This run took 55 seconds.
From 9027d22295b615ade99a63f69cf3b756133c8aba Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Wed, 31 Dec 2025 01:32:14 +0000
Subject: [PATCH] build: Updating qs to 6.14.1
* https://github.com/advisories/GHSA-6rw7-vpxm-498p
Change-Id: Ie463ffcf7e4f6b00147b394081abfa1fcb8562df
---
package-lock.json | 199 ++++++++++++++++++++++++++++++++++------------
1 file changed, 150 insertions(+), 49 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index e176f7e..738d8ba 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1088,19 +1088,6 @@
"integrity": "sha512-/x68VkHLeTl3/Ll8IvxdwzhrT+IyKc52e/oyHhA2RwqPqswSnjVbSddfPRwAsJtbilMAPSRWwAlpxdYsSWOTKQ==",
"dev": true
},
- "node_modules/call-bind": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz",
- "integrity": "sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==",
- "dev": true,
- "dependencies": {
- "function-bind": "^1.1.1",
- "get-intrinsic": "^1.0.2"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
"node_modules/call-bind-apply-helpers": {
"version": "1.0.2",
"resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
@@ -1114,6 +1101,22 @@
"node": ">= 0.4"
}
},
+ "node_modules/call-bound": {
+ "version": "1.0.4",
+ "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+ "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+ "dev": true,
+ "dependencies": {
+ "call-bind-apply-helpers": "^1.0.2",
+ "get-intrinsic": "^1.3.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
"node_modules/callsites": {
"version": "3.1.0",
"resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
@@ -4044,10 +4047,13 @@
"dev": true
},
"node_modules/object-inspect": {
- "version": "1.12.3",
- "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.3.tgz",
- "integrity": "sha512-geUvdk7c+eizMNUDkRpW1wJwgfOiOeHbxBR/hLXK1aT6zmVSO0jsQcs7fj6MGw89jC/cjGfLcNOrtMYtGqm81g==",
+ "version": "1.13.4",
+ "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+ "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
"dev": true,
+ "engines": {
+ "node": ">= 0.4"
+ },
"funding": {
"url": "https://github.com/sponsors/ljharb"
}
@@ -4473,12 +4479,12 @@
}
},
"node_modules/qs": {
- "version": "6.11.2",
- "resolved": "https://registry.npmjs.org/qs/-/qs-6.11.2.tgz",
- "integrity": "sha512-tDNIz22aBzCDxLtVH++VnTfzxlfeK5CbqohpSqpJgj1Wg/cQbStNAz3NuqCs5vV+pjBsK4x4pN9HlVh7rcYRiA==",
+ "version": "6.14.1",
+ "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
+ "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==",
"dev": true,
"dependencies": {
- "side-channel": "^1.0.4"
+ "side-channel": "^1.1.0"
},
"engines": {
"node": ">=0.6"
@@ -4892,14 +4898,72 @@
}
},
"node_modules/side-channel": {
- "version": "1.0.4",
- "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz",
- "integrity": "sha512-q5XPytqFEIKHkGdiMIrY10mvLRvnQh42/+GoBlFW3b2LXLE2xxJpZFdm94we0BaoV3RwJyGqg5wS7epxTv0Zvw==",
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
+ "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
"dev": true,
"dependencies": {
- "call-bind": "^1.0.0",
- "get-intrinsic": "^1.0.2",
- "object-inspect": "^1.9.0"
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.3",
+ "side-channel-list": "^1.0.0",
+ "side-channel-map": "^1.0.1",
+ "side-channel-weakmap": "^1.0.2"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-list": {
+ "version": "1.0.0",
+ "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz",
+ "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==",
+ "dev": true,
+ "dependencies": {
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.3"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-map": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+ "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+ "dev": true,
+ "dependencies": {
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-weakmap": {
+ "version": "1.0.2",
+ "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+ "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+ "dev": true,
+ "dependencies": {
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3",
+ "side-channel-map": "^1.0.1"
+ },
+ "engines": {
+ "node": ">= 0.4"
},
"funding": {
"url": "https://github.com/sponsors/ljharb"
@@ -6675,16 +6739,6 @@
"integrity": "sha512-/x68VkHLeTl3/Ll8IvxdwzhrT+IyKc52e/oyHhA2RwqPqswSnjVbSddfPRwAsJtbilMAPSRWwAlpxdYsSWOTKQ==",
"dev": true
},
- "call-bind": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz",
- "integrity": "sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==",
- "dev": true,
- "requires": {
- "function-bind": "^1.1.1",
- "get-intrinsic": "^1.0.2"
- }
- },
"call-bind-apply-helpers": {
"version": "1.0.2",
"resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
@@ -6695,6 +6749,16 @@
"function-bind": "^1.1.2"
}
},
+ "call-bound": {
+ "version": "1.0.4",
+ "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+ "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+ "dev": true,
+ "requires": {
+ "call-bind-apply-helpers": "^1.0.2",
+ "get-intrinsic": "^1.3.0"
+ }
+ },
"callsites": {
"version": "3.1.0",
"resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
@@ -8846,9 +8910,9 @@
"dev": true
},
"object-inspect": {
- "version": "1.12.3",
- "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.3.tgz",
- "integrity": "sha512-geUvdk7c+eizMNUDkRpW1wJwgfOiOeHbxBR/hLXK1aT6zmVSO0jsQcs7fj6MGw89jC/cjGfLcNOrtMYtGqm81g==",
+ "version": "1.13.4",
+ "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+ "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
"dev": true
},
"object.defaults": {
@@ -9153,12 +9217,12 @@
"dev": true
},
"qs": {
- "version": "6.11.2",
- "resolved": "https://registry.npmjs.org/qs/-/qs-6.11.2.tgz",
- "integrity": "sha512-tDNIz22aBzCDxLtVH++VnTfzxlfeK5CbqohpSqpJgj1Wg/cQbStNAz3NuqCs5vV+pjBsK4x4pN9HlVh7rcYRiA==",
+ "version": "6.14.1",
+ "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
+ "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==",
"dev": true,
"requires": {
- "side-channel": "^1.0.4"
+ "side-channel": "^1.1.0"
}
},
"queue-microtask": {
@@ -9433,14 +9497,51 @@
"dev": true
},
"side-channel": {
- "version": "1.0.4",
- "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz",
- "integrity": "sha512-q5XPytqFEIKHkGdiMIrY10mvLRvnQh42/+GoBlFW3b2LXLE2xxJpZFdm94we0BaoV3RwJyGqg5wS7epxTv0Zvw==",
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
+ "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+ "dev": true,
+ "requires": {
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.3",
+ "side-channel-list": "^1.0.0",
+ "side-channel-map": "^1.0.1",
+ "side-channel-weakmap": "^1.0.2"
+ }
+ },
+ "side-channel-list": {
+ "version": "1.0.0",
+ "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz",
+ "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==",
+ "dev": true,
+ "requires": {
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.3"
+ }
+ },
+ "side-channel-map": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+ "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+ "dev": true,
+ "requires": {
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3"
+ }
+ },
+ "side-channel-weakmap": {
+ "version": "1.0.2",
+ "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+ "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
"dev": true,
"requires": {
- "call-bind": "^1.0.0",
- "get-intrinsic": "^1.0.2",
- "object-inspect": "^1.9.0"
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3",
+ "side-channel-map": "^1.0.1"
}
},
"signal-exit": {
--
2.47.3
$ date
--- stdout ---
Wed Dec 31 01:31:33 UTC 2025
--- end ---
$ git clone file:///srv/git/mediawiki-extensions-Flow.git /src/repo --depth=1 -b master
--- stderr ---
Cloning into '/src/repo'...
