This run took 164 seconds.
From 4bad98de5f9e9140d805b6ef907fe4d882c7e6a1 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Sat, 4 Apr 2026 10:36:51 +0000
Subject: [PATCH] build: Updating dependencies
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
composer:
* mediawiki/mediawiki-codesniffer: 48.0.0 → 50.0.0
* mediawiki/minus-x: 1.1.3 → 2.0.1
npm:
* svgo: 3.3.2 → 3.3.3
* ajv: 6.12.6, 8.18.0 → 6.14.0, 8.18.0
* https://github.com/advisories/GHSA-2g4f-4pwh-qvx6
* brace-expansion: 1.1.12, 2.0.2 → 1.1.13, 2.0.3
* https://github.com/advisories/GHSA-f886-m6hf-6m8v
* flatted: 3.3.1 → 3.4.2
* https://github.com/advisories/GHSA-25h7-pfq9-p65f
* https://github.com/advisories/GHSA-rf6f-7fwh-wjgh
* handlebars: 4.7.7 → 4.7.9
* https://github.com/advisories/GHSA-2qvq-rjwj-gvw9
* https://github.com/advisories/GHSA-2w6w-674q-4c4q
* https://github.com/advisories/GHSA-3mfm-83xf-c92r
* https://github.com/advisories/GHSA-442j-39wm-28r2
* https://github.com/advisories/GHSA-7rx3-28cr-v5wh
* https://github.com/advisories/GHSA-9cx6-37pm-9jff
* https://github.com/advisories/GHSA-xhpv-hc6g-r9c6
* https://github.com/advisories/GHSA-xjpj-3mr7-gcpf
* picomatch: 2.3.1, 4.0.3 → 2.3.2, 4.0.4
* https://github.com/advisories/GHSA-3v7f-55p6-f55p
* https://github.com/advisories/GHSA-c2c7-rcm5-vvqj
* socket.io-parser: 4.2.4 → 4.2.6
* https://github.com/advisories/GHSA-677m-j7p3-52f9
* underscore: 1.13.6 → 1.13.8
* https://github.com/advisories/GHSA-qpx9-hpmf-5gmw
* yaml: 2.8.2 → 2.8.3
* https://github.com/advisories/GHSA-48c2-rrv3-qjmp
Change-Id: I2aca6a8738eadc32220ea433374e051071788dcf
---
composer.json | 4 +-
package-lock.json | 304 +++++++++++++++++++++++++---------------------
package.json | 2 +-
3 files changed, 166 insertions(+), 144 deletions(-)
diff --git a/composer.json b/composer.json
index 80f5f91..89e82ca 100644
--- a/composer.json
+++ b/composer.json
@@ -57,9 +57,9 @@
}
],
"require-dev": {
- "mediawiki/mediawiki-codesniffer": "48.0.0",
+ "mediawiki/mediawiki-codesniffer": "50.0.0",
"mediawiki/mediawiki-phan-config": "0.20.0",
- "mediawiki/minus-x": "1.1.3",
+ "mediawiki/minus-x": "2.0.1",
"ockcyp/covers-validator": "1.7.0",
"php-parallel-lint/php-console-highlighter": "1.0.0",
"php-parallel-lint/php-parallel-lint": "1.4.0",
diff --git a/package-lock.json b/package-lock.json
index 782247a..8dcebd3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -48,7 +48,7 @@
"q": "1.5.1",
"qunit": "2.25.0",
"stylelint-config-wikimedia": "0.18.0",
- "svgo": "3.3.2"
+ "svgo": "3.3.3"
}
},
"node_modules/@aashutoshrathi/word-wrap": {
@@ -589,9 +589,9 @@
}
},
"node_modules/@eslint/eslintrc/node_modules/minimatch": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
- "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+ "version": "3.1.5",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
+ "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
"dev": true,
"dependencies": {
"brace-expansion": "^1.1.7"
@@ -826,9 +826,9 @@
}
},
"node_modules/@stylistic/eslint-plugin/node_modules/picomatch": {
- "version": "4.0.3",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
- "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+ "version": "4.0.4",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+ "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
"dev": true,
"engines": {
"node": ">=12"
@@ -886,15 +886,6 @@
"node": ">=0.10.0"
}
},
- "node_modules/@trysound/sax": {
- "version": "0.2.0",
- "resolved": "https://registry.npmjs.org/@trysound/sax/-/sax-0.2.0.tgz",
- "integrity": "sha512-L7z9BgrNEcYyUYtF+HaEfiS5ebkh9jXqbszz7pC0hRBPaatV0XjSD3+eHrpqFemQfgwiFF0QPIarnIihIDn7OA==",
- "dev": true,
- "engines": {
- "node": ">=10.13.0"
- }
- },
"node_modules/@types/cookie": {
"version": "0.4.1",
"resolved": "https://registry.npmjs.org/@types/cookie/-/cookie-0.4.1.tgz",
@@ -1154,23 +1145,21 @@
}
},
"node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": {
- "version": "2.0.2",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
- "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
+ "version": "2.0.3",
+ "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz",
+ "integrity": "sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==",
"dev": true,
- "license": "MIT",
"dependencies": {
"balanced-match": "^1.0.0"
}
},
"node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch": {
- "version": "9.0.5",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
- "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
+ "version": "9.0.9",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
+ "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
"dev": true,
- "license": "ISC",
"dependencies": {
- "brace-expansion": "^2.0.1"
+ "brace-expansion": "^2.0.2"
},
"engines": {
"node": ">=16 || 14 >=14.17"
@@ -1290,9 +1279,9 @@
}
},
"node_modules/ajv": {
- "version": "6.12.6",
- "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
- "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
+ "version": "6.14.0",
+ "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
+ "integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
"dev": true,
"dependencies": {
"fast-deep-equal": "^3.1.1",
@@ -1623,9 +1612,9 @@
"dev": true
},
"node_modules/brace-expansion": {
- "version": "1.1.12",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
- "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+ "version": "1.1.13",
+ "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.13.tgz",
+ "integrity": "sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==",
"dev": true,
"dependencies": {
"balanced-match": "^1.0.0",
@@ -3613,9 +3602,9 @@
}
},
"node_modules/eslint/node_modules/minimatch": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
- "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+ "version": "3.1.5",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
+ "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
"dev": true,
"dependencies": {
"brace-expansion": "^1.1.7"
@@ -3980,9 +3969,9 @@
}
},
"node_modules/flatted": {
- "version": "3.3.1",
- "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.1.tgz",
- "integrity": "sha512-X8cqMLLie7KsNUDSdzeN8FYK9rEt4Dt67OsG/DNGnYTSDBG4uFAJFBnUeiV+zCVAvwFy56IjM9sH51jVaEhNxw==",
+ "version": "3.4.2",
+ "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz",
+ "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==",
"dev": true
},
"node_modules/follow-redirects": {
@@ -4284,13 +4273,13 @@
"dev": true
},
"node_modules/globule": {
- "version": "1.3.3",
- "resolved": "https://registry.npmjs.org/globule/-/globule-1.3.3.tgz",
- "integrity": "sha512-mb1aYtDbIjTu4ShMB85m3UzjX9BVKe9WCzsnfMSZk+K5GpIbBOexgg4PPCt5eHDEG5/ZQAUX2Kct02zfiPLsKg==",
+ "version": "1.3.4",
+ "resolved": "https://registry.npmjs.org/globule/-/globule-1.3.4.tgz",
+ "integrity": "sha512-OPTIfhMBh7JbBYDpa5b+Q5ptmMWKwcNcFSR/0c6t8V4f3ZAVBEsKNY37QdVqmLRYSMhOUGYrY0QhSoEpzGr/Eg==",
"dev": true,
"dependencies": {
"glob": "~7.1.1",
- "lodash": "~4.17.10",
+ "lodash": "^4.17.21",
"minimatch": "~3.0.2"
},
"engines": {
@@ -4637,7 +4626,7 @@
"node_modules/grunt-exec": {
"version": "1.0.1",
"resolved": "https://registry.npmjs.org/grunt-exec/-/grunt-exec-1.0.1.tgz",
- "integrity": "sha1-5dU6OcXzRpATBe3uXIfbDyr5mcQ=",
+ "integrity": "sha512-+pB+L+Tr1quazHRvQeyLdsBnw8FDgM5vr2bPashpJKkIYNFqVdFKQKvMC3RlEYFoy9V3oJJyWufyNa/OUGVLHQ==",
"dev": true,
"engines": {
"node": ">=0.8.0"
@@ -4649,7 +4638,7 @@
"node_modules/grunt-file-exists": {
"version": "0.1.4",
"resolved": "https://registry.npmjs.org/grunt-file-exists/-/grunt-file-exists-0.1.4.tgz",
- "integrity": "sha1-Q2Er8418dlRwiUcIdgpuw/sQrrI=",
+ "integrity": "sha512-AKs+2aKdMtCfUYIhPMfj3trgr0ZJX9316Z8Hsno7xoZQ4sF6KdTgeTeYy8rV7zKjuob3+qAETTQEr1TFcvEZUg==",
"dev": true,
"engines": {
"node": ">= 0.8.0"
@@ -5192,13 +5181,13 @@
}
},
"node_modules/handlebars": {
- "version": "4.7.7",
- "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz",
- "integrity": "sha512-aAcXm5OAfE/8IXkcZvCepKU3VzW1/39Fb5ZuqMtgI/hT8X2YgoMvBY5dLhq/cpOvw7Lk1nK/UF71aLG/ZnVYRA==",
+ "version": "4.7.9",
+ "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.9.tgz",
+ "integrity": "sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==",
"dev": true,
"dependencies": {
"minimist": "^1.2.5",
- "neo-async": "^2.6.0",
+ "neo-async": "^2.6.2",
"source-map": "^0.6.1",
"wordwrap": "^1.0.0"
},
@@ -7479,9 +7468,9 @@
"license": "ISC"
},
"node_modules/picomatch": {
- "version": "2.3.1",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
- "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+ "version": "2.3.2",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
+ "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==",
"dev": true,
"engines": {
"node": ">=8.6"
@@ -8260,11 +8249,13 @@
"dev": true
},
"node_modules/sax": {
- "version": "1.2.4",
- "resolved": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz",
- "integrity": "sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw==",
+ "version": "1.6.0",
+ "resolved": "https://registry.npmjs.org/sax/-/sax-1.6.0.tgz",
+ "integrity": "sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==",
"dev": true,
- "optional": true
+ "engines": {
+ "node": ">=11.0.0"
+ }
},
"node_modules/semver": {
"version": "7.7.3",
@@ -8445,18 +8436,41 @@
}
},
"node_modules/socket.io-parser": {
- "version": "4.2.4",
- "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.4.tgz",
- "integrity": "sha512-/GbIKmo8ioc+NIWIhwdecY0ge+qVBSMdgxGygevmdHj24bsfgtCmcUUcQ5ZzcylGFHsN3k4HB4Cgkl96KVnuew==",
+ "version": "4.2.6",
+ "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.6.tgz",
+ "integrity": "sha512-asJqbVBDsBCJx0pTqw3WfesSY0iRX+2xzWEWzrpcH7L6fLzrhyF8WPI8UaeM4YCuDfpwA/cgsdugMsmtz8EJeg==",
"dev": true,
"dependencies": {
"@socket.io/component-emitter": "~3.1.0",
- "debug": "~4.3.1"
+ "debug": "~4.4.1"
},
"engines": {
"node": ">=10.0.0"
}
},
+ "node_modules/socket.io-parser/node_modules/debug": {
+ "version": "4.4.3",
+ "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+ "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+ "dev": true,
+ "dependencies": {
+ "ms": "^2.1.3"
+ },
+ "engines": {
+ "node": ">=6.0"
+ },
+ "peerDependenciesMeta": {
+ "supports-color": {
+ "optional": true
+ }
+ }
+ },
+ "node_modules/socket.io-parser/node_modules/ms": {
+ "version": "2.1.3",
+ "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+ "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+ "dev": true
+ },
"node_modules/source-map": {
"version": "0.5.7",
"resolved": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz",
@@ -9000,18 +9014,18 @@
"dev": true
},
"node_modules/svgo": {
- "version": "3.3.2",
- "resolved": "https://registry.npmjs.org/svgo/-/svgo-3.3.2.tgz",
- "integrity": "sha512-OoohrmuUlBs8B8o6MB2Aevn+pRIH9zDALSR+6hhqVfa6fRwG/Qw9VUMSMW9VNg2CFc/MTIfabtdOVl9ODIJjpw==",
+ "version": "3.3.3",
+ "resolved": "https://registry.npmjs.org/svgo/-/svgo-3.3.3.tgz",
+ "integrity": "sha512-+wn7I4p7YgJhHs38k2TNjy1vCfPIfLIJWR5MnCStsN8WuuTcBnRKcMHQLMM2ijxGZmDoZwNv8ipl5aTTen62ng==",
"dev": true,
"dependencies": {
- "@trysound/sax": "0.2.0",
"commander": "^7.2.0",
"css-select": "^5.1.0",
"css-tree": "^2.3.1",
"css-what": "^6.1.0",
"csso": "^5.0.5",
- "picocolors": "^1.0.0"
+ "picocolors": "^1.0.0",
+ "sax": "^1.5.0"
},
"bin": {
"svgo": "bin/svgo"
@@ -9260,11 +9274,10 @@
}
},
"node_modules/ts-declaration-location/node_modules/picomatch": {
- "version": "4.0.3",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
- "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+ "version": "4.0.4",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+ "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
"dev": true,
- "license": "MIT",
"engines": {
"node": ">=12"
},
@@ -9377,9 +9390,9 @@
}
},
"node_modules/underscore": {
- "version": "1.13.6",
- "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.6.tgz",
- "integrity": "sha512-+A5Sja4HP1M08MaXya7p5LvjuM7K6q/2EaC0+iovj/wOcMsTzMvDFbasi/oSapiwOlt252IqsKqPjCl7huKS0A==",
+ "version": "1.13.8",
+ "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz",
+ "integrity": "sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==",
"dev": true
},
"node_modules/underscore.string": {
@@ -9730,11 +9743,10 @@
}
},
"node_modules/yaml": {
- "version": "2.8.2",
- "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz",
- "integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==",
+ "version": "2.8.3",
+ "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+ "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
"dev": true,
- "license": "ISC",
"bin": {
"yaml": "bin.mjs"
},
@@ -10170,9 +10182,9 @@
}
},
"minimatch": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
- "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+ "version": "3.1.5",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
+ "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
"dev": true,
"requires": {
"brace-expansion": "^1.1.7"
@@ -10338,9 +10350,9 @@
}
},
"picomatch": {
- "version": "4.0.3",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
- "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+ "version": "4.0.4",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+ "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
"dev": true
}
}
@@ -10378,12 +10390,6 @@
}
}
},
- "@trysound/sax": {
- "version": "0.2.0",
- "resolved": "https://registry.npmjs.org/@trysound/sax/-/sax-0.2.0.tgz",
- "integrity": "sha512-L7z9BgrNEcYyUYtF+HaEfiS5ebkh9jXqbszz7pC0hRBPaatV0XjSD3+eHrpqFemQfgwiFF0QPIarnIihIDn7OA==",
- "dev": true
- },
"@types/cookie": {
"version": "0.4.1",
"resolved": "https://registry.npmjs.org/@types/cookie/-/cookie-0.4.1.tgz",
@@ -10553,21 +10559,21 @@
},
"dependencies": {
"brace-expansion": {
- "version": "2.0.2",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
- "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
+ "version": "2.0.3",
+ "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz",
+ "integrity": "sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==",
"dev": true,
"requires": {
"balanced-match": "^1.0.0"
}
},
"minimatch": {
- "version": "9.0.5",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
- "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
+ "version": "9.0.9",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
+ "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
"dev": true,
"requires": {
- "brace-expansion": "^2.0.1"
+ "brace-expansion": "^2.0.2"
}
}
}
@@ -10643,9 +10649,9 @@
"requires": {}
},
"ajv": {
- "version": "6.12.6",
- "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
- "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
+ "version": "6.14.0",
+ "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
+ "integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
"dev": true,
"requires": {
"fast-deep-equal": "^3.1.1",
@@ -10900,9 +10906,9 @@
"dev": true
},
"brace-expansion": {
- "version": "1.1.12",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
- "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+ "version": "1.1.13",
+ "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.13.tgz",
+ "integrity": "sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==",
"dev": true,
"requires": {
"balanced-match": "^1.0.0",
@@ -11924,9 +11930,9 @@
}
},
"minimatch": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
- "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+ "version": "3.1.5",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
+ "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
"dev": true,
"requires": {
"brace-expansion": "^1.1.7"
@@ -12577,9 +12583,9 @@
}
},
"flatted": {
- "version": "3.3.1",
- "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.1.tgz",
- "integrity": "sha512-X8cqMLLie7KsNUDSdzeN8FYK9rEt4Dt67OsG/DNGnYTSDBG4uFAJFBnUeiV+zCVAvwFy56IjM9sH51jVaEhNxw==",
+ "version": "3.4.2",
+ "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz",
+ "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==",
"dev": true
},
"follow-redirects": {
@@ -12793,13 +12799,13 @@
"dev": true
},
"globule": {
- "version": "1.3.3",
- "resolved": "https://registry.npmjs.org/globule/-/globule-1.3.3.tgz",
- "integrity": "sha512-mb1aYtDbIjTu4ShMB85m3UzjX9BVKe9WCzsnfMSZk+K5GpIbBOexgg4PPCt5eHDEG5/ZQAUX2Kct02zfiPLsKg==",
+ "version": "1.3.4",
+ "resolved": "https://registry.npmjs.org/globule/-/globule-1.3.4.tgz",
+ "integrity": "sha512-OPTIfhMBh7JbBYDpa5b+Q5ptmMWKwcNcFSR/0c6t8V4f3ZAVBEsKNY37QdVqmLRYSMhOUGYrY0QhSoEpzGr/Eg==",
"dev": true,
"requires": {
"glob": "~7.1.1",
- "lodash": "~4.17.10",
+ "lodash": "^4.17.21",
"minimatch": "~3.0.2"
}
},
@@ -13068,14 +13074,14 @@
"grunt-exec": {
"version": "1.0.1",
"resolved": "https://registry.npmjs.org/grunt-exec/-/grunt-exec-1.0.1.tgz",
- "integrity": "sha1-5dU6OcXzRpATBe3uXIfbDyr5mcQ=",
+ "integrity": "sha512-+pB+L+Tr1quazHRvQeyLdsBnw8FDgM5vr2bPashpJKkIYNFqVdFKQKvMC3RlEYFoy9V3oJJyWufyNa/OUGVLHQ==",
"dev": true,
"requires": {}
},
"grunt-file-exists": {
"version": "0.1.4",
"resolved": "https://registry.npmjs.org/grunt-file-exists/-/grunt-file-exists-0.1.4.tgz",
- "integrity": "sha1-Q2Er8418dlRwiUcIdgpuw/sQrrI=",
+ "integrity": "sha512-AKs+2aKdMtCfUYIhPMfj3trgr0ZJX9316Z8Hsno7xoZQ4sF6KdTgeTeYy8rV7zKjuob3+qAETTQEr1TFcvEZUg==",
"dev": true,
"requires": {}
},
@@ -13472,13 +13478,13 @@
}
},
"handlebars": {
- "version": "4.7.7",
- "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz",
- "integrity": "sha512-aAcXm5OAfE/8IXkcZvCepKU3VzW1/39Fb5ZuqMtgI/hT8X2YgoMvBY5dLhq/cpOvw7Lk1nK/UF71aLG/ZnVYRA==",
+ "version": "4.7.9",
+ "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.9.tgz",
+ "integrity": "sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==",
"dev": true,
"requires": {
"minimist": "^1.2.5",
- "neo-async": "^2.6.0",
+ "neo-async": "^2.6.2",
"source-map": "^0.6.1",
"uglify-js": "^3.1.4",
"wordwrap": "^1.0.0"
@@ -15223,9 +15229,9 @@
"dev": true
},
"picomatch": {
- "version": "2.3.1",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
- "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+ "version": "2.3.2",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
+ "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==",
"dev": true
},
"pify": {
@@ -15758,11 +15764,10 @@
"dev": true
},
"sax": {
- "version": "1.2.4",
- "resolved": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz",
- "integrity": "sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw==",
- "dev": true,
- "optional": true
+ "version": "1.6.0",
+ "resolved": "https://registry.npmjs.org/sax/-/sax-1.6.0.tgz",
+ "integrity": "sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==",
+ "dev": true
},
"semver": {
"version": "7.7.3",
@@ -15888,13 +15893,30 @@
}
},
"socket.io-parser": {
- "version": "4.2.4",
- "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.4.tgz",
- "integrity": "sha512-/GbIKmo8ioc+NIWIhwdecY0ge+qVBSMdgxGygevmdHj24bsfgtCmcUUcQ5ZzcylGFHsN3k4HB4Cgkl96KVnuew==",
+ "version": "4.2.6",
+ "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.6.tgz",
+ "integrity": "sha512-asJqbVBDsBCJx0pTqw3WfesSY0iRX+2xzWEWzrpcH7L6fLzrhyF8WPI8UaeM4YCuDfpwA/cgsdugMsmtz8EJeg==",
"dev": true,
"requires": {
"@socket.io/component-emitter": "~3.1.0",
- "debug": "~4.3.1"
+ "debug": "~4.4.1"
+ },
+ "dependencies": {
+ "debug": {
+ "version": "4.4.3",
+ "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+ "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+ "dev": true,
+ "requires": {
+ "ms": "^2.1.3"
+ }
+ },
+ "ms": {
+ "version": "2.1.3",
+ "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+ "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+ "dev": true
+ }
}
},
"source-map": {
@@ -16255,18 +16277,18 @@
"dev": true
},
"svgo": {
- "version": "3.3.2",
- "resolved": "https://registry.npmjs.org/svgo/-/svgo-3.3.2.tgz",
- "integrity": "sha512-OoohrmuUlBs8B8o6MB2Aevn+pRIH9zDALSR+6hhqVfa6fRwG/Qw9VUMSMW9VNg2CFc/MTIfabtdOVl9ODIJjpw==",
+ "version": "3.3.3",
+ "resolved": "https://registry.npmjs.org/svgo/-/svgo-3.3.3.tgz",
+ "integrity": "sha512-+wn7I4p7YgJhHs38k2TNjy1vCfPIfLIJWR5MnCStsN8WuuTcBnRKcMHQLMM2ijxGZmDoZwNv8ipl5aTTen62ng==",
"dev": true,
"requires": {
- "@trysound/sax": "0.2.0",
"commander": "^7.2.0",
"css-select": "^5.1.0",
"css-tree": "^2.3.1",
"css-what": "^6.1.0",
"csso": "^5.0.5",
- "picocolors": "^1.0.0"
+ "picocolors": "^1.0.0",
+ "sax": "^1.5.0"
}
},
"table": {
@@ -16447,9 +16469,9 @@
},
"dependencies": {
"picomatch": {
- "version": "4.0.3",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
- "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+ "version": "4.0.4",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+ "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
"dev": true
}
}
@@ -16517,9 +16539,9 @@
"dev": true
},
"underscore": {
- "version": "1.13.6",
- "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.6.tgz",
- "integrity": "sha512-+A5Sja4HP1M08MaXya7p5LvjuM7K6q/2EaC0+iovj/wOcMsTzMvDFbasi/oSapiwOlt252IqsKqPjCl7huKS0A==",
+ "version": "1.13.8",
+ "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz",
+ "integrity": "sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==",
"dev": true
},
"underscore.string": {
@@ -16755,9 +16777,9 @@
"dev": true
},
"yaml": {
- "version": "2.8.2",
- "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz",
- "integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==",
+ "version": "2.8.3",
+ "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+ "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
"dev": true
},
"yaml-eslint-parser": {
diff --git a/package.json b/package.json
index 0473cad..18008d8 100644
--- a/package.json
+++ b/package.json
@@ -72,6 +72,6 @@
"q": "1.5.1",
"qunit": "2.25.0",
"stylelint-config-wikimedia": "0.18.0",
- "svgo": "3.3.2"
+ "svgo": "3.3.3"
}
}
--
2.47.3
$ date
--- stdout ---
Sat Apr 4 10:34:12 UTC 2026
--- end ---
$ git clone file:///srv/git/oojs-ui.git /src/repo --depth=1 -b master
--- stderr ---
Cloning into '/src/repo'...
