiki/init.spec.ts PASS tests/unit/presentation/components/ErrorWrapper.spec.ts PASS tests/unit/store/mutations.spec.ts PASS tests/unit/store/entity/actions.spec.ts PASS tests/unit/data-access/TrimmingWritingRepository.spec.ts PASS tests/unit/mediawiki/BridgeDomElementsSelector.spec.ts PASS tests/unit/data-access/SpecialPageReadingEntityRepository.spec.ts PASS tests/unit/data-access/ApiCore.spec.ts PASS tests/unit/data-access/ApiRenderReferencesRepository.spec.ts PASS tests/unit/presentation/components/ErrorSavingAssertUser.spec.ts PASS tests/unit/data-access/BatchingApi.spec.ts PASS tests/unit/store/statements/MainSnakPath.spec.ts PASS tests/unit/mediawiki/Dispatcher.spec.ts PASS tests/unit/data-access/ApiEntityLabelRepository.spec.ts PASS tests/unit/presentation/components/ErrorSaving.spec.ts PASS tests/unit/data-access/ApiRepoConfigRepository.spec.ts PASS tests/unit/change-op/statement-mutation/strategies/UpdateMutationStrategy.spec.ts PASS tests/unit/presentation/components/ErrorUnsupportedSnakType.spec.ts PASS tests/unit/presentation/components/StringDataValue.spec.ts PASS tests/unit/presentation/components/EditDecision.spec.ts PASS tests/unit/presentation/components/ErrorUnsupportedDatatype.spec.ts PASS tests/unit/presentation/components/ErrorUnknown.spec.ts PASS tests/unit/data-access/ApiTempUserConfigRepository.spec.ts PASS tests/unit/change-op/statement-mutation/strategies/ReplaceMutationStrategy.spec.ts PASS tests/unit/presentation/components/WarningAnonymousEdit.spec.ts PASS tests/unit/data-access/RepoRouter.spec.ts PASS tests/unit/presentation/components/ErrorPermissionInfo.spec.ts PASS tests/unit/mediawiki/prepareContainer.spec.ts PASS tests/unit/mediawiki/MwInitTracker.spec.ts PASS tests/unit/main.spec.ts PASS tests/unit/presentation/components/ReportIssue.spec.ts PASS tests/unit/presentation/components/DataBridge.spec.ts PASS tests/unit/presentation/components/ReferenceSection.spec.ts PASS tests/unit/presentation/components/License.spec.ts PASS tests/unit/data-access/ApiWbgetentities.spec.ts PASS tests/unit/data-access/ApiPropertyDataTypeRepository.spec.ts PASS tests/unit/presentation/components/ErrorDeprecatedStatement.spec.ts PASS tests/unit/presentation/components/ResizingTextField.spec.ts PASS tests/unit/presentation/components/ErrorAmbiguousStatement.spec.ts PASS tests/unit/store/newMockableEntityRevision.spec.ts PASS tests/unit/presentation/components/RadioInput.spec.ts PASS tests/unit/presentation/extendVueEnvironment.spec.ts PASS tests/unit/presentation/components/ProcessDialogHeader.spec.ts PASS tests/unit/presentation/components/BailoutActions.spec.ts PASS tests/unit/data-access/ApiReadingEntityRepository.spec.ts PASS tests/unit/data-access/MwLanguageInfoRepository.spec.ts PASS tests/unit/data-access/DataBridgeTrackerService.spec.ts PASS tests/unit/tracking/mutationsTrackerPlugin.spec.ts PASS tests/unit/data-access/ApiQuery.spec.ts PASS tests/unit/store/entity/mutations.spec.ts PASS tests/unit/presentation/components/ThankYou.spec.ts PASS tests/unit/presentation/plugins/InLanguagePlugin/InLanguagePlugin.spec.ts [Vue warn]: Invalid prop: custom validator check failed for prop "type". at <IconMessageBox