This run took 160 seconds.
$ date --- stdout --- Sun Jun 22 06:57:14 UTC 2025 --- end --- $ git clone file:///srv/git/mediawiki-extensions-GrowthExperiments.git repo --depth=1 -b REL1_44 --- stderr --- Cloning into 'repo'... --- stdout --- --- end --- $ git config user.name libraryupgrader --- stdout --- --- end --- $ git config user.email tools.libraryupgrader@tools.wmflabs.org --- stdout --- --- end --- $ git submodule update --init --- stdout --- --- end --- $ grr init --- stdout --- Installed commit-msg hook. --- end --- $ git show-ref refs/heads/REL1_44 --- stdout --- fe303ceeb8fdc40326bad1a77b2b0cf9ad89042a refs/heads/REL1_44 --- end --- $ /usr/bin/npm audit --json --- stdout --- { "auditReportVersion": 2, "vulnerabilities": { "babel-core": { "name": "babel-core", "severity": "critical", "isDirect": true, "via": [ "babel-helpers", "babel-register", "babel-template", "babel-traverse", "json5" ], "effects": [ "babel-register" ], "range": "5.8.20 - 7.0.0-beta.3", "nodes": [ "node_modules/babel-core" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } }, "babel-helpers": { "name": "babel-helpers", "severity": "critical", "isDirect": false, "via": [ "babel-template" ], "effects": [], "range": "*", "nodes": [ "node_modules/babel-helpers" ], "fixAvailable": true }, "babel-register": { "name": "babel-register", "severity": "high", "isDirect": false, "via": [ "babel-core" ], "effects": [ "babel-core" ], "range": "*", "nodes": [ "node_modules/babel-register" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } }, "babel-template": { "name": "babel-template", "severity": "critical", "isDirect": false, "via": [ "babel-traverse" ], "effects": [ "babel-helpers" ], "range": "*", "nodes": [ "node_modules/babel-template" ], "fixAvailable": true }, "babel-traverse": { "name": "babel-traverse", "severity": "critical", "isDirect": false, "via": [ { "source": 1096879, "name": "babel-traverse", "dependency": "babel-traverse", "title": "Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code", "url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "severity": "critical", "cwe": [ "CWE-184", "CWE-697" ], "cvss": { "score": 9.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "range": "<7.23.2" } ], "effects": [ "babel-core", "babel-template" ], "range": "*", "nodes": [ "node_modules/babel-traverse" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } }, "json5": { "name": "json5", "severity": "high", "isDirect": false, "via": [ { "source": 1096543, "name": "json5", "dependency": "json5", "title": "Prototype Pollution in JSON5 via Parse Method", "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "severity": "high", "cwe": [ "CWE-1321" ], "cvss": { "score": 7.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H" }, "range": "<1.0.2" } ], "effects": [ "babel-core" ], "range": "<1.0.2", "nodes": [ "node_modules/babel-core/node_modules/json5" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 0, "high": 2, "critical": 4, "total": 6 }, "dependencies": { "prod": 1, "dev": 1377, "optional": 5, "peer": 0, "peerOptional": 0, "total": 1377 } } } --- end --- $ /usr/bin/composer install --- stderr --- No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information. Loading composer repositories with package information Updating dependencies Lock file operations: 49 installs, 0 updates, 0 removals - Locking composer/pcre (3.3.2) - Locking composer/semver (3.4.3) - Locking composer/spdx-licenses (1.5.9) - Locking composer/xdebug-handler (3.0.5) - Locking dealerdirect/phpcodesniffer-composer-installer (v1.0.0) - Locking doctrine/annotations (2.0.2) - Locking doctrine/deprecations (1.1.5) - Locking doctrine/lexer (3.0.1) - Locking felixfbecker/advanced-json-rpc (v3.2.1) - Locking mediawiki/mediawiki-codesniffer (v47.0.0) - Locking mediawiki/mediawiki-phan-config (0.15.1) - Locking mediawiki/minus-x (1.1.3) - Locking mediawiki/phan-taint-check-plugin (6.1.0) - Locking microsoft/tolerant-php-parser (v0.1.2) - Locking netresearch/jsonmapper (v4.5.0) - Locking phan/phan (5.4.5) - Locking php-parallel-lint/php-console-color (v1.0.1) - Locking php-parallel-lint/php-console-highlighter (v1.0.0) - Locking php-parallel-lint/php-parallel-lint (v1.4.0) - Locking phpbench/container (2.2.2) - Locking phpbench/phpbench (1.4.1) - Locking phpcsstandards/phpcsextra (1.2.1) - Locking phpcsstandards/phpcsutils (1.0.12) - Locking phpdocumentor/reflection-common (2.2.0) - Locking phpdocumentor/reflection-docblock (5.6.2) - Locking phpdocumentor/type-resolver (1.10.0) - Locking phpstan/phpdoc-parser (2.1.0) - Locking psr/cache (3.0.0) - Locking psr/container (2.0.2) - Locking psr/log (3.0.2) - Locking sabre/event (5.1.7) - Locking seld/jsonlint (1.11.0) - Locking squizlabs/php_codesniffer (3.12.2) - Locking symfony/console (v7.3.0) - Locking symfony/deprecation-contracts (v3.6.0) - Locking symfony/filesystem (v7.3.0) - Locking symfony/finder (v7.3.0) - Locking symfony/options-resolver (v7.3.0) - Locking symfony/polyfill-ctype (v1.32.0) - Locking symfony/polyfill-intl-grapheme (v1.32.0) - Locking symfony/polyfill-intl-normalizer (v1.32.0) - Locking symfony/polyfill-mbstring (v1.32.0) - Locking symfony/polyfill-php80 (v1.32.0) - Locking symfony/process (v7.3.0) - Locking symfony/service-contracts (v3.6.0) - Locking symfony/string (v7.3.0) - Locking tysonandre/var_representation_polyfill (0.1.3) - Locking webmozart/assert (1.11.0) - Locking webmozart/glob (4.7.0) Writing lock file Installing dependencies from lock file (including require-dev) Package operations: 49 installs, 0 updates, 0 removals 0 [>---------------------------] 0 [->--------------------------] - Installing squizlabs/php_codesniffer (3.12.2): Extracting archive - Installing dealerdirect/phpcodesniffer-composer-installer (v1.0.0): Extracting archive - Installing composer/pcre (3.3.2): Extracting archive - Installing doctrine/lexer (3.0.1): Extracting archive - Installing symfony/polyfill-php80 (v1.32.0): Extracting archive - Installing phpcsstandards/phpcsutils (1.0.12): Extracting archive - Installing phpcsstandards/phpcsextra (1.2.1): Extracting archive - Installing symfony/polyfill-mbstring (v1.32.0): Extracting archive - Installing composer/spdx-licenses (1.5.9): Extracting archive - Installing composer/semver (3.4.3): Extracting archive - Installing mediawiki/mediawiki-codesniffer (v47.0.0): Extracting archive - Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive - Installing symfony/polyfill-intl-normalizer (v1.32.0): Extracting archive - Installing symfony/polyfill-intl-grapheme (v1.32.0): Extracting archive - Installing symfony/polyfill-ctype (v1.32.0): Extracting archive - Installing symfony/string (v7.3.0): Extracting archive - Installing symfony/deprecation-contracts (v3.6.0): Extracting archive - Installing psr/container (2.0.2): Extracting archive - Installing symfony/service-contracts (v3.6.0): Extracting archive - Installing symfony/console (v7.3.0): Extracting archive - Installing sabre/event (5.1.7): Extracting archive - Installing netresearch/jsonmapper (v4.5.0): Extracting archive - Installing microsoft/tolerant-php-parser (v0.1.2): Extracting archive - Installing webmozart/assert (1.11.0): Extracting archive - Installing phpstan/phpdoc-parser (2.1.0): Extracting archive - Installing phpdocumentor/reflection-common (2.2.0): Extracting archive - Installing doctrine/deprecations (1.1.5): Extracting archive - Installing phpdocumentor/type-resolver (1.10.0): Extracting archive - Installing phpdocumentor/reflection-docblock (5.6.2): Extracting archive - Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive - Installing psr/log (3.0.2): Extracting archive - Installing composer/xdebug-handler (3.0.5): Extracting archive - Installing phan/phan (5.4.5): Extracting archive - Installing mediawiki/phan-taint-check-plugin (6.1.0): Extracting archive - Installing mediawiki/mediawiki-phan-config (0.15.1): Extracting archive - Installing mediawiki/minus-x (1.1.3): Extracting archive - Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive - Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive - Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive - Installing webmozart/glob (4.7.0): Extracting archive - Installing symfony/process (v7.3.0): Extracting archive - Installing symfony/options-resolver (v7.3.0): Extracting archive - Installing symfony/finder (v7.3.0): Extracting archive - Installing symfony/filesystem (v7.3.0): Extracting archive - Installing seld/jsonlint (1.11.0): Extracting archive - Installing phpbench/container (2.2.2): Extracting archive - Installing psr/cache (3.0.0): Extracting archive - Installing doctrine/annotations (2.0.2): Extracting archive - Installing phpbench/phpbench (1.4.1): Extracting archive 0/47 [>---------------------------] 0% 27/47 [================>-----------] 57% 41/47 [========================>---] 87% 47/47 [============================] 100% 2 package suggestions were added by new dependencies, use `composer suggest` to see details. Generating autoload files 23 packages you are using are looking for funding. Use the `composer fund` command to find out more! --- stdout --- PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils --- end --- $ /usr/bin/npm audit --json --- stdout --- { "auditReportVersion": 2, "vulnerabilities": { "babel-core": { "name": "babel-core", "severity": "critical", "isDirect": true, "via": [ "babel-helpers", "babel-register", "babel-template", "babel-traverse", "json5" ], "effects": [ "babel-register" ], "range": "5.8.20 - 7.0.0-beta.3", "nodes": [ "node_modules/babel-core" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } }, "babel-helpers": { "name": "babel-helpers", "severity": "critical", "isDirect": false, "via": [ "babel-template" ], "effects": [], "range": "*", "nodes": [ "node_modules/babel-helpers" ], "fixAvailable": true }, "babel-register": { "name": "babel-register", "severity": "high", "isDirect": false, "via": [ "babel-core" ], "effects": [ "babel-core" ], "range": "*", "nodes": [ "node_modules/babel-register" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } }, "babel-template": { "name": "babel-template", "severity": "critical", "isDirect": false, "via": [ "babel-traverse" ], "effects": [ "babel-helpers" ], "range": "*", "nodes": [ "node_modules/babel-template" ], "fixAvailable": true }, "babel-traverse": { "name": "babel-traverse", "severity": "critical", "isDirect": false, "via": [ { "source": 1096879, "name": "babel-traverse", "dependency": "babel-traverse", "title": "Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code", "url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "severity": "critical", "cwe": [ "CWE-184", "CWE-697" ], "cvss": { "score": 9.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "range": "<7.23.2" } ], "effects": [ "babel-core", "babel-template" ], "range": "*", "nodes": [ "node_modules/babel-traverse" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } }, "json5": { "name": "json5", "severity": "high", "isDirect": false, "via": [ { "source": 1096543, "name": "json5", "dependency": "json5", "title": "Prototype Pollution in JSON5 via Parse Method", "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "severity": "high", "cwe": [ "CWE-1321" ], "cvss": { "score": 7.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H" }, "range": "<1.0.2" } ], "effects": [ "babel-core" ], "range": "<1.0.2", "nodes": [ "node_modules/babel-core/node_modules/json5" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 0, "high": 2, "critical": 4, "total": 6 }, "dependencies": { "prod": 1, "dev": 1377, "optional": 5, "peer": 0, "peerOptional": 0, "total": 1377 } } } --- end --- Attempting to npm audit fix $ /usr/bin/npm audit fix --dry-run --only=dev --json --- stderr --- npm WARN invalid config only="dev" set in command line options npm WARN invalid config Must be one of: null, prod, production npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@wikimedia/codex@1.23.0', npm WARN EBADENGINE required: { node: '>=20', npm: '>=10.8.1' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@wikimedia/codex-icons@1.23.0', npm WARN EBADENGINE required: { node: '>=20', npm: '>=10.8.1' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } --- stdout --- { "added": 1377, "removed": 0, "changed": 0, "audited": 1378, "funding": 232, "audit": { "auditReportVersion": 2, "vulnerabilities": { "babel-core": { "name": "babel-core", "severity": "critical", "isDirect": true, "via": [ "babel-helpers", "babel-register", "babel-template", "babel-traverse", "json5" ], "effects": [ "babel-register" ], "range": "5.8.20 - 7.0.0-beta.3", "nodes": [ "node_modules/babel-core" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } }, "babel-helpers": { "name": "babel-helpers", "severity": "critical", "isDirect": false, "via": [ "babel-template" ], "effects": [], "range": "*", "nodes": [ "node_modules/babel-helpers" ], "fixAvailable": true }, "babel-register": { "name": "babel-register", "severity": "high", "isDirect": false, "via": [ "babel-core" ], "effects": [ "babel-core" ], "range": "*", "nodes": [ "node_modules/babel-register" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } }, "babel-template": { "name": "babel-template", "severity": "critical", "isDirect": false, "via": [ "babel-traverse" ], "effects": [ "babel-helpers" ], "range": "*", "nodes": [ "node_modules/babel-template" ], "fixAvailable": true }, "babel-traverse": { "name": "babel-traverse", "severity": "critical", "isDirect": false, "via": [ { "source": 1096879, "name": "babel-traverse", "dependency": "babel-traverse", "title": "Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code", "url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "severity": "critical", "cwe": [ "CWE-184", "CWE-697" ], "cvss": { "score": 9.