--- stdout ---
--- end ---
$ git config user.name libraryupgrader
--- stdout ---
--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---
--- end ---
$ git submodule update --init
--- stdout ---
--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.
--- end ---
$ git show-ref refs/heads/master
--- stdout ---
03a69e907ec4ccd2de368f24326b9e8d23454c92 refs/heads/master
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"ajv": {
"name": "ajv",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1113714,
"name": "ajv",
"dependency": "ajv",
"title": "ajv has ReDoS when using `$data` option",
"url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6",
"severity": "moderate",
"cwe": [
"CWE-400",
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<6.14.0"
}
],
"effects": [],
"range": "<6.14.0",
"nodes": [
"node_modules/ajv"
],
"fixAvailable": true
},
"brace-expansion": {
"name": "brace-expansion",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1115540,
"name": "brace-expansion",
"dependency": "brace-expansion",
"title": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v",
"severity": "moderate",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
"range": "<1.1.13"
},
{
"source": 1115541,
"name": "brace-expansion",
"dependency": "brace-expansion",
"title": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v",
"severity": "moderate",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
"range": ">=2.0.0 <2.0.3"
}
],
"effects": [],
"range": "<1.1.13 || >=2.0.0 <2.0.3",
"nodes": [
"node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion",
"node_modules/brace-expansion"
],
"fixAvailable": true
},
"flatted": {
"name": "flatted",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1114526,
"name": "flatted",
"dependency": "flatted",
"title": "flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"url": "https://github.com/advisories/GHSA-25h7-pfq9-p65f",
"severity": "high",
"cwe": [
"CWE-674"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.4.0"
},
{
"source": 1115357,
"name": "flatted",
"dependency": "flatted",
"title": "Prototype Pollution via parse() in NodeJS flatted",
"url": "https://github.com/advisories/GHSA-rf6f-7fwh-wjgh",
"severity": "high",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<=3.4.1"
}
],
"effects": [],
"range": "<=3.4.1",
"nodes": [
"node_modules/flatted"
],
"fixAvailable": true
},
"gaze": {
"name": "gaze",
"severity": "high",
"isDirect": false,
"via": [
"globule"
],
"effects": [
"grunt-contrib-watch"
],
"range": ">=0.4.0",
"nodes": [
"node_modules/gaze"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"globule": {
"name": "globule",
"severity": "high",
"isDirect": false,
"via": [
"lodash",
"minimatch"
],
"effects": [
"gaze"
],
"range": "*",
"nodes": [
"node_modules/globule"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt": {
"name": "grunt",
"severity": "high",
"isDirect": true,
"via": [
"grunt-legacy-log",
"grunt-legacy-util",
"minimatch"
],
"effects": [
"grunt-contrib-clean",
"grunt-contrib-concat",
"grunt-cssjanus",
"grunt-eslint",
"grunt-exec",
"grunt-file-exists",
"grunt-karma",
"grunt-promise-q"
],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt"
],
"fixAvailable": false
},
"grunt-contrib-clean": {
"name": "grunt-contrib-clean",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt-contrib-clean"
],
"fixAvailable": {
"name": "grunt-contrib-clean",
"version": "0.3.2",
"isSemVerMajor": true
}
},
"grunt-contrib-concat": {
"name": "grunt-contrib-concat",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.1.2-rc5",
"nodes": [
"node_modules/grunt-contrib-concat"
],
"fixAvailable": {
"name": "grunt-contrib-concat",
"version": "0.1.1",
"isSemVerMajor": true
}
},
"grunt-contrib-watch": {
"name": "grunt-contrib-watch",
"severity": "high",
"isDirect": true,
"via": [
"gaze"
],
"effects": [],
"range": ">=0.5.0",
"nodes": [
"node_modules/grunt-contrib-watch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt-cssjanus": {
"name": "grunt-cssjanus",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-cssjanus"
],
"fixAvailable": false
},
"grunt-eslint": {
"name": "grunt-eslint",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "<=1.0.0 || >=18.1.0",
"nodes": [
"node_modules/grunt-eslint"
],
"fixAvailable": {
"name": "grunt-eslint",
"version": "18.0.0",
"isSemVerMajor": true
}
},
"grunt-exec": {
"name": "grunt-exec",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-rc1",
"nodes": [
"node_modules/grunt-exec"
],
"fixAvailable": {
"name": "grunt-exec",
"version": "0.3.0",
"isSemVerMajor": true
}
},
"grunt-file-exists": {
"name": "grunt-file-exists",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-file-exists"
],
"fixAvailable": false
},
"grunt-karma": {
"name": "grunt-karma",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-karma"
],
"fixAvailable": false
},
"grunt-legacy-log": {
"name": "grunt-legacy-log",
"severity": "high",
"isDirect": false,
"via": [
"grunt-legacy-log-utils",
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.0-rc1",
"nodes": [
"node_modules/grunt-legacy-log"
],
"fixAvailable": false
},
"grunt-legacy-log-utils": {
"name": "grunt-legacy-log-utils",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt-legacy-log"
],
"range": ">=1.0.0",
"nodes": [
"node_modules/grunt-legacy-log-utils"
],
"fixAvailable": false
},
"grunt-legacy-util": {
"name": "grunt-legacy-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.0-rc1",
"nodes": [
"node_modules/grunt-legacy-util"
],
"fixAvailable": false
},
"grunt-promise-q": {
"name": "grunt-promise-q",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-promise-q"
],
"fixAvailable": false
},
"gulp-util": {
"name": "gulp-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash.template"
],
"effects": [
"remap-istanbul"
],
"range": ">=1.1.0",
"nodes": [
"node_modules/gulp-util"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"handlebars": {
"name": "handlebars",
"severity": "critical",
"isDirect": false,
"via": [
{
"source": 1115538,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block",
"url": "https://github.com/advisories/GHSA-3mfm-83xf-c92r",
"severity": "high",
"cwe": [
"CWE-94",
"CWE-843"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115539,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection via AST Type Confusion",
"url": "https://github.com/advisories/GHSA-2w6w-674q-4c4q",
"severity": "critical",
"cwe": [
"CWE-94",
"CWE-843"
],
"cvss": {
"score": 9.8,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115544,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection",
"url": "https://github.com/advisories/GHSA-2qvq-rjwj-gvw9",
"severity": "moderate",
"cwe": [
"CWE-79",
"CWE-1321"
],
"cvss": {
"score": 4.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
"range": ">=4.0.0 <4.7.9"
},
{
"source": 1115588,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry",
"url": "https://github.com/advisories/GHSA-7rx3-28cr-v5wh",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 4.8,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
"range": ">=4.6.0 <=4.7.8"
},
{
"source": 1115589,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has a Property Access Validation Bypass in container.lookup",
"url": "https://github.com/advisories/GHSA-442j-39wm-28r2",
"severity": "low",
"cwe": [
"CWE-367"
],
"cvss": {
"score": 3.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115692,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options",
"url": "https://github.com/advisories/GHSA-xjpj-3mr7-gcpf",
"severity": "high",
"cwe": [
"CWE-79",
"CWE-94",
"CWE-116"
],
"cvss": {
"score": 8.3,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115693,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial",
"url": "https://github.com/advisories/GHSA-xhpv-hc6g-r9c6",
"severity": "high",
"cwe": [
"CWE-94",
"CWE-843"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115694,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation",
"url": "https://github.com/advisories/GHSA-9cx6-37pm-9jff",
"severity": "high",
"cwe": [
"CWE-754"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=4.0.0 <=4.7.8"
}
],
"effects": [],
"range": "4.0.0 - 4.7.8",
"nodes": [
"node_modules/handlebars"
],
"fixAvailable": true
},
"karma-remap-istanbul": {
"name": "karma-remap-istanbul",
"severity": "high",
"isDirect": true,
"via": [
"remap-istanbul"
],
"effects": [],
"range": ">=0.0.3",
"nodes": [
"node_modules/karma-remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"lodash": {
"name": "lodash",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115806,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Code Injection via `_.template` imports key names",
"url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc",
"severity": "high",
"cwe": [
"CWE-94"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.17.23"
},
{
"source": 1115810,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`",
"url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
},
"range": "<=4.17.23"
}
],
"effects": [
"globule",
"grunt-legacy-log",
"grunt-legacy-log-utils",
"grunt-legacy-util"
],
"range": "<=4.17.23",
"nodes": [
"node_modules/lodash"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"lodash.template": {
"name": "lodash.template",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1106902,
"name": "lodash.template",
"dependency": "lodash.template",
"title": "Command Injection in lodash",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"severity": "high",
"cwe": [
"CWE-77",
"CWE-94"
],
"cvss": {
"score": 7.2,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
"range": "<=4.5.0"
}
],
"effects": [
"gulp-util"
],
"range": "<=4.5.0",
"nodes": [
"node_modules/lodash.template"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"meow": {
"name": "meow",
"severity": "high",
"isDirect": false,
"via": [
"trim-newlines"
],
"effects": [],
"range": "3.4.0 - 5.0.0",
"nodes": [
"node_modules/gulp-util/node_modules/meow"
],
"fixAvailable": true
},
"minimatch": {
"name": "minimatch",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1113459,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<3.1.3"
},
{
"source": 1113465,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": ">=9.0.0 <9.0.6"
},
{
"source": 1113538,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
"severity": "high",
"cwe": [
"CWE-407"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.3"
},
{
"source": 1113544,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
"severity": "high",
"cwe": [
"CWE-407"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=9.0.0 <9.0.7"
},
{
"source": 1113546,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.4"
},
{
"source": 1113552,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=9.0.0 <9.0.7"
}
],
"effects": [
"globule",
"grunt"
],
"range": "<=3.1.3 || 9.0.0 - 9.0.6",
"nodes": [
"node_modules/@eslint/eslintrc/node_modules/minimatch",
"node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch",
"node_modules/eslint/node_modules/minimatch",
"node_modules/minimatch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"picomatch": {
"name": "picomatch",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115549,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
},
"range": "<2.3.2"
},
{
"source": 1115551,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
},
"range": ">=4.0.0 <4.0.4"
},
{
"source": 1115552,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch has a ReDoS vulnerability via extglob quantifiers",
"url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<2.3.2"
},
{
"source": 1115554,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch has a ReDoS vulnerability via extglob quantifiers",
"url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=4.0.0 <4.0.4"
}
],
"effects": [],
"range": "<=2.3.1 || 4.0.0 - 4.0.3",
"nodes": [
"node_modules/@stylistic/eslint-plugin/node_modules/picomatch",
"node_modules/picomatch",
"node_modules/ts-declaration-location/node_modules/picomatch"
],
"fixAvailable": true
},
"remap-istanbul": {
"name": "remap-istanbul",
"severity": "high",
"isDirect": false,
"via": [
"gulp-util"
],
"effects": [
"karma-remap-istanbul"
],
"range": "<=0.9.6",
"nodes": [
"node_modules/remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"socket.io-parser": {
"name": "socket.io-parser",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115154,
"name": "socket.io-parser",
"dependency": "socket.io-parser",
"title": "socket.io allows an unbounded number of binary attachments",
"url": "https://github.com/advisories/GHSA-677m-j7p3-52f9",
"severity": "high",
"cwe": [
"CWE-754"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": ">=4.0.0 <4.2.6"
}
],
"effects": [],
"range": "4.0.0 - 4.2.5",
"nodes": [
"node_modules/socket.io-parser"
],
"fixAvailable": true
},
"svgo": {
"name": "svgo",
"severity": "high",
"isDirect": true,
"via": [
{
"source": 1114151,
"name": "svgo",
"dependency": "svgo",
"title": "SVGO DoS through entity expansion in DOCTYPE (Billion Laughs)",
"url": "https://github.com/advisories/GHSA-xpqw-6gx7-v673",
"severity": "high",
"cwe": [
"CWE-776"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=3.0.0 <3.3.3"
}
],
"effects": [],
"range": "3.0.0 - 3.3.2",
"nodes": [
"node_modules/svgo"
],
"fixAvailable": {
"name": "svgo",
"version": "3.3.3",
"isSemVerMajor": false
}
},
"trim-newlines": {
"name": "trim-newlines",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1095100,
"name": "trim-newlines",
"dependency": "trim-newlines",
"title": "Uncontrolled Resource Consumption in trim-newlines",
"url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v",
"severity": "high",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.0.1"
}
],
"effects": [
"meow"
],
"range": "<3.0.1",
"nodes": [
"node_modules/trim-newlines"
],
"fixAvailable": true
},
"underscore": {
"name": "underscore",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1113950,
"name": "underscore",
"dependency": "underscore",
"title": "Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack",
"url": "https://github.com/advisories/GHSA-qpx9-hpmf-5gmw",
"severity": "high",
"cwe": [
"CWE-674",
"CWE-770"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<=1.13.7"
}
],
"effects": [],
"range": "<=1.13.7",
"nodes": [
"node_modules/underscore"
],
"fixAvailable": true
},
"yaml": {
"name": "yaml",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1115556,
"name": "yaml",
"dependency": "yaml",
"title": "yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
"url": "https://github.com/advisories/GHSA-48c2-rrv3-qjmp",
"severity": "moderate",
"cwe": [
"CWE-674"
],
"cvss": {
"score": 4.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
},
"range": ">=2.0.0 <2.8.3"
}
],
"effects": [],
"range": "2.0.0 - 2.8.2",
"nodes": [
"node_modules/yaml"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 3,
"high": 28,
"critical": 1,
"total": 32
},
"dependencies": {
"prod": 4,
"dev": 810,
"optional": 12,
"peer": 2,
"peerOptional": 0,
"total": 813
}
}
}
--- end ---
$ /usr/bin/composer install
--- stderr ---
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information
Updating dependencies
Lock file operations: 64 installs, 0 updates, 0 removals
- Locking composer/pcre (3.3.2)
- Locking composer/semver (3.4.4)
- Locking composer/spdx-licenses (1.5.9)
- Locking composer/xdebug-handler (3.0.5)
- Locking danog/advanced-json-rpc (v3.2.3)
- Locking dealerdirect/phpcodesniffer-composer-installer (v1.2.0)
- Locking doctrine/deprecations (1.1.6)
- Locking mediawiki/mediawiki-codesniffer (v48.0.0)
- Locking mediawiki/mediawiki-phan-config (0.20.0)
- Locking mediawiki/minus-x (1.1.3)
- Locking mediawiki/phan-taint-check-plugin (9.1.0)
- Locking myclabs/deep-copy (1.13.4)
- Locking netresearch/jsonmapper (v5.0.1)
- Locking nikic/php-parser (v5.7.0)
- Locking ockcyp/covers-validator (v1.7.0)
- Locking phan/phan (6.0.2)
- Locking phan/tolerant-php-parser (v0.2.0)
- Locking phan/var_representation_polyfill (0.1.4)
- Locking phar-io/manifest (2.0.4)
- Locking phar-io/version (3.2.1)
- Locking php-parallel-lint/php-console-color (v1.0.1)
- Locking php-parallel-lint/php-console-highlighter (v1.0.0)
- Locking php-parallel-lint/php-parallel-lint (v1.4.0)
- Locking phpcsstandards/phpcsextra (1.4.0)
- Locking phpcsstandards/phpcsutils (1.1.1)
- Locking phpdocumentor/reflection-common (2.2.0)
- Locking phpdocumentor/reflection-docblock (6.0.3)
- Locking phpdocumentor/type-resolver (2.0.0)
- Locking phpstan/phpdoc-parser (2.3.2)
- Locking phpunit/php-code-coverage (10.1.16)
- Locking phpunit/php-file-iterator (4.1.0)
- Locking phpunit/php-invoker (4.0.0)
- Locking phpunit/php-text-template (3.0.1)
- Locking phpunit/php-timer (6.0.0)
- Locking phpunit/phpunit (10.5.63)
- Locking psr/container (2.0.2)
- Locking psr/log (3.0.2)
- Locking sabre/event (6.0.1)
- Locking sebastian/cli-parser (2.0.1)
- Locking sebastian/code-unit (2.0.0)
- Locking sebastian/code-unit-reverse-lookup (3.0.0)
- Locking sebastian/comparator (5.0.5)
- Locking sebastian/complexity (3.2.0)
- Locking sebastian/diff (5.1.1)
- Locking sebastian/environment (6.1.0)
- Locking sebastian/exporter (5.1.4)
- Locking sebastian/global-state (6.0.2)
- Locking sebastian/lines-of-code (2.0.2)
- Locking sebastian/object-enumerator (5.0.0)
- Locking sebastian/object-reflector (3.0.0)
- Locking sebastian/recursion-context (5.0.1)
- Locking sebastian/type (4.0.0)
- Locking sebastian/version (4.0.1)
- Locking squizlabs/php_codesniffer (3.13.2)
- Locking symfony/console (v6.4.36)
- Locking symfony/deprecation-contracts (v3.6.0)
- Locking symfony/polyfill-ctype (v1.33.0)
- Locking symfony/polyfill-intl-grapheme (v1.33.0)
- Locking symfony/polyfill-intl-normalizer (v1.33.0)
- Locking symfony/polyfill-mbstring (v1.33.0)
- Locking symfony/service-contracts (v3.6.1)
- Locking symfony/string (v7.4.8)
- Locking theseer/tokenizer (1.3.1)
- Locking webmozart/assert (2.1.6)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 64 installs, 0 updates, 0 removals
0 [>---------------------------] 0 [->--------------------------]
- Installing squizlabs/php_codesniffer (3.13.2): Extracting archive
- Installing dealerdirect/phpcodesniffer-composer-installer (v1.2.0): Extracting archive
- Installing composer/pcre (3.3.2): Extracting archive
- Installing phpcsstandards/phpcsutils (1.1.1): Extracting archive
- Installing phpcsstandards/phpcsextra (1.4.0): Extracting archive
- Installing symfony/polyfill-mbstring (v1.33.0): Extracting archive
- Installing composer/spdx-licenses (1.5.9): Extracting archive
- Installing composer/semver (3.4.4): Extracting archive
- Installing mediawiki/mediawiki-codesniffer (v48.0.0): Extracting archive
- Installing symfony/polyfill-intl-normalizer (v1.33.0): Extracting archive
- Installing symfony/polyfill-intl-grapheme (v1.33.0): Extracting archive
- Installing symfony/polyfill-ctype (v1.33.0): Extracting archive
- Installing symfony/deprecation-contracts (v3.6.0): Extracting archive
- Installing symfony/string (v7.4.8): Extracting archive
- Installing psr/container (2.0.2): Extracting archive
- Installing symfony/service-contracts (v3.6.1): Extracting archive
- Installing symfony/console (v6.4.36): Extracting archive
- Installing sabre/event (6.0.1): Extracting archive
- Installing phan/var_representation_polyfill (0.1.4): Extracting archive
- Installing phan/tolerant-php-parser (v0.2.0): Extracting archive
- Installing netresearch/jsonmapper (v5.0.1): Extracting archive
- Installing webmozart/assert (2.1.6): Extracting archive
- Installing phpstan/phpdoc-parser (2.3.2): Extracting archive
- Installing phpdocumentor/reflection-common (2.2.0): Extracting archive
- Installing doctrine/deprecations (1.1.6): Extracting archive
- Installing phpdocumentor/type-resolver (2.0.0): Extracting archive
- Installing phpdocumentor/reflection-docblock (6.0.3): Extracting archive
- Installing danog/advanced-json-rpc (v3.2.3): Extracting archive
- Installing psr/log (3.0.2): Extracting archive
- Installing composer/xdebug-handler (3.0.5): Extracting archive