type="potato" ref="VTU_COMPONENT" > at <VTUROOT> PASS tests/unit/presentation/IconMessageBox.spec.ts PASS tests/unit/store/statements/mutations.spec.ts PASS tests/unit/presentation/components/PropertyLabel.spec.ts PASS tests/unit/data-access/MwMessagesRepository.spec.ts PASS tests/unit/presentation/components/TermLabel.spec.ts PASS tests/unit/data-access/ApiPurge.spec.ts PASS tests/unit/presentation/plugins/MessagesPlugin/Messages.spec.ts PASS tests/unit/mediawiki/subscribeToEvents.spec.ts PASS tests/unit/store/statements/actions.spec.ts PASS tests/unit/presentation/components/UserLink.spec.ts PASS tests/unit/presentation/components/PageList.spec.ts PASS tests/unit/services/ServiceContainer.spec.ts PASS tests/unit/tracking/PrefixingEventTracker.spec.ts PASS tests/unit/change-op/statement-mutation/statementMutationFactory.spec.ts PASS tests/unit/presentation/components/ErrorSavingEditConflict.spec.ts PASS tests/unit/store/index.spec.ts PASS tests/unit/utils/errorTypeFormatter.spec.ts PASS tests/unit/mediawiki/facades/EventTracker.spec.ts PASS tests/unit/presentation/plugins/RepoRouter/RepoRouterPlugin.spec.ts PASS tests/unit/data-access/ClientRouter.spec.ts PASS tests/unit/timer.spec.ts PASS tests/unit/presentation/components/RadioGroup.spec.ts PASS tests/unit/presentation/components/IndeterminateProgressBar.spec.ts PASS tests/unit/store/clone.spec.ts Test Suites: 88 passed, 88 total Tests: 627 passed, 627 total Snapshots: 13 passed, 13 total Time: 44.486 s Ran all test suites. PASS tests/integration/store/actions.spec.ts (6.423 s) PASS tests/integration/mediawiki/init.spec.ts (6.49 s) Test Suites: 2 passed, 2 total Tests: 16 passed, 16 total Snapshots: 0 total Time: 8.186 s Ran all test suites. PASS tests/e2e/StringDataValue.spec.ts (10.56 s) PASS tests/e2e/app.spec.ts (10.411 s) Test Suites: 2 passed, 2 total Tests: 29 passed, 29 total Snapshots: 0 total Time: 12.372 s Ran all test suites. - Building for production... (node:1903) [DEP_WEBPACK_COMPILATION_OPTIMIZE_CHUNK_ASSETS] DeprecationWarning: optimizeChunkAssets is deprecated (use Compilation.hooks.processAssets instead and use one of Compilation.PROCESS_ASSETS_STAGE_* as stage option) (Use `node --trace-deprecation ...` to show where the warning was created) `isModuleDeclaration` has been deprecated, please migrate to `isImportOrExportDeclaration` at isModuleDeclaration (/src/repo/client/data-bridge/node_modules/@babel/types/lib/validators/generated/index.js:3940:35) at NodePath.<computed> [as isModuleDeclaration] (/src/repo/client/data-bridge/node_modules/@babel/traverse/lib/path/index.js:232:12) `isModuleDeclaration` has been deprecated, please migrate to `isImportOrExportDeclaration` at isModuleDeclaration (/src/repo/client/data-bridge/node_modules/@babel/types/lib/validators/generated/index.js:3940:35) at NodePath.<computed> [as isModuleDeclaration] (/src/repo/client/data-bridge/node_modules/@babel/traverse/lib/path/index.js:232:12) `isModuleDeclaration` has been deprecated, please migrate to `isImportOrExportDeclaration` at isModuleDeclaration (/src/repo/client/data-bridge/node_modules/@babel/types/lib/validators/generated/index.js:3940:35) at NodePath.