This run took 307 seconds.
From a230c15be16330d81c082f3549b778246b78629c Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Thu, 15 Jan 2026 13:33:19 +0000
Subject: [PATCH] build: Updating dependencies
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
composer:
* mediawiki/mediawiki-codesniffer: 48.0.0 → 49.0.0
npm:
* undici: 6.22.0, 7.16.0 → 6.23.0, 7.18.2
* https://github.com/advisories/GHSA-g9mf-h72j-4rw9
Change-Id: I427e427a8b32b3b3b374ed7cb6af6751d041013b
---
composer.json | 2 +-
package-lock.json | 21 +++++++++------------
2 files changed, 10 insertions(+), 13 deletions(-)
diff --git a/composer.json b/composer.json
index 41fab49..1c56866 100644
--- a/composer.json
+++ b/composer.json
@@ -4,7 +4,7 @@
"wikimedia/remex-html": "^5.1.0"
},
"require-dev": {
- "mediawiki/mediawiki-codesniffer": "48.0.0",
+ "mediawiki/mediawiki-codesniffer": "49.0.0",
"mediawiki/mediawiki-phan-config": "0.18.0",
"mediawiki/minus-x": "1.1.3",
"php-parallel-lint/php-console-highlighter": "1.0.0",
diff --git a/package-lock.json b/package-lock.json
index 3c25918..da19c16 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6924,11 +6924,10 @@
}
},
"node_modules/cheerio/node_modules/undici": {
- "version": "7.16.0",
- "resolved": "https://registry.npmjs.org/undici/-/undici-7.16.0.tgz",
- "integrity": "sha512-QEg3HPMll0o3t2ourKwOeUAZ159Kn9mx5pnzHRQO8+Wixmh88YdZRiIwat0iNzNNXn0yoEtXJqFpyW7eM8BV7g==",
+ "version": "7.18.2",
+ "resolved": "https://registry.npmjs.org/undici/-/undici-7.18.2.tgz",
+ "integrity": "sha512-y+8YjDFzWdQlSE9N5nzKMT3g4a5UBX1HKowfdXh0uvAnTaqqwqB92Jt4UXBAeKekDs5IaDKyJFR4X1gYVCgXcw==",
"dev": true,
- "license": "MIT",
"engines": {
"node": ">=20.18.1"
}
@@ -7869,11 +7868,10 @@
}
},
"node_modules/diff": {
- "version": "8.0.2",
- "resolved": "https://registry.npmjs.org/diff/-/diff-8.0.2.tgz",
- "integrity": "sha512-sSuxWU5j5SR9QQji/o2qMvqRNYRDOcBTgsJ/DeCf4iSN4gW+gNMXM7wFIP+fdXZxoNiAnHUTGjCr+TSWXdRDKg==",
+ "version": "8.0.3",
+ "resolved": "https://registry.npmjs.org/diff/-/diff-8.0.3.tgz",
+ "integrity": "sha512-qejHi7bcSD4hQAZE0tNAawRK1ZtafHDmMTMkrrIGgSLl7hTnQHmKCeB45xAcbfTqK2zowkM3j3bHt/4b/ARbYQ==",
"dev": true,
- "license": "BSD-3-Clause",
"engines": {
"node": ">=0.3.1"
}
@@ -18933,11 +18931,10 @@
"license": "BSD-3-Clause"
},
"node_modules/undici": {
- "version": "6.22.0",
- "resolved": "https://registry.npmjs.org/undici/-/undici-6.22.0.tgz",
- "integrity": "sha512-hU/10obOIu62MGYjdskASR3CUAiYaFTtC9Pa6vHyf//mAipSvSQg6od2CnJswq7fvzNS3zJhxoRkgNVaHurWKw==",
+ "version": "6.23.0",
+ "resolved": "https://registry.npmjs.org/undici/-/undici-6.23.0.tgz",
+ "integrity": "sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g==",
"dev": true,
- "license": "MIT",
"engines": {
"node": ">=18.17"
}
--
2.47.3
$ date
--- stdout ---
Thu Jan 15 13:28:24 UTC 2026
--- end ---
$ git clone file:///srv/git/mediawiki-extensions-WikiLambda.git /src/repo --depth=1 -b master
--- stderr ---
Cloning into '/src/repo'...
--- stdout ---
--- end ---
$ git config user.name libraryupgrader
--- stdout ---
--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---
--- end ---
$ git submodule update --init
--- stderr ---
Submodule 'function-schemata' (https://gitlab.wikimedia.org/repos/abstract-wiki/wikifunctions/function-schemata.git) registered for path 'function-schemata'
Cloning into '/src/repo/function-schemata'...
--- stdout ---
Submodule path 'function-schemata': checked out '160b771f9e14f35547233df713318f9f74809e0c'
--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.
--- end ---
$ git show-ref refs/heads/master
--- stdout ---
a1ed7aad006414a0334bd148aea3238df8d468d0 refs/heads/master
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"@wdio/mocha-framework": {
"name": "@wdio/mocha-framework",
"severity": "low",
"isDirect": true,
"via": [
"mocha"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/@wdio/mocha-framework"
],
"fixAvailable": false
},
"diff": {
"name": "diff",
"severity": "low",
"isDirect": false,
"via": [
{
"source": 1112148,
"name": "diff",
"dependency": "diff",
"title": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
"url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx",
"severity": "low",
"cwe": [
"CWE-400",
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<8.0.3"
}
],
"effects": [
"mocha"
],
"range": "<8.0.3",
"nodes": [
"node_modules/diff",
"node_modules/mocha/node_modules/diff"
],
"fixAvailable": false
},
"mocha": {
"name": "mocha",
"severity": "low",
"isDirect": false,
"via": [
"diff"
],
"effects": [
"@wdio/mocha-framework"
],
"range": "0.14.0 - 12.0.0-beta-3",
"nodes": [
"node_modules/mocha"
],
"fixAvailable": false
},
"undici": {
"name": "undici",
"severity": "low",
"isDirect": false,
"via": [
{
"source": 1112153,
"name": "undici",
"dependency": "undici",
"title": "Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",
"url": "https://github.com/advisories/GHSA-g9mf-h72j-4rw9",
"severity": "low",
"cwe": [
"CWE-770"
],
"cvss": {
"score": 3.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
"range": "<6.23.0"
},
{
"source": 1112154,
"name": "undici",
"dependency": "undici",
"title": "Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",
"url": "https://github.com/advisories/GHSA-g9mf-h72j-4rw9",
"severity": "low",
"cwe": [
"CWE-770"
],
"cvss": {
"score": 3.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
"range": ">=7.0.0 <7.18.2"
}
],
"effects": [],
"range": "<6.23.0 || >=7.0.0 <7.18.2",
"nodes": [
"node_modules/cheerio/node_modules/undici",
"node_modules/undici"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 4,
"moderate": 0,
"high": 0,
"critical": 0,
"total": 4
},
"dependencies": {
"prod": 1,
"dev": 1441,
"optional": 38,
"peer": 1,
"peerOptional": 0,
"total": 1441
}
}
}
--- end ---
$ /usr/bin/composer install
--- stderr ---
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information
Updating dependencies
Lock file operations: 41 installs, 0 updates, 0 removals
- Locking composer/pcre (3.3.2)
- Locking composer/semver (3.4.4)