- Installing phan/phan (6.0.2): Extracting archive
- Installing mediawiki/phan-taint-check-plugin (9.1.0): Extracting archive
- Installing mediawiki/mediawiki-phan-config (0.20.0): Extracting archive
- Installing mediawiki/minus-x (1.1.3): Extracting archive
- Installing sebastian/version (4.0.1): Extracting archive
- Installing sebastian/type (4.0.0): Extracting archive
- Installing sebastian/recursion-context (5.0.1): Extracting archive
- Installing sebastian/object-reflector (3.0.0): Extracting archive
- Installing sebastian/object-enumerator (5.0.0): Extracting archive
- Installing sebastian/global-state (6.0.2): Extracting archive
- Installing sebastian/exporter (5.1.4): Extracting archive
- Installing sebastian/environment (6.1.0): Extracting archive
- Installing sebastian/diff (5.1.1): Extracting archive
- Installing sebastian/comparator (5.0.5): Extracting archive
- Installing sebastian/code-unit (2.0.0): Extracting archive
- Installing sebastian/cli-parser (2.0.1): Extracting archive
- Installing phpunit/php-timer (6.0.0): Extracting archive
- Installing phpunit/php-text-template (3.0.1): Extracting archive
- Installing phpunit/php-invoker (4.0.0): Extracting archive
- Installing phpunit/php-file-iterator (4.1.0): Extracting archive
- Installing theseer/tokenizer (1.3.1): Extracting archive
- Installing nikic/php-parser (v5.7.0): Extracting archive
- Installing sebastian/lines-of-code (2.0.2): Extracting archive
- Installing sebastian/complexity (3.2.0): Extracting archive
- Installing sebastian/code-unit-reverse-lookup (3.0.0): Extracting archive
- Installing phpunit/php-code-coverage (10.1.16): Extracting archive
- Installing phar-io/version (3.2.1): Extracting archive
- Installing phar-io/manifest (2.0.4): Extracting archive
- Installing myclabs/deep-copy (1.13.4): Extracting archive
- Installing phpunit/phpunit (10.5.63): Extracting archive
- Installing ockcyp/covers-validator (v1.7.0): Extracting archive
- Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive
- Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive
- Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive
0/62 [>---------------------------] 0%
28/62 [============>---------------] 45%
45/62 [====================>-------] 72%
61/62 [===========================>] 98%
62/62 [============================] 100%
3 package suggestions were added by new dependencies, use `composer suggest` to see details.
Generating autoload files
40 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---
PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils
--- end ---
Upgrading c:mediawiki/mediawiki-codesniffer from 48.0.0 -> 50.0.0
Upgrading c:mediawiki/minus-x from 1.1.3 -> 2.0.1
$ /usr/bin/composer update
--- stderr ---
Loading composer repositories with package information
Updating dependencies
Lock file operations: 0 installs, 4 updates, 0 removals
- Upgrading mediawiki/mediawiki-codesniffer (v48.0.0 => v50.0.0)
- Upgrading mediawiki/minus-x (1.1.3 => 2.0.1)
- Upgrading phpcsstandards/phpcsutils (1.1.1 => 1.2.2)
- Upgrading squizlabs/php_codesniffer (3.13.2 => 3.13.5)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 0 installs, 4 updates, 0 removals
0 [>---------------------------] 0 [->--------------------------]
- Upgrading squizlabs/php_codesniffer (3.13.2 => 3.13.5): Extracting archive
- Upgrading phpcsstandards/phpcsutils (1.1.1 => 1.2.2): Extracting archive
- Upgrading mediawiki/mediawiki-codesniffer (v48.0.0 => v50.0.0): Extracting archive
- Upgrading mediawiki/minus-x (1.1.3 => 2.0.1): Extracting archive
0/4 [>---------------------------] 0%
3/4 [=====================>------] 75%
4/4 [============================] 100%
Generating autoload files
40 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
No security vulnerability advisories found.
--- stdout ---
PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils
--- end ---
Previously failing phpcs rules: {'MediaWiki.Commenting.FunctionComment.MissingDocumentationPublic', 'MediaWiki.Commenting.FunctionComment.MissingDocumentationProtected', 'MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected'}
$ vendor/bin/phpcs --report=json
--- stdout ---
{"totals":{"errors":9,"warnings":0,"fixable":0},"files":{"\/src\/repo\/bin\/generate-JSPHP-for-karma.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/Layout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/SearchInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/HtmlSnippet.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/Widget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/GroupWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/LabelWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/HiddenInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ToggleWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/IndicatorWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/TabSelectWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ButtonGroupWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ComboBoxInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/RadioInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ProgressBarWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/IconWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/CheckboxInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/HorizontalLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/IconElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/OptionWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/themes\/ApexTheme.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/FlaggedElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/DropdownInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/AccessKeyedElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/widgets.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/NumberInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/ActionFieldLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/TabOptionWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/MessageWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/FormLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/TabIndexedElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/LabelElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/RadioSelectInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/themes\/WikimediaUITheme.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/classes\/LinkedFieldsetLayout.php":{"errors":1,"warnings":0,"messages":[{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":30,"column":15}]},"\/src\/repo\/php\/mixins\/GroupElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/SelectWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/InputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/FieldsetLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/TitledElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/MockWidget.php":{"errors":1,"warnings":0,"messages":[{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":8,"column":15}]},"\/src\/repo\/php\/widgets\/MultilineTextInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/CheckboxMultiselectInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/Theme.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/RequiredElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/classes\/ButtonStyleShowcaseWidget.php":{"errors":3,"warnings":0,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":9,"column":22},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":24,"column":22},{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":81,"column":15}]},"\/src\/repo\/tests\/index.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/.phan\/config.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ToggleSwitchWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/ButtonElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/IndicatorElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/TextInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/JSPHP-generator.php":{"errors":4,"warnings":0,"messages":[{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":5,"column":1},{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":10,"column":1},{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":20,"column":1},{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":26,"column":1}]},"\/src\/repo\/php\/widgets\/ButtonWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/ElementTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/TestCase.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/IndexLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/MenuLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/TabPanelLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/DropdownInputWidgetTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/GroupElementTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ButtonInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/PanelLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/demos.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/SelectFileInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/ButtonWidgetTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/Element.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/FieldLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/TagTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/StackLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/Tag.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/themes\/BlankTheme.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/pages\/widgets.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/pages\/layouts.php":{"errors":0,"warnings":0,"messages":[]}}}
--- end ---
PHPCS run failed
$ vendor/bin/phpcs --report=json
--- stdout ---
{"totals":{"errors":9,"warnings":0,"fixable":0},"files":{"\/src\/repo\/bin\/generate-JSPHP-for-karma.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/Layout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/HtmlSnippet.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/Widget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/SearchInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/HiddenInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/GroupWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/TabSelectWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/LabelWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/RadioInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ToggleWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/CheckboxInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ComboBoxInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/NumberInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/IndicatorWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/LabelElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ButtonGroupWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ProgressBarWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/FlaggedElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/TabOptionWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/HorizontalLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/widgets.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/InputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/OptionWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/IconWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/MultilineTextInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/themes\/ApexTheme.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/DropdownInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/MessageWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/IconElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/ActionFieldLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/FormLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/AccessKeyedElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/TabIndexedElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/classes\/LinkedFieldsetLayout.php":{"errors":1,"warnings":0,"messages":[{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":30,"column":15}]},"\/src\/repo\/php\/widgets\/SelectWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/CheckboxMultiselectInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/Theme.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/MockWidget.php":{"errors":1,"warnings":0,"messages":[{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":8,"column":15}]},"\/src\/repo\/php\/mixins\/RequiredElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/RadioSelectInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/themes\/WikimediaUITheme.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/GroupElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ToggleSwitchWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/FieldsetLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/TitledElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/IndicatorElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/index.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/.phan\/config.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/IndexLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/DropdownInputWidgetTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/demos.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/classes\/ButtonStyleShowcaseWidget.php":{"errors":3,"warnings":0,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":9,"column":22},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":24,"column":22},{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":81,"column":15}]},"\/src\/repo\/tests\/phpunit\/GroupElementTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ButtonWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/TextInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/JSPHP-generator.php":{"errors":4,"warnings":0,"messages":[{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":5,"column":1},{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":10,"column":1},{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":20,"column":1},{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":26,"column":1}]},"\/src\/repo\/tests\/phpunit\/TestCase.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/ElementTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/MenuLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/PanelLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/mixins\/ButtonElement.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/TabPanelLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/ButtonInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/widgets\/SelectFileInputWidget.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/ButtonWidgetTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/Element.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/FieldLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/layouts\/StackLayout.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/tests\/phpunit\/TagTest.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/Tag.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/php\/themes\/BlankTheme.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/pages\/widgets.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/demos\/pages\/layouts.php":{"errors":0,"warnings":0,"messages":[]}}}
--- end ---
$ git checkout /src/repo/.phpcs.xml
--- stderr ---
Updated 1 path from the index
--- stdout ---
--- end ---
$ /usr/bin/composer install
--- stderr ---
Installing dependencies from lock file (including require-dev)
Verifying lock file contents can be installed on current platform.
Nothing to install, update or remove
Generating autoload files
40 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---
--- end ---
$ /usr/bin/composer test
--- stderr ---
> parallel-lint . --exclude vendor --exclude demos/vendor
> phpcs -sp --cache
> phpunit
> covers-validator
> minus-x check .
> phan -d . -p --require-config-exists --allow-polyfill-parser --long-progress-bar
Parsing files...
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 54 / 1888 ( 4%) 59MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 108 / 1888 ( 8%) 79MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 162 / 1888 ( 15%) 85MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 216 / 1888 ( 15%) 85MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 270 / 1888 ( 15%) 85MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 324 / 1888 ( 20%) 103MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 378 / 1888 ( 20%) 103MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 432 / 1888 ( 23%) 123MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 486 / 1888 ( 29%) 130MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 540 / 1888 ( 29%) 130MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 594 / 1888 ( 35%) 136MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 648 / 1888 ( 35%) 136MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 702 / 1888 ( 38%) 148MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 756 / 1888 ( 44%) 154MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 810 / 1888 ( 44%) 154MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 864 / 1888 ( 48%) 160MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 918 / 1888 ( 54%) 167MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 972 / 1888 ( 54%) 167MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1026 / 1888 ( 54%) 167MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1080 / 1888 ( 58%) 175MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1134 / 1888 ( 62%) 182MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1188 / 1888 ( 62%) 182MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1242 / 1888 ( 67%) 189MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1296 / 1888 ( 70%) 198MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1350 / 1888 ( 74%) 202MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1404 / 1888 ( 80%) 211MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1458 / 1888 ( 80%) 211MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1512 / 1888 ( 85%) 219MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1566 / 1888 ( 85%) 219MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1620 / 1888 ( 88%) 228MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1674 / 1888 ( 91%) 238MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1728 / 1888 ( 94%) 246MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1782 / 1888 ( 95%) 256MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1836 / 1888 (100%) 276MB
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 1888 / 1888 (100%) 276MB
Analyzing classes...
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 319MB
Analyzing functions...
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 319MB
Analyzing methods...
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 330MB
Analyzing files...
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ 54 / 57 (100%) 344MB
░░░ 57 / 57 (100%) 344MB
--- stdout ---
PHP 8.4.18 | 10 parallel jobs
............................................................ 60/75 ( 80%)
............... 75/75 (100%)
Checked 75 files in 0.3 seconds
No syntax error found
..................................... 37 / 37 (100%)
Time: 289ms; Memory: 10MB
PHPUnit 10.5.63 by Sebastian Bergmann and contributors.
Runtime: PHP 8.4.18
Configuration: /src/repo/phpunit.xml.dist
.................................................. 50 / 50 (100%)
Time: 00:00.023, Memory: 8.00 MB
OK (50 tests, 83 assertions)
CoversValidator 1.7.0
Validation complete. All @covers tags are valid.
MinusX
======
Processing /src/repo...
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.............................................................
.......................................
All good!