<computed> [as isModuleDeclaration] (/src/repo/client/data-bridge/node_modules/@babel/traverse/lib/path/index.js:232:12) (node:1903) [DEP_WEBPACK_COMPILATION_CACHE] DeprecationWarning: Compilation.cache was removed in favor of Compilation.getCache() --- stdout --- > wikibase@0.1.0 test > npm-run-all -p test-fast:* > wikibase@0.1.0 test-fast:rest-api > npm --prefix repo/rest-api test > wikibase@0.1.0 test-fast:jest-repo > jest repo/tests/jest/ > wikibase@0.1.0 test-fast:grunt > grunt test > wikibase@0.1.0 test-fast:bridge > npm --prefix client/data-bridge test > wikibase@0.1.0 test-fast:tainted-ref > npm --prefix view/lib/wikibase-tainted-ref test > wikibase-rest-api-definition@0.1.0 test > npm run lint > data-bridge@0.1.0 test > npm-run-all test:* > tainted-ref@0.1.0 test > npm-run-all test:* > wikibase-rest-api-definition@0.1.0 lint > npm-run-all --parallel lint:* > data-bridge@0.1.0 test:lint > vue-cli-service lint --max-warnings 0 --no-fix . && stylelint --syntax scss 'src/**/*.(vue|scss)' > tainted-ref@0.1.0 test:unit > vue-cli-service test:unit -c ./jest.config.js Running "eslint:all" (eslint) task > wikibase-rest-api-definition@0.1.0 lint:eslint > eslint . --config .eslintrc.json --max-warnings 0 > wikibase-rest-api-definition@0.1.0 lint:openapi > swagger-cli validate specs/openapi.json specs/openapi.json is valid > tainted-ref@0.1.0 test:lint > vue-cli-service lint --max-warnings 0 --no-fix . && stylelint --syntax scss 'src/**/*.(vue|scss)' DONE No lint errors found! > data-bridge@0.1.0 test:unit > jest -c ./jest.config.unit.js Running "banana:all" (banana) task DONE No lint errors found! >> 5 message directories checked. Running "stylelint:all" (stylelint) task > tainted-ref@0.1.0 test:mwlibs > echo 'disabled (T297381)' # ZUUL_BRANCH=${ZUUL_BRANCH:-master} lib-version-check disabled (T297381) >> Linted 42 files without errors Done. > data-bridge@0.1.0 test:integration > jest -c ./jest.config.integration.js > data-bridge@0.1.0 test:e2e > jest -c ./jest.config.e2e.js > data-bridge@0.1.0 test:distnodiff > npm run build -- --dest /tmp/dist && diff -q ./dist/data-bridge.app.js /tmp/dist/data-bridge.app.js && diff -q ./dist/css/data-bridge.app.css /tmp/dist/css/data-bridge.app.css && diff -q ./dist/data-bridge.init.js /tmp/dist/data-bridge.init.js && diff -q ./dist/data-bridge.chunk-vendors.js /tmp/dist/data-bridge.chunk-vendors.js > data-bridge@0.1.0 build > NODE_ENV=production vue-cli-service build --no-clean --skip-plugins eslint --report --report-json --no-module --dest /tmp/dist DONE Compiled successfully in 17047ms4:20:46 PM File Size Gzipped ../../../../tmp/dist/data-bridge.app.j 190.92 KiB 52.34 KiB s ../../../../tmp/dist/data-bridge.chunk 27.45 KiB 10.21 KiB -vendors.js ../../../../tmp/dist/data-bridge.init. 9.60 KiB 4.14 KiB js ../../../../tmp/dist/css/data-bridge.a 25.56 KiB 4.28 KiB pp.css Images and other types of assets omitted. DONE Build complete. The ../../../../tmp/dist directory is ready to be deployed. INFO Check out deployment instructions at https://cli.vuejs.org/guide/deployment.html > data-bridge@0.1.0 test:mwlibs > echo 'disabled (T297381)' # ZUUL_BRANCH=${ZUUL_BRANCH:-master} lib-version-check