- Locking composer/spdx-licenses (1.5.9)
- Locking composer/xdebug-handler (3.0.5)
- Locking dealerdirect/phpcodesniffer-composer-installer (v1.2.0)
- Locking diff/diff (3.4.0)
- Locking doctrine/deprecations (1.1.5)
- Locking felixfbecker/advanced-json-rpc (v3.2.1)
- Locking mediawiki/mediawiki-codesniffer (v48.0.0)
- Locking mediawiki/mediawiki-phan-config (0.18.0)
- Locking mediawiki/minus-x (1.1.3)
- Locking mediawiki/phan-taint-check-plugin (8.0.0)
- Locking microsoft/tolerant-php-parser (v0.1.2)
- Locking netresearch/jsonmapper (v4.5.0)
- Locking phan/phan (5.5.2)
- Locking php-parallel-lint/php-console-color (v1.0.1)
- Locking php-parallel-lint/php-console-highlighter (v1.0.0)
- Locking php-parallel-lint/php-parallel-lint (v1.4.0)
- Locking phpcsstandards/phpcsextra (1.4.0)
- Locking phpcsstandards/phpcsutils (1.1.1)
- Locking phpdocumentor/reflection-common (2.2.0)
- Locking phpdocumentor/reflection-docblock (5.6.6)
- Locking phpdocumentor/type-resolver (1.12.0)
- Locking phpstan/phpdoc-parser (2.3.1)
- Locking psr/container (2.0.2)
- Locking psr/log (3.0.2)
- Locking sabre/event (5.1.7)
- Locking squizlabs/php_codesniffer (3.13.2)
- Locking symfony/console (v7.4.3)
- Locking symfony/deprecation-contracts (v3.6.0)
- Locking symfony/polyfill-ctype (v1.33.0)
- Locking symfony/polyfill-intl-grapheme (v1.33.0)
- Locking symfony/polyfill-intl-normalizer (v1.33.0)
- Locking symfony/polyfill-mbstring (v1.33.0)
- Locking symfony/polyfill-php80 (v1.33.0)
- Locking symfony/service-contracts (v3.6.1)
- Locking symfony/string (v8.0.1)
- Locking tysonandre/var_representation_polyfill (0.1.3)
- Locking webmozart/assert (2.1.2)
- Locking wikimedia/remex-html (5.1.0)
- Locking wikimedia/utfnormal (4.0.0)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 41 installs, 0 updates, 0 removals
0 [>---------------------------] 0 [->--------------------------]
- Installing squizlabs/php_codesniffer (3.13.2): Extracting archive
- Installing dealerdirect/phpcodesniffer-composer-installer (v1.2.0): Extracting archive
- Installing composer/pcre (3.3.2): Extracting archive
- Installing diff/diff (3.4.0): Extracting archive
- Installing phpcsstandards/phpcsutils (1.1.1): Extracting archive
- Installing phpcsstandards/phpcsextra (1.4.0): Extracting archive
- Installing symfony/polyfill-mbstring (v1.33.0): Extracting archive
- Installing composer/spdx-licenses (1.5.9): Extracting archive
- Installing composer/semver (3.4.4): Extracting archive
- Installing mediawiki/mediawiki-codesniffer (v48.0.0): Extracting archive
- Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive
- Installing symfony/polyfill-php80 (v1.33.0): Extracting archive
- Installing symfony/polyfill-intl-normalizer (v1.33.0): Extracting archive
- Installing symfony/polyfill-intl-grapheme (v1.33.0): Extracting archive
- Installing symfony/polyfill-ctype (v1.33.0): Extracting archive
- Installing symfony/string (v8.0.1): Extracting archive
- Installing symfony/deprecation-contracts (v3.6.0): Extracting archive
- Installing psr/container (2.0.2): Extracting archive
- Installing symfony/service-contracts (v3.6.1): Extracting archive
- Installing symfony/console (v7.4.3): Extracting archive
- Installing sabre/event (5.1.7): Extracting archive
- Installing netresearch/jsonmapper (v4.5.0): Extracting archive
- Installing microsoft/tolerant-php-parser (v0.1.2): Extracting archive
- Installing webmozart/assert (2.1.2): Extracting archive
- Installing phpstan/phpdoc-parser (2.3.1): Extracting archive
- Installing phpdocumentor/reflection-common (2.2.0): Extracting archive
- Installing doctrine/deprecations (1.1.5): Extracting archive
- Installing phpdocumentor/type-resolver (1.12.0): Extracting archive
- Installing phpdocumentor/reflection-docblock (5.6.6): Extracting archive
- Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive
- Installing psr/log (3.0.2): Extracting archive
- Installing composer/xdebug-handler (3.0.5): Extracting archive
- Installing phan/phan (5.5.2): Extracting archive
- Installing mediawiki/phan-taint-check-plugin (8.0.0): Extracting archive
- Installing mediawiki/mediawiki-phan-config (0.18.0): Extracting archive
- Installing mediawiki/minus-x (1.1.3): Extracting archive
- Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive
- Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive
- Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive
- Installing wikimedia/utfnormal (4.0.0): Extracting archive
- Installing wikimedia/remex-html (5.1.0): Extracting archive
0/39 [>---------------------------] 0%
27/39 [===================>--------] 69%
38/39 [===========================>] 97%
39/39 [============================] 100%
1 package suggestions were added by new dependencies, use `composer suggest` to see details.
Generating autoload files
17 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---
PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils
--- end ---
Upgrading c:mediawiki/mediawiki-codesniffer from 48.0.0 -> 49.0.0
$ /usr/bin/composer update
--- stderr ---
Loading composer repositories with package information
Updating dependencies
Lock file operations: 0 installs, 3 updates, 0 removals
- Upgrading mediawiki/mediawiki-codesniffer (v48.0.0 => v49.0.0)
- Upgrading phpcsstandards/phpcsutils (1.1.1 => 1.2.2)
- Upgrading squizlabs/php_codesniffer (3.13.2 => 3.13.5)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 0 installs, 3 updates, 0 removals
0 [>---------------------------] 0 [->--------------------------]
- Upgrading squizlabs/php_codesniffer (3.13.2 => 3.13.5): Extracting archive
- Upgrading phpcsstandards/phpcsutils (1.1.1 => 1.2.2): Extracting archive
- Upgrading mediawiki/mediawiki-codesniffer (v48.0.0 => v49.0.0): Extracting archive
0/3 [>---------------------------] 0%
2/3 [==================>---------] 66%
3/3 [============================] 100%
Generating autoload files
17 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
No security vulnerability advisories found.