--- stdout ---
--- end ---
$ git config user.name libraryupgrader
--- stdout ---
--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---
--- end ---
$ git submodule update --init
--- stdout ---
--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.
--- end ---
$ git show-ref refs/heads/master
--- stdout ---
acb8624b4495eaed686607a0bc0c018730f4e8c8 refs/heads/master
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"qs": {
"name": "qs",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1111755,
"name": "qs",
"dependency": "qs",
"title": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion",
"url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p",
"severity": "high",
"cwe": [
"CWE-20"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<6.14.1"
}
],
"effects": [],
"range": "<6.14.1",
"nodes": [
"node_modules/qs"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"high": 1,
"critical": 0,
"total": 1
},
"dependencies": {
"prod": 1,
"dev": 490,
"optional": 0,
"peer": 1,
"peerOptional": 0,
"total": 490
}
}
}
--- end ---
$ /usr/bin/composer install
--- stderr ---
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information
Updating dependencies
Lock file operations: 41 installs, 0 updates, 0 removals
- Locking composer/pcre (3.3.2)
- Locking composer/semver (3.4.4)
- Locking composer/spdx-licenses (1.5.9)
- Locking composer/xdebug-handler (3.0.5)
- Locking dealerdirect/phpcodesniffer-composer-installer (v1.2.0)
- Locking doctrine/deprecations (1.1.5)
- Locking felixfbecker/advanced-json-rpc (v3.2.1)
- Locking mediawiki/mediawiki-codesniffer (v48.0.0)
- Locking mediawiki/mediawiki-phan-config (0.17.0)
- Locking mediawiki/minus-x (1.1.3)
- Locking mediawiki/phan-taint-check-plugin (7.0.0)
- Locking microsoft/tolerant-php-parser (v0.1.2)
- Locking netresearch/jsonmapper (v4.5.0)
- Locking phan/phan (5.5.1)
- Locking php-parallel-lint/php-console-color (v1.0.1)
- Locking php-parallel-lint/php-console-highlighter (v1.0.0)
- Locking php-parallel-lint/php-parallel-lint (v1.4.0)
- Locking phpcsstandards/phpcsextra (1.4.0)
- Locking phpcsstandards/phpcsutils (1.1.1)
- Locking phpdocumentor/reflection-common (2.2.0)
- Locking phpdocumentor/reflection-docblock (5.6.6)
- Locking phpdocumentor/type-resolver (1.12.0)
- Locking phpstan/phpdoc-parser (2.3.0)
- Locking pimple/pimple (v3.5.0)
- Locking psr/container (2.0.2)
- Locking psr/log (3.0.2)
- Locking sabre/event (5.1.7)
- Locking squizlabs/php_codesniffer (3.13.2)
- Locking symfony/console (v7.4.1)
- Locking symfony/css-selector (v2.8.52)
- Locking symfony/deprecation-contracts (v3.6.0)
- Locking symfony/dom-crawler (v2.8.52)
- Locking symfony/polyfill-ctype (v1.33.0)
- Locking symfony/polyfill-intl-grapheme (v1.33.0)
- Locking symfony/polyfill-intl-normalizer (v1.33.0)
- Locking symfony/polyfill-mbstring (v1.33.0)
- Locking symfony/polyfill-php80 (v1.33.0)
- Locking symfony/service-contracts (v3.6.1)
- Locking symfony/string (v8.0.1)
- Locking tysonandre/var_representation_polyfill (0.1.3)
- Locking webmozart/assert (2.0.0)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 41 installs, 0 updates, 0 removals
0 [>---------------------------] 0 [->--------------------------]
- Installing squizlabs/php_codesniffer (3.13.2): Extracting archive
- Installing dealerdirect/phpcodesniffer-composer-installer (v1.2.0): Extracting archive
- Installing composer/pcre (3.3.2): Extracting archive
- Installing phpcsstandards/phpcsutils (1.1.1): Extracting archive
- Installing phpcsstandards/phpcsextra (1.4.0): Extracting archive
- Installing symfony/polyfill-mbstring (v1.33.0): Extracting archive
- Installing composer/spdx-licenses (1.5.9): Extracting archive
- Installing composer/semver (3.4.4): Extracting archive
- Installing mediawiki/mediawiki-codesniffer (v48.0.0): Extracting archive
- Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive
- Installing symfony/polyfill-php80 (v1.33.0): Extracting archive
- Installing symfony/polyfill-intl-normalizer (v1.33.0): Extracting archive
- Installing symfony/polyfill-intl-grapheme (v1.33.0): Extracting archive
- Installing symfony/polyfill-ctype (v1.33.0): Extracting archive
- Installing symfony/string (v8.0.1): Extracting archive
- Installing symfony/deprecation-contracts (v3.6.0): Extracting archive
- Installing psr/container (2.0.2): Extracting archive
- Installing symfony/service-contracts (v3.6.1): Extracting archive
- Installing symfony/console (v7.4.1): Extracting archive
- Installing sabre/event (5.1.7): Extracting archive
- Installing netresearch/jsonmapper (v4.5.0): Extracting archive
- Installing microsoft/tolerant-php-parser (v0.1.2): Extracting archive
- Installing webmozart/assert (2.0.0): Extracting archive
- Installing phpstan/phpdoc-parser (2.3.0): Extracting archive
- Installing phpdocumentor/reflection-common (2.2.0): Extracting archive
- Installing doctrine/deprecations (1.1.5): Extracting archive
- Installing phpdocumentor/type-resolver (1.12.0): Extracting archive
- Installing phpdocumentor/reflection-docblock (5.6.6): Extracting archive
- Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive
- Installing psr/log (3.0.2): Extracting archive
- Installing composer/xdebug-handler (3.0.5): Extracting archive
- Installing phan/phan (5.5.1): Extracting archive
- Installing mediawiki/phan-taint-check-plugin (7.0.0): Extracting archive
- Installing mediawiki/mediawiki-phan-config (0.17.0): Extracting archive
- Installing mediawiki/minus-x (1.1.3): Extracting archive
- Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive
- Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive
- Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive
- Installing pimple/pimple (v3.5.0): Extracting archive
- Installing symfony/css-selector (v2.8.52): Extracting archive
- Installing symfony/dom-crawler (v2.8.52): Extracting archive
0/39 [>---------------------------] 0%
28/39 [====================>-------] 71%
38/39 [===========================>] 97%
39/39 [============================] 100%
1 package suggestions were added by new dependencies, use `composer suggest` to see details.