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"ajv": {
"name": "ajv",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1113714,
"name": "ajv",
"dependency": "ajv",
"title": "ajv has ReDoS when using `$data` option",
"url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6",
"severity": "moderate",
"cwe": [
"CWE-400",
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<6.14.0"
}
],
"effects": [],
"range": "<6.14.0",
"nodes": [
"node_modules/ajv"
],
"fixAvailable": true
},
"brace-expansion": {
"name": "brace-expansion",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1115540,
"name": "brace-expansion",
"dependency": "brace-expansion",
"title": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v",
"severity": "moderate",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
"range": "<1.1.13"
},
{
"source": 1115541,
"name": "brace-expansion",
"dependency": "brace-expansion",
"title": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v",
"severity": "moderate",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
"range": ">=2.0.0 <2.0.3"
}
],
"effects": [],
"range": "<1.1.13 || >=2.0.0 <2.0.3",
"nodes": [
"node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion",
"node_modules/brace-expansion"
],
"fixAvailable": true
},
"flatted": {
"name": "flatted",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1114526,
"name": "flatted",
"dependency": "flatted",
"title": "flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"url": "https://github.com/advisories/GHSA-25h7-pfq9-p65f",
"severity": "high",
"cwe": [
"CWE-674"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.4.0"
},
{
"source": 1115357,
"name": "flatted",
"dependency": "flatted",
"title": "Prototype Pollution via parse() in NodeJS flatted",
"url": "https://github.com/advisories/GHSA-rf6f-7fwh-wjgh",
"severity": "high",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<=3.4.1"
}
],
"effects": [],
"range": "<=3.4.1",
"nodes": [
"node_modules/flatted"
],
"fixAvailable": true
},
"gaze": {
"name": "gaze",
"severity": "high",
"isDirect": false,
"via": [
"globule"
],
"effects": [
"grunt-contrib-watch"
],
"range": ">=0.4.0",
"nodes": [
"node_modules/gaze"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"globule": {
"name": "globule",
"severity": "high",
"isDirect": false,
"via": [
"lodash",
"minimatch"
],
"effects": [
"gaze"
],
"range": "*",
"nodes": [
"node_modules/globule"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt": {
"name": "grunt",
"severity": "high",
"isDirect": true,
"via": [
"grunt-legacy-log",
"grunt-legacy-util",
"minimatch"
],
"effects": [
"grunt-contrib-clean",
"grunt-contrib-concat",
"grunt-cssjanus",
"grunt-eslint",
"grunt-exec",
"grunt-file-exists",
"grunt-karma",
"grunt-promise-q"
],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt"
],
"fixAvailable": false
},
"grunt-contrib-clean": {
"name": "grunt-contrib-clean",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt-contrib-clean"
],
"fixAvailable": {
"name": "grunt-contrib-clean",
"version": "0.3.2",
"isSemVerMajor": true
}
},
"grunt-contrib-concat": {
"name": "grunt-contrib-concat",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.1.2-rc5",
"nodes": [
"node_modules/grunt-contrib-concat"
],
"fixAvailable": {
"name": "grunt-contrib-concat",
"version": "0.1.1",
"isSemVerMajor": true
}
},
"grunt-contrib-watch": {
"name": "grunt-contrib-watch",
"severity": "high",
"isDirect": true,
"via": [
"gaze"
],
"effects": [],
"range": ">=0.5.0",
"nodes": [
"node_modules/grunt-contrib-watch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt-cssjanus": {
"name": "grunt-cssjanus",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-cssjanus"
],
"fixAvailable": false
},
"grunt-eslint": {
"name": "grunt-eslint",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "<=1.0.0 || >=18.1.0",
"nodes": [
"node_modules/grunt-eslint"
],
"fixAvailable": {
"name": "grunt-eslint",
"version": "18.0.0",
"isSemVerMajor": true
}
},
"grunt-exec": {
"name": "grunt-exec",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-rc1",
"nodes": [
"node_modules/grunt-exec"
],
"fixAvailable": {
"name": "grunt-exec",
"version": "0.3.0",
"isSemVerMajor": true
}
},
"grunt-file-exists": {
"name": "grunt-file-exists",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-file-exists"
],
"fixAvailable": false
},
"grunt-karma": {
"name": "grunt-karma",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-karma"
],
"fixAvailable": false
},
"grunt-legacy-log": {
"name": "grunt-legacy-log",
"severity": "high",
"isDirect": false,
"via": [
"grunt-legacy-log-utils",
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.0-rc1",
"nodes": [
"node_modules/grunt-legacy-log"
],
"fixAvailable": false
},
"grunt-legacy-log-utils": {
"name": "grunt-legacy-log-utils",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt-legacy-log"
],
"range": ">=1.0.0",
"nodes": [
"node_modules/grunt-legacy-log-utils"
],
"fixAvailable": false
},
"grunt-legacy-util": {
"name": "grunt-legacy-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.0-rc1",
"nodes": [
"node_modules/grunt-legacy-util"
],
"fixAvailable": false
},
"grunt-promise-q": {
"name": "grunt-promise-q",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-promise-q"
],
"fixAvailable": false
},
"gulp-util": {
"name": "gulp-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash.template"
],
"effects": [
"remap-istanbul"
],
"range": ">=1.1.0",
"nodes": [
"node_modules/gulp-util"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"handlebars": {
"name": "handlebars",
"severity": "critical",
"isDirect": false,
"via": [
{
"source": 1115538,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block",
"url": "https://github.com/advisories/GHSA-3mfm-83xf-c92r",
"severity": "high",
"cwe": [
"CWE-94",
"CWE-843"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115539,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection via AST Type Confusion",
"url": "https://github.com/advisories/GHSA-2w6w-674q-4c4q",
"severity": "critical",
"cwe": [
"CWE-94",
"CWE-843"
],
"cvss": {
"score": 9.8,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115544,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection",
"url": "https://github.com/advisories/GHSA-2qvq-rjwj-gvw9",
"severity": "moderate",
"cwe": [
"CWE-79",
"CWE-1321"
],
"cvss": {
"score": 4.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
"range": ">=4.0.0 <4.7.9"
},
{
"source": 1115588,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry",
"url": "https://github.com/advisories/GHSA-7rx3-28cr-v5wh",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 4.8,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
"range": ">=4.6.0 <=4.7.8"
},
{
"source": 1115589,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has a Property Access Validation Bypass in container.lookup",
"url": "https://github.com/advisories/GHSA-442j-39wm-28r2",
"severity": "low",
"cwe": [
"CWE-367"
],
"cvss": {
"score": 3.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115692,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options",
"url": "https://github.com/advisories/GHSA-xjpj-3mr7-gcpf",
"severity": "high",
"cwe": [
"CWE-79",
"CWE-94",
"CWE-116"
],
"cvss": {
"score": 8.3,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115693,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial",
"url": "https://github.com/advisories/GHSA-xhpv-hc6g-r9c6",
"severity": "high",
"cwe": [
"CWE-94",
"CWE-843"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115694,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation",
"url": "https://github.com/advisories/GHSA-9cx6-37pm-9jff",
"severity": "high",
"cwe": [
"CWE-754"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=4.0.0 <=4.7.8"
}
],
"effects": [],
"range": "4.0.0 - 4.7.8",
"nodes": [
"node_modules/handlebars"
],
"fixAvailable": true
},
"karma-remap-istanbul": {
"name": "karma-remap-istanbul",
"severity": "high",
"isDirect": true,
"via": [
"remap-istanbul"
],
"effects": [],
"range": ">=0.0.3",
"nodes": [
"node_modules/karma-remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"lodash": {
"name": "lodash",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115806,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Code Injection via `_.template` imports key names",
"url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc",
"severity": "high",
"cwe": [
"CWE-94"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.17.23"
},
{
"source": 1115810,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`",
"url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
},
"range": "<=4.17.23"
}
],
"effects": [
"globule",
"grunt-legacy-log",
"grunt-legacy-log-utils",
"grunt-legacy-util"
],
"range": "<=4.17.23",
"nodes": [
"node_modules/lodash"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"lodash.template": {
"name": "lodash.template",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1106902,
"name": "lodash.template",
"dependency": "lodash.template",
"title": "Command Injection in lodash",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"severity": "high",
"cwe": [
"CWE-77",
"CWE-94"
],
"cvss": {
"score": 7.2,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
"range": "<=4.5.0"
}
],
"effects": [
"gulp-util"
],
"range": "<=4.5.0",
"nodes": [
"node_modules/lodash.template"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"meow": {
"name": "meow",
"severity": "high",
"isDirect": false,
"via": [
"trim-newlines"
],
"effects": [],
"range": "3.4.0 - 5.0.0",
"nodes": [
"node_modules/gulp-util/node_modules/meow"
],
"fixAvailable": true
},
"minimatch": {
"name": "minimatch",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1113459,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<3.1.3"
},
{
"source": 1113465,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": ">=9.0.0 <9.0.6"
},
{
"source": 1113538,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
"severity": "high",
"cwe": [
"CWE-407"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.3"
},
{
"source": 1113544,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
"severity": "high",
"cwe": [
"CWE-407"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=9.0.0 <9.0.7"
},
{
"source": 1113546,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.4"
},
{
"source": 1113552,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=9.0.0 <9.0.7"
}
],
"effects": [
"globule",
"grunt"
],
"range": "<=3.1.3 || 9.0.0 - 9.0.6",
"nodes": [
"node_modules/@eslint/eslintrc/node_modules/minimatch",
"node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch",
"node_modules/eslint/node_modules/minimatch",
"node_modules/minimatch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"picomatch": {
"name": "picomatch",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115549,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
},
"range": "<2.3.2"
},
{
"source": 1115551,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
},
"range": ">=4.0.0 <4.0.4"
},
{
"source": 1115552,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch has a ReDoS vulnerability via extglob quantifiers",
"url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<2.3.2"
},
{
"source": 1115554,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch has a ReDoS vulnerability via extglob quantifiers",
"url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=4.0.0 <4.0.4"
}
],
"effects": [],
"range": "<=2.3.1 || 4.0.0 - 4.0.3",
"nodes": [
"node_modules/@stylistic/eslint-plugin/node_modules/picomatch",
"node_modules/picomatch",
"node_modules/ts-declaration-location/node_modules/picomatch"
],
"fixAvailable": true
},
"remap-istanbul": {
"name": "remap-istanbul",
"severity": "high",
"isDirect": false,
"via": [
"gulp-util"
],
"effects": [
"karma-remap-istanbul"
],
"range": "<=0.9.6",
"nodes": [
"node_modules/remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"socket.io-parser": {
"name": "socket.io-parser",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115154,
"name": "socket.io-parser",
"dependency": "socket.io-parser",
"title": "socket.io allows an unbounded number of binary attachments",
"url": "https://github.com/advisories/GHSA-677m-j7p3-52f9",
"severity": "high",
"cwe": [
"CWE-754"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": ">=4.0.0 <4.2.6"
}
],
"effects": [],
"range": "4.0.0 - 4.2.5",
"nodes": [
"node_modules/socket.io-parser"
],
"fixAvailable": true
},
"svgo": {
"name": "svgo",
"severity": "high",
"isDirect": true,
"via": [
{
"source": 1114151,
"name": "svgo",
"dependency": "svgo",
"title": "SVGO DoS through entity expansion in DOCTYPE (Billion Laughs)",
"url": "https://github.com/advisories/GHSA-xpqw-6gx7-v673",
"severity": "high",
"cwe": [
"CWE-776"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=3.0.0 <3.3.3"
}
],
"effects": [],
"range": "3.0.0 - 3.3.2",
"nodes": [
"node_modules/svgo"
],
"fixAvailable": {
"name": "svgo",
"version": "3.3.3",
"isSemVerMajor": false
}
},
"trim-newlines": {
"name": "trim-newlines",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1095100,
"name": "trim-newlines",
"dependency": "trim-newlines",
"title": "Uncontrolled Resource Consumption in trim-newlines",
"url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v",
"severity": "high",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.0.1"
}
],
"effects": [
"meow"
],
"range": "<3.0.1",
"nodes": [
"node_modules/trim-newlines"
],
"fixAvailable": true
},
"underscore": {
"name": "underscore",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1113950,
"name": "underscore",
"dependency": "underscore",
"title": "Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack",
"url": "https://github.com/advisories/GHSA-qpx9-hpmf-5gmw",
"severity": "high",
"cwe": [
"CWE-674",
"CWE-770"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<=1.13.7"
}
],
"effects": [],
"range": "<=1.13.7",
"nodes": [
"node_modules/underscore"
],
"fixAvailable": true
},
"yaml": {
"name": "yaml",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1115556,
"name": "yaml",
"dependency": "yaml",
"title": "yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
"url": "https://github.com/advisories/GHSA-48c2-rrv3-qjmp",
"severity": "moderate",
"cwe": [
"CWE-674"
],
"cvss": {
"score": 4.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
},
"range": ">=2.0.0 <2.8.3"
}
],
"effects": [],
"range": "2.0.0 - 2.8.2",
"nodes": [
"node_modules/yaml"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 3,
"high": 28,
"critical": 1,
"total": 32
},
"dependencies": {
"prod": 4,
"dev": 810,
"optional": 12,
"peer": 2,
"peerOptional": 0,
"total": 813
}
}
}
--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
{
"added": 815,
"removed": 0,
"changed": 0,
"audited": 816,
"funding": 128,
"audit": {
"auditReportVersion": 2,
"vulnerabilities": {
"ajv": {
"name": "ajv",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1113714,
"name": "ajv",
"dependency": "ajv",
"title": "ajv has ReDoS when using `$data` option",
"url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6",
"severity": "moderate",
"cwe": [
"CWE-400",
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<6.14.0"
}
],
"effects": [],
"range": "<6.14.0",
"nodes": [
""
],
"fixAvailable": true
},
"brace-expansion": {
"name": "brace-expansion",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1115540,
"name": "brace-expansion",
"dependency": "brace-expansion",
"title": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v",
"severity": "moderate",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
"range": "<1.1.13"
},
{
"source": 1115541,
"name": "brace-expansion",
"dependency": "brace-expansion",
"title": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v",
"severity": "moderate",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
"range": ">=2.0.0 <2.0.3"
}
],
"effects": [],
"range": "<1.1.13 || >=2.0.0 <2.0.3",
"nodes": [
"",
""
],
"fixAvailable": true
},
"flatted": {
"name": "flatted",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1114526,
"name": "flatted",
"dependency": "flatted",
"title": "flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"url": "https://github.com/advisories/GHSA-25h7-pfq9-p65f",
"severity": "high",
"cwe": [
"CWE-674"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.4.0"
},
{
"source": 1115357,
"name": "flatted",
"dependency": "flatted",
"title": "Prototype Pollution via parse() in NodeJS flatted",
"url": "https://github.com/advisories/GHSA-rf6f-7fwh-wjgh",
"severity": "high",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<=3.4.1"
}
],
"effects": [],
"range": "<=3.4.1",
"nodes": [
""
],
"fixAvailable": true
},
"gaze": {
"name": "gaze",
"severity": "high",
"isDirect": false,
"via": [
"globule"
],
"effects": [
"grunt-contrib-watch"
],
"range": ">=0.4.0",
"nodes": [
"node_modules/gaze"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"globule": {
"name": "globule",
"severity": "high",
"isDirect": false,
"via": [
"lodash",
"minimatch"
],
"effects": [
"gaze"
],
"range": "*",
"nodes": [
""
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt": {
"name": "grunt",
"severity": "high",
"isDirect": true,
"via": [
"grunt-legacy-log",
"grunt-legacy-util",
"minimatch"
],
"effects": [
"grunt-contrib-clean",
"grunt-contrib-concat",
"grunt-cssjanus",
"grunt-eslint",
"grunt-exec",
"grunt-file-exists",
"grunt-karma",
"grunt-promise-q"
],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt"
],
"fixAvailable": false
},
"grunt-contrib-clean": {
"name": "grunt-contrib-clean",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt-contrib-clean"
],
"fixAvailable": {
"name": "grunt-contrib-clean",
"version": "0.3.2",
"isSemVerMajor": true
}
},
"grunt-contrib-concat": {
"name": "grunt-contrib-concat",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.1.2-rc5",
"nodes": [
"node_modules/grunt-contrib-concat"
],
"fixAvailable": {
"name": "grunt-contrib-concat",
"version": "0.1.1",
"isSemVerMajor": true
}
},
"grunt-contrib-watch": {
"name": "grunt-contrib-watch",
"severity": "high",
"isDirect": true,
"via": [
"gaze"
],
"effects": [],
"range": ">=0.5.0",
"nodes": [
"node_modules/grunt-contrib-watch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt-cssjanus": {
"name": "grunt-cssjanus",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-cssjanus"
],
"fixAvailable": false
},
"grunt-eslint": {
"name": "grunt-eslint",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "<=1.0.0 || >=18.1.0",
"nodes": [
"node_modules/grunt-eslint"
],
"fixAvailable": {
"name": "grunt-eslint",
"version": "18.0.0",
"isSemVerMajor": true
}
},
"grunt-exec": {
"name": "grunt-exec",
"severity": "high",
"isDirect": false,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-rc1",
"nodes": [
""
],
"fixAvailable": {
"name": "grunt-exec",
"version": "0.3.0",
"isSemVerMajor": true
}
},
"grunt-file-exists": {
"name": "grunt-file-exists",
"severity": "high",
"isDirect": false,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
""
],
"fixAvailable": false
},
"grunt-karma": {
"name": "grunt-karma",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-karma"
],
"fixAvailable": false
},
"grunt-legacy-log": {
"name": "grunt-legacy-log",
"severity": "high",
"isDirect": false,
"via": [
"grunt-legacy-log-utils",
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.0-rc1",
"nodes": [
"node_modules/grunt-legacy-log"
],
"fixAvailable": false
},
"grunt-legacy-log-utils": {
"name": "grunt-legacy-log-utils",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt-legacy-log"
],
"range": ">=1.0.0",
"nodes": [
"node_modules/grunt-legacy-log-utils"
],
"fixAvailable": false
},
"grunt-legacy-util": {
"name": "grunt-legacy-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.0-rc1",
"nodes": [
"node_modules/grunt-legacy-util"
],
"fixAvailable": false
},
"grunt-promise-q": {
"name": "grunt-promise-q",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-promise-q"
],
"fixAvailable": false
},
"gulp-util": {
"name": "gulp-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash.template"
],
"effects": [
"remap-istanbul"
],
"range": ">=1.1.0",
"nodes": [
"node_modules/gulp-util"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"handlebars": {
"name": "handlebars",
"severity": "critical",
"isDirect": false,
"via": [
{
"source": 1115538,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block",
"url": "https://github.com/advisories/GHSA-3mfm-83xf-c92r",
"severity": "high",
"cwe": [
"CWE-94",
"CWE-843"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115539,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection via AST Type Confusion",
"url": "https://github.com/advisories/GHSA-2w6w-674q-4c4q",
"severity": "critical",
"cwe": [
"CWE-94",
"CWE-843"
],
"cvss": {
"score": 9.8,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115544,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection",
"url": "https://github.com/advisories/GHSA-2qvq-rjwj-gvw9",
"severity": "moderate",
"cwe": [
"CWE-79",
"CWE-1321"
],
"cvss": {
"score": 4.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
"range": ">=4.0.0 <4.7.9"
},
{
"source": 1115588,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry",
"url": "https://github.com/advisories/GHSA-7rx3-28cr-v5wh",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 4.8,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
"range": ">=4.6.0 <=4.7.8"
},
{
"source": 1115589,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has a Property Access Validation Bypass in container.lookup",
"url": "https://github.com/advisories/GHSA-442j-39wm-28r2",
"severity": "low",
"cwe": [
"CWE-367"
],
"cvss": {
"score": 3.7,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115692,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options",
"url": "https://github.com/advisories/GHSA-xjpj-3mr7-gcpf",
"severity": "high",
"cwe": [
"CWE-79",
"CWE-94",
"CWE-116"
],
"cvss": {
"score": 8.3,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115693,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial",
"url": "https://github.com/advisories/GHSA-xhpv-hc6g-r9c6",
"severity": "high",
"cwe": [
"CWE-94",
"CWE-843"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.7.8"
},
{
"source": 1115694,
"name": "handlebars",
"dependency": "handlebars",
"title": "Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation",
"url": "https://github.com/advisories/GHSA-9cx6-37pm-9jff",
"severity": "high",
"cwe": [
"CWE-754"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=4.0.0 <=4.7.8"
}
],
"effects": [],
"range": "4.0.0 - 4.7.8",
"nodes": [
""
],
"fixAvailable": true
},
"karma-remap-istanbul": {
"name": "karma-remap-istanbul",
"severity": "high",
"isDirect": true,
"via": [
"remap-istanbul"
],
"effects": [],
"range": ">=0.0.3",
"nodes": [
"node_modules/karma-remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"lodash": {
"name": "lodash",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115806,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Code Injection via `_.template` imports key names",