--- stdout ---
PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils
--- end ---
$ vendor/bin/phpcs --report=json
--- stdout ---
{"totals":{"errors":0,"warnings":0,"fixable":0},"files":{"\/src\/repo\/includes\/Diff\/ZObjectContentDifferenceEngine.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectEditingPageTrait.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/defines.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZReference.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZErrorException.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/WikifunctionCallException.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZQuote.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/UIUtils.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/RESTAPI\/WikiLambdaRESTHandler.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectPage.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZMonoLingualString.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Registry\/ZObjectRegistry.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ServiceWiring.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZKeyReference.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZTypedPair.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/maintenance\/migrateZ16K1StringsToZ61s.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/WikiLambda.alias.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Pagers\/FunctionsByTestsPager.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Diff\/ZObjectMapDiffer.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Jobs\/CacheTesterResultsJob.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Jobs\/WikifunctionsClientFanOutQueueJob.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Authorization\/AuthorizationStatus.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Fields\/HTMLZTypeSelectField.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectHistoryAction.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Diff\/ZObjectSlotDiffRenderer.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Authorization\/ZObjectFilterIsAttached.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZMultiLingualString.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Pagers\/AbstractZObjectPager.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Diff\/ZObjectListDiffer.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Authorization\/ZObjectFilterIsConnectedConverter.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/PublicAPI\/PublicApiRun.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/WikifunctionsClientStore.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/HttpStatus.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ParserFunction\/WikifunctionsPendingFragment.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/maintenance\/updateSecondaryTables.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZError.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Special\/SpecialCreateObject.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZString.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Authorization\/ZObjectFilterIsEnumValue.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Authorization\/ZObjectFilterInRange.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Diff\/DiffMatrix.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZTypedList.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Fields\/HTMLZLanguageSelectField.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Authorization\/ZObjectFilter.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Authorization\/ZObjectFilterTypeChanged.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZTypedError.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Pagers\/BasicZObjectPager.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZFunction.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZObject.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Special\/SpecialRunFunction.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/WikiLambdaServices.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZKey.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/Diff\/ZObjectDifferTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Special\/SpecialListMissingLabels.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Diff\/ZObjectDiffer.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Special\/SpecialListObjectsByType.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/MockOrchestratorRequest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZNaturalLanguage.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/PublicAPI\/PublicApiRunTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZHTMLFragment.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/StringForLanguageBuilder.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectEditAction.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZTypedMap.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZFunctionCall.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Jobs\/WikifunctionsRecentChangesInsertJob.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/unit\/ZObjects\/ZPersistentObjectTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZResponseEnvelope.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/ApiZObjectFetcher.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZKeyReferenceTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Special\/SpecialListDuplicateObjectNames.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/HookHandler\/HooksTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/OrchestratorRequest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Registry\/ZLangRegistry.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/HookHandler\/ClientHooksTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZReferenceTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/Registry\/ZErrorTypeRegistryTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectSecondaryDataUpdate.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/WikiLambda.i18n.magic.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ParserFunction\/WikifunctionsPFragmentSanitiserTokenHandler.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZType.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/HookHandler\/RepoHooks.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/WikiLambdaSchemaTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZQuoteTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Jobs\/WikifunctionsClientUsageUpdateJob.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/ApiFunctionCall.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Jobs\/WikifunctionsClientRequestJob.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/HooksInsertMock.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ParserFunction\/ParsoidWrappingParserOutputProvider.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZNaturalLanguageTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZErrorTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/.phan\/config.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/ZTestType.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Authorization\/ZObjectAuthorization.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectSecondaryDataRemoval.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/ApiQueryZFunctionReference.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/HooksDataPathMock.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZFunctionTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/ApiQueryZFunctionReferenceTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Special\/SpecialViewObject.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/unit\/ZObjects\/ZObjectTypesTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Authorization\/ZObjectFilterIsRunnable.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/ApiQueryZObjects.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/ApiSupportedProgrammingLanguagesTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/Jobs\/UpdateImplementationsJobTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/HookHandler\/ClientChangeHooks.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/ApiWikifunctionsHTMLSanitiser.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/HookHandler\/PageEditingHandler.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZMultiLingualStringSet.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Jobs\/UpdateImplementationsJob.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZMonoLingualStringSet.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ParserFunction\/WikifunctionsCallDefaultValues.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/ApiSupportedProgrammingLanguages.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZPersistentObject.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Special\/SpecialListFunctionsByTests.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Special\/DuplicateObjectLabelsPager.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ParserFunction\/WikifunctionsPFragmentHandler.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZStringTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectContent.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZMultiLingualStringSetTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/GenericZObjectsTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ParserFunction\/WikifunctionsPFragment.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/Registry\/ZLangRegistryTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/WikiLambdaApiQueryGeneratorBase.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/UIUtilsTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/Jobs\/WikifunctionsClientRequestJobTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/ApiZObjectEditor.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/HookHandler\/ClientHooks.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Registry\/ZTypeRegistry.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/Registry\/ZTypeRegistryTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/WikiLambdaClientIntegrationTestCase.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/MockSiteMatrix.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/ApiZObjectEditorTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZTypedPairTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectContentHandler.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZMultiLingualStringTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/ApiFunctionCallTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZTypedErrorTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjectContentTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/ApiQueryFunctions.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/maintenance\/loadPreDefinedObject.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/OrchestratorRequestTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/Special\/SpecialListFunctionsByTestsTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZKeyTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjectContentHandlerTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZBooleanTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZTypeTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/OptionalKeysTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZMonoLingualStringSetTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/RESTAPI\/FunctionCallHandler.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/Registry\/ZErrorTypeRegistry.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZTypedListTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/HookHandler\/PageRenderingHandlerTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/ApiPerformTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectFactory.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZMonoLingualStringTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZResponseEnvelopeTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/maintenance\/loadJsonDump.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/Authorization\/ZObjectAuthorizationTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/ApiPerformTestTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/ApiQueryZObjectLabels.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/ApiQueryZObjectLabelsTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/RESTAPI\/FetchHandler.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/HookHandler\/PageRenderingHandler.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/ApiZObjectFetcherTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ActionAPI\/WikiLambdaApiBase.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectUtils.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/RESTAPI\/FunctionCallHandlerTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/ApiWikifunctionsHTMLSanitiserTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZTypedMapTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZObjectTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/RESTAPI\/FetchHandlerTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/Authorization\/ZObjectAuthorizationInCreationTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjects\/ZFunctionCallTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/HookHandler\/StandaloneHooksTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZErrorFactory.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjectUtilsTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/ApiQueryFunctionsTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/HookHandler\/PageEditingHandlerTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/HookHandler\/ClientChangeHooksTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/WikiLambdaIntegrationTestCase.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ParserFunction\/WikifunctionsPFragmentHandlerTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjectFactoryTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjectStore.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ZObjectStoreTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/includes\/ZObjects\/ZBoolean.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/WikiLambdaApiTestCase.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/integration\/ActionAPI\/ApiQueryZObjectsTest.php":{"errors":0,"warnings":0,"messages":[]}}}
--- end ---
$ /usr/bin/composer install
--- stderr ---
Installing dependencies from lock file (including require-dev)
Verifying lock file contents can be installed on current platform.
Nothing to install, update or remove
Generating autoload files
17 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---
--- end ---
$ /usr/bin/composer test
--- stderr ---
> parallel-lint . --exclude vendor --exclude node_modules
> phpcs -sp --cache
> minus-x check .
--- stdout ---
PHP 8.4.11 | 10 parallel jobs
............................................................ 60/187 ( 32%)
............................................................ 120/187 ( 64%)
............................................................ 180/187 ( 96%)
....... 187/187 (100%)
Checked 187 files in 0.6 seconds
No syntax error found
............................................................ 60 / 63 (95%)
... 63 / 63 (100%)
Time: 3.67 secs; Memory: 16MB
MinusX
======
Processing /src/repo...
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................
All good!