Generating autoload files
17 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---
PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"qs": {
"name": "qs",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1111755,
"name": "qs",
"dependency": "qs",
"title": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion",
"url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p",
"severity": "high",
"cwe": [
"CWE-20"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<6.14.1"
}
],
"effects": [],
"range": "<6.14.1",
"nodes": [
"node_modules/qs"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"high": 1,
"critical": 0,
"total": 1
},
"dependencies": {
"prod": 1,
"dev": 490,
"optional": 0,
"peer": 1,
"peerOptional": 0,
"total": 490
}
}
}
--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
{
"added": 493,
"removed": 0,
"changed": 0,
"audited": 494,
"funding": 118,
"audit": {
"auditReportVersion": 2,
"vulnerabilities": {
"qs": {
"name": "qs",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1111755,
"name": "qs",
"dependency": "qs",
"title": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion",
"url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p",
"severity": "high",
"cwe": [
"CWE-20"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<6.14.1"
}
],
"effects": [],
"range": "<6.14.1",
"nodes": [
""
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"high": 1,
"critical": 0,
"total": 1
},
"dependencies": {
"prod": 1,
"dev": 493,
"optional": 0,
"peer": 1,
"peerOptional": 0,
"total": 493
}
}
}
}
--- end ---
{"added": 493, "removed": 0, "changed": 0, "audited": 494, "funding": 118, "audit": {"auditReportVersion": 2, "vulnerabilities": {"qs": {"name": "qs", "severity": "high", "isDirect": false, "via": [{"source": 1111755, "name": "qs", "dependency": "qs", "title": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion", "url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p", "severity": "high", "cwe": ["CWE-20"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<6.14.1"}], "effects": [], "range": "<6.14.1", "nodes": [""], "fixAvailable": true}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 0, "high": 1, "critical": 0, "total": 1}, "dependencies": {"prod": 1, "dev": 493, "optional": 0, "peer": 1, "peerOptional": 0, "total": 493}}}}
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
added 493 packages, and audited 494 packages in 6s
118 packages are looking for funding
run `npm fund` for details
found 0 vulnerabilities
--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stdout ---
added 493 packages, and audited 494 packages in 5s
118 packages are looking for funding
run `npm fund` for details
found 0 vulnerabilities
--- end ---
$ /usr/bin/npm test
--- stdout ---
> flow@0.0.0 test
> grunt test
Running "tyops:src" (tyops) task
>> No typos found; 964 files checked for 13 typos.
Running "eslint:all" (eslint) task
/src/repo/modules/editor/editors/visualeditor/mw.flow.ve.Target.js
104:4 warning 'sessionState' is never reassigned. Use 'const' instead prefer-const
116:3 warning 'doc' is never reassigned. Use 'const' instead prefer-const
148:3 warning 'newMode' is never reassigned. Use 'const' instead prefer-const
149:3 warning 'oldFormat' is never reassigned. Use 'const' instead prefer-const
150:3 warning 'newFormat' is never reassigned. Use 'const' instead prefer-const
151:3 warning 'doc' is never reassigned. Use 'const' instead prefer-const
153:3 warning 'content' is never reassigned. Use 'const' instead prefer-const
157:3 warning Prefer .then to .fail no-jquery/no-done-fail
167:4 warning 'surfaceModel' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/editor/editors/visualeditor/mw.flow.ve.UserCache.js
52:23 warning 'newData' is never reassigned. Use 'const' instead prefer-const
86:15 warning 'cacheData' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/editor/editors/visualeditor/ui/inspectors/mw.flow.ve.ui.MentionInspector.js
66:3 warning 'key' is never reassigned. Use 'const' instead prefer-const
67:3 warning 'value' is never reassigned. Use 'const' instead prefer-const
68:3 warning 'inspector' is never reassigned. Use 'const' instead prefer-const
71:3 warning Prefer .then to .done no-jquery/no-done-fail
101:3 warning 'key' is never reassigned. Use 'const' instead prefer-const
107:3 warning 'templateModel' is never reassigned. Use 'const' instead prefer-const
142:4 warning Prefer .then to .done no-jquery/no-done-fail
167:3 warning 'flowBoard' is never reassigned. Use 'const' instead prefer-const
172:3 warning 'overlay' is never reassigned. Use 'const' instead prefer-const
177:3 warning 'iconWidget' is never reassigned. Use 'const' instead prefer-const
200:4 warning 'surfaceModel' is never reassigned. Use 'const' instead prefer-const
206:4 warning Prefer .then to .done no-jquery/no-done-fail
260:3 warning 'errorText' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/editor/editors/visualeditor/ui/widgets/mw.flow.ve.ui.MentionTargetInputWidget.js
20:4 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
27:41 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
85:4 warning 'widget' is never reassigned. Use 'const' instead prefer-const
86:4 warning 'value' is never reassigned. Use 'const' instead prefer-const
94:3 warning 'xhr' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/components/board/base/flow-board-api-events.js
10:1 warning The type 'FlowComponent' is undefined jsdoc/no-undefined-types
62:10 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
107:4 warning 'flowBoard' is never reassigned. Use 'const' instead prefer-const
108:4 warning 'dfd' is never reassigned. Use 'const' instead prefer-const
115:3 warning '$rendered' is never reassigned. Use 'const' instead prefer-const
163:4 warning '$target' is never reassigned. Use 'const' instead prefer-const
164:4 warning '$tooltipTarget' is never reassigned. Use 'const' instead prefer-const
165:4 warning 'flowBoard' is never reassigned. Use 'const' instead prefer-const
167:4 warning 'url' is never reassigned. Use 'const' instead prefer-const
168:4 warning 'links' is never reassigned. Use 'const' instead prefer-const
193:3 warning '$newLink' is never reassigned. Use 'const' instead prefer-const
230:4 warning '$target' is never reassigned. Use 'const' instead prefer-const
235:4 warning '$replacement' is never reassigned. Use 'const' instead prefer-const
257:4 warning '$replacement' is never reassigned. Use 'const' instead prefer-const
262:4 warning '$target' is never reassigned. Use 'const' instead prefer-const
275:2 warning Found more than one @return declaration jsdoc/require-returns
275:2 warning Found more than one @return declaration jsdoc/require-returns-check
289:5 warning '$this' is never reassigned. Use 'const' instead prefer-const
296:4 warning '$form' is never reassigned. Use 'const' instead prefer-const
297:4 warning 'revisionId' is never reassigned. Use 'const' instead prefer-const
298:4 warning '$target' is never reassigned. Use 'const' instead prefer-const
299:4 warning 'flowBoard' is never reassigned. Use 'const' instead prefer-const
302:11 warning Prefer .then to .done no-jquery/no-done-fail
302:11 warning Prefer .then to .done no-jquery/no-done-fail
324:4 warning 'flowBoard' is never reassigned. Use 'const' instead prefer-const
327:10 warning Prefer .then to .done no-jquery/no-done-fail
327:10 warning Prefer .then to .fail no-jquery/no-done-fail
/src/repo/modules/engine/components/board/base/flow-board-interactive-events.js
9:1 warning The type 'FlowComponent' is undefined jsdoc/no-undefined-types