"url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc",
"severity": "high",
"cwe": [
"CWE-94"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.17.23"
},
{
"source": 1115810,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`",
"url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
},
"range": "<=4.17.23"
}
],
"effects": [
"globule",
"grunt-legacy-log",
"grunt-legacy-log-utils",
"grunt-legacy-util"
],
"range": "<=4.17.23",
"nodes": [
"node_modules/lodash"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"lodash.template": {
"name": "lodash.template",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1106902,
"name": "lodash.template",
"dependency": "lodash.template",
"title": "Command Injection in lodash",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"severity": "high",
"cwe": [
"CWE-77",
"CWE-94"
],
"cvss": {
"score": 7.2,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
"range": "<=4.5.0"
}
],
"effects": [
"gulp-util"
],
"range": "<=4.5.0",
"nodes": [
"node_modules/lodash.template"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"meow": {
"name": "meow",
"severity": "high",
"isDirect": false,
"via": [
"trim-newlines"
],
"effects": [],
"range": "3.4.0 - 5.0.0",
"nodes": [
"node_modules/gulp-util/node_modules/meow"
],
"fixAvailable": true
},
"minimatch": {
"name": "minimatch",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1113459,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<3.1.3"
},
{
"source": 1113465,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": ">=9.0.0 <9.0.6"
},
{
"source": 1113538,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
"severity": "high",
"cwe": [
"CWE-407"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.3"
},
{
"source": 1113544,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
"severity": "high",
"cwe": [
"CWE-407"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=9.0.0 <9.0.7"
},
{
"source": 1113546,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.4"
},
{
"source": 1113552,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=9.0.0 <9.0.7"
}
],
"effects": [
"globule",
"grunt"
],
"range": "<=3.1.3 || 9.0.0 - 9.0.6",
"nodes": [
"",
"",
"",
"node_modules/minimatch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"picomatch": {
"name": "picomatch",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115549,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
},
"range": "<2.3.2"
},
{
"source": 1115551,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
},
"range": ">=4.0.0 <4.0.4"
},
{
"source": 1115552,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch has a ReDoS vulnerability via extglob quantifiers",
"url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<2.3.2"
},
{
"source": 1115554,
"name": "picomatch",
"dependency": "picomatch",
"title": "Picomatch has a ReDoS vulnerability via extglob quantifiers",
"url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=4.0.0 <4.0.4"
}
],
"effects": [],
"range": "<=2.3.1 || 4.0.0 - 4.0.3",
"nodes": [
"",
"",
""
],
"fixAvailable": true
},
"remap-istanbul": {
"name": "remap-istanbul",
"severity": "high",
"isDirect": false,
"via": [
"gulp-util"
],
"effects": [
"karma-remap-istanbul"
],
"range": "<=0.9.6",
"nodes": [
"node_modules/remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"socket.io-parser": {
"name": "socket.io-parser",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115154,
"name": "socket.io-parser",
"dependency": "socket.io-parser",
"title": "socket.io allows an unbounded number of binary attachments",
"url": "https://github.com/advisories/GHSA-677m-j7p3-52f9",
"severity": "high",
"cwe": [
"CWE-754"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": ">=4.0.0 <4.2.6"
}
],
"effects": [],
"range": "4.0.0 - 4.2.5",
"nodes": [
""
],
"fixAvailable": true
},
"svgo": {
"name": "svgo",
"severity": "high",
"isDirect": true,
"via": [
{
"source": 1114151,
"name": "svgo",
"dependency": "svgo",
"title": "SVGO DoS through entity expansion in DOCTYPE (Billion Laughs)",
"url": "https://github.com/advisories/GHSA-xpqw-6gx7-v673",
"severity": "high",
"cwe": [
"CWE-776"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=3.0.0 <3.3.3"
}
],
"effects": [],
"range": "3.0.0 - 3.3.2",
"nodes": [
"node_modules/svgo"
],
"fixAvailable": {
"name": "svgo",
"version": "3.3.3",
"isSemVerMajor": false
}
},
"trim-newlines": {
"name": "trim-newlines",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1095100,
"name": "trim-newlines",
"dependency": "trim-newlines",
"title": "Uncontrolled Resource Consumption in trim-newlines",
"url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v",
"severity": "high",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.0.1"
}
],
"effects": [
"meow"
],
"range": "<3.0.1",
"nodes": [
"node_modules/trim-newlines"
],
"fixAvailable": true
},
"underscore": {
"name": "underscore",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1113950,
"name": "underscore",
"dependency": "underscore",
"title": "Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack",
"url": "https://github.com/advisories/GHSA-qpx9-hpmf-5gmw",
"severity": "high",
"cwe": [
"CWE-674",
"CWE-770"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<=1.13.7"
}
],
"effects": [],
"range": "<=1.13.7",
"nodes": [
""
],
"fixAvailable": true
},
"yaml": {
"name": "yaml",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1115556,
"name": "yaml",
"dependency": "yaml",
"title": "yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
"url": "https://github.com/advisories/GHSA-48c2-rrv3-qjmp",
"severity": "moderate",
"cwe": [
"CWE-674"
],
"cvss": {
"score": 4.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
},
"range": ">=2.0.0 <2.8.3"
}
],
"effects": [],
"range": "2.0.0 - 2.8.2",
"nodes": [
""
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 3,
"high": 28,
"critical": 1,
"total": 32
},
"dependencies": {
"prod": 4,
"dev": 812,
"optional": 12,
"peer": 2,
"peerOptional": 0,
"total": 815
}
}
}
}
--- end ---
{"added": 815, "removed": 0, "changed": 0, "audited": 816, "funding": 128, "audit": {"auditReportVersion": 2, "vulnerabilities": {"ajv": {"name": "ajv", "severity": "moderate", "isDirect": false, "via": [{"source": 1113714, "name": "ajv", "dependency": "ajv", "title": "ajv has ReDoS when using `$data` option", "url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6", "severity": "moderate", "cwe": ["CWE-400", "CWE-1333"], "cvss": {"score": 0, "vectorString": null}, "range": "<6.14.0"}], "effects": [], "range": "<6.14.0", "nodes": [""], "fixAvailable": true}, "brace-expansion": {"name": "brace-expansion", "severity": "moderate", "isDirect": false, "via": [{"source": 1115540, "name": "brace-expansion", "dependency": "brace-expansion", "title": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion", "url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v", "severity": "moderate", "cwe": ["CWE-400"], "cvss": {"score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}, "range": "<1.1.13"}, {"source": 1115541, "name": "brace-expansion", "dependency": "brace-expansion", "title": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion", "url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v", "severity": "moderate", "cwe": ["CWE-400"], "cvss": {"score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}, "range": ">=2.0.0 <2.0.3"}], "effects": [], "range": "<1.1.13 || >=2.0.0 <2.0.3", "nodes": ["", ""], "fixAvailable": true}, "flatted": {"name": "flatted", "severity": "high", "isDirect": false, "via": [{"source": 1114526, "name": "flatted", "dependency": "flatted", "title": "flatted vulnerable to unbounded recursion DoS in parse() revive phase", "url": "https://github.com/advisories/GHSA-25h7-pfq9-p65f", "severity": "high", "cwe": ["CWE-674"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.4.0"}, {"source": 1115357, "name": "flatted", "dependency": "flatted", "title": "Prototype Pollution via parse() in NodeJS flatted", "url": "https://github.com/advisories/GHSA-rf6f-7fwh-wjgh", "severity": "high", "cwe": ["CWE-1321"], "cvss": {"score": 0, "vectorString": null}, "range": "<=3.4.1"}], "effects": [], "range": "<=3.4.1", "nodes": [""], "fixAvailable": true}, "gaze": {"name": "gaze", "severity": "high", "isDirect": false, "via": ["globule"], "effects": ["grunt-contrib-watch"], "range": ">=0.4.0", "nodes": ["node_modules/gaze"], "fixAvailable": {"name": "grunt-contrib-watch", "version": "0.4.4", "isSemVerMajor": true}}, "globule": {"name": "globule", "severity": "high", "isDirect": false, "via": ["lodash", "minimatch"], "effects": ["gaze"], "range": "*", "nodes": [""], "fixAvailable": {"name": "grunt-contrib-watch", "version": "0.4.4", "isSemVerMajor": true}}, "grunt": {"name": "grunt", "severity": "high", "isDirect": true, "via": ["grunt-legacy-log", "grunt-legacy-util", "minimatch"], "effects": ["grunt-contrib-clean", "grunt-contrib-concat", "grunt-cssjanus", "grunt-eslint", "grunt-exec", "grunt-file-exists", "grunt-karma", "grunt-promise-q"], "range": ">=0.4.0-a", "nodes": ["node_modules/grunt"], "fixAvailable": false}, "grunt-contrib-clean": {"name": "grunt-contrib-clean", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": ">=0.4.0-a", "nodes": ["node_modules/grunt-contrib-clean"], "fixAvailable": {"name": "grunt-contrib-clean", "version": "0.3.2", "isSemVerMajor": true}}, "grunt-contrib-concat": {"name": "grunt-contrib-concat", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": ">=0.1.2-rc5", "nodes": ["node_modules/grunt-contrib-concat"], "fixAvailable": {"name": "grunt-contrib-concat", "version": "0.1.1", "isSemVerMajor": true}}, "grunt-contrib-watch": {"name": "grunt-contrib-watch", "severity": "high", "isDirect": true, "via": ["gaze"], "effects": [], "range": ">=0.5.0", "nodes": ["node_modules/grunt-contrib-watch"], "fixAvailable": {"name": "grunt-contrib-watch", "version": "0.4.4", "isSemVerMajor": true}}, "grunt-cssjanus": {"name": "grunt-cssjanus", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": "*", "nodes": ["node_modules/grunt-cssjanus"], "fixAvailable": false}, "grunt-eslint": {"name": "grunt-eslint", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": "<=1.0.0 || >=18.1.0", "nodes": ["node_modules/grunt-eslint"], "fixAvailable": {"name": "grunt-eslint", "version": "18.0.0", "isSemVerMajor": true}}, "grunt-exec": {"name": "grunt-exec", "severity": "high", "isDirect": false, "via": ["grunt"], "effects": [], "range": ">=0.4.0-rc1", "nodes": [""], "fixAvailable": {"name": "grunt-exec", "version": "0.3.0", "isSemVerMajor": true}}, "grunt-file-exists": {"name": "grunt-file-exists", "severity": "high", "isDirect": false, "via": ["grunt"], "effects": [], "range": "*", "nodes": [""], "fixAvailable": false}, "grunt-karma": {"name": "grunt-karma", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": "*", "nodes": ["node_modules/grunt-karma"], "fixAvailable": false}, "grunt-legacy-log": {"name": "grunt-legacy-log", "severity": "high", "isDirect": false, "via": ["grunt-legacy-log-utils", "lodash"], "effects": ["grunt"], "range": ">=1.0.0-rc1", "nodes": ["node_modules/grunt-legacy-log"], "fixAvailable": false}, "grunt-legacy-log-utils": {"name": "grunt-legacy-log-utils", "severity": "high", "isDirect": false, "via": ["lodash"], "effects": ["grunt-legacy-log"], "range": ">=1.0.0", "nodes": ["node_modules/grunt-legacy-log-utils"], "fixAvailable": false}, "grunt-legacy-util": {"name": "grunt-legacy-util", "severity": "high", "isDirect": false, "via": ["lodash"], "effects": ["grunt"], "range": ">=1.0.0-rc1", "nodes": ["node_modules/grunt-legacy-util"], "fixAvailable": false}, "grunt-promise-q": {"name": "grunt-promise-q", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": "*", "nodes": ["node_modules/grunt-promise-q"], "fixAvailable": false}, "gulp-util": {"name": "gulp-util", "severity": "high", "isDirect": false, "via": ["lodash.template"], "effects": ["remap-istanbul"], "range": ">=1.1.0", "nodes": ["node_modules/gulp-util"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "handlebars": {"name": "handlebars", "severity": "critical", "isDirect": false, "via": [{"source": 1115538, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block", "url": "https://github.com/advisories/GHSA-3mfm-83xf-c92r", "severity": "high", "cwe": ["CWE-94", "CWE-843"], "cvss": {"score": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "range": ">=4.0.0 <=4.7.8"}, {"source": 1115539, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has JavaScript Injection via AST Type Confusion", "url": "https://github.com/advisories/GHSA-2w6w-674q-4c4q", "severity": "critical", "cwe": ["CWE-94", "CWE-843"], "cvss": {"score": 9.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "range": ">=4.0.0 <=4.7.8"}, {"source": 1115544, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection", "url": "https://github.com/advisories/GHSA-2qvq-rjwj-gvw9", "severity": "moderate", "cwe": ["CWE-79", "CWE-1321"], "cvss": {"score": 4.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"}, "range": ">=4.0.0 <4.7.9"}, {"source": 1115588, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry", "url": "https://github.com/advisories/GHSA-7rx3-28cr-v5wh", "severity": "moderate", "cwe": ["CWE-1321"], "cvss": {"score": 4.8, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}, "range": ">=4.6.0 <=4.7.8"}, {"source": 1115589, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has a Property Access Validation Bypass in container.lookup", "url": "https://github.com/advisories/GHSA-442j-39wm-28r2", "severity": "low", "cwe": ["CWE-367"], "cvss": {"score": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}, "range": ">=4.0.0 <=4.7.8"}, {"source": 1115692, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options", "url": "https://github.com/advisories/GHSA-xjpj-3mr7-gcpf", "severity": "high", "cwe": ["CWE-79", "CWE-94", "CWE-116"], "cvss": {"score": 8.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"}, "range": ">=4.0.0 <=4.7.8"}, {"source": 1115693, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial", "url": "https://github.com/advisories/GHSA-xhpv-hc6g-r9c6", "severity": "high", "cwe": ["CWE-94", "CWE-843"], "cvss": {"score": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "range": ">=4.0.0 <=4.7.8"}, {"source": 1115694, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation", "url": "https://github.com/advisories/GHSA-9cx6-37pm-9jff", "severity": "high", "cwe": ["CWE-754"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=4.0.0 <=4.7.8"}], "effects": [], "range": "4.0.0 - 4.7.8", "nodes": [""], "fixAvailable": true}, "karma-remap-istanbul": {"name": "karma-remap-istanbul", "severity": "high", "isDirect": true, "via": ["remap-istanbul"], "effects": [], "range": ">=0.0.3", "nodes": ["node_modules/karma-remap-istanbul"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "lodash": {"name": "lodash", "severity": "high", "isDirect": false, "via": [{"source": 1115806, "name": "lodash", "dependency": "lodash", "title": "lodash vulnerable to Code Injection via `_.template` imports key names", "url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc", "severity": "high", "cwe": ["CWE-94"], "cvss": {"score": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "range": ">=4.0.0 <=4.17.23"}, {"source": 1115810, "name": "lodash", "dependency": "lodash", "title": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`", "url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh", "severity": "moderate", "cwe": ["CWE-1321"], "cvss": {"score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}, "range": "<=4.17.23"}], "effects": ["globule", "grunt-legacy-log", "grunt-legacy-log-utils", "grunt-legacy-util"], "range": "<=4.17.23", "nodes": ["node_modules/lodash"], "fixAvailable": {"name": "grunt-contrib-watch", "version": "0.4.4", "isSemVerMajor": true}}, "lodash.template": {"name": "lodash.template", "severity": "high", "isDirect": false, "via": [{"source": 1106902, "name": "lodash.template", "dependency": "lodash.template", "title": "Command Injection in lodash", "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm", "severity": "high", "cwe": ["CWE-77", "CWE-94"], "cvss": {"score": 7.2, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}, "range": "<=4.5.0"}], "effects": ["gulp-util"], "range": "<=4.5.0", "nodes": ["node_modules/lodash.template"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "meow": {"name": "meow", "severity": "high", "isDirect": false, "via": ["trim-newlines"], "effects": [], "range": "3.4.0 - 5.0.0", "nodes": ["node_modules/gulp-util/node_modules/meow"], "fixAvailable": true}, "minimatch": {"name": "minimatch", "severity": "high", "isDirect": false, "via": [{"source": 1113459, "name": "minimatch", "dependency": "minimatch", "title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 0, "vectorString": null}, "range": "<3.1.3"}, {"source": 1113465, "name": "minimatch", "dependency": "minimatch", "title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 0, "vectorString": null}, "range": ">=9.0.0 <9.0.6"}, {"source": 1113538, "name": "minimatch", "dependency": "minimatch", "title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments", "url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "severity": "high", "cwe": ["CWE-407"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.1.3"}, {"source": 1113544, "name": "minimatch", "dependency": "minimatch", "title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments", "url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "severity": "high", "cwe": ["CWE-407"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=9.0.0 <9.0.7"}, {"source": 1113546, "name": "minimatch", "dependency": "minimatch", "title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions", "url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.1.4"}, {"source": 1113552, "name": "minimatch", "dependency": "minimatch", "title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions", "url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=9.0.0 <9.0.7"}], "effects": ["globule", "grunt"], "range": "<=3.1.3 || 9.0.0 - 9.0.6", "nodes": ["", "", "", "node_modules/minimatch"], "fixAvailable": {"name": "grunt-contrib-watch", "version": "0.4.4", "isSemVerMajor": true}}, "picomatch": {"name": "picomatch", "severity": "high", "isDirect": false, "via": [{"source": 1115549, "name": "picomatch", "dependency": "picomatch", "title": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching", "url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p", "severity": "moderate", "cwe": ["CWE-1321"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}, "range": "<2.3.2"}, {"source": 1115551, "name": "picomatch", "dependency": "picomatch", "title": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching", "url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p", "severity": "moderate", "cwe": ["CWE-1321"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}, "range": ">=4.0.0 <4.0.4"}, {"source": 1115552, "name": "picomatch", "dependency": "picomatch", "title": "Picomatch has a ReDoS vulnerability via extglob quantifiers", "url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<2.3.2"}, {"source": 1115554, "name": "picomatch", "dependency": "picomatch", "title": "Picomatch has a ReDoS vulnerability via extglob quantifiers", "url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=4.0.0 <4.0.4"}], "effects": [], "range": "<=2.3.1 || 4.0.0 - 4.0.3", "nodes": ["", "", ""], "fixAvailable": true}, "remap-istanbul": {"name": "remap-istanbul", "severity": "high", "isDirect": false, "via": ["gulp-util"], "effects": ["karma-remap-istanbul"], "range": "<=0.9.6", "nodes": ["node_modules/remap-istanbul"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "socket.io-parser": {"name": "socket.io-parser", "severity": "high", "isDirect": false, "via": [{"source": 1115154, "name": "socket.io-parser", "dependency": "socket.io-parser", "title": "socket.io allows an unbounded number of binary attachments", "url": "https://github.com/advisories/GHSA-677m-j7p3-52f9", "severity": "high", "cwe": ["CWE-754"], "cvss": {"score": 0, "vectorString": null}, "range": ">=4.0.0 <4.2.6"}], "effects": [], "range": "4.0.0 - 4.2.5", "nodes": [""], "fixAvailable": true}, "svgo": {"name": "svgo", "severity": "high", "isDirect": true, "via": [{"source": 1114151, "name": "svgo", "dependency": "svgo", "title": "SVGO DoS through entity expansion in DOCTYPE (Billion Laughs)", "url": "https://github.com/advisories/GHSA-xpqw-6gx7-v673", "severity": "high", "cwe": ["CWE-776"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=3.0.0 <3.3.3"}], "effects": [], "range": "3.0.0 - 3.3.2", "nodes": ["node_modules/svgo"], "fixAvailable": {"name": "svgo", "version": "3.3.3", "isSemVerMajor": false}}, "trim-newlines": {"name": "trim-newlines", "severity": "high", "isDirect": false, "via": [{"source": 1095100, "name": "trim-newlines", "dependency": "trim-newlines", "title": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "severity": "high", "cwe": ["CWE-400"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.1"}], "effects": ["meow"], "range": "<3.0.1", "nodes": ["node_modules/trim-newlines"], "fixAvailable": true}, "underscore": {"name": "underscore", "severity": "high", "isDirect": false, "via": [{"source": 1113950, "name": "underscore", "dependency": "underscore", "title": "Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack", "url": "https://github.com/advisories/GHSA-qpx9-hpmf-5gmw", "severity": "high", "cwe": ["CWE-674", "CWE-770"], "cvss": {"score": 0, "vectorString": null}, "range": "<=1.13.7"}], "effects": [], "range": "<=1.13.7", "nodes": [""], "fixAvailable": true}, "yaml": {"name": "yaml", "severity": "moderate", "isDirect": false, "via": [{"source": 1115556, "name": "yaml", "dependency": "yaml", "title": "yaml is vulnerable to Stack Overflow via deeply nested YAML collections", "url": "https://github.com/advisories/GHSA-48c2-rrv3-qjmp", "severity": "moderate", "cwe": ["CWE-674"], "cvss": {"score": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=2.0.0 <2.8.3"}], "effects": [], "range": "2.0.0 - 2.8.2", "nodes": [""], "fixAvailable": true}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 3, "high": 28, "critical": 1, "total": 32}, "dependencies": {"prod": 4, "dev": 812, "optional": 12, "peer": 2, "peerOptional": 0, "total": 815}}}}
{}
Upgrading n:svgo from 3.3.2 -> 3.3.3
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN skipping integrity check for git dependency ssh://git@github.com/jdforrester/grunt-promise-q.git
npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
npm WARN deprecated gulp-util@3.0.7: gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5
npm WARN deprecated istanbul@0.4.5: This module is no longer maintained, try this instead:
npm WARN deprecated npm i nyc
npm WARN deprecated Visit https://istanbul.js.org/integrations for other alternatives.
npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
--- stdout ---
added 813 packages, and audited 814 packages in 10s
128 packages are looking for funding
run `npm fund` for details
# npm audit report
lodash <=4.17.23
Severity: high
lodash vulnerable to Code Injection via `_.template` imports key names - https://github.com/advisories/GHSA-r5fr-rjxr-66jc
lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` - https://github.com/advisories/GHSA-f23m-r3pf-42rh
No fix available
node_modules/lodash
grunt-legacy-log >=1.0.0-rc1
Depends on vulnerable versions of grunt-legacy-log-utils
Depends on vulnerable versions of lodash
node_modules/grunt-legacy-log
grunt >=0.4.0-a
Depends on vulnerable versions of grunt-legacy-log
Depends on vulnerable versions of grunt-legacy-util
Depends on vulnerable versions of minimatch
node_modules/grunt
grunt-contrib-clean >=0.4.0-a
Depends on vulnerable versions of grunt
node_modules/grunt-contrib-clean
grunt-contrib-concat >=0.1.2-rc5
Depends on vulnerable versions of grunt
node_modules/grunt-contrib-concat
grunt-cssjanus *
Depends on vulnerable versions of grunt
node_modules/grunt-cssjanus
grunt-eslint <=1.0.0 || >=18.1.0
Depends on vulnerable versions of grunt
node_modules/grunt-eslint
grunt-exec >=0.4.0-rc1
Depends on vulnerable versions of grunt
node_modules/grunt-exec
grunt-file-exists *
Depends on vulnerable versions of grunt
node_modules/grunt-file-exists
grunt-karma *
Depends on vulnerable versions of grunt
node_modules/grunt-karma
grunt-promise-q *
Depends on vulnerable versions of grunt
node_modules/grunt-promise-q
grunt-legacy-log-utils >=1.0.0
Depends on vulnerable versions of lodash
node_modules/grunt-legacy-log-utils
grunt-legacy-util >=1.0.0-rc1
Depends on vulnerable versions of lodash
node_modules/grunt-legacy-util
lodash.template <=4.5.0
Severity: high
Command Injection in lodash - https://github.com/advisories/GHSA-35jh-r3h4-6jhm
fix available via `npm audit fix --force`
Will install karma-remap-istanbul@0.0.2, which is a breaking change
node_modules/lodash.template
gulp-util >=1.1.0
Depends on vulnerable versions of lodash.template
node_modules/gulp-util
remap-istanbul <=0.9.6
Depends on vulnerable versions of gulp-util
node_modules/remap-istanbul
karma-remap-istanbul >=0.0.3
Depends on vulnerable versions of remap-istanbul
node_modules/karma-remap-istanbul
minimatch <=3.1.3
Severity: high
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern - https://github.com/advisories/GHSA-3ppc-4f35-3m26
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments - https://github.com/advisories/GHSA-7r86-cg39-jmmj
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions - https://github.com/advisories/GHSA-23c5-xmqv-rm74
fix available via `npm audit fix --force`
Will install grunt-contrib-watch@0.4.4, which is a breaking change
node_modules/minimatch
globule *
Depends on vulnerable versions of minimatch
node_modules/globule
gaze >=0.4.0
Depends on vulnerable versions of globule
node_modules/gaze
grunt-contrib-watch >=0.5.0
Depends on vulnerable versions of gaze
node_modules/grunt-contrib-watch
trim-newlines <3.0.1
Severity: high
Uncontrolled Resource Consumption in trim-newlines - https://github.com/advisories/GHSA-7p7h-4mm5-852v
fix available via `npm audit fix`
node_modules/trim-newlines
meow 3.4.0 - 5.0.0
Depends on vulnerable versions of trim-newlines
node_modules/gulp-util/node_modules/meow
23 high severity vulnerabilities
To address issues that do not require attention, run:
npm audit fix
To address all issues possible (including breaking changes), run:
npm audit fix --force
Some issues need review, and may require choosing
a different dependency.
--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stderr ---
npm WARN skipping integrity check for git dependency ssh://git@github.com/jdforrester/grunt-promise-q.git
npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
npm WARN deprecated gulp-util@3.0.7: gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5
npm WARN deprecated istanbul@0.4.5: This module is no longer maintained, try this instead:
npm WARN deprecated npm i nyc
npm WARN deprecated Visit https://istanbul.js.org/integrations for other alternatives.
npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
--- stdout ---
added 813 packages, and audited 814 packages in 11s
128 packages are looking for funding
run `npm fund` for details
23 high severity vulnerabilities
To address issues that do not require attention, run:
npm audit fix
To address all issues possible (including breaking changes), run:
npm audit fix --force
Some issues need review, and may require choosing
a different dependency.
Run `npm audit` for details.
--- end ---
$ /usr/bin/npm test
--- stderr ---
(node:1209) Warning: Accessing non-existent property 'VERSION' of module exports inside circular dependency
(Use `node --trace-warnings ...` to show where the warning was created)
--- stdout ---
> oojs-ui@0.53.1 test
> npm run minify:svg:src && grunt test
> oojs-ui@0.53.1 minify:svg:src
> svgo --config=.svgo.config.js --pretty --quiet --recursive --folder ./src/themes/wikimediaui/images/
Running "eslint:all" (eslint) task
/src/repo/Gruntfile.js
501:17 warning Found non-literal argument to RegExp Constructor security/detect-non-literal-regexp
505:17 warning Found non-literal argument to RegExp Constructor security/detect-non-literal-regexp
509:17 warning Found non-literal argument to RegExp Constructor security/detect-non-literal-regexp
631:19 warning Found non-literal argument in require security/detect-non-literal-require
/src/repo/build/tasks/colorize-svg.js
339:1 warning This line has a length of 122. Maximum allowed is 100 max-len
/src/repo/demos/classes/BookletDialog.js
25:5 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
31:5 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
/src/repo/demos/demo.js
69:3 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
74:3 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
476:1 warning This line has a length of 101. Maximum allowed is 100 max-len
/src/repo/demos/pages/widgets.js
305:6 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
/src/repo/src/ActionSet.js
157:1 warning This line has a length of 121. Maximum allowed is 100 max-len
158:1 warning This line has a length of 113. Maximum allowed is 100 max-len
471:1 warning Invalid JSDoc inline tag name "see" jsdoc/check-tag-names
471:1 warning Invalid JSDoc inline tag name "see" jsdoc/check-tag-names
471:1 warning Invalid JSDoc inline tag name "see" jsdoc/check-tag-names
/src/repo/src/Dialog.js
222:1 warning This line has a length of 110. Maximum allowed is 100 max-len
/src/repo/src/Element.js
14:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/Tool.js
31:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/ToolGroup.js
28:1 warning This line has a length of 104. Maximum allowed is 100 max-len
30:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/Toolbar.js
141:1 warning This line has a length of 120. Maximum allowed is 100 max-len
275:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/Widget.js
13:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/Window.js
12:1 warning This line has a length of 111. Maximum allowed is 100 max-len
22:1 warning This line has a length of 112. Maximum allowed is 100 max-len
26:1 warning This line has a length of 130. Maximum allowed is 100 max-len
45:1 warning This line has a length of 106. Maximum allowed is 100 max-len
46:1 warning This line has a length of 109. Maximum allowed is 100 max-len
136:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
364:1 warning This line has a length of 106. Maximum allowed is 100 max-len
563:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/WindowManager.js
717:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/dialogs/MessageDialog.js
145:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/dialogs/ProcessDialog.js
248:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/layouts/BookletLayout.js
50:1 warning This line has a length of 105. Maximum allowed is 100 max-len
127:1 warning This line has a length of 105. Maximum allowed is 100 max-len
135:1 warning This line has a length of 109. Maximum allowed is 100 max-len
/src/repo/src/layouts/FieldsetLayout.js
51:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/layouts/FormLayout.js
117:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/layouts/HorizontalLayout.js
24:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/src/layouts/IndexLayout.js
39:1 warning This line has a length of 104. Maximum allowed is 100 max-len
42:1 warning This line has a length of 102. Maximum allowed is 100 max-len
122:1 warning This line has a length of 112. Maximum allowed is 100 max-len
130:1 warning This line has a length of 114. Maximum allowed is 100 max-len
138:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/layouts/MenuLayout.js
84:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/layouts/PanelLayout.js
22:1 warning This line has a length of 101. Maximum allowed is 100 max-len
24:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/layouts/StackLayout.js
31:1 warning This line has a length of 108. Maximum allowed is 100 max-len
34:1 warning This line has a length of 104. Maximum allowed is 100 max-len
67:1 warning This line has a length of 132. Maximum allowed is 100 max-len
/src/repo/src/mixins/AccessKeyedElement.js
24:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/src/mixins/ClippableElement.js
21:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/src/mixins/DraggableElement.js
12:1 warning This line has a length of 103. Maximum allowed is 100 max-len
14:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/mixins/DraggableGroupElement.js
17:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/mixins/FlaggedElement.js
40:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/mixins/FloatableElement.js
18:1 warning This line has a length of 103. Maximum allowed is 100 max-len
220:1 warning This line has a length of 101. Maximum allowed is 100 max-len
/src/repo/src/mixins/IconElement.js
116:1 warning This line has a length of 127. Maximum allowed is 100 max-len
/src/repo/src/mixins/LabelElement.js
19:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/mixins/LookupElement.js
24:1 warning This line has a length of 103. Maximum allowed is 100 max-len
28:1 warning This line has a length of 103. Maximum allowed is 100 max-len
31:1 warning This line has a length of 102. Maximum allowed is 100 max-len
34:1 warning This line has a length of 106. Maximum allowed is 100 max-len
225:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/mixins/RequestManager.js
10:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/mixins/RequiredElement.js
13:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/mixins/TabIndexedElement.js
37:1 warning This line has a length of 107. Maximum allowed is 100 max-len
40:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/mixins/TitledElement.js
24:1 warning This line has a length of 122. Maximum allowed is 100 max-len
/src/repo/src/toolgroups/ListToolGroup.js
87:1 warning This line has a length of 107. Maximum allowed is 100 max-len
93:1 warning This line has a length of 104. Maximum allowed is 100 max-len
96:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/ActionWidget.js
19:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/ButtonInputWidget.js
32:1 warning This line has a length of 112. Maximum allowed is 100 max-len
33:1 warning This line has a length of 169. Maximum allowed is 100 max-len
130:1 warning This line has a length of 119. Maximum allowed is 100 max-len
/src/repo/src/widgets/ButtonMenuSelectWidget.js
46:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/CheckboxInputWidget.js
40:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/widgets/CheckboxMultiselectInputWidget.js
149:1 warning This line has a length of 125. Maximum allowed is 100 max-len
/src/repo/src/widgets/ComboBoxInputWidget.js
60:1 warning This line has a length of 104. Maximum allowed is 100 max-len
62:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/DropdownInputWidget.js
33:1 warning This line has a length of 106. Maximum allowed is 100 max-len
34:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/DropdownWidget.js
53:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/InputWidget.js
23:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/LabelWidget.js
38:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/MenuSelectWidget.js
32:1 warning This line has a length of 106. Maximum allowed is 100 max-len
36:1 warning This line has a length of 109. Maximum allowed is 100 max-len
39:1 warning This line has a length of 107. Maximum allowed is 100 max-len
45:1 warning This line has a length of 101. Maximum allowed is 100 max-len
51:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/MenuTagMultiselectWidget.js
23:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/widgets/MultilineTextInputWidget.js
179:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/NumberInputWidget.js
27:1 warning This line has a length of 109. Maximum allowed is 100 max-len
/src/repo/src/widgets/PopupButtonWidget.js
25:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/PopupWidget.js
31:1 warning This line has a length of 104. Maximum allowed is 100 max-len
32:1 warning This line has a length of 108. Maximum allowed is 100 max-len
34:1 warning This line has a length of 104. Maximum allowed is 100 max-len
54:1 warning This line has a length of 103. Maximum allowed is 100 max-len
57:1 warning This line has a length of 104. Maximum allowed is 100 max-len
60:1 warning This line has a length of 107. Maximum allowed is 100 max-len
69:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/ProgressBarWidget.js
41:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/RadioInputWidget.js
40:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/SearchInputWidget.js
56:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
71:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/widgets/SearchWidget.js
22:1 warning This line has a length of 104. Maximum allowed is 100 max-len
77:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/widgets/TabOptionWidget.js
67:1 warning This line has a length of 101. Maximum allowed is 100 max-len
/src/repo/src/widgets/TagMultiselectWidget.js
228:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
246:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
267:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
362:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/widgets/TextInputWidget.js
42:1 warning This line has a length of 102. Maximum allowed is 100 max-len
44:1 warning This line has a length of 104. Maximum allowed is 100 max-len
46:1 warning This line has a length of 105. Maximum allowed is 100 max-len
48:1 warning This line has a length of 106. Maximum allowed is 100 max-len
506:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/tests/TestTimer.js
68:1 warning This line has a length of 116. Maximum allowed is 100 max-len
✖ 122 problems (0 errors, 122 warnings)
Running "stylelint:dev" (stylelint) task
>> src/themes/apex/elements.less
>> 358:3 ⚠ Unexpected browser feature "css-dir-pseudo" is not supported by Edge 112,113,114,115,116,117,118,119, Chrome 113,114,115,116,117,118,119, Safari 12,13,14,15,11.1,12.1,13.1,14.1,15.1,15.2-15.3,15.4,15.5,15.6,16.0,16.1,16.2,16.3, Safari on iOS 11.3-11.4,12.0-12.1,12.2-12.5,13.0-13.1,13.2,13.3,13.4-13.7,14.0-14.4,14.5-14.8,15.0-15.1,15.2-15.3,15.4,15.5,15.6-15.8,16.0,16.1,16.2,16.3 plugin/no-unsupported-browser-features
>>
>> src/themes/wikimediaui/elements.less
>> 443:3 ⚠ Unexpected browser feature "css-dir-pseudo" is not supported by Edge 112,113,114,115,116,117,118,119, Chrome 113,114,115,116,117,118,119, Safari 12,13,14,15,11.1,12.1,13.1,14.1,15.1,15.2-15.3,15.4,15.5,15.6,16.0,16.1,16.2,16.3, Safari on iOS 11.3-11.4,12.0-12.1,12.2-12.5,13.0-13.1,13.2,13.3,13.4-13.7,14.0-14.4,14.5-14.8,15.0-15.1,15.2-15.3,15.4,15.5,15.6-15.8,16.0,16.1,16.2,16.3 plugin/no-unsupported-browser-features
>>
>> ⚠ 2 problems (0 errors, 2 warnings)
⚠ 2 warnings
>> Linted 126 files without errors
Running "banana:all" (banana) task
>> 1 message directory checked.
Running "check-theme-manifests" task
>> Theme icon/indicator manifests match.
Running "pre-git-build" task
Running "clean:build" (clean) task
>> 0 paths cleaned.
Running "fileExists:src" (fileExists) task
Checking 249 files for existence...
OK
Running "tyops:src" (tyops) task
>> No typos found; 273 files checked for 16 typos.
Running "concat:i18nMessages" (concat) task
Running "concat:js" (concat) task
Running "concat:omnibusJs" (concat) task
Running "colorizeSvg:wikimediaui-icons-movement" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-movement.less".
Created "dist/tmp/themes/wikimediaui/icons-movement.rtl.less".
Created 75 SVG files.
Running "colorizeSvg:wikimediaui-icons-content" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-content.less".
Created "dist/tmp/themes/wikimediaui/icons-content.rtl.less".
Created 117 SVG files.
Running "colorizeSvg:wikimediaui-icons-alerts" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-alerts.less".
Created "dist/tmp/themes/wikimediaui/icons-alerts.rtl.less".
Created 45 SVG files.
Running "colorizeSvg:wikimediaui-icons-interactions" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-interactions.less".
Created "dist/tmp/themes/wikimediaui/icons-interactions.rtl.less".
Created 127 SVG files.
Running "colorizeSvg:wikimediaui-icons-moderation" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-moderation.less".
Created "dist/tmp/themes/wikimediaui/icons-moderation.rtl.less".
Created 61 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-core" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-core.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-core.rtl.less".
Created 40 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-styling" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-styling.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-styling.rtl.less".
Created 135 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-functions" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-functions.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-functions.rtl.less".
Created 21 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-list" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-list.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-list.rtl.less".
Created 24 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-advanced" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-advanced.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-advanced.rtl.less".
Created 189 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-citation" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-citation.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-citation.rtl.less".
Created 33 SVG files.
Running "colorizeSvg:wikimediaui-icons-media" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-media.less".
Created "dist/tmp/themes/wikimediaui/icons-media.rtl.less".
Created 69 SVG files.
Running "colorizeSvg:wikimediaui-icons-location" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-location.less".
Created "dist/tmp/themes/wikimediaui/icons-location.rtl.less".
Created 18 SVG files.
Running "colorizeSvg:wikimediaui-icons-user" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-user.less".
Created "dist/tmp/themes/wikimediaui/icons-user.rtl.less".
Created 66 SVG files.
Running "colorizeSvg:wikimediaui-icons-layout" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-layout.less".
Created "dist/tmp/themes/wikimediaui/icons-layout.rtl.less".
Created 30 SVG files.
Running "colorizeSvg:wikimediaui-icons-accessibility" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-accessibility.less".
Created "dist/tmp/themes/wikimediaui/icons-accessibility.rtl.less".
Created 33 SVG files.
Running "colorizeSvg:wikimediaui-icons-wikimedia" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-wikimedia.less".
Created "dist/tmp/themes/wikimediaui/icons-wikimedia.rtl.less".
Created 36 SVG files.
Running "colorizeSvg:wikimediaui-indicators" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/indicators.less".
Created "dist/tmp/themes/wikimediaui/indicators.rtl.less".
Created 8 SVG files.
Running "colorizeSvg:apex-icons-movement" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-movement.less".
Created "dist/tmp/themes/apex/icons-movement.rtl.less".
Created 25 SVG files.
Running "colorizeSvg:apex-icons-content" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-content.less".
Created "dist/tmp/themes/apex/icons-content.rtl.less".
Created 37 SVG files.
Running "colorizeSvg:apex-icons-alerts" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-alerts.less".
Created "dist/tmp/themes/apex/icons-alerts.rtl.less".
Created 14 SVG files.
Running "colorizeSvg:apex-icons-interactions" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-interactions.less".
Created "dist/tmp/themes/apex/icons-interactions.rtl.less".
Created 40 SVG files.
Running "colorizeSvg:apex-icons-moderation" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-moderation.less".
Created "dist/tmp/themes/apex/icons-moderation.rtl.less".
Created 19 SVG files.
Running "colorizeSvg:apex-icons-editing-core" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-core.less".
Created "dist/tmp/themes/apex/icons-editing-core.rtl.less".
Created 13 SVG files.
Running "colorizeSvg:apex-icons-editing-styling" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-styling.less".
Created "dist/tmp/themes/apex/icons-editing-styling.rtl.less".
Created 45 SVG files.
Running "colorizeSvg:apex-icons-editing-functions" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-functions.less".
Created "dist/tmp/themes/apex/icons-editing-functions.rtl.less".
Created 7 SVG files.
Running "colorizeSvg:apex-icons-editing-list" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-list.less".
Created "dist/tmp/themes/apex/icons-editing-list.rtl.less".
Created 8 SVG files.
Running "colorizeSvg:apex-icons-editing-advanced" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-advanced.less".
Created "dist/tmp/themes/apex/icons-editing-advanced.rtl.less".
Created 63 SVG files.
Running "colorizeSvg:apex-icons-editing-citation" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-citation.less".
Created "dist/tmp/themes/apex/icons-editing-citation.rtl.less".
Created 11 SVG files.
Running "colorizeSvg:apex-icons-media" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-media.less".
Created "dist/tmp/themes/apex/icons-media.rtl.less".
Created 23 SVG files.
Running "colorizeSvg:apex-icons-location" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-location.less".
Created "dist/tmp/themes/apex/icons-location.rtl.less".
Created 6 SVG files.
Running "colorizeSvg:apex-icons-user" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-user.less".