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"@wdio/mocha-framework": {
"name": "@wdio/mocha-framework",
"severity": "low",
"isDirect": true,
"via": [
"mocha"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/@wdio/mocha-framework"
],
"fixAvailable": false
},
"diff": {
"name": "diff",
"severity": "low",
"isDirect": false,
"via": [
{
"source": 1112148,
"name": "diff",
"dependency": "diff",
"title": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
"url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx",
"severity": "low",
"cwe": [
"CWE-400",
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<8.0.3"
}
],
"effects": [
"mocha"
],
"range": "<8.0.3",
"nodes": [
"node_modules/diff",
"node_modules/mocha/node_modules/diff"
],
"fixAvailable": false
},
"mocha": {
"name": "mocha",
"severity": "low",
"isDirect": false,
"via": [
"diff"
],
"effects": [
"@wdio/mocha-framework"
],
"range": "0.14.0 - 12.0.0-beta-3",
"nodes": [
"node_modules/mocha"
],
"fixAvailable": false
},
"undici": {
"name": "undici",
"severity": "low",
"isDirect": false,
"via": [
{
"source": 1112153,
"name": "undici",
"dependency": "undici",
"title": "Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",
"url": "https://github.com/advisories/GHSA-g9mf-h72j-4rw9",
"severity": "low",
"cwe": [
"CWE-770"
],
"cvss": {
"score": 3.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
"range": "<6.23.0"
},
{
"source": 1112154,
"name": "undici",
"dependency": "undici",
"title": "Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",
"url": "https://github.com/advisories/GHSA-g9mf-h72j-4rw9",
"severity": "low",
"cwe": [
"CWE-770"
],
"cvss": {
"score": 3.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
"range": ">=7.0.0 <7.18.2"
}
],
"effects": [],
"range": "<6.23.0 || >=7.0.0 <7.18.2",
"nodes": [
"node_modules/cheerio/node_modules/undici",
"node_modules/undici"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 4,
"moderate": 0,
"high": 0,
"critical": 0,
"total": 4
},
"dependencies": {
"prod": 1,
"dev": 1441,
"optional": 38,
"peer": 1,
"peerOptional": 0,
"total": 1441
}
}
}
--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex@2.3.3',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex-icons@2.3.3',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
--- stdout ---
{
"added": 1441,
"removed": 0,
"changed": 0,
"audited": 1442,
"funding": 259,
"audit": {
"auditReportVersion": 2,
"vulnerabilities": {
"@wdio/mocha-framework": {
"name": "@wdio/mocha-framework",
"severity": "low",
"isDirect": true,
"via": [
"mocha"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/@wdio/mocha-framework"
],
"fixAvailable": false
},
"diff": {
"name": "diff",
"severity": "low",
"isDirect": false,
"via": [
{
"source": 1112148,
"name": "diff",
"dependency": "diff",
"title": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
"url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx",
"severity": "low",
"cwe": [
"CWE-400",
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<8.0.3"
}
],
"effects": [
"mocha"
],
"range": "<8.0.3",
"nodes": [
"",
"node_modules/mocha/node_modules/diff"
],
"fixAvailable": false
},
"mocha": {
"name": "mocha",
"severity": "low",
"isDirect": false,
"via": [
"diff"
],
"effects": [
"@wdio/mocha-framework"
],
"range": "0.14.0 - 12.0.0-beta-3",
"nodes": [
"node_modules/mocha"
],
"fixAvailable": false
},
"undici": {
"name": "undici",
"severity": "low",
"isDirect": false,
"via": [
{
"source": 1112153,
"name": "undici",
"dependency": "undici",
"title": "Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",
"url": "https://github.com/advisories/GHSA-g9mf-h72j-4rw9",
"severity": "low",
"cwe": [
"CWE-770"
],
"cvss": {
"score": 3.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
"range": "<6.23.0"
},
{
"source": 1112154,
"name": "undici",
"dependency": "undici",
"title": "Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",
"url": "https://github.com/advisories/GHSA-g9mf-h72j-4rw9",
"severity": "low",
"cwe": [
"CWE-770"
],
"cvss": {
"score": 3.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
"range": ">=7.0.0 <7.18.2"
}
],
"effects": [],
"range": "<6.23.0 || >=7.0.0 <7.18.2",
"nodes": [
"",
""
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 4,
"moderate": 0,
"high": 0,
"critical": 0,
"total": 4
},
"dependencies": {
"prod": 1,
"dev": 1441,
"optional": 38,
"peer": 1,
"peerOptional": 0,
"total": 1441
}
}
}
}
--- end ---
{"added": 1441, "removed": 0, "changed": 0, "audited": 1442, "funding": 259, "audit": {"auditReportVersion": 2, "vulnerabilities": {"@wdio/mocha-framework": {"name": "@wdio/mocha-framework", "severity": "low", "isDirect": true, "via": ["mocha"], "effects": [], "range": "*", "nodes": ["node_modules/@wdio/mocha-framework"], "fixAvailable": false}, "diff": {"name": "diff", "severity": "low", "isDirect": false, "via": [{"source": 1112148, "name": "diff", "dependency": "diff", "title": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch", "url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx", "severity": "low", "cwe": ["CWE-400", "CWE-1333"], "cvss": {"score": 0, "vectorString": null}, "range": "<8.0.3"}], "effects": ["mocha"], "range": "<8.0.3", "nodes": ["", "node_modules/mocha/node_modules/diff"], "fixAvailable": false}, "mocha": {"name": "mocha", "severity": "low", "isDirect": false, "via": ["diff"], "effects": ["@wdio/mocha-framework"], "range": "0.14.0 - 12.0.0-beta-3", "nodes": ["node_modules/mocha"], "fixAvailable": false}, "undici": {"name": "undici", "severity": "low", "isDirect": false, "via": [{"source": 1112153, "name": "undici", "dependency": "undici", "title": "Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion", "url": "https://github.com/advisories/GHSA-g9mf-h72j-4rw9", "severity": "low", "cwe": ["CWE-770"], "cvss": {"score": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": "<6.23.0"}, {"source": 1112154, "name": "undici", "dependency": "undici", "title": "Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion", "url": "https://github.com/advisories/GHSA-g9mf-h72j-4rw9", "severity": "low", "cwe": ["CWE-770"], "cvss": {"score": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=7.0.0 <7.18.2"}], "effects": [], "range": "<6.23.0 || >=7.0.0 <7.18.2", "nodes": ["", ""], "fixAvailable": true}}, "metadata": {"vulnerabilities": {"info": 0, "low": 4, "moderate": 0, "high": 0, "critical": 0, "total": 4}, "dependencies": {"prod": 1, "dev": 1441, "optional": 38, "peer": 1, "peerOptional": 0, "total": 1441}}}}
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex@2.3.3',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex-icons@2.3.3',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN deprecated osenv@0.1.5: This package is no longer supported.
npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm WARN deprecated abab@2.0.6: Use your platform's native atob() and btoa() methods instead
npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@8.1.0: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@7.1.7: Glob versions prior to v9 are no longer supported
npm WARN deprecated domexception@4.0.0: Use your platform's native DOMException instead
npm WARN deprecated node-domexception@1.0.0: Use your platform's native DOMException instead
npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
--- stdout ---
added 1415 packages, and audited 1416 packages in 24s
259 packages are looking for funding
run `npm fund` for details
# npm audit report
diff <8.0.3
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch - https://github.com/advisories/GHSA-73rr-hh4g-fpgx
No fix available
node_modules/mocha/node_modules/diff
mocha 0.14.0 - 12.0.0-beta-3
Depends on vulnerable versions of diff
node_modules/mocha
@wdio/mocha-framework *
Depends on vulnerable versions of mocha
node_modules/@wdio/mocha-framework
3 low severity vulnerabilities
Some issues need review, and may require choosing
a different dependency.
--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stderr ---
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex@2.3.3',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex-icons@2.3.3',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN deprecated osenv@0.1.5: This package is no longer supported.
npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm WARN deprecated abab@2.0.6: Use your platform's native atob() and btoa() methods instead
npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@8.1.0: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated glob@7.1.7: Glob versions prior to v9 are no longer supported
npm WARN deprecated domexception@4.0.0: Use your platform's native DOMException instead
npm WARN deprecated node-domexception@1.0.0: Use your platform's native DOMException instead
npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
--- stdout ---
added 1415 packages, and audited 1416 packages in 40s
259 packages are looking for funding
run `npm fund` for details
3 low severity vulnerabilities
Some issues need review, and may require choosing
a different dependency.
Run `npm audit` for details.