/src/repo/modules/engine/components/board/base/flow-board-load-events.js
9:1 warning The type 'FlowComponent' is undefined jsdoc/no-undefined-types
/src/repo/modules/engine/components/board/base/flow-boardandhistory-base.js
66:4 warning '$this' is never reassigned. Use 'const' instead prefer-const
67:4 warning 'flowComponent' is never reassigned. Use 'const' instead prefer-const
70:4 warning 'role' is never reassigned. Use 'const' instead prefer-const
71:4 warning 'template' is never reassigned. Use 'const' instead prefer-const
72:4 warning 'params' is never reassigned. Use 'const' instead prefer-const
79:4 warning '$deferred' is never reassigned. Use 'const' instead prefer-const
100:3 warning '$form' is never reassigned. Use 'const' instead prefer-const
118:7 warning 'target' is never reassigned. Use 'const' instead prefer-const
119:4 warning '$form' is never reassigned. Use 'const' instead prefer-const
120:4 warning 'flowComponent' is never reassigned. Use 'const' instead prefer-const
121:4 warning '$fields' is never reassigned. Use 'const' instead prefer-const
123:4 warning '$deferred' is never reassigned. Use 'const' instead prefer-const
124:4 warning 'callbacks' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/components/board/features/flow-board-loadmore.js
51:4 warning 'flowBoard' is never reassigned. Use 'const' instead prefer-const
53:4 warning '_scrollWithoutInfinite' is never reassigned. Use 'const' instead prefer-const
100:3 warning 'apiParameters' is never reassigned. Use 'const' instead prefer-const
119:3 warning Prefer .then to .done no-jquery/no-done-fail
119:3 warning Prefer .then to .fail no-jquery/no-done-fail
221:4 warning '$this' is never reassigned. Use 'const' instead prefer-const
222:4 warning '$target' is never reassigned. Use 'const' instead prefer-const
223:4 warning 'flowBoard' is never reassigned. Use 'const' instead prefer-const
230:3 warning 'scrollTarget' is never reassigned. Use 'const' instead prefer-const
231:3 warning '$scrollContainer' is never reassigned. Use 'const' instead prefer-const
232:3 warning 'topicsData' is never reassigned. Use 'const' instead prefer-const
294:7 warning 'scrollTargetSelector' is never reassigned. Use 'const' instead prefer-const
296:4 warning 'scrollContainerSelector' is never reassigned. Use 'const' instead prefer-const
297:4 warning '$scrollContainer' is never reassigned. Use 'const' instead prefer-const
298:4 warning 'board' is never reassigned. Use 'const' instead prefer-const
357:43 warning '$topic' is already declared in the upper scope on line 348 column 62 no-shadow
369:2 warning Found more than one @return declaration jsdoc/require-returns
369:2 warning Found more than one @return declaration jsdoc/require-returns-check
440:3 warning 'calculationContainerHeight' is never reassigned. Use 'const' instead prefer-const
441:3 warning 'calculationContainerScroll' is never reassigned. Use 'const' instead prefer-const
482:4 warning 'toInsert' is never reassigned. Use 'const' instead prefer-const
547:8 warning 'rootsBackup' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/components/board/features/flow-board-navigation.js
11:1 warning The type 'FlowComponent' is undefined jsdoc/no-undefined-types
/src/repo/modules/engine/components/board/features/flow-board-side-rail.js
9:1 warning The type 'FlowComponent' is undefined jsdoc/no-undefined-types
/src/repo/modules/engine/components/board/features/flow-board-visualeditor.js
9:1 warning The type 'FlowBoardComponent' is undefined jsdoc/no-undefined-types
24:7 warning '$topic' is never reassigned. Use 'const' instead prefer-const
28:3 warning 'duplicatedArray' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/components/board/flow-board.js
13:1 warning The type 'FlowBoardAndHistoryComponentBase' is undefined jsdoc/no-undefined-types
14:1 warning The type 'FlowComponentEventsMixin' is undefined jsdoc/no-undefined-types
15:1 warning The type 'FlowComponentEnginesMixin' is undefined jsdoc/no-undefined-types
16:1 warning The type 'FlowBoardComponentApiEventsMixin' is undefined jsdoc/no-undefined-types
17:1 warning The type 'FlowBoardComponentInteractiveEventsMixin' is undefined jsdoc/no-undefined-types
18:1 warning The type 'FlowBoardComponentLoadEventsMixin' is undefined jsdoc/no-undefined-types
19:1 warning The type 'FlowBoardComponentLoadMoreFeatureMixin' is undefined jsdoc/no-undefined-types
20:1 warning The type 'FlowBoardComponentVisualEditorFeatureMixin' is undefined jsdoc/no-undefined-types
25:7 warning 'anchorUid' is never reassigned. Use 'const' instead prefer-const
84:3 warning '$header' is never reassigned. Use 'const' instead prefer-const
86:3 warning '$boardNavigation' is never reassigned. Use 'const' instead prefer-const
88:3 warning '$board' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/components/board/flow-boardhistory.js
6:1 warning The type 'FlowBoardAndHistoryComponentBase' is undefined jsdoc/no-undefined-types
42:3 warning 'flowBoardHistory' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/components/common/flow-component-events.js
123:4 warning 'returns' is never reassigned. Use 'const' instead prefer-const
273:4 warning 'deferreds' is never reassigned. Use 'const' instead prefer-const
275:4 warning 'self' is never reassigned. Use 'const' instead prefer-const
276:4 warning '$this' is never reassigned. Use 'const' instead prefer-const
277:4 warning 'flowComponent' is never reassigned. Use 'const' instead prefer-const
278:4 warning 'dataParams' is never reassigned. Use 'const' instead prefer-const
279:4 warning 'handlerName' is never reassigned. Use 'const' instead prefer-const
280:4 warning 'info' is never reassigned. Use 'const' instead prefer-const
285:4 warning 'args' is never reassigned. Use 'const' instead prefer-const
286:4 warning 'queryMap' is never reassigned. Use 'const' instead prefer-const
316:31 warning 'args' is already declared in the upper scope on line 285 column 4 no-shadow
336:31 warning 'args' is already declared in the upper scope on line 285 column 4 no-shadow
337:10 warning 'queryMap' is already declared in the upper scope on line 286 column 4 no-shadow
342:12 warning 'args' is already declared in the upper scope on line 336 column 31 no-shadow
351:7 warning 'args' is already declared in the upper scope on line 336 column 31 no-shadow
351:7 warning 'args' is never reassigned. Use 'const' instead prefer-const
352:7 warning '$form' is never reassigned. Use 'const' instead prefer-const
380:6 warning 'errorMsg' is never reassigned. Use 'const' instead prefer-const
412:3 warning Prefer .then to .fail no-jquery/no-done-fail
418:10 warning Prefer .then to .done no-jquery/no-done-fail
452:3 warning 'component' is never reassigned. Use 'const' instead prefer-const
472:3 warning '$content' is never reassigned. Use 'const' instead prefer-const
544:3 warning 'args' is never reassigned. Use 'const' instead prefer-const
545:3 warning '$context' is never reassigned. Use 'const' instead prefer-const
547:3 warning 'interactiveHandlerName' is never reassigned. Use 'const' instead prefer-const
548:3 warning 'apiHandlerName' is never reassigned. Use 'const' instead prefer-const
746:7 warning 'flowComponent' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/components/common/flow-component-menus.js
10:1 warning The type 'FlowComponent' is undefined jsdoc/no-undefined-types
/src/repo/modules/engine/components/flow-component.js
13:1 warning The type 'FlowComponentEventsMixin' is undefined jsdoc/no-undefined-types
14:1 warning The type 'FlowComponentEnginesMixin' is undefined jsdoc/no-undefined-types