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "range": "<7.23.2" } ], "effects": [ "babel-core", "babel-template" ], "range": "*", "nodes": [ "node_modules/babel-traverse" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } }, "json5": { "name": "json5", "severity": "high", "isDirect": false, "via": [ { "source": 1096543, "name": "json5", "dependency": "json5", "title": "Prototype Pollution in JSON5 via Parse Method", "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "severity": "high", "cwe": [ "CWE-1321" ], "cvss": { "score": 7.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H" }, "range": "<1.0.2" } ], "effects": [ "babel-core" ], "range": "<1.0.2", "nodes": [ "node_modules/babel-core/node_modules/json5" ], "fixAvailable": { "name": "babel-core", "version": "4.7.16", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 0, "high": 2, "critical": 4, "total": 6 }, "dependencies": { "prod": 1, "dev": 1377, "optional": 5, "peer": 0, "peerOptional": 0, "total": 1377 } } } } --- end --- {"added": 1377, "removed": 0, "changed": 0, "audited": 1378, "funding": 232, "audit": {"auditReportVersion": 2, "vulnerabilities": {"babel-core": {"name": "babel-core", "severity": "critical", "isDirect": true, "via": ["babel-helpers", "babel-register", "babel-template", "babel-traverse", "json5"], "effects": ["babel-register"], "range": "5.8.20 - 7.0.0-beta.3", "nodes": ["node_modules/babel-core"], "fixAvailable": {"name": "babel-core", "version": "4.7.16", "isSemVerMajor": true}}, "babel-helpers": {"name": "babel-helpers", "severity": "critical", "isDirect": false, "via": ["babel-template"], "effects": [], "range": "*", "nodes": ["node_modules/babel-helpers"], "fixAvailable": true}, "babel-register": {"name": "babel-register", "severity": "high", "isDirect": false, "via": ["babel-core"], "effects": ["babel-core"], "range": "*", "nodes": ["node_modules/babel-register"], "fixAvailable": {"name": "babel-core", "version": "4.7.16", "isSemVerMajor": true}}, "babel-template": {"name": "babel-template", "severity": "critical", "isDirect": false, "via": ["babel-traverse"], "effects": ["babel-helpers"], "range": "*", "nodes": ["node_modules/babel-template"], "fixAvailable": true}, "babel-traverse": {"name": "babel-traverse", "severity": "critical", "isDirect": false, "via": [{"source": 1096879, "name": "babel-traverse", "dependency": "babel-traverse", "title": "Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code", "url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "severity": "critical", "cwe": ["CWE-184", "CWE-697"], "cvss": {"score": 9.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}, "range": "<7.23.2"}], "effects": ["babel-core", "babel-template"], "range": "*", "nodes": ["node_modules/babel-traverse"], "fixAvailable": {"name": "babel-core", "version": "4.7.16", "isSemVerMajor": true}}, "json5": {"name": "json5", "severity": "high", "isDirect": false, "via": [{"source": 1096543, "name": "json5", "dependency": "json5", "title": "Prototype Pollution in JSON5 via Parse Method", "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "severity": "high", "cwe": ["CWE-1321"], "cvss": {"score": 7.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H"}, "range": "<1.0.2"}], "effects": ["babel-core"], "range": "<1.0.2", "nodes": ["node_modules/babel-core/node_modules/json5"], "fixAvailable": {"name": "babel-core", "version": "4.7.16", "isSemVerMajor": true}}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 0, "high": 2, "critical": 4, "total": 6}, "dependencies": {"prod": 1, "dev": 1377, "optional": 5, "peer": 0, "peerOptional": 0, "total": 1377}}}} $ /usr/bin/npm audit fix --only=dev --- stderr --- npm WARN invalid config only="dev" set in command line options npm WARN invalid config Must be one of: null, prod, production npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@wikimedia/codex@1.23.0', npm WARN EBADENGINE required: { node: '>=20', npm: '>=10.8.1' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@wikimedia/codex-icons@1.23.0', npm WARN EBADENGINE required: { node: '>=20', npm: '>=10.8.1' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN deprecated osenv@0.1.5: This package is no longer supported. npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful. npm WARN deprecated @babel/plugin-proposal-unicode-property-regex@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-unicode-property-regex instead. npm WARN deprecated @babel/plugin-proposal-private-methods@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-private-methods instead. npm WARN deprecated @babel/plugin-proposal-optional-catch-binding@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-catch-binding instead. npm WARN deprecated @babel/plugin-proposal-numeric-separator@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-numeric-separator instead. npm WARN deprecated @babel/plugin-proposal-nullish-coalescing-operator@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-nullish-coalescing-operator instead. npm WARN deprecated @babel/plugin-proposal-json-strings@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-json-strings instead. npm WARN deprecated @babel/plugin-proposal-dynamic-import@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-dynamic-import instead. npm WARN deprecated @babel/plugin-proposal-export-namespace-from@7.18.9: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-export-namespace-from instead. npm WARN deprecated @babel/plugin-proposal-class-properties@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-class-properties instead. npm WARN deprecated @babel/plugin-proposal-logical-assignment-operators@7.20.7: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-logical-assignment-operators instead. npm WARN deprecated @babel/plugin-proposal-class-static-block@7.21.0: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-class-static-block instead. npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported npm WARN deprecated abab@2.0.6: Use your platform's native atob() and btoa() methods instead npm WARN deprecated @babel/plugin-proposal-private-property-in-object@7.21.11: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-private-property-in-object instead. npm WARN deprecated @babel/plugin-proposal-optional-chaining@7.21.0: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-chaining instead. npm WARN deprecated @babel/plugin-proposal-async-generator-functions@7.20.7: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-async-generator-functions instead. npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead npm WARN deprecated @babel/plugin-proposal-object-rest-spread@7.20.7: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-object-rest-spread instead. npm WARN deprecated glob@7.1.7: Glob versions prior to v9 are no longer supported npm WARN deprecated domexception@4.0.0: Use your platform's native DOMException instead npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options. npm WARN deprecated core-js@2.6.12: core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js. npm WARN deprecated core-js@2.6.12: core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js. --- stdout --- added 1376 packages, and audited 1377 packages in 30s 232 packages are looking for funding run `npm fund` for details # npm audit report babel-traverse * Severity: critical Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code - https://github.com/advisories/GHSA-67hx-6x53-jw92 fix available via `npm audit fix --force` Will install babel-core@4.7.16, which is a breaking change node_modules/babel-traverse babel-core 5.8.20 - 7.0.0-beta.3 Depends on vulnerable versions of babel-helpers Depends on vulnerable versions of babel-register Depends on vulnerable versions of babel-template Depends on vulnerable versions of babel-traverse Depends on vulnerable versions of json5 node_modules/babel-core babel-register * Depends on vulnerable versions of babel-core node_modules/babel-register babel-template * Depends on vulnerable versions of babel-traverse node_modules/babel-template babel-helpers * Depends on vulnerable versions of babel-template node_modules/babel-helpers json5 <1.0.2 Severity: high Prototype Pollution in JSON5 via Parse Method - https://github.com/advisories/GHSA-9c47-m6qq-7p4h fix available via `npm audit fix --force` Will install babel-core@4.7.16, which is a breaking change node_modules/babel-core/node_modules/json5 6 vulnerabilities (2 high, 4 critical) To address issues that do not require attention, run: npm audit fix To address all issues (including breaking changes), run: npm audit fix --force --- end --- Verifying that tests still pass $ /usr/bin/npm ci --- stderr --- npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@wikimedia/codex@1.23.0', npm WARN EBADENGINE required: { node: '>=20', npm: '>=10.8.1' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN EBADENGINE Unsupported engine { npm WARN EBADENGINE package: '@wikimedia/codex-icons@1.23.0', npm WARN EBADENGINE required: { node: '>=20', npm: '>=10.8.1' }, npm WARN EBADENGINE current: { node: 'v18.19.0', npm: '9.2.0' } npm WARN EBADENGINE } npm WARN deprecated osenv@0.1.5: This package is no longer supported. npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful. npm WARN deprecated @babel/plugin-proposal-unicode-property-regex@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-unicode-property-regex instead. npm WARN deprecated @babel/plugin-proposal-private-methods@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-private-methods instead. npm WARN deprecated @babel/plugin-proposal-numeric-separator@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-numeric-separator instead. npm WARN deprecated @babel/plugin-proposal-optional-catch-binding@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-catch-binding instead. npm WARN deprecated @babel/plugin-proposal-nullish-coalescing-operator@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-nullish-coalescing-operator instead. npm WARN deprecated @babel/plugin-proposal-json-strings@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-json-strings instead. npm WARN deprecated @babel/plugin-proposal-export-namespace-from@7.18.9: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-export-namespace-from instead. npm WARN deprecated @babel/plugin-proposal-dynamic-import@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-dynamic-import instead. npm WARN deprecated @babel/plugin-proposal-class-properties@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-class-properties instead. npm WARN deprecated @babel/plugin-proposal-logical-assignment-operators@7.20.7: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-logical-assignment-operators instead. npm WARN deprecated @babel/plugin-proposal-class-static-block@7.21.0: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-class-static-block instead. npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported npm WARN deprecated abab@2.0.6: Use your platform's native atob() and btoa() methods instead npm WARN deprecated @babel/plugin-proposal-optional-chaining@7.21.0: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-chaining instead. npm WARN deprecated @babel/plugin-proposal-private-property-in-object@7.21.11: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-private-property-in-object instead. npm WARN deprecated @babel/plugin-proposal-async-generator-functions@7.20.7: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-async-generator-functions instead. npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead npm WARN deprecated @babel/plugin-proposal-object-rest-spread@7.20.7: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-object-rest-spread instead. npm WARN deprecated glob@7.1.7: Glob versions prior to v9 are no longer supported npm WARN deprecated domexception@4.0.0: Use your platform's native DOMException instead npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options. npm WARN deprecated core-js@2.6.12: core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js. npm WARN deprecated core-js@2.6.12: core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js. --- stdout --- added 1376 packages, and audited 1377 packages in 33s 232 packages are looking for funding run `npm fund` for details 6 vulnerabilities (2 high, 4 critical) To address issues that do not require attention, run: npm audit fix To address all issues (including breaking changes), run: npm audit fix --force Run `npm audit` for details. --- end --- $ /usr/bin/npm test --- stderr --- PASS modules/ext.growthExperiments.MentorDashboard/store/modules/mentees.test.js PASS modules/ext.growthExperiments.Homepage.Impact/components/NoEditsDisplay.test.js PASS modules/ext.growthExperiments.DataStore/NewcomerTasksStore.test.js PASS modules/ext.growthExperiments.StructuredTask.Surfacing/ArticleTextManipulator.test.js PASS modules/ext.growthExperiments.MentorDashboard/components/MenteeOverview/MenteeOverview.test.js PASS modules/ext.growthExperiments.Homepage.Impact/components/ImpactVue.test.js PASS modules/vue-components/CScoreCards.test.js PASS modules/ext.growthExperiments.Homepage.Impact/components/TrendChart.test.js PASS modules/vue-components/CPopover.test.js PASS modules/vue-components/CPopper.test.js PASS modules/ext.growthExperiments.MentorDashboard/components/PersonalizedPraise/PersonalizedPraise.test.js PASS modules/vue-components/CText.test.js PASS modules/vue-components/CScoreCard.test.js PASS modules/ext.growthExperiments.Homepage.Impact/components/ErrorDisplay.test.js PASS modules/ext.growthExperiments.MentorDashboard/components/DataTable/DataTableCellValue.test.js PASS modules/ext.growthExperiments.Homepage.Impact/composables/useUserImpact.test.js PASS modules/ext.growthExperiments.MentorDashboard/components/PersonalizedPraise/PersonalizedPraiseSettingsForm.test.js PASS modules/ext.growthExperiments.MentorDashboard/components/MenteeOverview/MenteeFiltersForm.test.js Test Suites: 18 passed, 18 total Tests: 53 passed, 53 total Snapshots: 20 passed, 20 total Time: 7.884 s Ran all test suites. npm WARN ERESOLVE overriding peer dependency npm WARN While resolving: @vue/server-renderer@3.3.4 npm WARN Found: vue@3.2.37 npm WARN node_modules/vue