--- end ---
$ /usr/bin/npm test
--- stderr ---
PASS tests/jest/utils/zobjectUtils.test.js
PASS tests/jest/store/stores/submission.test.js
PASS tests/jest/store/stores/zobject.test.js
PASS tests/jest/store/stores/library.test.js
PASS tests/jest/store/stores/factory.test.js
PASS tests/jest/components/widgets/about/About.test.js (5.176 s)
PASS tests/jest/components/default/ZObjectKeyValue.test.js (6.609 s)
PASS tests/jest/components/widgets/about/AboutLanguageBlock.test.js
PASS tests/jest/components/visualeditor/FunctionInputPreview.test.js
PASS tests/jest/store/stores/wikidata/lexemes.test.js
PASS tests/jest/store/stores/router.test.js
PASS tests/jest/components/base/ModeSelector.test.js
PASS tests/jest/components/default/ZObjectStringRenderer.test.js
PASS tests/jest/utils/typeUtils.test.js
PASS tests/jest/components/default/ZObjectToString.test.js (11.39 s)
PASS tests/jest/store/stores/zfunction.test.js
PASS tests/jest/components/widgets/function-evaluator/FunctionMetadataDialog.test.js
PASS tests/jest/components/widgets/function-evaluator/FunctionEvaluator.test.js (5.285 s)
PASS tests/jest/components/default/ZMultilingualString.test.js
PASS tests/jest/store/stores/wikidata/entities.test.js
PASS tests/jest/store/stores/testResults.test.js
PASS tests/jest/components/default/ZMultilingualStringDialog.test.js
PASS tests/jest/store/stores/ztype.test.js
PASS tests/jest/components/widgets/function-explorer/FunctionExplorer.test.js
PASS tests/jest/components/base/ZObjectSelector.test.js (6.123 s)
PASS tests/jest/components/visualeditor/FunctionInputField.test.js
PASS tests/jest/components/function/viewer/FunctionViewerDetails.test.js
PASS tests/jest/components/base/CodeEditor.test.js
PASS tests/jest/utils/scrollUtils.test.js
PASS tests/jest/components/default/wikidata/EntitySelector.test.js
PASS tests/jest/components/widgets/publish/PublishDialog.test.js
PASS tests/jest/components/default/wikidata/LexemeSense.test.js
PASS tests/jest/components/widgets/about/AboutLanguagesDialog.test.js
PASS tests/jest/components/visualeditor/fields/FunctionInputParser.test.js
PASS tests/jest/integration/CreateNewWikidataEnum.test.js (16.229 s)
PASS tests/jest/store/stores/wikidata/properties.test.js
PASS tests/jest/store/stores/errors.test.js
PASS tests/jest/languageselector/LanguageSelector.test.js
PASS tests/jest/store/classes/ApiError.test.js
PASS tests/jest/components/visualeditor/FunctionInputSetup.test.js
PASS tests/jest/components/default/ZTester.test.js
PASS tests/jest/components/default/ZCode.test.js
PASS tests/jest/store/stores/wikidata/items.test.js
PASS tests/jest/components/function/editor/FunctionEditor.test.js
PASS tests/jest/components/widgets/function-report/FunctionReport.test.js
PASS tests/jest/components/visualeditor/fields/FunctionInputWikidata.test.js
PASS tests/jest/components/default/ZImplementation.test.js
PASS tests/jest/components/widgets/publish/Publish.test.js
PASS tests/jest/components/visualeditor/fields/FunctionInputLanguage.test.js
PASS tests/jest/integration/DisconnectFunctionImplementation.test.js (5.877 s)
PASS tests/jest/integration/CreateNewCompositionImplementation.test.js (11.597 s)
PASS tests/jest/components/widgets/function-evaluator/EvaluationResult.test.js
PASS tests/jest/integration/CreateNewTester.test.js (14.656 s)
PASS tests/jest/components/visualeditor/fields/FunctionInputEnum.test.js
PASS tests/jest/store/stores/currentPage.test.js
PASS tests/jest/utils/schemata.test.js
PASS tests/jest/components/base/TypeSelector.test.js
PASS tests/jest/composables/useScroll.test.js
PASS tests/jest/utils/urlUtils.test.js
PASS tests/jest/components/default/ZMonolingualString.test.js
PASS tests/jest/integration/CreateNewFunction.test.js (7.268 s)
PASS tests/jest/integration/EditFunction.test.js (5.732 s)
PASS tests/jest/components/default/wikidata/LexemeForm.test.js
PASS tests/jest/integration/CreateNewCodeImplementation.test.js (16.548 s)
PASS tests/jest/components/default/ZArgumentReference.test.js
PASS tests/jest/integration/FunctionEditorEdgeCases.test.js (7.399 s)
PASS tests/jest/components/visualeditor/ExpandableDescription.test.js
PASS tests/jest/components/default/wikidata/Property.test.js
PASS tests/jest/components/default/wikidata/Lexeme.test.js
PASS tests/jest/store/stores/visualeditor.test.js
PASS tests/jest/components/default/wikidata/Item.test.js
PASS tests/jest/components/function/editor/FunctionEditorLanguage.test.js
PASS tests/jest/components/default/ZReference.test.js
PASS tests/jest/composables/useClipboardManager.test.js
PASS tests/jest/components/function/editor/FunctionEditorInputsItem.test.js
PASS tests/jest/components/function/editor/FunctionEditorName.test.js
PASS tests/jest/integration/RunFunctionCall.test.js (5.533 s)
PASS tests/jest/composables/useZObject.test.js
PASS tests/jest/store/stores/queue.test.js
PASS tests/jest/composables/useShareUrl.test.js
PASS tests/jest/utils/miscUtils.test.js
PASS tests/jest/components/function/editor/FunctionEditorDescription.test.js
PASS tests/jest/composables/usePageTitle.test.js
PASS tests/jest/integration/FunctionEditorGenericTypes.test.js (7.319 s)
PASS tests/jest/utils/wikidataUtils.test.js
PASS tests/jest/components/default/ZTypedList.test.js
PASS tests/jest/composables/useError.test.js
PASS tests/jest/components/function/editor/FunctionEditorLanguageBlock.test.js
PASS tests/jest/components/visualeditor/FunctionSelect.test.js
PASS tests/jest/utils/metadataUtils.test.js
PASS tests/jest/components/default/wikidata/ReferenceSelector.test.js
PASS tests/jest/components/default/ZTypedListItems.test.js
PASS tests/jest/components/function/editor/FunctionEditorAliases.test.js
PASS tests/jest/composables/useBreakpoints.test.js
PASS tests/jest/store/stores/listItems.test.js
PASS tests/jest/composables/useClipboard.test.js
PASS tests/jest/components/function/editor/FunctionEditorInputs.test.js
PASS tests/jest/store/stores/user.test.js
PASS tests/jest/components/default/wikidata/Enum.test.js
PASS tests/jest/components/function/viewer/FunctionViewerDetailsTable.test.js
PASS tests/jest/utils/errorUtils.test.js
PASS tests/jest/components/visualeditor/FunctionCallSetup.test.js
PASS tests/jest/components/App.test.js
PASS tests/jest/components/widgets/function-report/FunctionReportItem.test.js
PASS tests/jest/integration/ConnectFunctionImplementation.test.js
PASS tests/jest/utils/eventLogUtils.test.js
PASS tests/jest/store/classes/ErrorData.test.js
PASS tests/jest/integration/ConnectFunctionTest.test.js
PASS tests/jest/integration/DisconnectFunctionTest.test.js
PASS tests/jest/integration/CancelEditExistingFunction.test.js (7.177 s)
PASS tests/jest/components/base/ExpandedToggle.test.js
PASS tests/jest/utils/sortUtils.test.js
PASS tests/jest/store/stores/languages.test.js
PASS tests/jest/components/function/editor/FunctionEditorOutput.test.js
PASS tests/jest/components/visualeditor/FunctionInputDefaultValueCheckbox.test.js
PASS tests/jest/store/stores/functionCall.test.js
PASS tests/jest/views/FunctionViewer.test.js
PASS tests/jest/components/visualeditor/fields/FunctionInputString.test.js
PASS tests/jest/components/default/ZBoolean.test.js
PASS tests/jest/components/default/wikidata/Statement.test.js
PASS tests/jest/components/base/LocalizedLabel.test.js
PASS tests/jest/components/default/ZHTMLFragment.test.js
PASS tests/jest/components/default/ZString.test.js
PASS tests/jest/components/default/ZTypedListType.test.js
PASS tests/jest/integration/CancelEditNewFunction.test.js (5.857 s)
PASS tests/jest/components/base/SafeMessage.test.js
PASS tests/jest/store/stores/programmingLanguages.test.js
PASS tests/jest/composables/useType.test.js
PASS tests/jest/composables/useEventLog.test.js
PASS tests/jest/components/default/ZFunctionCall.test.js
PASS tests/jest/components/widgets/publish/LeaveEditorDialog.test.js
PASS tests/jest/store/index.test.js
Test Suites: 132 passed, 132 total
Tests: 2134 passed, 2134 total
Snapshots: 0 total
Time: 159.603 s
Ran all test suites.