15:1 warning The type 'FlowComponentMenusFeatureMixin' is undefined jsdoc/no-undefined-types
96:4 warning '_expandScientificNotation' is never reassigned. Use 'const' instead prefer-const
96:43 warning 'timestamp' is already declared in the upper scope on line 95 column 7 no-shadow
140:4 warning 'context' is never reassigned. Use 'const' instead prefer-const
161:3 warning 'id' is never reassigned. Use 'const' instead prefer-const
231:3 warning 'args' is never reassigned. Use 'const' instead prefer-const
232:3 warning 'handlers' is never reassigned. Use 'const' instead prefer-const
233:3 warning 'special' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/components/flow-registry.js
33:3 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
40:8 warning 'constructors' is never reassigned. Use 'const' instead prefer-const
42:5 warning 'i' is already declared in the upper scope on line 31 column 10 no-shadow
83:3 warning 'componentName' is never reassigned. Use 'const' instead prefer-const
85:3 warning 'componentBase' is never reassigned. Use 'const' instead prefer-const
138:7 warning 'registeredClass' is never reassigned. Use 'const' instead prefer-const
146:3 warning 'method' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/misc/flow-api.js
43:5 warning '$deferred' is never reassigned. Use 'const' instead prefer-const
44:5 warning 'ajaxTimeoutSec' is never reassigned. Use 'const' instead prefer-const
45:5 warning 'apiConstructorParams' is never reassigned. Use 'const' instead prefer-const
51:4 warning 'mwApi' is never reassigned. Use 'const' instead prefer-const
126:4 warning 'map' is never reassigned. Use 'const' instead prefer-const
209:25 warning 'queryValue' is never reassigned. Use 'const' instead prefer-const
314:3 warning 'str' is never reassigned. Use 'const' instead prefer-const
315:3 warning 'prevApiCall' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/misc/flow-handlebars.js
74:7 warning 'fragment' is never reassigned. Use 'const' instead prefer-const
115:8 warning '$this' is never reassigned. Use 'const' instead prefer-const
116:5 warning 'data' is never reassigned. Use 'const' instead prefer-const
117:5 warning 'target' is already declared in the upper scope on line 113 column 70 no-shadow
117:5 warning 'target' is never reassigned. Use 'const' instead prefer-const
132:4 warning 'content' is never reassigned. Use 'const' instead prefer-const
244:2 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
260:3 warning 'formatter' is never reassigned. Use 'const' instead prefer-const
263:3 warning 'guid' is never reassigned. Use 'const' instead prefer-const
291:4 warning 'currentTime' is never reassigned. Use 'const' instead prefer-const
314:3 warning '$ago' is never reassigned. Use 'const' instead prefer-const
316:3 warning 'secondsAgo' is never reassigned. Use 'const' instead prefer-const
594:4 warning 'partialMatch' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/misc/jquery.conditionalScroll.js
18:8 warning '$this' is never reassigned. Use 'const' instead prefer-const
19:5 warning 'viewportY' is never reassigned. Use 'const' instead prefer-const
20:5 warning 'viewportHeight' is never reassigned. Use 'const' instead prefer-const
21:5 warning 'elOffset' is never reassigned. Use 'const' instead prefer-const
22:5 warning 'elHeight' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/misc/jquery.findWithParent.js
47:7 warning 'selectors' is never reassigned. Use 'const' instead prefer-const
49:4 warning 'self' is never reassigned. Use 'const' instead prefer-const
51:24 warning 'selector' is already declared in the upper scope on line 46 column 35 no-shadow
/src/repo/modules/engine/misc/mw-ui.enhance.js
18:4 warning '$fields' is never reassigned. Use 'const' instead prefer-const
65:7 warning '$tooltipTemplate' is never reassigned. Use 'const' instead prefer-const
91:8 warning '$target' is never reassigned. Use 'const' instead prefer-const
96:5 warning 'windowWidth' is never reassigned. Use 'const' instead prefer-const
97:5 warning 'windowHeight' is never reassigned. Use 'const' instead prefer-const
98:5 warning 'scrollX' is never reassigned. Use 'const' instead prefer-const
99:5 warning 'scrollY' is never reassigned. Use 'const' instead prefer-const
104:20 warning 'tooltipLocation' is never reassigned. Use 'const' instead prefer-const
108:5 warning 'optionsUnreferenced' is never reassigned. Use 'const' instead prefer-const
209:4 warning 'tooltipWidth' is never reassigned. Use 'const' instead prefer-const
210:4 warning 'tooltipHeight' is never reassigned. Use 'const' instead prefer-const
213:4 warning 'targetPosition' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/engine/misc/mw-ui.modal.js
138:7 warning '$node' is never reassigned. Use 'const' instead prefer-const
139:4 warning '$contentNode' is never reassigned. Use 'const' instead prefer-const
193:7 warning '$heading' is never reassigned. Use 'const' instead prefer-const
243:7 warning 'self' is never reassigned. Use 'const' instead prefer-const
318:2 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
329:2 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
424:4 warning 'modal' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow-initialize.js
13:4 warning '$component' is never reassigned. Use 'const' instead prefer-const
15:4 warning '$board' is never reassigned. Use 'const' instead prefer-const
16:4 warning 'pageTitle' is never reassigned. Use 'const' instead prefer-const
17:4 warning 'initializer' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/dm/api/mw.flow.dm.APIHandler.js
19:31 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
29:24 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
57:4 warning 'params' is never reassigned. Use 'const' instead prefer-const
57:13 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
59:3 warning 'xhr' is never reassigned. Use 'const' instead prefer-const
75:13 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
95:32 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
99:2 warning Found more than one @return declaration jsdoc/require-returns
99:2 warning Found more than one @return declaration jsdoc/require-returns-check
116:32 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
193:7 warning 'api' is never reassigned. Use 'const' instead prefer-const
206:37 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
220:7 warning 'api' is never reassigned. Use 'const' instead prefer-const
232:37 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
262:4 warning 'params' is never reassigned. Use 'const' instead prefer-const
271:3 warning 'xhr' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/dm/mixins/mw.flow.dm.List.js
137:2 warning Missing JSDoc @return declaration jsdoc/require-returns
195:2 warning Missing JSDoc @return declaration jsdoc/require-returns
204:4 warning 'removed' is never reassigned. Use 'const' instead prefer-const
235:2 warning Missing JSDoc @return declaration jsdoc/require-returns
239:1 warning The type 'clear' is undefined jsdoc/no-undefined-types
/src/repo/modules/flow/dm/mw.flow.dm.Board.js
78:10 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
97:4 warning 'categoryDMs' is never reassigned. Use 'const' instead prefer-const
217:1 warning The type 'sortOrderChange' is undefined jsdoc/no-undefined-types
/src/repo/modules/flow/dm/mw.flow.dm.Item.js
71:33 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
/src/repo/modules/flow/dm/mw.flow.dm.ModeratedRevisionedContent.js
40:10 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
/src/repo/modules/flow/dm/mw.flow.dm.Post.js