Created "dist/tmp/themes/apex/icons-user.rtl.less".
Created 22 SVG files.
Running "colorizeSvg:apex-icons-layout" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-layout.less".
Created "dist/tmp/themes/apex/icons-layout.rtl.less".
Created 10 SVG files.
Running "colorizeSvg:apex-icons-accessibility" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-accessibility.less".
Created "dist/tmp/themes/apex/icons-accessibility.rtl.less".
Created 11 SVG files.
Running "colorizeSvg:apex-icons-wikimedia" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-wikimedia.less".
Created "dist/tmp/themes/apex/icons-wikimedia.rtl.less".
Created 18 SVG files.
Running "colorizeSvg:apex-indicators" (colorizeSvg) task
Created "dist/tmp/themes/apex/indicators.less".
Created "dist/tmp/themes/apex/indicators.rtl.less".
Created 4 SVG files.
Running "less:wikimediaui" (less) task
>> 132 stylesheets created.
Running "less:apex" (less) task
>> 132 stylesheets created.
Running "cssjanus:dist" (cssjanus) task
File "dist/tmp/wikimediaui/styles/Element.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/ButtonElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/ClippableElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/FloatableElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/FlaggedElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/GroupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/LabelElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/IconElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/IndicatorElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/PendingElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/PopupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/TabIndexedElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/TitledElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Layout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/FieldLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/ActionFieldLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/FieldsetLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/FormLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/PanelLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/HorizontalLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Widget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/SelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/DecoratedOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/LabelWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MessageWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/IconWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/IndicatorWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonGroupWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/PopupWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/PopupButtonWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/InputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxMultiselectInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/DropdownInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioSelectInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TextInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuSectionOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/DropdownWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ComboBoxInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MultioptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxMultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxMultioptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ProgressBarWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/NumberInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/SelectFileInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ToggleWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ToggleSwitchWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/core.rtl.css" created.
File "dist/tmp/apex/styles/Element.rtl.css" created.
File "dist/tmp/apex/styles/elements/ButtonElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/ClippableElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/FloatableElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/FlaggedElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/GroupElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/LabelElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/IconElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/IndicatorElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/PendingElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/PopupElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/TabIndexedElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/TitledElement.rtl.css" created.
File "dist/tmp/apex/styles/Layout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/FieldLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/ActionFieldLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/FieldsetLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/FormLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/PanelLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/HorizontalLayout.rtl.css" created.
File "dist/tmp/apex/styles/Widget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/SelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/DecoratedOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/LabelWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MessageWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/IconWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/IndicatorWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonGroupWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/PopupWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/PopupButtonWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/InputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxMultiselectInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/DropdownInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioSelectInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TextInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuSectionOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/DropdownWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ComboBoxInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MultioptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxMultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxMultioptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ProgressBarWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/NumberInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/SelectFileInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ToggleWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ToggleSwitchWidget.rtl.css" created.
File "dist/tmp/apex/styles/core.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/DraggableElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/DraggableGroupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/LookupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/BookletLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/IndexLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/CopyTextLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/MenuLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/TabPanelLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/PageLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/StackLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ToggleButtonWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OutlineSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OutlineOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OutlineControlsWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TabSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TabOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonMenuSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TagMultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuTagMultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TagItemWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/SearchWidget.rtl.css" created.
File "dist/tmp/apex/styles/elements/DraggableElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/DraggableGroupElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/LookupElement.rtl.css" created.
File "dist/tmp/apex/styles/layouts/BookletLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/IndexLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/CopyTextLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/MenuLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/TabPanelLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/PageLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/StackLayout.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ToggleButtonWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OutlineSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OutlineOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OutlineControlsWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TabSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TabOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonMenuSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TagMultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuTagMultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TagItemWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/SearchWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Tool.rtl.css" created.
File "dist/tmp/wikimediaui/styles/tools/PopupTool.rtl.css" created.
File "dist/tmp/wikimediaui/styles/tools/ToolGroupTool.rtl.css" created.
File "dist/tmp/wikimediaui/styles/ToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/BarToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/LabelToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/PopupToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/ListToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/MenuToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Toolbar.rtl.css" created.
File "dist/tmp/apex/styles/Tool.rtl.css" created.
File "dist/tmp/apex/styles/tools/PopupTool.rtl.css" created.
File "dist/tmp/apex/styles/tools/ToolGroupTool.rtl.css" created.
File "dist/tmp/apex/styles/ToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/BarToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/LabelToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/PopupToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/ListToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/MenuToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/Toolbar.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ActionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Window.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Dialog.rtl.css" created.
File "dist/tmp/wikimediaui/styles/dialogs/MessageDialog.rtl.css" created.
File "dist/tmp/wikimediaui/styles/dialogs/ProcessDialog.rtl.css" created.
File "dist/tmp/wikimediaui/styles/WindowManager.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ActionWidget.rtl.css" created.
File "dist/tmp/apex/styles/Window.rtl.css" created.
File "dist/tmp/apex/styles/Dialog.rtl.css" created.
File "dist/tmp/apex/styles/dialogs/MessageDialog.rtl.css" created.
File "dist/tmp/apex/styles/dialogs/ProcessDialog.rtl.css" created.
File "dist/tmp/apex/styles/WindowManager.rtl.css" created.
Running "cssjanus:demoCss" (cssjanus) task
File "demos/styles/demo.rtl.css" created.
Running "concat:css" (concat) task
Running "concat:omnibusCss" (concat) task
Running "concat:codexTokensCss" (concat) task
Running "concat:demoCss" (concat) task
Running "copy:images" (copy) task
Copied 36 files
Running "copy:i18n" (copy) task
Copied 224 files
Running "copy:dist" (copy) task
Copied 4 files
Running "clean:tmp" (clean) task
>> 1 path cleaned.
Running "clean:demos" (clean) task
>> 0 paths cleaned.
Running "copy:demos" (copy) task
Created 40 directories, copied 2263 files
Running "demo-image-list" task
Running "exec:demos" (exec) task
>> Loading composer repositories with package information
>> Updating dependencies
>> Lock file operations: 64 installs, 0 updates, 0 removals
>> - Locking composer/pcre (3.3.2)
>> - Locking composer/semver (3.4.4)
>> - Locking composer/spdx-licenses (1.5.9)
>> - Locking composer/xdebug-handler (3.0.5)
>> - Locking danog/advanced-json-rpc (v3.2.3)
>> - Locking dealerdirect/phpcodesniffer-composer-installer (v1.2.0)
>> - Locking doctrine/deprecations (1.1.6)
>> - Locking mediawiki/mediawiki-codesniffer (v50.0.0)
>> - Locking mediawiki/mediawiki-phan-config (0.20.0)
>> - Locking mediawiki/minus-x (2.0.1)
>> - Locking mediawiki/phan-taint-check-plugin (9.1.0)
>> - Locking myclabs/deep-copy (1.13.4)
>> - Locking netresearch/jsonmapper (v5.0.1)
>> - Locking nikic/php-parser (v5.7.0)
>> - Locking ockcyp/covers-validator (v1.7.0)
>> - Locking phan/phan (6.0.2)
>> - Locking phan/tolerant-php-parser (v0.2.0)
>> - Locking phan/var_representation_polyfill (0.1.4)
>> - Locking phar-io/manifest (2.0.4)
>> - Locking phar-io/version (3.2.1)
>> - Locking php-parallel-lint/php-console-color (v1.0.1)
>> - Locking php-parallel-lint/php-console-highlighter (v1.0.0)
>> - Locking php-parallel-lint/php-parallel-lint (v1.4.0)
>> - Locking phpcsstandards/phpcsextra (1.4.0)
>> - Locking phpcsstandards/phpcsutils (1.2.2)
>> - Locking phpdocumentor/reflection-common (2.2.0)
>> - Locking phpdocumentor/reflection-docblock (6.0.3)
>> - Locking phpdocumentor/type-resolver (2.0.0)
>> - Locking phpstan/phpdoc-parser (2.3.2)
>> - Locking phpunit/php-code-coverage (10.1.16)
>> - Locking phpunit/php-file-iterator (4.1.0)
>> - Locking phpunit/php-invoker (4.0.0)
>> - Locking phpunit/php-text-template (3.0.1)
>> - Locking phpunit/php-timer (6.0.0)
>> - Locking phpunit/phpunit (10.5.63)
>> - Locking psr/container (2.0.2)
>> - Locking psr/log (3.0.2)
>> - Locking sabre/event (6.0.1)
>> - Locking sebastian/cli-parser (2.0.1)
>> - Locking sebastian/code-unit (2.0.0)
>> - Locking sebastian/code-unit-reverse-lookup (3.0.0)
>> - Locking sebastian/comparator (5.0.5)
>> - Locking sebastian/complexity (3.2.0)
>> - Locking sebastian/diff (5.1.1)
>> - Locking sebastian/environment (6.1.0)
>> - Locking sebastian/exporter (5.1.4)
>> - Locking sebastian/global-state (6.0.2)
>> - Locking sebastian/lines-of-code (2.0.2)
>> - Locking sebastian/object-enumerator (5.0.0)
>> - Locking sebastian/object-reflector (3.0.0)
>> - Locking sebastian/recursion-context (5.0.1)
>> - Locking sebastian/type (4.0.0)
>> - Locking sebastian/version (4.0.1)
>> - Locking squizlabs/php_codesniffer (3.13.5)
>> - Locking symfony/console (v6.4.36)
>> - Locking symfony/deprecation-contracts (v3.6.0)
>> - Locking symfony/polyfill-ctype (v1.33.0)
>> - Locking symfony/polyfill-intl-grapheme (v1.33.0)
>> - Locking symfony/polyfill-intl-normalizer (v1.33.0)
>> - Locking symfony/polyfill-mbstring (v1.33.0)
>> - Locking symfony/service-contracts (v3.6.1)
>> - Locking symfony/string (v7.4.8)
>> - Locking theseer/tokenizer (1.3.1)
>> - Locking webmozart/assert (2.1.6)
>> Writing lock file
>> Installing dependencies from lock file
>> Nothing to install, update or remove
>> 7 package suggestions were added by new dependencies, use `composer suggest` to see details.
>> Generating autoload files
>> No installed packages - skipping audit.
Running "exec:testSuiteGenerator" (exec) task
>> Generated 8253 test cases.
>> * ActionFieldLayout: 480
>> * FieldLayout: 544
>> * FieldsetLayout: 79
>> * FormLayout: 6
>> * HorizontalLayout: 1
>> * IndexLayout: 106
>> * MenuLayout: 78
>> * PanelLayout: 69
>> * StackLayout: 73
>> * TabPanelLayout: 69
>> * ButtonGroupWidget: 14
>> * ButtonInputWidget: 568
>> * ButtonWidget: 616
>> * CheckboxInputWidget: 160
>> * CheckboxMultiselectInputWidget: 156
>> * ComboBoxInputWidget: 751
>> * DropdownInputWidget: 194
>> * HiddenInputWidget: 9
>> * IconWidget: 92
>> * IndicatorWidget: 66
>> * LabelWidget: 34
>> * MessageWidget: 92
>> * MultilineTextInputWidget: 715
>> * NumberInputWidget: 964
>> * OptionWidget: 122
>> * ProgressBarWidget: 29
>> * RadioInputWidget: 160
>> * RadioSelectInputWidget: 156
>> * SearchInputWidget: 607
>> * SelectFileInputWidget: 338
>> * SelectWidget: 6
>> * TabOptionWidget: 139
>> * TabSelectWidget: 38
>> * TextInputWidget: 675
>> * ToggleSwitchWidget: 38
>> * ToggleWidget: 9
Running "exec:phpGenerateJSPHPForKarma" (exec) task
>> Loading composer repositories with package information
>> Updating dependencies
>> Nothing to modify in lock file
>> Writing lock file
>> Installing dependencies from lock file (including require-dev)
>> Nothing to install, update or remove
>> Generating autoload files
>> 40 packages you are using are looking for funding.
>> Use the `composer fund` command to find out more!
>> No security vulnerability advisories found.
Running "clean:coverage" (clean) task
>> 0 paths cleaned.
Running "karma:main" (karma) task
04 04 2026 10:36:10.779:INFO [karma-server]: Karma v6.3.20 server started at http://localhost:9876/
04 04 2026 10:36:10.780:INFO [launcher]: Launching browsers ChromeCustom with concurrency unlimited
04 04 2026 10:36:10.784:INFO [launcher]: Starting browser ChromeHeadless
04 04 2026 10:36:11.607:INFO [Chrome Headless 145.0.0.0 (Linux x86_64)]: Connected on socket MgNLfOMW_yyTzipnAAAB with id 26148910
Chrome Headless 145.0.0.0 (Linux x86_64) WARN: 'QUnit.load is deprecated and will be removed in QUnit 3.0. https://qunitjs.com/api/QUnit/load/'
Chrome Headless 145.0.0.0 (Linux x86_64) WARN: 'QUnit.load is deprecated and will be removed in QUnit 3.0. https://qunitjs.com/api/QUnit/load/'
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
...................................................................
Chrome Headless 145.0.0.0 (Linux x86_64): Executed 8307 of 8307 SUCCESS (36.334 secs / 34.748 secs)
TOTAL: 8307 SUCCESS
=============================== Coverage summary ===============================
Statements : 56.08% ( 4254/7585 )
Branches : 36.13% ( 1456/4030 )
Functions : 49.2% ( 551/1120 )
Lines : 56.17% ( 4201/7479 )
================================================================================
Done.
--- end ---
{"1113714": {"source": 1113714, "name": "ajv", "dependency": "ajv", "title": "ajv has ReDoS when using `$data` option", "url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6", "severity": "moderate", "cwe": ["CWE-400", "CWE-1333"], "cvss": {"score": 0, "vectorString": null}, "range": "<6.14.0"}}
Upgrading n:ajv from 6.12.6, 8.18.0 -> 6.14.0, 8.18.0
{"1115540": {"source": 1115540, "name": "brace-expansion", "dependency": "brace-expansion", "title": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion", "url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v", "severity": "moderate", "cwe": ["CWE-400"], "cvss": {"score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}, "range": "<1.1.13"}, "1115541": {"source": 1115541, "name": "brace-expansion", "dependency": "brace-expansion", "title": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion", "url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v", "severity": "moderate", "cwe": ["CWE-400"], "cvss": {"score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}, "range": ">=2.0.0 <2.0.3"}}
Upgrading n:brace-expansion from 1.1.12, 2.0.2 -> 1.1.13, 2.0.3
{"1114526": {"source": 1114526, "name": "flatted", "dependency": "flatted", "title": "flatted vulnerable to unbounded recursion DoS in parse() revive phase", "url": "https://github.com/advisories/GHSA-25h7-pfq9-p65f", "severity": "high", "cwe": ["CWE-674"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.4.0"}, "1115357": {"source": 1115357, "name": "flatted", "dependency": "flatted", "title": "Prototype Pollution via parse() in NodeJS flatted", "url": "https://github.com/advisories/GHSA-rf6f-7fwh-wjgh", "severity": "high", "cwe": ["CWE-1321"], "cvss": {"score": 0, "vectorString": null}, "range": "<=3.4.1"}}
Upgrading n:flatted from 3.3.1 -> 3.4.2
{"1115538": {"source": 1115538, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block", "url": "https://github.com/advisories/GHSA-3mfm-83xf-c92r", "severity": "high", "cwe": ["CWE-94", "CWE-843"], "cvss": {"score": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "range": ">=4.0.0 <=4.7.8"}, "1115539": {"source": 1115539, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has JavaScript Injection via AST Type Confusion", "url": "https://github.com/advisories/GHSA-2w6w-674q-4c4q", "severity": "critical", "cwe": ["CWE-94", "CWE-843"], "cvss": {"score": 9.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "range": ">=4.0.0 <=4.7.8"}, "1115544": {"source": 1115544, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection", "url": "https://github.com/advisories/GHSA-2qvq-rjwj-gvw9", "severity": "moderate", "cwe": ["CWE-79", "CWE-1321"], "cvss": {"score": 4.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"}, "range": ">=4.0.0 <4.7.9"}, "1115588": {"source": 1115588, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry", "url": "https://github.com/advisories/GHSA-7rx3-28cr-v5wh", "severity": "moderate", "cwe": ["CWE-1321"], "cvss": {"score": 4.8, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}, "range": ">=4.6.0 <=4.7.8"}, "1115589": {"source": 1115589, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has a Property Access Validation Bypass in container.lookup", "url": "https://github.com/advisories/GHSA-442j-39wm-28r2", "severity": "low", "cwe": ["CWE-367"], "cvss": {"score": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}, "range": ">=4.0.0 <=4.7.8"}, "1115692": {"source": 1115692, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options", "url": "https://github.com/advisories/GHSA-xjpj-3mr7-gcpf", "severity": "high", "cwe": ["CWE-79", "CWE-94", "CWE-116"], "cvss": {"score": 8.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"}, "range": ">=4.0.0 <=4.7.8"}, "1115693": {"source": 1115693, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial", "url": "https://github.com/advisories/GHSA-xhpv-hc6g-r9c6", "severity": "high", "cwe": ["CWE-94", "CWE-843"], "cvss": {"score": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "range": ">=4.0.0 <=4.7.8"}, "1115694": {"source": 1115694, "name": "handlebars", "dependency": "handlebars", "title": "Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation", "url": "https://github.com/advisories/GHSA-9cx6-37pm-9jff", "severity": "high", "cwe": ["CWE-754"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=4.0.0 <=4.7.8"}}
Upgrading n:handlebars from 4.7.7 -> 4.7.9
{"1095100": {"source": 1095100, "name": "trim-newlines", "dependency": "trim-newlines", "title": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "severity": "high", "cwe": ["CWE-400"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.1"}}
{"1115549": {"source": 1115549, "name": "picomatch", "dependency": "picomatch", "title": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching", "url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p", "severity": "moderate", "cwe": ["CWE-1321"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}, "range": "<2.3.2"}, "1115551": {"source": 1115551, "name": "picomatch", "dependency": "picomatch", "title": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching", "url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p", "severity": "moderate", "cwe": ["CWE-1321"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}, "range": ">=4.0.0 <4.0.4"}, "1115552": {"source": 1115552, "name": "picomatch", "dependency": "picomatch", "title": "Picomatch has a ReDoS vulnerability via extglob quantifiers", "url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<2.3.2"}, "1115554": {"source": 1115554, "name": "picomatch", "dependency": "picomatch", "title": "Picomatch has a ReDoS vulnerability via extglob quantifiers", "url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=4.0.0 <4.0.4"}}
Upgrading n:picomatch from 2.3.1, 4.0.3 -> 2.3.2, 4.0.4
{"1115154": {"source": 1115154, "name": "socket.io-parser", "dependency": "socket.io-parser", "title": "socket.io allows an unbounded number of binary attachments", "url": "https://github.com/advisories/GHSA-677m-j7p3-52f9", "severity": "high", "cwe": ["CWE-754"], "cvss": {"score": 0, "vectorString": null}, "range": ">=4.0.0 <4.2.6"}}
Upgrading n:socket.io-parser from 4.2.4 -> 4.2.6
{"1095100": {"source": 1095100, "name": "trim-newlines", "dependency": "trim-newlines", "title": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "severity": "high", "cwe": ["CWE-400"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.1"}}
{"1113950": {"source": 1113950, "name": "underscore", "dependency": "underscore", "title": "Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack", "url": "https://github.com/advisories/GHSA-qpx9-hpmf-5gmw", "severity": "high", "cwe": ["CWE-674", "CWE-770"], "cvss": {"score": 0, "vectorString": null}, "range": "<=1.13.7"}}
Upgrading n:underscore from 1.13.6 -> 1.13.8
{"1115556": {"source": 1115556, "name": "yaml", "dependency": "yaml", "title": "yaml is vulnerable to Stack Overflow via deeply nested YAML collections", "url": "https://github.com/advisories/GHSA-48c2-rrv3-qjmp", "severity": "moderate", "cwe": ["CWE-674"], "cvss": {"score": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=2.0.0 <2.8.3"}}
Upgrading n:yaml from 2.8.2 -> 2.8.3
$ package-lock-lint /src/repo/package-lock.json
--- stdout ---
Checking /src/repo/package-lock.json
--- end ---
build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 48.0.0 → 50.0.0
* mediawiki/minus-x: 1.1.3 → 2.0.1
npm:
* svgo: 3.3.2 → 3.3.3
* ajv: 6.12.6, 8.18.0 → 6.14.0, 8.18.0
* https://github.com/advisories/GHSA-2g4f-4pwh-qvx6
* brace-expansion: 1.1.12, 2.0.2 → 1.1.13, 2.0.3
* https://github.com/advisories/GHSA-f886-m6hf-6m8v
* flatted: 3.3.1 → 3.4.2
* https://github.com/advisories/GHSA-25h7-pfq9-p65f
* https://github.com/advisories/GHSA-rf6f-7fwh-wjgh
* handlebars: 4.7.7 → 4.7.9
* https://github.com/advisories/GHSA-2qvq-rjwj-gvw9
* https://github.com/advisories/GHSA-2w6w-674q-4c4q
* https://github.com/advisories/GHSA-3mfm-83xf-c92r
* https://github.com/advisories/GHSA-442j-39wm-28r2
* https://github.com/advisories/GHSA-7rx3-28cr-v5wh
* https://github.com/advisories/GHSA-9cx6-37pm-9jff
* https://github.com/advisories/GHSA-xhpv-hc6g-r9c6
* https://github.com/advisories/GHSA-xjpj-3mr7-gcpf
* picomatch: 2.3.1, 4.0.3 → 2.3.2, 4.0.4
* https://github.com/advisories/GHSA-3v7f-55p6-f55p
* https://github.com/advisories/GHSA-c2c7-rcm5-vvqj
* socket.io-parser: 4.2.4 → 4.2.6
* https://github.com/advisories/GHSA-677m-j7p3-52f9
* underscore: 1.13.6 → 1.13.8
* https://github.com/advisories/GHSA-qpx9-hpmf-5gmw
* yaml: 2.8.2 → 2.8.3
* https://github.com/advisories/GHSA-48c2-rrv3-qjmp
$ git add .