disabled (T297381) --- end --- {} {"1098366": {"source": 1098366, "name": "ejs", "dependency": "ejs", "title": "ejs lacks certain pollution protection", "url": "https://github.com/advisories/GHSA-ghr5-ch3p-vcr6", "severity": "moderate", "cwe": ["CWE-693", "CWE-1321"], "cvss": {"score": 4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": "<3.1.10"}} Upgrading n:ejs from 3.1.9 -> 3.1.10 $ package-lock-lint package-lock.json --- stdout --- Checking package-lock.json --- end --- build: Updating ejs to 3.1.10 * https://github.com/advisories/GHSA-ghr5-ch3p-vcr6 $ git add . --- stdout --- --- end --- $ git commit -F /tmp/tmplng7kf8z --- stdout --- [REL1_43 caebe5d] build: Updating ejs to 3.1.10 1 file changed, 69 insertions(+), 64 deletions(-) --- end --- $ git format-patch HEAD~1 --stdout --- stdout --- From caebe5dd170f747aa3f29027a86a4e58d4f4eb8b Mon Sep 17 00:00:00 2001 From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org> Date: Thu, 31 Oct 2024 16:20:50 +0000 Subject: [PATCH] build: Updating ejs to 3.1.10 * https://github.com/advisories/GHSA-ghr5-ch3p-vcr6 Change-Id: I5b7c49fb088e77586ecc4d4398c2f18efe4939d2 --- package-lock.json | 133 ++++++++++++++++++++++++---------------------- 1 file changed, 69 insertions(+), 64 deletions(-) diff --git a/package-lock.json b/package-lock.json index d528b98..43be34f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -7,6 +7,7 @@ "": { "name": "wikibase", "version": "0.1.0", + "hasInstallScript": true, "devDependencies": { "@wdio/cli": "^7.16.13", "@wdio/local-runner": "^7.16.16", @@ -2128,9 +2129,9 @@ "dev": true }, "node_modules/@types/ua-parser-js": { - "version": "0.7.37", - "resolved": "https://registry.npmjs.org/@types/ua-parser-js/-/ua-parser-js-0.7.37.tgz", - "integrity": "sha512-4sOxS3ZWXC0uHJLYcWAaLMxTvjRX3hT96eF4YWUh1ovTaenvibaZOE5uXtIp4mksKMLRwo7YDiCBCw6vBiUPVg==", + "version": "0.7.39", + "resolved": "https://registry.npmjs.org/@types/ua-parser-js/-/ua-parser-js-0.7.39.tgz", + "integrity": "sha512-P/oDfpofrdtF5xw433SPALpdSchtJmY7nsJItf8h3KXqOslkbySh8zq4dSWXH2oTjRvJ5PczVEoCZPow6GicLg==", "dev": true }, "node_modules/@types/which": { @@ -2171,9 +2172,9 @@ "dev": true }, "node_modules/@wdio/cli": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-7.33.0.tgz", - "integrity": "sha512-S5Iy4AVcbcJDMhAP4k/Yf18mKma9NGFM8A5bafcGRpFlIj97rpnb0/cpmJVVEr4v/wr3XCu0k38ooJw0B/D3nw==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-7.36.0.tgz", + "integrity": "sha512-vYL2tB9x7vjK3N7oRFJbUKsU4y04wqk7DQXdbmgBzC9Em4u9yvFxvtiDMCSC8kvFowiIhMtEFk8SQacL8pNszA==", "dev": true, "dependencies": { "@types/ejs": "^3.0.5", @@ -2201,7 +2202,7 @@ "lodash.union": "^4.6.0", "mkdirp": "^3.0.0", "recursive-readdir": "^2.2.2", - "webdriverio": "7.33.0", + "webdriverio": "7.36.0", "yargs": "^17.0.0", "yarn-install": "^1.0.0" }, @@ -2230,15 +2231,15 @@ } }, "node_modules/@wdio/local-runner": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-7.33.0.tgz", - "integrity": "sha512-oZLLyOizlX2mV3FIxRLWgN0J2sDL+6LhC71CwFxcV8iVjXvp16my9jbKrgtkIgdo1BsaWIqq+tZlCr9e9NUUjA==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-7.36.0.tgz", + "integrity": "sha512-01uDD4O5RbtuFE0F7PmtZjYuqCfJ2HvP1b+q8OUm5oINoaQ7djSkHCM01UKu5Rn5I1cQa0vSr5r12puD5Gp+Yw==", "dev": true, "dependencies": { "@types/stream-buffers": "^3.0.3", "@wdio/logger": "7.26.0", "@wdio/repl": "7.33.0", - "@wdio/runner": "7.33.0", + "@wdio/runner": "7.36.0", "@wdio/types": "7.33.0", "async-exit-hook": "^2.0.1", "split2": "^4.0.0", @@ -2359,9 +2360,9 @@ } }, "node_modules/@wdio/runner": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-7.33.0.tgz", - "integrity": "sha512-3B+29EanAdRFh4vT3E4XnHQga/apdLIDZq5pGEbqnDA5LarbIvsNWbJjeJzWM6XaZmEwrPfjOunjOevJt5yvdg==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-7.36.0.tgz", + "integrity": "sha512-EU/0XprH6UEqaYarxuSSLYgsxC6/jLHE7Wj/5FIJyFwdx//Ip8DnTXzbJylskeWX2NkCfJH2VerGSo423c98+Q==", "dev": true, "dependencies": { "@wdio/config": "7.33.0", @@ -2371,7 +2372,7 @@ "deepmerge": "^4.0.0", "gaze": "^1.1.2", "webdriver": "7.33.0", - "webdriverio": "7.33.0" + "webdriverio": "7.36.0" }, "engines": { "node": ">=12.0.0" @@ -4409,9 +4410,9 @@ } }, "node_modules/devtools": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/devtools/-/devtools-7.33.0.tgz", - "integrity": "sha512-9sxWcdZLOUtgvw4kotL8HqvIFkO/yuHUecgqCYXnqIzwdWSoxWCeKAyZhOJNMeFtzjEnHGvIrUIquEuifk2STg==", + "version": "7.35.0", + "resolved": "https://registry.npmjs.org/devtools/-/devtools-7.35.0.tgz", + "integrity": "sha512-7HMZMcJSCK/PaBCWVs4n4ZhtBNdUQj10iPwXvj/JDkqPreEXN/XW9GJAoMuLPFmCEKfxe+LrIbgs8ocGJ6rp/A==", "dev": true, "dependencies": { "@types/node": "^18.0.0", @@ -4433,9 +4434,9 @@ } }, "node_modules/devtools-protocol": { - "version": "0.0.1203626", - "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1203626.tgz", - "integrity": "sha512-nEzHZteIUZfGCZtTiS1fRpC8UZmsfD1SiyPvaUNvS13dvKf666OAm8YTi0+Ca3n1nLEyu49Cy4+dPWpaHFJk9g==", + "version": "0.0.1260888", + "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1260888.tgz", + "integrity": "sha512-9rTIZ4ZjWwalCPiaY+kPiALLfOKgAz5CTi/Zb1L+qSZ8PH3zVo1T8JcgXIIqg1iM3pZ6hF+n9xO5r2jZ/SF+jg==", "dev": true }, "node_modules/devtools/node_modules/debug": { @@ -4740,9 +4741,9 @@ } }, "node_modules/ejs": { - "version": "3.1.9", - "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.9.tgz", - "integrity": "sha512-rC+QVNMJWv+MtPgkt0y+0rVEIdbtxVADApW9JXrUVlzHetgcyczP/E7DJmWJ4fJCZF2cPcBk0laWO9ZHMG3DmQ==", + "version": "3.1.10", + "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz", + "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==", "dev": true, "dependencies": { "jake": "^10.8.5" @@ -6271,6 +6272,7 @@ "version": "7.1.7", "resolved": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz", "integrity": "sha512-OvD9ENzPLbegENnYP5UUfJIirTg4+XwMWGaQfQTY0JenxNvvIKP3U3/tAQSPIu/lHxXYSZmpXlUHeqAIdKzBLQ==", + "deprecated": "Glob versions prior to v9 are no longer supported", "dev": true, "dependencies": { "fs.realpath": "^1.0.0", @@ -13146,9 +13148,9 @@ } }, "node_modules/ua-parser-js": { - "version": "1.0.36", - "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.36.tgz", - "integrity": "sha512-znuyCIXzl8ciS3+y3fHJI/2OhQIXbXw9MWC/o3qwyR+RGppjZHrM27CGFSKCJXi2Kctiz537iOu2KnXs1lMQhw==", + "version": "1.0.39", + "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.39.tgz", + "integrity": "sha512-k24RCVWlEcjkdOxYmVJgeD/0a1TiSpqLg+ZalVGV9lsnr4yqu0w7tX/x2xX6G4zpkgQnRf89lxuZ1wsbjXM8lw==", "dev": true, "funding": [ { @@ -13164,6 +13166,9 @@ "url": "https://github.com/sponsors/faisalman" } ], + "bin": { + "ua-parser-js": "script/cli.js" + }, "engines": { "node": "*" } @@ -13429,9 +13434,9 @@ } }, "node_modules/webdriverio": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-7.33.0.tgz", - "integrity": "sha512-9MRPYkOEdsvsBpDJRSMAR+dLID6I65vKjpzNTTFJSjRLSHF6MByOH3mV2trlpIyV+TIp87GysYUVf3Cmufg9eg==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-7.36.0.tgz", + "integrity": "sha512-OTYmKBF7eFKBX39ojUIEzw7AlE1ZRJiFoMTtEQaPMuPzZCP2jUBq6Ey38nuZrYXLkXn3/le9a14pNnKSM0n56w==", "dev": true, "dependencies": { "@types/aria-query": "^5.0.0", @@ -13446,8 +13451,8 @@ "aria-query": "^5.2.1", "css-shorthand-properties": "^1.1.1", "css-value": "^0.0.1", - "devtools": "7.33.0", - "devtools-protocol": "^0.0.1203626", + "devtools": "7.35.0", + "devtools-protocol": "^0.0.1260888", "fs-extra": "^11.1.1", "grapheme-splitter": "^1.0.2", "lodash.clonedeep": "^4.5.0", @@ -15577,9 +15582,9 @@ "dev": true }, "@types/ua-parser-js": { - "version": "0.7.37", - "resolved": "https://registry.npmjs.org/@types/ua-parser-js/-/ua-parser-js-0.7.37.tgz", - "integrity": "sha512-4sOxS3ZWXC0uHJLYcWAaLMxTvjRX3hT96eF4YWUh1ovTaenvibaZOE5uXtIp4mksKMLRwo7YDiCBCw6vBiUPVg==", + "version": "0.7.39", + "resolved": "https://registry.npmjs.org/@types/ua-parser-js/-/ua-parser-js-0.7.39.tgz", + "integrity": "sha512-P/oDfpofrdtF5xw433SPALpdSchtJmY7nsJItf8h3KXqOslkbySh8zq4dSWXH2oTjRvJ5PczVEoCZPow6GicLg==", "dev": true }, "@types/which": { @@ -15620,9 +15625,9 @@ "dev": true }, "@wdio/cli": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-7.33.0.tgz", - "integrity": "sha512-S5Iy4AVcbcJDMhAP4k/Yf18mKma9NGFM8A5bafcGRpFlIj97rpnb0/cpmJVVEr4v/wr3XCu0k38ooJw0B/D3nw==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-7.36.0.tgz", + "integrity": "sha512-vYL2tB9x7vjK3N7oRFJbUKsU4y04wqk7DQXdbmgBzC9Em4u9yvFxvtiDMCSC8kvFowiIhMtEFk8SQacL8pNszA==", "dev": true, "requires": { "@types/ejs": "^3.0.5", @@ -15650,7 +15655,7 @@ "lodash.union": "^4.6.0", "mkdirp": "^3.0.0", "recursive-readdir": "^2.2.2", - "webdriverio": "7.33.0", + "webdriverio": "7.36.0", "yargs": "^17.0.0", "yarn-install": "^1.0.0" } @@ -15670,15 +15675,15 @@ } }, "@wdio/local-runner": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-7.33.0.tgz", - "integrity": "sha512-oZLLyOizlX2mV3FIxRLWgN0J2sDL+6LhC71CwFxcV8iVjXvp16my9jbKrgtkIgdo1BsaWIqq+tZlCr9e9NUUjA==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-7.36.0.tgz", + "integrity": "sha512-01uDD4O5RbtuFE0F7PmtZjYuqCfJ2HvP1b+q8OUm5oINoaQ7djSkHCM01UKu5Rn5I1cQa0vSr5r12puD5Gp+Yw==", "dev": true, "requires": { "@types/stream-buffers": "^3.0.3", "@wdio/logger": "7.26.0", "@wdio/repl": "7.33.0", - "@wdio/runner": "7.33.0", + "@wdio/runner": "7.36.0", "@wdio/types": "7.33.0", "async-exit-hook": "^2.0.1", "split2": "^4.0.0", @@ -15774,9 +15779,9 @@ } }, "@wdio/runner": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-7.33.0.tgz", - "integrity": "sha512-3B+29EanAdRFh4vT3E4XnHQga/apdLIDZq5pGEbqnDA5LarbIvsNWbJjeJzWM6XaZmEwrPfjOunjOevJt5yvdg==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-7.36.0.tgz", + "integrity": "sha512-EU/0XprH6UEqaYarxuSSLYgsxC6/jLHE7Wj/5FIJyFwdx//Ip8DnTXzbJylskeWX2NkCfJH2VerGSo423c98+Q==", "dev": true, "requires": { "@wdio/config": "7.33.0", @@ -15786,7 +15791,7 @@ "deepmerge": "^4.0.0", "gaze": "^1.1.2", "webdriver": "7.33.0", - "webdriverio": "7.33.0" + "webdriverio": "7.36.0" } }, "@wdio/spec-reporter": { @@ -17297,9 +17302,9 @@ "dev": true }, "devtools": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/devtools/-/devtools-7.33.0.tgz", - "integrity": "sha512-9sxWcdZLOUtgvw4kotL8HqvIFkO/yuHUecgqCYXnqIzwdWSoxWCeKAyZhOJNMeFtzjEnHGvIrUIquEuifk2STg==", + "version": "7.35.0", + "resolved": "https://registry.npmjs.org/devtools/-/devtools-7.35.0.tgz", + "integrity": "sha512-7HMZMcJSCK/PaBCWVs4n4ZhtBNdUQj10iPwXvj/JDkqPreEXN/XW9GJAoMuLPFmCEKfxe+LrIbgs8ocGJ6rp/A==", "dev": true, "requires": { "@types/node": "^18.0.0", @@ -17387,9 +17392,9 @@ } }, "devtools-protocol": { - "version": "0.0.1203626", - "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1203626.tgz", - "integrity": "sha512-nEzHZteIUZfGCZtTiS1fRpC8UZmsfD1SiyPvaUNvS13dvKf666OAm8YTi0+Ca3n1nLEyu49Cy4+dPWpaHFJk9g==", + "version": "0.0.1260888", + "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1260888.tgz", + "integrity": "sha512-9rTIZ4ZjWwalCPiaY+kPiALLfOKgAz5CTi/Zb1L+qSZ8PH3zVo1T8JcgXIIqg1iM3pZ6hF+n9xO5r2jZ/SF+jg==", "dev": true }, "diff": { @@ -17534,9 +17539,9 @@ } }, "ejs": { - "version": "3.1.9", - "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.9.tgz", - "integrity": "sha512-rC+QVNMJWv+MtPgkt0y+0rVEIdbtxVADApW9JXrUVlzHetgcyczP/E7DJmWJ4fJCZF2cPcBk0laWO9ZHMG3DmQ==", + "version": "3.1.10", + "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz", + "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==", "dev": true, "requires": { "jake": "^10.8.5" @@ -23803,9 +23808,9 @@ } }, "ua-parser-js": { - "version": "1.0.36", - "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.36.tgz", - "integrity": "sha512-znuyCIXzl8ciS3+y3fHJI/2OhQIXbXw9MWC/o3qwyR+RGppjZHrM27CGFSKCJXi2Kctiz537iOu2KnXs1lMQhw==", + "version": "1.0.39", + "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.39.tgz", + "integrity": "sha512-k24RCVWlEcjkdOxYmVJgeD/0a1TiSpqLg+ZalVGV9lsnr4yqu0w7tX/x2xX6G4zpkgQnRf89lxuZ1wsbjXM8lw==", "dev": true }, "unbox-primitive": { @@ -23997,9 +24002,9 @@ } }, "webdriverio": { - "version": "7.33.0", - "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-7.33.0.tgz", - "integrity": "sha512-9MRPYkOEdsvsBpDJRSMAR+dLID6I65vKjpzNTTFJSjRLSHF6MByOH3mV2trlpIyV+TIp87GysYUVf3Cmufg9eg==", + "version": "7.36.0", + "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-7.36.0.tgz", + "integrity": "sha512-OTYmKBF7eFKBX39ojUIEzw7AlE1ZRJiFoMTtEQaPMuPzZCP2jUBq6Ey38nuZrYXLkXn3/le9a14pNnKSM0n56w==", "dev": true, "requires": { "@types/aria-query": "^5.0.0", @@ -24014,8 +24019,8 @@ "aria-query": "^5.2.1", "css-shorthand-properties": "^1.1.1", "css-value": "^0.0.1", - "devtools": "7.33.0", - "devtools-protocol": "^0.0.1203626", + "devtools": "7.35.0", + "devtools-protocol": "^0.0.1260888", "fs-extra": "^11.1.1", "grapheme-splitter": "^1.0.2", "lodash.clonedeep": "^4.5.0", -- 2.39.2 --- end ---