66:4 warning 'result' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/dm/mw.flow.dm.RevisionedContent.js
83:10 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
374:1 warning The type 'watched' is undefined jsdoc/no-undefined-types
/src/repo/modules/flow/dm/mw.flow.dm.System.js
138:7 warning 'system' is never reassigned. Use 'const' instead prefer-const
139:4 warning 'apiParams' is never reassigned. Use 'const' instead prefer-const
203:4 warning 'topicTitlesById' is never reassigned. Use 'const' instead prefer-const
204:4 warning 'updateTimestampsByTopicId' is never reassigned. Use 'const' instead prefer-const
205:4 warning 'topics' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/dm/mw.flow.dm.Topic.js
73:4 warning 'topics' is never reassigned. Use 'const' instead prefer-const
97:10 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
/src/repo/modules/flow/ui/widgets/editor/mw.flow.ui.AnonWarningWidget.js
14:4 warning 'widget' is never reassigned. Use 'const' instead prefer-const
26:3 warning 'shouldDisplay' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/ui/widgets/editor/mw.flow.ui.CanNotEditWidget.js
57:4 warning Prefer .then to .done no-jquery/no-done-fail
77:2 warning Found more than one @return declaration jsdoc/require-returns
77:2 warning Found more than one @return declaration jsdoc/require-returns-check
92:3 warning 'dfd' is never reassigned. Use 'const' instead prefer-const
113:5 warning Prefer .then to .done no-jquery/no-done-fail
113:5 warning Prefer .then to .fail no-jquery/no-done-fail
160:7 warning 'isGroupRequired' is never reassigned. Use 'const' instead prefer-const
161:4 warning 'userGroups' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/ui/widgets/editor/mw.flow.ui.EditorWidget.js
270:4 warning 'deferred' is never reassigned. Use 'const' instead prefer-const
417:2 warning Found more than one @return declaration jsdoc/require-returns
417:2 warning Found more than one @return declaration jsdoc/require-returns-check
439:3 warning 'dom' is never reassigned. Use 'const' instead prefer-const
516:3 warning Prefer .then to .done no-jquery/no-done-fail
516:3 warning Prefer .then to .fail no-jquery/no-done-fail
/src/repo/modules/flow/ui/widgets/mw.flow.ui.BoardDescriptionWidget.js
58:46 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
185:7 warning 'content' is never reassigned. Use 'const' instead prefer-const
186:7 warning 'format' is never reassigned. Use 'const' instead prefer-const
235:7 warning 'widget' is never reassigned. Use 'const' instead prefer-const
240:3 warning 'captchaResponse' is never reassigned. Use 'const' instead prefer-const
282:6 warning 'categories' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/ui/widgets/mw.flow.ui.CaptchaWidget.js
30:2 warning Found more than one @return declaration jsdoc/require-returns
30:2 warning Found more than one @return declaration jsdoc/require-returns-check
38:7 warning '$captchaField' is never reassigned. Use 'const' instead prefer-const
75:4 warning Prefer .then to .fail no-jquery/no-done-fail
/src/repo/modules/flow/ui/widgets/mw.flow.ui.CategoriesWidget.js
24:40 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
69:4 warning 'widgets' is never reassigned. Use 'const' instead prefer-const
87:4 warning 'widgets' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/ui/widgets/mw.flow.ui.CategoryItemWidget.js
24:3 warning 'prefixedCleanName' is never reassigned. Use 'const' instead prefer-const
26:3 warning '$link' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/ui/widgets/mw.flow.ui.EditPostWidget.js
33:46 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
103:3 warning 'widget' is never reassigned. Use 'const' instead prefer-const
104:3 warning 'contentFormat' is never reassigned. Use 'const' instead prefer-const
148:7 warning 'widget' is never reassigned. Use 'const' instead prefer-const
151:3 warning 'captchaResponse' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/ui/widgets/mw.flow.ui.EditTopicSummaryWidget.js
21:46 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
92:3 warning 'widget' is never reassigned. Use 'const' instead prefer-const
93:3 warning 'contentFormat' is never reassigned. Use 'const' instead prefer-const
98:6 warning 'content' is never reassigned. Use 'const' instead prefer-const
99:6 warning 'format' is never reassigned. Use 'const' instead prefer-const
140:7 warning 'widget' is never reassigned. Use 'const' instead prefer-const
143:3 warning 'captchaResponse' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/ui/widgets/mw.flow.ui.NavigationWidget.js
55:1 warning The type 'loadTopic' is undefined jsdoc/no-undefined-types
66:1 warning The type 'reorderTopics' is undefined jsdoc/no-undefined-types
83:4 warning 'isElementInView' is never reassigned. Use 'const' instead prefer-const
84:9 warning 'scrollTop' is already declared in the upper scope on line 76 column 7 no-shadow
85:6 warning 'height' is never reassigned. Use 'const' instead prefer-const
86:6 warning 'top' is never reassigned. Use 'const' instead prefer-const
87:6 warning 'bottom' is never reassigned. Use 'const' instead prefer-const
89:5 warning 'scrollTop' is never reassigned. Use 'const' instead prefer-const
90:5 warning 'containerHeight' is never reassigned. Use 'const' instead prefer-const
118:3 warning 'scrollTop' is never reassigned. Use 'const' instead prefer-const
119:3 warning 'isScrolledDown' is never reassigned. Use 'const' instead prefer-const
/src/repo/modules/flow/ui/widgets/mw.flow.ui.NewTopicWidget.js
16:4 warning 'widget' is never reassigned. Use 'const' instead prefer-const
25:3 warning 'title' is never reassigned. Use 'const' instead prefer-const
58:46 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
214:7 warning 'widget' is never reassigned. Use 'const' instead prefer-const
215:4 warning 'title' is never reassigned. Use 'const' instead prefer-const
222:3 warning 'captchaResponse' is never reassigned. Use 'const' instead prefer-const
227:3 warning Prefer .then to .done no-jquery/no-done-fail
/src/repo/modules/flow/ui/widgets/mw.flow.ui.ReplyWidget.js
138:7 warning 'widget' is never reassigned. Use 'const' instead prefer-const
141:3 warning 'captchaResponse' is never reassigned. Use 'const' instead prefer-const
177:47 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
/src/repo/modules/flow/ui/widgets/mw.flow.ui.SidebarExpandWidget.js
23:17 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
/src/repo/modules/flow/ui/widgets/mw.flow.ui.TopicMenuSelectWidget.js
76:2 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
91:3 warning 'actualHeight' is never reassigned. Use 'const' instead prefer-const
92:3 warning 'naturalHeight' is never reassigned. Use 'const' instead prefer-const
93:3 warning 'scrollTop' is never reassigned. Use 'const' instead prefer-const
94:3 warning 'isNearBottom' is never reassigned. Use 'const' instead prefer-const
105:1 warning The type 'topic' is undefined jsdoc/no-undefined-types
148:4 warning 'widgets' is never reassigned. Use 'const' instead prefer-const
187:4 warning 'widgets' is never reassigned. Use 'const' instead prefer-const
198:2 warning Missing JSDoc @return declaration jsdoc/require-returns
221:2 warning Missing JSDoc @return declaration jsdoc/require-returns
/src/repo/modules/mw.flow.Initializer.js
80:6 warning 'topic' is never reassigned. Use 'const' instead prefer-const
81:6 warning 'data' is never reassigned. Use 'const' instead prefer-const
113:4 warning 'self' is never reassigned. Use 'const' instead prefer-const