--- stdout ---
> test
> grunt test && npm run test:unit
Running "eslint:all" (eslint) task
/src/repo/docker-compose.sample.yml
3:1 warning This line has a length of 103. Maximum allowed is 100 max-len
4:1 warning This line has a length of 107. Maximum allowed is 100 max-len
49:1 warning This line has a length of 117. Maximum allowed is 100 max-len
50:1 warning This line has a length of 104. Maximum allowed is 100 max-len
51:1 warning This line has a length of 106. Maximum allowed is 100 max-len
58:1 warning This line has a length of 120. Maximum allowed is 100 max-len
59:1 warning This line has a length of 104. Maximum allowed is 100 max-len
60:1 warning This line has a length of 109. Maximum allowed is 100 max-len
✖ 8 problems (0 errors, 8 warnings)
Running "banana:WikiLambda" (banana) task
>> 3 message directories checked.
Running "stylelint:all" (stylelint) task
>> Linted 308 files without errors
Done.
> test:unit
> jest
----------------------------------------------------------|---------|----------|---------|---------|---------------------------------------------------------------------------------------------------------
File | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s
----------------------------------------------------------|---------|----------|---------|---------|---------------------------------------------------------------------------------------------------------
All files | 98.08 | 92.98 | 96.36 | 98.08 |
ext.wikilambda.app/components | 93.89 | 100 | 100 | 93.89 |
App.vue | 93.89 | 100 | 100 | 93.89 | 76,80,100,110-114
ext.wikilambda.app/components/base | 97.82 | 92.76 | 88.09 | 97.82 |
CodeEditor.vue | 97.55 | 94.44 | 100 | 97.55 | 180-187
CustomDialogHeader.vue | 100 | 100 | 100 | 100 |
ExpandedToggle.vue | 100 | 100 | 100 | 100 |
KeyBlock.vue | 100 | 100 | 100 | 100 |
KeyValueBlock.vue | 99.09 | 100 | 50 | 99.09 | 145-146
LocalizedLabel.vue | 100 | 100 | 100 | 100 |
ModeSelector.vue | 99.76 | 96.42 | 100 | 99.76 | 168
SafeMessage.vue | 100 | 100 | 100 | 100 |
StatusIcon.vue | 100 | 100 | 100 | 100 |
TypeSelector.vue | 94.46 | 78.57 | 66.66 | 94.46 | 160-165,177-179,183-186
WidgetBase.vue | 100 | 100 | 100 | 100 |
ZObjectSelector.vue | 95.75 | 89.89 | 83.33 | 95.75 | 166-167,230-231,403-405,480-481,516-523,563-565,588-590,606-609,631-633,679-680
ext.wikilambda.app/components/function/editor | 99.45 | 90.07 | 100 | 99.45 |
FunctionEditor.vue | 98.62 | 83.33 | 100 | 98.62 | 159,163-165
FunctionEditorAliases.vue | 100 | 100 | 100 | 100 |
FunctionEditorDescription.vue | 98.78 | 92.85 | 100 | 98.78 | 114-115
FunctionEditorField.vue | 100 | 100 | 100 | 100 |
FunctionEditorInputs.vue | 100 | 100 | 100 | 100 |
FunctionEditorInputsItem.vue | 100 | 77.77 | 100 | 100 | 201,210
FunctionEditorLanguage.vue | 98.58 | 88.88 | 100 | 98.58 | 100-101
FunctionEditorLanguageBlock.vue | 100 | 100 | 100 | 100 |
FunctionEditorName.vue | 98.85 | 92.85 | 100 | 98.85 | 120-121
FunctionEditorOutput.vue | 100 | 100 | 100 | 100 |
ext.wikilambda.app/components/function/viewer | 99.02 | 95.31 | 96 | 99.02 |
FunctionTesterTable.vue | 97.14 | 82.6 | 50 | 97.14 | 92-93,110,168,175-176
FunctionViewerDetails.vue | 99.27 | 97.97 | 100 | 99.27 | 229-230,321,340,553
FunctionViewerDetailsTable.vue | 100 | 100 | 100 | 100 |
ext.wikilambda.app/components/types | 97.79 | 89.37 | 96.87 | 97.79 |
ZArgumentReference.vue | 100 | 91.66 | 100 | 100 | 138
ZBoolean.vue | 100 | 100 | 100 | 100 |
ZCode.vue | 96.17 | 92.45 | 100 | 96.17 | 242-255,349,413-415
ZFunctionCall.vue | 100 | 100 | 100 | 100 |
ZHTMLFragment.vue | 100 | 80 | 100 | 100 | 109
ZImplementation.vue | 100 | 100 | 100 | 100 |
ZMonolingualString.vue | 100 | 100 | 100 | 100 |
ZMultilingualString.vue | 99 | 89.47 | 100 | 99 | 204-205,291,293-294
ZMultilingualStringDialog.vue | 97.07 | 83.05 | 90 | 97.07 | 202-203,212-214,216-217,219-221,227-228,327-328,439-440
ZObjectKeyValue.vue | 95.73 | 88.4 | 100 | 95.73 | 237-243,247-248,294-295,368-374,575-576,578-579,581-582,584-585,607-609,632-633,638-641,671-672,759-760
ZObjectKeyValueSet.vue | 100 | 66.66 | 100 | 100 | 72-80
ZObjectStringRenderer.vue | 95.68 | 94.23 | 83.33 | 95.68 | 258-259,314-317,347-348,404-409,461-462,509-510,536,546-552
ZObjectToString.vue | 97.01 | 87.73 | 100 | 97.01 | 252-253,256-257,349,476-478,498-500,520-522,526-527,532-533,616-618
ZReference.vue | 98.19 | 80.76 | 100 | 98.19 | 178,180-182
ZString.vue | 100 | 100 | 100 | 100 |
ZTester.vue | 99.28 | 95.83 | 100 | 99.28 | 176-177
ZTypedList.vue | 100 | 87.5 | 100 | 100 | 98
ZTypedListItems.vue | 100 | 100 | 100 | 100 |
ZTypedListType.vue | 100 | 100 | 100 | 100 |
ext.wikilambda.app/components/types/wikidata | 98.15 | 87.5 | 97.14 | 98.15 |
EntitySelector.vue | 96.13 | 84.21 | 92.3 | 96.13 | 91-92,159-160,174-175,258-261,291-293
Enum.vue | 97.88 | 81.81 | 100 | 97.88 | 191-195
Item.vue | 100 | 93.33 | 100 | 100 | 172
Lexeme.vue | 100 | 93.33 | 100 | 100 | 172
LexemeForm.vue | 98.3 | 84.61 | 100 | 98.3 | 172-175
LexemeSense.vue | 95.59 | 86.84 | 100 | 95.59 | 247-252,279-280,290-292,317-321,326-327
Property.vue | 99.56 | 84.61 | 100 | 99.56 | 172
ReferenceSelector.vue | 100 | 93.33 | 100 | 100 | 102
Statement.vue | 100 | 100 | 100 | 100 |
wikidataIconSvg.js | 100 | 100 | 100 | 100 |