npm WARN dev vue@"3.2.37" from the root project npm WARN 9 more (vue-demi, @vitejs/plugin-vue, @vue/server-renderer, ...) npm WARN npm WARN Could not resolve dependency: npm WARN peer vue@"3.3.4" from @vue/server-renderer@3.3.4 npm WARN node_modules/@vue/test-utils/node_modules/@vue/server-renderer npm WARN optional @vue/server-renderer@"^3.0.1" from @vue/test-utils@2.3.2 npm WARN node_modules/@vue/test-utils npm WARN npm WARN Conflicting peer dependency: vue@3.3.4 npm WARN node_modules/vue npm WARN peer vue@"3.3.4" from @vue/server-renderer@3.3.4 npm WARN node_modules/@vue/test-utils/node_modules/@vue/server-renderer npm WARN optional @vue/server-renderer@"^3.0.1" from @vue/test-utils@2.3.2 npm WARN node_modules/@vue/test-utils npm WARN deprecated natives@1.1.6: This module relies on Node.js's internals and will break at some point. Do not use it, and update to graceful-fs@4.x. npm WARN deprecated har-validator@5.1.5: this library is no longer supported npm WARN deprecated sourcemap-codec@1.4.8: Please use @jridgewell/sourcemap-codec instead npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details. npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142 --- stdout --- > test > npm-run-all test:* > test:types > tsc --noEmit && tsc --noEmit -p cypress/tsconfig.json > test:eslint > eslint . > test:stylelint > stylelint -c .stylelintrc.json "**/*.{css,vue,less}" > test:i18n > grunt test Running "banana:docs" (banana) task >> 10 message directories checked. Done. > test:jest > jest ---------------------------------------------------------------------|---------|----------|---------|---------|--------------------------------------------------------------------------------------- File | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s ---------------------------------------------------------------------|---------|----------|---------|---------|--------------------------------------------------------------------------------------- All files | 47.45 | 39.74 | 35.08 | 47.81 | ext.growthExperiments.Homepage.Impact | 2.88 | 0 | 0 | 2.91 | App.vue | 0 | 0 | 0 | 0 | 3-106 constants.js | 100 | 100 | 100 | 100 | init.js | 0 | 0 | 0 | 0 | 1-165 ext.growthExperiments.Homepage.Impact/components | 73.61 | 73.56 | 69.47 | 73.92 | ArticlesList.vue | 67.39 | 0 | 12.5 | 70.45 | 37,80-162 ErrorDisplay.vue | 100 | 100 | 100 | 100 | ErrorDisplaySummary.vue | 0 | 100 | 0 | 0 | 3-58 Impact.vue | 97.43 | 86.36 | 92.3 | 97.43 | 112 ImpactSummary.vue | 0 | 0 | 0 | 0 | 1-48 InfoBoxes.vue | 0 | 0 | 0 | 0 | 1-83 LayoutWrapper.vue | 0 | 100 | 0 | 0 | 8-34 NoEditsDisplay.vue | 96.36 | 89.18 | 100 | 96.36 | 60-61 RecentActivity.vue | 97.14 | 50 | 100 | 97.14 | 63 StreakGraph.vue | 95.23 | 100 | 87.5 | 95.23 | 25 TrendChart.vue | 100 | 100 | 100 | 100 | ext.growthExperiments.Homepage.Impact/composables | 73.21 | 72.72 | 78.94 | 71.69 | useMWRestApi.js | 0 | 0 | 0 | 0 | 1-35 useUserImpact.js | 97.61 | 88.88 | 100 | 97.43 | 93 ext.growthExperiments.MentorDashboard | 0 | 0 | 0 | 0 | Discovery.js | 0 | 0 | 0 | 0 | 2-12 PersonalizedPraisePostEdit.js | 0 | 0 | 0 | 0 | 1-18 init.js | 0 | 0 | 0 | 0 | 1-53 ext.growthExperiments.MentorDashboard/MentorTools | 0 | 0 | 0 | 0 | AwaySettingsDialog.js | 0 | 0 | 0 | 0 | 1-108 MentorMessageChangeDialog.js | 0 | 0 | 0 | 0 | 10-103 MentorTools.js | 0 | 0 | 0 | 0 | 2-223 MentorToolsEllipsisMenu.js | 0 | 0 | 0 | 0 | 1-63 ext.growthExperiments.MentorDashboard/components/CNumberInput | 66.66 | 55.55 | 23.07 | 65.51 | CNumberInput.vue | 66.66 | 55.55 | 23.07 | 65.51 | 99,102,105,108,129,148-164 ext.growthExperiments.MentorDashboard/components/DataTable | 47 | 0 | 5.26 | 52.38 | DataTable.vue | 32.25 | 0 | 0 | 39.21 | 37-89,100-103,121-164 DataTableCellLink.vue | 75 | 100 | 0 | 75 | 36-41 DataTableCellValue.vue | 100 | 100 | 100 | 100 | DataTableLimit.vue | 50 | 0 | 0 | 53.33 | 24-31,49-55 DataTablePagination.vue | 50 | 0 | 0 | 50 | 31-38,53-79 ext.growthExperiments.MentorDashboard/components/HorizontalDivider | 100 | 100 | 100 | 100 | HorizontalDivider.vue | 100 | 100 | 100 | 100 | ext.growthExperiments.MentorDashboard/components/MenteeOverview | 66.23 | 38.15 | 37.07 | 66.52 | DataTableCellMentee.vue | 60.86 | 0 | 0 | 60.86 | 27-45,74-82 LegendBox.vue | 73.33 | 100 | 0 | 73.33 | 21,43-45 MenteeFilters.vue | 40.74 | 0 | 0 | 40.74 | 28-64,82-89 MenteeFiltersForm.vue | 75.47 | 50 | 56.52 | 75.47 | 87-105,160-175,191,206,219 MenteeOverview.vue | 71.79 | 53.57 | 52.63 | 72.72 | 25-97,174-181,213-225,304-320 MenteeSearch.vue | 45.45 | 0 | 0 | 45.45 | 22-43,60-66 NoResults.vue | 84.61 | 0 | 0 | 84.61 | 53-54 ext.growthExperiments.MentorDashboard/components/PersonalizedPraise | 57.14 | 