333:5 warning '$rendered' is never reassigned. Use 'const' instead prefer-const
497:5 warning '$topic' is never reassigned. Use 'const' instead prefer-const
498:5 warning 'topicId' is never reassigned. Use 'const' instead prefer-const
499:5 warning '$post' is never reassigned. Use 'const' instead prefer-const
500:5 warning '$postMain' is never reassigned. Use 'const' instead prefer-const
501:5 warning 'postId' is never reassigned. Use 'const' instead prefer-const
502:5 warning '$board' is never reassigned. Use 'const' instead prefer-const
503:5 warning 'flowBoard' is never reassigned. Use 'const' instead prefer-const
505:4 warning 'editPostWidget' is never reassigned. Use 'const' instead prefer-const
571:6 warning 'action' is never reassigned. Use 'const' instead prefer-const
572:6 warning '$topic' is never reassigned. Use 'const' instead prefer-const
573:6 warning 'topicId' is never reassigned. Use 'const' instead prefer-const
574:6 warning 'api' is never reassigned. Use 'const' instead prefer-const
582:5 warning Prefer .then to .fail no-jquery/no-done-fail
634:9 warning '$topic' is never reassigned. Use 'const' instead prefer-const
635:6 warning 'topicId' is never reassigned. Use 'const' instead prefer-const
636:6 warning '$container' is never reassigned. Use 'const' instead prefer-const
637:6 warning '$topicTitleViewMode' is never reassigned. Use 'const' instead prefer-const
638:6 warning '$editForm' is never reassigned. Use 'const' instead prefer-const
646:5 warning 'widget' is never reassigned. Use 'const' instead prefer-const
700:5 warning 'href' is never reassigned. Use 'const' instead prefer-const
701:5 warning 'replyTo' is never reassigned. Use 'const' instead prefer-const
702:5 warning '$topic' is never reassigned. Use 'const' instead prefer-const
703:5 warning 'placeholder' is never reassigned. Use 'const' instead prefer-const
707:5 warning '$targetContainer' is never reassigned. Use 'const' instead prefer-const
708:5 warning '$existingWidget' is never reassigned. Use 'const' instead prefer-const
719:4 warning 'replyWidget' is never reassigned. Use 'const' instead prefer-const
790:4 warning 'self' is never reassigned. Use 'const' instead prefer-const
791:4 warning '$topic' is never reassigned. Use 'const' instead prefer-const
792:4 warning '$summaryContainer' is never reassigned. Use 'const' instead prefer-const
793:4 warning '$topicSummary' is never reassigned. Use 'const' instead prefer-const
794:4 warning 'editorOptions' is never reassigned. Use 'const' instead prefer-const
797:4 warning 'pageName' is never reassigned. Use 'const' instead prefer-const
798:4 warning 'title' is never reassigned. Use 'const' instead prefer-const
814:3 warning 'editTopicSummaryWidget' is never reassigned. Use 'const' instead prefer-const
855:7 warning 'editPostWidget' is never reassigned. Use 'const' instead prefer-const
856:4 warning '$post' is never reassigned. Use 'const' instead prefer-const
857:4 warning '$topic' is never reassigned. Use 'const' instead prefer-const
858:4 warning 'self' is never reassigned. Use 'const' instead prefer-const
907:4 warning '$messages' is never reassigned. Use 'const' instead prefer-const
908:4 warning 'isProbablyEditable' is never reassigned. Use 'const' instead prefer-const
909:4 warning 'anonWarning' is never reassigned. Use 'const' instead prefer-const
912:4 warning 'canNotEdit' is never reassigned. Use 'const' instead prefer-const
917:4 warning 'captcha' is never reassigned. Use 'const' instead prefer-const
918:4 warning 'captchaWidget' is never reassigned. Use 'const' instead prefer-const
919:4 warning 'error' is never reassigned. Use 'const' instead prefer-const
922:4 warning 'editor' is never reassigned. Use 'const' instead prefer-const
944:3 warning '$wrapper' is never reassigned. Use 'const' instead prefer-const
965:26 warning 'content' is already declared in the upper scope on line 905 column 79 no-shadow
970:5 warning 'captchaResponse' is never reassigned. Use 'const' instead prefer-const
999:7 warning '$undoForm' is never reassigned. Use 'const' instead prefer-const
1000:4 warning 'undoType' is never reassigned. Use 'const' instead prefer-const
1001:4 warning 'pageName' is never reassigned. Use 'const' instead prefer-const
1002:4 warning 'title' is never reassigned. Use 'const' instead prefer-const
1003:4 warning 'topicId' is never reassigned. Use 'const' instead prefer-const
1004:4 warning 'postId' is never reassigned. Use 'const' instead prefer-const
1005:4 warning 'prevRevId' is never reassigned. Use 'const' instead prefer-const
1006:4 warning 'content' is never reassigned. Use 'const' instead prefer-const
1007:4 warning 'returnToTitle' is never reassigned. Use 'const' instead prefer-const
1020:4 warning 'apiHandler' is never reassigned. Use 'const' instead prefer-const
1024:4 warning 'save' is never reassigned. Use 'const' instead prefer-const
1043:4 warning 'editor' is never reassigned. Use 'const' instead prefer-const
1057:31 warning 'content' is already declared in the upper scope on line 1006 column 4 no-shadow
/src/repo/tests/qunit/engine/misc/test_flow-handlebars.js
4:8 warning 'stub' is never reassigned. Use 'const' instead prefer-const
18:4 warning 'stubUser' is never reassigned. Use 'const' instead prefer-const
92:16 warning ES2015 'Object.assign' method is forbidden es-x/no-object-assign
/src/repo/tests/qunit/flow/dm/test_mw.flow.dm.Board.js
7:3 warning 'executeOperation' is never reassigned. Use 'const' instead prefer-const
10:3 warning 'cases' is never reassigned. Use 'const' instead prefer-const
158:2 warning 'board' is never reassigned. Use 'const' instead prefer-const
/src/repo/tests/qunit/flow/dm/test_mw.flow.dm.Post.js
7:3 warning 'truncatedApiData' is never reassigned. Use 'const' instead prefer-const
479:2 warning 'topicRevisionData' is never reassigned. Use 'const' instead prefer-const
480:2 warning 'topic' is never reassigned. Use 'const' instead prefer-const
485:2 warning 'replies' is never reassigned. Use 'const' instead prefer-const
486:2 warning 'subreplies' is never reassigned. Use 'const' instead prefer-const
487:2 warning 'subsubreplies' is never reassigned. Use 'const' instead prefer-const
/src/repo/tests/qunit/flow/dm/test_mw.flow.dm.System.js
7:3 warning 'executeOperation' is never reassigned. Use 'const' instead prefer-const
10:3 warning 'truncatedApiData' is never reassigned. Use 'const' instead prefer-const
284:3 warning 'cases' is never reassigned. Use 'const' instead prefer-const
312:2 warning 'system' is never reassigned. Use 'const' instead prefer-const
/src/repo/tests/qunit/flow/dm/test_mw.flow.dm.Topic.js
7:3 warning 'executeOperation' is never reassigned. Use 'const' instead prefer-const
7:38 warning 'operation' is already declared in the upper scope on line 6 column 39 no-shadow
11:2 warning 'cases' is never reassigned. Use 'const' instead prefer-const
✖ 405 problems (0 errors, 405 warnings)
Running "stylelint:all" (stylelint) task
>> Linted 41 files without errors
Running "banana:Flow" (banana) task
>> 2 message directories checked.
Done.
--- end ---
{"1111755": {"source": 1111755, "name": "qs", "dependency": "qs", "title": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion", "url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p", "severity": "high", "cwe": ["CWE-20"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<6.14.1"}}
Upgrading n:qs from 6.11.2 -> 6.14.1
$ package-lock-lint /src/repo/package-lock.json
--- stdout ---
Checking /src/repo/package-lock.json
--- end ---
build: Updating qs to 6.14.1
* https://github.com/advisories/GHSA-6rw7-vpxm-498p
$ git add .