ext.wikilambda.app/components/visualeditor | 98.63 | 96.51 | 90.56 | 98.63 |
ExpandableDescription.vue | 99.37 | 100 | 100 | 99.37 | 96
FunctionCallSetup.vue | 96.77 | 100 | 60 | 96.77 | 92-93,99-100
FunctionInputDefaultValueCheckbox.vue | 100 | 100 | 100 | 100 |
FunctionInputField.vue | 100 | 100 | 100 | 100 |
FunctionInputPreview.vue | 97.88 | 95.08 | 86.36 | 97.88 | 113-114,325-326,375-376,429-432
FunctionInputSetup.vue | 99 | 97.29 | 100 | 99 | 177-178,298-299
FunctionSelect.vue | 97.5 | 89.47 | 100 | 97.5 | 189-190,200-201,216-218
FunctionSelectItem.vue | 100 | 100 | 100 | 100 |
wikifunctionsIconSvg.js | 100 | 100 | 100 | 100 |
ext.wikilambda.app/components/visualeditor/fields | 96.66 | 91.41 | 94.28 | 96.66 |
FunctionInputEnum.vue | 98.26 | 97.29 | 88.88 | 98.26 | 170-171,198-199
FunctionInputLanguage.vue | 97.32 | 87.5 | 100 | 97.32 | 141-142,162-163,172-173
FunctionInputParser.vue | 93.31 | 92 | 90.9 | 93.31 | 207-219,230-231,270-271,367-373,383-386
FunctionInputString.vue | 100 | 100 | 100 | 100 |
FunctionInputWikidata.vue | 98.65 | 86.84 | 100 | 98.65 | 210-211,220-221
ext.wikilambda.app/components/widgets/about | 98.17 | 93.54 | 92.85 | 98.17 |
About.vue | 98.55 | 97.53 | 94.11 | 98.55 | 266-267,529-533,553-554
AboutLanguageBlock.vue | 99.68 | 97.77 | 100 | 99.68 | 324-325
AboutLanguagesDialog.vue | 95.37 | 75.86 | 87.5 | 95.37 | 246-249,260-262,278-279,311-312,314-315,317-318,320-321,327-329
ext.wikilambda.app/components/widgets/function-evaluator | 96.63 | 85.42 | 95.55 | 96.63 |
EvaluationResult.vue | 99.2 | 78.26 | 100 | 99.2 | 217-218
FunctionEvaluator.vue | 94.95 | 92.3 | 90 | 94.95 | 353-377,399-401,507
FunctionMetadataDialog.vue | 97.25 | 84.03 | 96.66 | 97.25 | 202-203,209-210,235-236,256,440-441,534-535,607-608,642-646,660-661,684-685,718-719,772-773,965-967
FunctionMetadataItem.vue | 100 | 100 | 100 | 100 |
FunctionMetadataTestResult.vue | 93.47 | 75 | 100 | 93.47 | 112,121-131
ext.wikilambda.app/components/widgets/function-explorer | 99.06 | 90.9 | 100 | 99.06 |
FunctionExplorer.vue | 99.06 | 90.9 | 100 | 99.06 | 272-273,345-346
ext.wikilambda.app/components/widgets/function-report | 96.56 | 94.31 | 62.5 | 96.56 |
FunctionReport.vue | 95.65 | 91.37 | 66.66 | 95.65 | 212-214,236-239,245-248,291-297
FunctionReportItem.vue | 98.03 | 100 | 50 | 98.03 | 186-190
ext.wikilambda.app/components/widgets/publish | 97.36 | 85.71 | 95.83 | 97.36 |
LeaveEditorDialog.vue | 100 | 100 | 100 | 100 |
Publish.vue | 93.43 | 85 | 92.85 | 93.43 | 200-209,212,214-219,236-239
PublishDialog.vue | 100 | 84.37 | 100 | 100 | 198,255-257,285
ext.wikilambda.app/composables | 99.76 | 97.05 | 100 | 99.76 |
useBreakpoints.js | 100 | 100 | 100 | 100 |
useClipboard.js | 100 | 100 | 100 | 100 |
useClipboardManager.js | 100 | 100 | 100 | 100 |
useError.js | 100 | 92.3 | 100 | 100 | 62
useEventLog.js | 100 | 100 | 100 | 100 |
usePageTitle.js | 100 | 93.75 | 100 | 100 | 78
useScroll.js | 100 | 100 | 100 | 100 |
useShareUrl.js | 97.36 | 94.44 | 100 | 97.36 | 30-31
useType.js | 100 | 100 | 100 | 100 |
useZObject.js | 100 | 94.44 | 100 | 100 | 94
ext.wikilambda.app/store | 100 | 100 | 100 | 100 |
index.js | 100 | 100 | 100 | 100 |
ext.wikilambda.app/store/classes | 97.79 | 90.9 | 100 | 97.79 |
ApiError.js | 95.73 | 82.85 | 100 | 95.73 | 151-153,159-160,200-203
ErrorData.js | 100 | 100 | 100 | 100 |
LabelData.js | 100 | 100 | 100 | 100 |
ext.wikilambda.app/store/stores | 98.65 | 95.63 | 98.11 | 98.65 |
currentPage.js | 100 | 95.45 | 100 | 100 | 121
errors.js | 100 | 100 | 100 | 100 |
factory.js | 99.17 | 96.12 | 100 | 99.17 | 190-196
functionCall.js | 100 | 100 | 100 | 100 |
languages.js | 92.39 | 76.92 | 100 | 92.39 | 26-29,43-45
library.js | 98.35 | 95.87 | 96.55 | 98.35 | 148-149,417-418,524-525,550-551,562-565,569,693-695,904,1052-1053,1183
listItems.js | 100 | 100 | 100 | 100 |
programmingLanguages.js | 100 | 100 | 100 | 100 |
queue.js | 100 | 100 | 100 | 100 |
router.js | 100 | 97.5 | 100 | 100 | 21
submission.js | 97.64 | 92.92 | 100 | 97.64 | 414-415,546-547,552-553,584-585,653-654,666-667,671-674
testResults.js | 99.1 | 90.16 | 100 | 99.1 | 276-278
user.js | 100 | 100 | 100 | 100 |
visualeditor.js | 94.42 | 96.77 | 88.88 | 94.42 | 106-107,160-164,167-168,192-195,209-213
zfunction.js | 100 | 100 | 100 | 100 |
zobject.js | 98.68 | 94.53 | 97.87 | 98.68 | 151-152,164-165,208-209,405-406,647-648,688-689,825-826,1198-1199
ztype.js | 99.54 | 100 | 100 | 99.54 | 379-380
ext.wikilambda.app/store/stores/wikidata | 96.06 | 94.61 | 97.14 | 96.06 |
entities.js | 93.29 | 91.66 | 100 | 93.29 | 47,98,143-155,273-278
items.js | 100 | 97.29 | 100 | 100 | 95
lexemes.js | 95.13 | 96.15 | 93.93 | 95.13 | 105-118,375,459-461,471-474,485-486
properties.js | 100 | 94.28 | 100 | 100 | 89,92
ext.wikilambda.app/utils | 98.55 | 95.97 | 99.11 | 98.55 |
apiUtils.js | 98.64 | 82.69 | 100 | 98.64 | 262-264,328-329
errorUtils.js | 98.13 | 90.47 | 100 | 98.13 | 90-91
eventLogUtils.js | 100 | 100 | 100 | 100 |
helpUtils.js | 100 | 100 | 100 | 100 |
metadataUtils.js | 100 | 100 | 100 | 100 |
miscUtils.js | 100 | 100 | 100 | 100 |
schemata.js | 97.11 | 91.01 | 88.88 | 97.11 | 123,174-179
scrollUtils.js | 100 | 100 | 100 | 100 |
sortUtils.js | 100 | 100 | 100 | 100 |
typeUtils.js | 96.99 | 98.68 | 100 | 96.99 | 508-529