45 | 26.19 | 57.89 | NoResults.vue | 100 | 100 | 100 | 100 | PersonalizedPraise.vue | 84.78 | 100 | 66.66 | 84.78 | 59-74,139 PersonalizedPraisePagination.vue | 45.45 | 0 | 0 | 45.45 | 33-43,58-92 PersonalizedPraiseSettings.vue | 68.96 | 50 | 33.33 | 68.96 | 44-54,78,90-99 PersonalizedPraiseSettingsForm.vue | 70.73 | 68.18 | 44.44 | 70.73 | 67-70,88,144-164,180-185,200,218 SkipMenteeDialog.vue | 26.31 | 0 | 0 | 28.57 | 34-70,87-136 UserCard.vue | 34.04 | 0 | 0 | 34.04 | 33-123,147-172 ext.growthExperiments.MentorDashboard/logger | 0 | 0 | 0 | 0 | Logger.js | 0 | 0 | 0 | 0 | 5-41 ext.growthExperiments.MentorDashboard/plugins | 0 | 0 | 0 | 0 | logger.js | 0 | 0 | 0 | 0 | 9-15 ext.growthExperiments.MentorDashboard/store | 26.66 | 0 | 6.89 | 26.96 | MenteeOverviewApi.js | 28.91 | 0 | 6.89 | 29.26 | 32,37-52,56-71,83,87,91,95,99,103-110,115-118,122-128,134-145,150-161,167-178,185-186 index.js | 0 | 100 | 100 | 0 | 1-16 ext.growthExperiments.MentorDashboard/store/modules | 44.56 | 49.23 | 25.39 | 44 | mentees-search.js | 0 | 0 | 0 | 0 | 2-50 mentees.js | 66.36 | 67.39 | 41.66 | 66.01 | 31,61-63,71-74,107,121,128,144,147,150,200-201,217,226,235-243,253-286 praiseworthy-mentees.js | 0 | 0 | 0 | 0 | 1-101 user-preferences.js | 52.94 | 50 | 20 | 52.94 | 12,21,27-32,41 ext.growthExperiments.MentorDashboard/validators | 100 | 100 | 100 | 100 | align-text.validator.js | 100 | 100 | 100 | 100 | ext.growthExperiments.StructuredTask.Surfacing | 11.74 | 19.04 | 10.25 | 11.74 | ArticleTextManipulator.js | 90.62 | 66.66 | 100 | 90.62 | 16,60,73 PageSummaryRepository.js | 0 | 0 | 0 | 0 | 23-82 SurfacedTaskPopup.js | 0 | 0 | 0 | 0 | 8-174 index.js | 0 | 0 | 0 | 0 | 1-323 vue-components | 78.75 | 64.7 | 67.14 | 79.85 | CList.vue | 53.33 | 0 | 33.33 | 53.33 | 22-30 CListItem.vue | 85.71 | 100 | 0 | 85.71 | 21 CPopover.vue | 97.56 | 83.33 | 90 | 97.5 | 104 CPopper.vue | 96.77 | 75 | 100 | 96.77 | 61 CScoreCard.vue | 96.42 | 100 | 87.5 | 96.42 | 124 CScoreCards.vue | 55.55 | 54.16 | 54.83 | 55.55 | 98-101,107,112,130-193,199,262-292,337-344 CSparkline.vue | 81.08 | 50 | 50 | 90.9 | 63-67,76 CText.vue | 100 | 100 | 100 | 100 | vue-components/directives | 58.33 | 0 | 33.33 | 70 | click-outside.directive.js | 58.33 | 0 | 33.33 | 70 | 3-5,25 vue-components/plugins | 0 | 100 | 0 | 0 | logger.js | 0 | 100 | 0 | 0 | 9-17 ---------------------------------------------------------------------|---------|----------|---------|---------|--------------------------------------------------------------------------------------- > test:doc > cd documentation/frontend && npm ci && npm run test added 319 packages, and audited 320 packages in 4s 34 packages are looking for funding run `npm fund` for details 13 vulnerabilities (1 low, 7 moderate, 5 high) To address issues that do not require attention, run: npm audit fix To address all issues, run: npm audit fix --force Run `npm audit` for details. > growthexperiments-docs@1.0.0 test > npm run lint && vitest run --coverage > growthexperiments-docs@1.0.0 lint > eslint . RUN v0.32.0 /src/repo/documentation/frontend Coverage enabled with v8 ✓ components/MultiPane.test.js (10 tests) 178ms ✓ components/FilterDialog.test.js (5 tests) 267ms ✓ components/OnboardingDialog.test.js (14 tests) 356ms ✓ components/OnboardingStepper.test.js (5 tests) 52ms ✓ components/AddLinkDialog.test.js (4 tests) 177ms ✓ component-demos/example-component/ExampleComponent.test.js (2 tests) 79ms ✓ store/example-store/counter.test.js (1 test) 6ms Test Files 7 passed (7) Tests 41 passed (41) Start at 06:59:30 Duration 4.66s (transform 479ms, setup 339ms, collect 2.76s, tests 1.11s, environment 3.53s, prepare 732ms) % Coverage report from v8 -------------------|---------|----------|---------|---------|------------------- File | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s -------------------|---------|----------|---------|---------|------------------- All files | 78.16 | 91.17 | 63.88 | 78.16 | ...mageDialog.vue | 0 | 0 | 0 | 0 | 1-291 AddLinkDialog.vue | 100 | 100 | 20 | 100 | FilterDialog.vue | 100 | 100 | 60 | 100 | MultiPane.vue | 97.79 | 87.87 | 100 | 97.79 | 105,112,120-121 ...dingDialog.vue | 98.58 | 95.45 | 57.14 | 98.58 | 215-216,247-249 ...ingStepper.vue | 100 | 100 | 100 | 100 | -------------------|---------|----------|---------|---------|------------------- --- end --- {} {} $ package-lock-lint package-lock.json --- stdout --- Checking package-lock.json --- end --- [DNM] there are no updates $ git add . --- stdout --- --- end --- $ git commit -F /tmp/tmpt_64ymcz --- stdout --- On branch REL1_44 Your branch is up to date with 'origin/REL1_44'. nothing to commit, working tree clean --- end ---