--- stdout ---
--- end ---
$ git commit -F /tmp/tmpuy1r1w5k
--- stdout ---
[master 9027d22] build: Updating qs to 6.14.1
1 file changed, 150 insertions(+), 49 deletions(-)
--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From 9027d22295b615ade99a63f69cf3b756133c8aba Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Wed, 31 Dec 2025 01:32:14 +0000
Subject: [PATCH] build: Updating qs to 6.14.1
* https://github.com/advisories/GHSA-6rw7-vpxm-498p
Change-Id: Ie463ffcf7e4f6b00147b394081abfa1fcb8562df
---
package-lock.json | 199 ++++++++++++++++++++++++++++++++++------------
1 file changed, 150 insertions(+), 49 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index e176f7e..738d8ba 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1088,19 +1088,6 @@
"integrity": "sha512-/x68VkHLeTl3/Ll8IvxdwzhrT+IyKc52e/oyHhA2RwqPqswSnjVbSddfPRwAsJtbilMAPSRWwAlpxdYsSWOTKQ==",
"dev": true
},
- "node_modules/call-bind": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz",
- "integrity": "sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==",
- "dev": true,
- "dependencies": {
- "function-bind": "^1.1.1",
- "get-intrinsic": "^1.0.2"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
"node_modules/call-bind-apply-helpers": {
"version": "1.0.2",
"resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
@@ -1114,6 +1101,22 @@
"node": ">= 0.4"
}
},
+ "node_modules/call-bound": {
+ "version": "1.0.4",
+ "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+ "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+ "dev": true,
+ "dependencies": {
+ "call-bind-apply-helpers": "^1.0.2",
+ "get-intrinsic": "^1.3.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
"node_modules/callsites": {
"version": "3.1.0",
"resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
@@ -4044,10 +4047,13 @@
"dev": true
},
"node_modules/object-inspect": {
- "version": "1.12.3",
- "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.3.tgz",
- "integrity": "sha512-geUvdk7c+eizMNUDkRpW1wJwgfOiOeHbxBR/hLXK1aT6zmVSO0jsQcs7fj6MGw89jC/cjGfLcNOrtMYtGqm81g==",
+ "version": "1.13.4",
+ "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+ "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
"dev": true,
+ "engines": {
+ "node": ">= 0.4"
+ },
"funding": {
"url": "https://github.com/sponsors/ljharb"
}
@@ -4473,12 +4479,12 @@
}
},
"node_modules/qs": {
- "version": "6.11.2",
- "resolved": "https://registry.npmjs.org/qs/-/qs-6.11.2.tgz",
- "integrity": "sha512-tDNIz22aBzCDxLtVH++VnTfzxlfeK5CbqohpSqpJgj1Wg/cQbStNAz3NuqCs5vV+pjBsK4x4pN9HlVh7rcYRiA==",
+ "version": "6.14.1",
+ "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
+ "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==",
"dev": true,
"dependencies": {
- "side-channel": "^1.0.4"
+ "side-channel": "^1.1.0"
},
"engines": {
"node": ">=0.6"
@@ -4892,14 +4898,72 @@
}
},
"node_modules/side-channel": {
- "version": "1.0.4",
- "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz",
- "integrity": "sha512-q5XPytqFEIKHkGdiMIrY10mvLRvnQh42/+GoBlFW3b2LXLE2xxJpZFdm94we0BaoV3RwJyGqg5wS7epxTv0Zvw==",
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
+ "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
"dev": true,
"dependencies": {
- "call-bind": "^1.0.0",
- "get-intrinsic": "^1.0.2",
- "object-inspect": "^1.9.0"
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.3",
+ "side-channel-list": "^1.0.0",
+ "side-channel-map": "^1.0.1",
+ "side-channel-weakmap": "^1.0.2"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-list": {
+ "version": "1.0.0",
+ "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz",
+ "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==",
+ "dev": true,
+ "dependencies": {
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.3"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-map": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+ "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+ "dev": true,
+ "dependencies": {
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-weakmap": {
+ "version": "1.0.2",
+ "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+ "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+ "dev": true,
+ "dependencies": {
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3",
+ "side-channel-map": "^1.0.1"
+ },
+ "engines": {
+ "node": ">= 0.4"
},
"funding": {
"url": "https://github.com/sponsors/ljharb"
@@ -6675,16 +6739,6 @@
"integrity": "sha512-/x68VkHLeTl3/Ll8IvxdwzhrT+IyKc52e/oyHhA2RwqPqswSnjVbSddfPRwAsJtbilMAPSRWwAlpxdYsSWOTKQ==",
"dev": true
},
- "call-bind": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz",
- "integrity": "sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==",
- "dev": true,
- "requires": {
- "function-bind": "^1.1.1",
- "get-intrinsic": "^1.0.2"
- }
- },
"call-bind-apply-helpers": {
"version": "1.0.2",
"resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
@@ -6695,6 +6749,16 @@
"function-bind": "^1.1.2"
}
},
+ "call-bound": {
+ "version": "1.0.4",
+ "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+ "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+ "dev": true,
+ "requires": {
+ "call-bind-apply-helpers": "^1.0.2",
+ "get-intrinsic": "^1.3.0"
+ }
+ },
"callsites": {
"version": "3.1.0",
"resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
@@ -8846,9 +8910,9 @@
"dev": true
},
"object-inspect": {
- "version": "1.12.3",
- "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.3.tgz",
- "integrity": "sha512-geUvdk7c+eizMNUDkRpW1wJwgfOiOeHbxBR/hLXK1aT6zmVSO0jsQcs7fj6MGw89jC/cjGfLcNOrtMYtGqm81g==",
+ "version": "1.13.4",
+ "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+ "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
"dev": true
},
"object.defaults": {
@@ -9153,12 +9217,12 @@
"dev": true
},
"qs": {
- "version": "6.11.2",
- "resolved": "https://registry.npmjs.org/qs/-/qs-6.11.2.tgz",
- "integrity": "sha512-tDNIz22aBzCDxLtVH++VnTfzxlfeK5CbqohpSqpJgj1Wg/cQbStNAz3NuqCs5vV+pjBsK4x4pN9HlVh7rcYRiA==",
+ "version": "6.14.1",
+ "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
+ "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==",
"dev": true,
"requires": {
- "side-channel": "^1.0.4"
+ "side-channel": "^1.1.0"
}
},
"queue-microtask": {
@@ -9433,14 +9497,51 @@
"dev": true
},
"side-channel": {
- "version": "1.0.4",
- "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz",
- "integrity": "sha512-q5XPytqFEIKHkGdiMIrY10mvLRvnQh42/+GoBlFW3b2LXLE2xxJpZFdm94we0BaoV3RwJyGqg5wS7epxTv0Zvw==",
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
+ "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+ "dev": true,
+ "requires": {
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.3",
+ "side-channel-list": "^1.0.0",
+ "side-channel-map": "^1.0.1",
+ "side-channel-weakmap": "^1.0.2"
+ }
+ },
+ "side-channel-list": {
+ "version": "1.0.0",
+ "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz",
+ "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==",
+ "dev": true,
+ "requires": {
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.3"
+ }
+ },
+ "side-channel-map": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+ "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+ "dev": true,
+ "requires": {
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3"
+ }
+ },
+ "side-channel-weakmap": {
+ "version": "1.0.2",
+ "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+ "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
"dev": true,
"requires": {
- "call-bind": "^1.0.0",
- "get-intrinsic": "^1.0.2",
- "object-inspect": "^1.9.0"
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3",
+ "side-channel-map": "^1.0.1"
}
},
"signal-exit": {
--
2.47.3
--- end ---