urlUtils.js | 100 | 100 | 100 | 100 |
wikidataUtils.js | 100 | 100 | 100 | 100 |
zobjectUtils.js | 99.15 | 98.68 | 100 | 99.15 | 422-423,701-705
ext.wikilambda.app/views | 97.68 | 74.07 | 71.42 | 97.68 |
Default.vue | 98.06 | 72.22 | 66.66 | 98.06 | 200,215-218
FunctionEditor.vue | 100 | 100 | 100 | 100 |
FunctionEvaluator.vue | 100 | 100 | 100 | 100 |
FunctionViewer.vue | 95.33 | 60 | 50 | 95.33 | 105-111
ext.wikilambda.languageselector/components | 98.03 | 93.33 | 94.11 | 98.03 |
LanguageSelector.vue | 98.03 | 93.33 | 94.11 | 98.03 | 226-227,265-266,287-288
----------------------------------------------------------|---------|----------|---------|---------|---------------------------------------------------------------------------------------------------------
--- end ---
{"1112153": {"source": 1112153, "name": "undici", "dependency": "undici", "title": "Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion", "url": "https://github.com/advisories/GHSA-g9mf-h72j-4rw9", "severity": "low", "cwe": ["CWE-770"], "cvss": {"score": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": "<6.23.0"}, "1112154": {"source": 1112154, "name": "undici", "dependency": "undici", "title": "Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion", "url": "https://github.com/advisories/GHSA-g9mf-h72j-4rw9", "severity": "low", "cwe": ["CWE-770"], "cvss": {"score": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=7.0.0 <7.18.2"}}
Upgrading n:undici from 6.22.0, 7.16.0 -> 6.23.0, 7.18.2
Traceback (most recent call last):
File "/venv/lib/python3.13/site-packages/runner/__init__.py", line 680, in fix_stylelint_config
data = gf.parse_section("stylelint")
File "/venv/lib/python3.13/site-packages/runner/grunt.py", line 135, in parse_section
return self._inner_parse(base.group(1).splitlines()[1:])
~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/venv/lib/python3.13/site-packages/runner/grunt.py", line 189, in _inner_parse
raise RuntimeError("???")
RuntimeError: ???
$ package-lock-lint /src/repo/package-lock.json
--- stdout ---
Checking /src/repo/package-lock.json
--- end ---
build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 48.0.0 → 49.0.0
npm:
* undici: 6.22.0, 7.16.0 → 6.23.0, 7.18.2
* https://github.com/advisories/GHSA-g9mf-h72j-4rw9
$ git add .
--- stdout ---
--- end ---
$ git commit -F /tmp/tmpu7oclq8t
--- stdout ---
[master a230c15] build: Updating dependencies
2 files changed, 10 insertions(+), 13 deletions(-)
--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From a230c15be16330d81c082f3549b778246b78629c Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Thu, 15 Jan 2026 13:33:19 +0000
Subject: [PATCH] build: Updating dependencies
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
composer:
* mediawiki/mediawiki-codesniffer: 48.0.0 → 49.0.0
npm:
* undici: 6.22.0, 7.16.0 → 6.23.0, 7.18.2
* https://github.com/advisories/GHSA-g9mf-h72j-4rw9
Change-Id: I427e427a8b32b3b3b374ed7cb6af6751d041013b
---
composer.json | 2 +-
package-lock.json | 21 +++++++++------------
2 files changed, 10 insertions(+), 13 deletions(-)
diff --git a/composer.json b/composer.json
index 41fab49..1c56866 100644
--- a/composer.json
+++ b/composer.json
@@ -4,7 +4,7 @@
"wikimedia/remex-html": "^5.1.0"
},
"require-dev": {
- "mediawiki/mediawiki-codesniffer": "48.0.0",
+ "mediawiki/mediawiki-codesniffer": "49.0.0",
"mediawiki/mediawiki-phan-config": "0.18.0",
"mediawiki/minus-x": "1.1.3",
"php-parallel-lint/php-console-highlighter": "1.0.0",
diff --git a/package-lock.json b/package-lock.json
index 3c25918..da19c16 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6924,11 +6924,10 @@
}
},
"node_modules/cheerio/node_modules/undici": {
- "version": "7.16.0",
- "resolved": "https://registry.npmjs.org/undici/-/undici-7.16.0.tgz",
- "integrity": "sha512-QEg3HPMll0o3t2ourKwOeUAZ159Kn9mx5pnzHRQO8+Wixmh88YdZRiIwat0iNzNNXn0yoEtXJqFpyW7eM8BV7g==",
+ "version": "7.18.2",
+ "resolved": "https://registry.npmjs.org/undici/-/undici-7.18.2.tgz",
+ "integrity": "sha512-y+8YjDFzWdQlSE9N5nzKMT3g4a5UBX1HKowfdXh0uvAnTaqqwqB92Jt4UXBAeKekDs5IaDKyJFR4X1gYVCgXcw==",
"dev": true,
- "license": "MIT",
"engines": {
"node": ">=20.18.1"
}
@@ -7869,11 +7868,10 @@
}
},
"node_modules/diff": {
- "version": "8.0.2",
- "resolved": "https://registry.npmjs.org/diff/-/diff-8.0.2.tgz",
- "integrity": "sha512-sSuxWU5j5SR9QQji/o2qMvqRNYRDOcBTgsJ/DeCf4iSN4gW+gNMXM7wFIP+fdXZxoNiAnHUTGjCr+TSWXdRDKg==",
+ "version": "8.0.3",
+ "resolved": "https://registry.npmjs.org/diff/-/diff-8.0.3.tgz",
+ "integrity": "sha512-qejHi7bcSD4hQAZE0tNAawRK1ZtafHDmMTMkrrIGgSLl7hTnQHmKCeB45xAcbfTqK2zowkM3j3bHt/4b/ARbYQ==",
"dev": true,
- "license": "BSD-3-Clause",
"engines": {
"node": ">=0.3.1"
}
@@ -18933,11 +18931,10 @@
"license": "BSD-3-Clause"
},
"node_modules/undici": {
- "version": "6.22.0",
- "resolved": "https://registry.npmjs.org/undici/-/undici-6.22.0.tgz",
- "integrity": "sha512-hU/10obOIu62MGYjdskASR3CUAiYaFTtC9Pa6vHyf//mAipSvSQg6od2CnJswq7fvzNS3zJhxoRkgNVaHurWKw==",
+ "version": "6.23.0",
+ "resolved": "https://registry.npmjs.org/undici/-/undici-6.23.0.tgz",
+ "integrity": "sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g==",
"dev": true,
- "license": "MIT",
"engines": {
"node": ">=18.17"
}
--
2.47.3
--- end ---