--- stdout ---
--- end ---
$ git commit -F /tmp/tmp0wukg0bp
--- stdout ---
[master 4bad98d] build: Updating dependencies
3 files changed, 166 insertions(+), 144 deletions(-)
--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From 4bad98de5f9e9140d805b6ef907fe4d882c7e6a1 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Sat, 4 Apr 2026 10:36:51 +0000
Subject: [PATCH] build: Updating dependencies
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
composer:
* mediawiki/mediawiki-codesniffer: 48.0.0 → 50.0.0
* mediawiki/minus-x: 1.1.3 → 2.0.1
npm:
* svgo: 3.3.2 → 3.3.3
* ajv: 6.12.6, 8.18.0 → 6.14.0, 8.18.0
* https://github.com/advisories/GHSA-2g4f-4pwh-qvx6
* brace-expansion: 1.1.12, 2.0.2 → 1.1.13, 2.0.3
* https://github.com/advisories/GHSA-f886-m6hf-6m8v
* flatted: 3.3.1 → 3.4.2
* https://github.com/advisories/GHSA-25h7-pfq9-p65f
* https://github.com/advisories/GHSA-rf6f-7fwh-wjgh
* handlebars: 4.7.7 → 4.7.9
* https://github.com/advisories/GHSA-2qvq-rjwj-gvw9
* https://github.com/advisories/GHSA-2w6w-674q-4c4q
* https://github.com/advisories/GHSA-3mfm-83xf-c92r
* https://github.com/advisories/GHSA-442j-39wm-28r2
* https://github.com/advisories/GHSA-7rx3-28cr-v5wh
* https://github.com/advisories/GHSA-9cx6-37pm-9jff
* https://github.com/advisories/GHSA-xhpv-hc6g-r9c6
* https://github.com/advisories/GHSA-xjpj-3mr7-gcpf
* picomatch: 2.3.1, 4.0.3 → 2.3.2, 4.0.4
* https://github.com/advisories/GHSA-3v7f-55p6-f55p
* https://github.com/advisories/GHSA-c2c7-rcm5-vvqj
* socket.io-parser: 4.2.4 → 4.2.6
* https://github.com/advisories/GHSA-677m-j7p3-52f9
* underscore: 1.13.6 → 1.13.8
* https://github.com/advisories/GHSA-qpx9-hpmf-5gmw
* yaml: 2.8.2 → 2.8.3
* https://github.com/advisories/GHSA-48c2-rrv3-qjmp
Change-Id: I2aca6a8738eadc32220ea433374e051071788dcf
---
composer.json | 4 +-
package-lock.json | 304 +++++++++++++++++++++++++---------------------
package.json | 2 +-
3 files changed, 166 insertions(+), 144 deletions(-)
diff --git a/composer.json b/composer.json
index 80f5f91..89e82ca 100644
--- a/composer.json
+++ b/composer.json
@@ -57,9 +57,9 @@
}
],
"require-dev": {
- "mediawiki/mediawiki-codesniffer": "48.0.0",
+ "mediawiki/mediawiki-codesniffer": "50.0.0",
"mediawiki/mediawiki-phan-config": "0.20.0",
- "mediawiki/minus-x": "1.1.3",
+ "mediawiki/minus-x": "2.0.1",
"ockcyp/covers-validator": "1.7.0",
"php-parallel-lint/php-console-highlighter": "1.0.0",
"php-parallel-lint/php-parallel-lint": "1.4.0",
diff --git a/package-lock.json b/package-lock.json
index 782247a..8dcebd3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -48,7 +48,7 @@
"q": "1.5.1",
"qunit": "2.25.0",
"stylelint-config-wikimedia": "0.18.0",
- "svgo": "3.3.2"
+ "svgo": "3.3.3"
}
},
"node_modules/@aashutoshrathi/word-wrap": {
@@ -589,9 +589,9 @@
}
},
"node_modules/@eslint/eslintrc/node_modules/minimatch": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
- "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+ "version": "3.1.5",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
+ "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
"dev": true,
"dependencies": {
"brace-expansion": "^1.1.7"
@@ -826,9 +826,9 @@
}
},
"node_modules/@stylistic/eslint-plugin/node_modules/picomatch": {
- "version": "4.0.3",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
- "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+ "version": "4.0.4",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+ "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
"dev": true,
"engines": {
"node": ">=12"
@@ -886,15 +886,6 @@
"node": ">=0.10.0"
}
},
- "node_modules/@trysound/sax": {
- "version": "0.2.0",
- "resolved": "https://registry.npmjs.org/@trysound/sax/-/sax-0.2.0.tgz",
- "integrity": "sha512-L7z9BgrNEcYyUYtF+HaEfiS5ebkh9jXqbszz7pC0hRBPaatV0XjSD3+eHrpqFemQfgwiFF0QPIarnIihIDn7OA==",
- "dev": true,
- "engines": {
- "node": ">=10.13.0"
- }
- },
"node_modules/@types/cookie": {
"version": "0.4.1",
"resolved": "https://registry.npmjs.org/@types/cookie/-/cookie-0.4.1.tgz",
@@ -1154,23 +1145,21 @@
}
},
"node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": {
- "version": "2.0.2",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
- "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
+ "version": "2.0.3",
+ "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz",
+ "integrity": "sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==",
"dev": true,
- "license": "MIT",
"dependencies": {
"balanced-match": "^1.0.0"
}
},
"node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch": {
- "version": "9.0.5",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
- "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
+ "version": "9.0.9",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
+ "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
"dev": true,
- "license": "ISC",
"dependencies": {
- "brace-expansion": "^2.0.1"
+ "brace-expansion": "^2.0.2"
},
"engines": {
"node": ">=16 || 14 >=14.17"
@@ -1290,9 +1279,9 @@
}
},
"node_modules/ajv": {
- "version": "6.12.6",
- "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
- "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
+ "version": "6.14.0",
+ "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
+ "integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
"dev": true,
"dependencies": {
"fast-deep-equal": "^3.1.1",
@@ -1623,9 +1612,9 @@
"dev": true
},
"node_modules/brace-expansion": {
- "version": "1.1.12",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
- "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+ "version": "1.1.13",
+ "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.13.tgz",
+ "integrity": "sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==",
"dev": true,
"dependencies": {
"balanced-match": "^1.0.0",
@@ -3613,9 +3602,9 @@
}
},
"node_modules/eslint/node_modules/minimatch": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
- "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+ "version": "3.1.5",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
+ "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
"dev": true,
"dependencies": {
"brace-expansion": "^1.1.7"
@@ -3980,9 +3969,9 @@
}
},
"node_modules/flatted": {
- "version": "3.3.1",
- "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.1.tgz",
- "integrity": "sha512-X8cqMLLie7KsNUDSdzeN8FYK9rEt4Dt67OsG/DNGnYTSDBG4uFAJFBnUeiV+zCVAvwFy56IjM9sH51jVaEhNxw==",
+ "version": "3.4.2",
+ "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz",
+ "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==",
"dev": true
},
"node_modules/follow-redirects": {
@@ -4284,13 +4273,13 @@
"dev": true
},
"node_modules/globule": {
- "version": "1.3.3",
- "resolved": "https://registry.npmjs.org/globule/-/globule-1.3.3.tgz",
- "integrity": "sha512-mb1aYtDbIjTu4ShMB85m3UzjX9BVKe9WCzsnfMSZk+K5GpIbBOexgg4PPCt5eHDEG5/ZQAUX2Kct02zfiPLsKg==",
+ "version": "1.3.4",
+ "resolved": "https://registry.npmjs.org/globule/-/globule-1.3.4.tgz",
+ "integrity": "sha512-OPTIfhMBh7JbBYDpa5b+Q5ptmMWKwcNcFSR/0c6t8V4f3ZAVBEsKNY37QdVqmLRYSMhOUGYrY0QhSoEpzGr/Eg==",
"dev": true,
"dependencies": {
"glob": "~7.1.1",
- "lodash": "~4.17.10",
+ "lodash": "^4.17.21",
"minimatch": "~3.0.2"
},
"engines": {
@@ -4637,7 +4626,7 @@
"node_modules/grunt-exec": {
"version": "1.0.1",
"resolved": "https://registry.npmjs.org/grunt-exec/-/grunt-exec-1.0.1.tgz",
- "integrity": "sha1-5dU6OcXzRpATBe3uXIfbDyr5mcQ=",
+ "integrity": "sha512-+pB+L+Tr1quazHRvQeyLdsBnw8FDgM5vr2bPashpJKkIYNFqVdFKQKvMC3RlEYFoy9V3oJJyWufyNa/OUGVLHQ==",
"dev": true,
"engines": {
"node": ">=0.8.0"
@@ -4649,7 +4638,7 @@
"node_modules/grunt-file-exists": {
"version": "0.1.4",
"resolved": "https://registry.npmjs.org/grunt-file-exists/-/grunt-file-exists-0.1.4.tgz",
- "integrity": "sha1-Q2Er8418dlRwiUcIdgpuw/sQrrI=",
+ "integrity": "sha512-AKs+2aKdMtCfUYIhPMfj3trgr0ZJX9316Z8Hsno7xoZQ4sF6KdTgeTeYy8rV7zKjuob3+qAETTQEr1TFcvEZUg==",
"dev": true,
"engines": {
"node": ">= 0.8.0"
@@ -5192,13 +5181,13 @@
}
},
"node_modules/handlebars": {
- "version": "4.7.7",
- "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz",
- "integrity": "sha512-aAcXm5OAfE/8IXkcZvCepKU3VzW1/39Fb5ZuqMtgI/hT8X2YgoMvBY5dLhq/cpOvw7Lk1nK/UF71aLG/ZnVYRA==",
+ "version": "4.7.9",
+ "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.9.tgz",
+ "integrity": "sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==",
"dev": true,
"dependencies": {
"minimist": "^1.2.5",
- "neo-async": "^2.6.0",
+ "neo-async": "^2.6.2",
"source-map": "^0.6.1",
"wordwrap": "^1.0.0"
},
@@ -7479,9 +7468,9 @@
"license": "ISC"
},
"node_modules/picomatch": {
- "version": "2.3.1",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
- "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+ "version": "2.3.2",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
+ "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==",
"dev": true,
"engines": {
"node": ">=8.6"
@@ -8260,11 +8249,13 @@
"dev": true
},
"node_modules/sax": {
- "version": "1.2.4",
- "resolved": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz",
- "integrity": "sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw==",
+ "version": "1.6.0",
+ "resolved": "https://registry.npmjs.org/sax/-/sax-1.6.0.tgz",
+ "integrity": "sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==",
"dev": true,
- "optional": true
+ "engines": {
+ "node": ">=11.0.0"
+ }
},
"node_modules/semver": {
"version": "7.7.3",
@@ -8445,18 +8436,41 @@
}
},
"node_modules/socket.io-parser": {
- "version": "4.2.4",
- "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.4.tgz",
- "integrity": "sha512-/GbIKmo8ioc+NIWIhwdecY0ge+qVBSMdgxGygevmdHj24bsfgtCmcUUcQ5ZzcylGFHsN3k4HB4Cgkl96KVnuew==",
+ "version": "4.2.6",
+ "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.6.tgz",
+ "integrity": "sha512-asJqbVBDsBCJx0pTqw3WfesSY0iRX+2xzWEWzrpcH7L6fLzrhyF8WPI8UaeM4YCuDfpwA/cgsdugMsmtz8EJeg==",
"dev": true,
"dependencies": {
"@socket.io/component-emitter": "~3.1.0",
- "debug": "~4.3.1"
+ "debug": "~4.4.1"
},
"engines": {
"node": ">=10.0.0"
}
},
+ "node_modules/socket.io-parser/node_modules/debug": {
+ "version": "4.4.3",
+ "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+ "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+ "dev": true,
+ "dependencies": {
+ "ms": "^2.1.3"
+ },
+ "engines": {
+ "node": ">=6.0"
+ },
+ "peerDependenciesMeta": {
+ "supports-color": {
+ "optional": true
+ }
+ }
+ },
+ "node_modules/socket.io-parser/node_modules/ms": {
+ "version": "2.1.3",
+ "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+ "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+ "dev": true
+ },
"node_modules/source-map": {
"version": "0.5.7",
"resolved": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz",
@@ -9000,18 +9014,18 @@
"dev": true
},
"node_modules/svgo": {
- "version": "3.3.2",
- "resolved": "https://registry.npmjs.org/svgo/-/svgo-3.3.2.tgz",
- "integrity": "sha512-OoohrmuUlBs8B8o6MB2Aevn+pRIH9zDALSR+6hhqVfa6fRwG/Qw9VUMSMW9VNg2CFc/MTIfabtdOVl9ODIJjpw==",
+ "version": "3.3.3",
+ "resolved": "https://registry.npmjs.org/svgo/-/svgo-3.3.3.tgz",
+ "integrity": "sha512-+wn7I4p7YgJhHs38k2TNjy1vCfPIfLIJWR5MnCStsN8WuuTcBnRKcMHQLMM2ijxGZmDoZwNv8ipl5aTTen62ng==",
"dev": true,
"dependencies": {
- "@trysound/sax": "0.2.0",
"commander": "^7.2.0",
"css-select": "^5.1.0",
"css-tree": "^2.3.1",
"css-what": "^6.1.0",
"csso": "^5.0.5",
- "picocolors": "^1.0.0"
+ "picocolors": "^1.0.0",
+ "sax": "^1.5.0"
},
"bin": {
"svgo": "bin/svgo"
@@ -9260,11 +9274,10 @@
}
},
"node_modules/ts-declaration-location/node_modules/picomatch": {
- "version": "4.0.3",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
- "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+ "version": "4.0.4",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+ "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
"dev": true,
- "license": "MIT",
"engines": {
"node": ">=12"
},
@@ -9377,9 +9390,9 @@
}
},
"node_modules/underscore": {
- "version": "1.13.6",
- "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.6.tgz",
- "integrity": "sha512-+A5Sja4HP1M08MaXya7p5LvjuM7K6q/2EaC0+iovj/wOcMsTzMvDFbasi/oSapiwOlt252IqsKqPjCl7huKS0A==",
+ "version": "1.13.8",
+ "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz",
+ "integrity": "sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==",
"dev": true
},
"node_modules/underscore.string": {
@@ -9730,11 +9743,10 @@
}
},
"node_modules/yaml": {
- "version": "2.8.2",
- "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz",
- "integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==",
+ "version": "2.8.3",
+ "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+ "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
"dev": true,
- "license": "ISC",
"bin": {
"yaml": "bin.mjs"
},
@@ -10170,9 +10182,9 @@
}
},
"minimatch": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
- "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+ "version": "3.1.5",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
+ "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
"dev": true,
"requires": {
"brace-expansion": "^1.1.7"
@@ -10338,9 +10350,9 @@
}
},
"picomatch": {
- "version": "4.0.3",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
- "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+ "version": "4.0.4",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+ "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
"dev": true
}
}
@@ -10378,12 +10390,6 @@
}
}
},
- "@trysound/sax": {
- "version": "0.2.0",
- "resolved": "https://registry.npmjs.org/@trysound/sax/-/sax-0.2.0.tgz",
- "integrity": "sha512-L7z9BgrNEcYyUYtF+HaEfiS5ebkh9jXqbszz7pC0hRBPaatV0XjSD3+eHrpqFemQfgwiFF0QPIarnIihIDn7OA==",
- "dev": true
- },
"@types/cookie": {
"version": "0.4.1",
"resolved": "https://registry.npmjs.org/@types/cookie/-/cookie-0.4.1.tgz",
@@ -10553,21 +10559,21 @@
},
"dependencies": {
"brace-expansion": {
- "version": "2.0.2",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
- "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
+ "version": "2.0.3",
+ "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz",
+ "integrity": "sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==",
"dev": true,
"requires": {
"balanced-match": "^1.0.0"
}
},
"minimatch": {
- "version": "9.0.5",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
- "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
+ "version": "9.0.9",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
+ "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
"dev": true,
"requires": {
- "brace-expansion": "^2.0.1"
+ "brace-expansion": "^2.0.2"
}
}
}
@@ -10643,9 +10649,9 @@
"requires": {}
},
"ajv": {
- "version": "6.12.6",
- "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
- "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
+ "version": "6.14.0",
+ "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
+ "integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
"dev": true,
"requires": {
"fast-deep-equal": "^3.1.1",
@@ -10900,9 +10906,9 @@
"dev": true
},
"brace-expansion": {
- "version": "1.1.12",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
- "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+ "version": "1.1.13",
+ "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.13.tgz",
+ "integrity": "sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==",
"dev": true,
"requires": {
"balanced-match": "^1.0.0",
@@ -11924,9 +11930,9 @@
}
},
"minimatch": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
- "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+ "version": "3.1.5",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
+ "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
"dev": true,
"requires": {
"brace-expansion": "^1.1.7"
@@ -12577,9 +12583,9 @@
}
},
"flatted": {
- "version": "3.3.1",
- "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.1.tgz",
- "integrity": "sha512-X8cqMLLie7KsNUDSdzeN8FYK9rEt4Dt67OsG/DNGnYTSDBG4uFAJFBnUeiV+zCVAvwFy56IjM9sH51jVaEhNxw==",
+ "version": "3.4.2",
+ "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz",
+ "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==",
"dev": true
},
"follow-redirects": {
@@ -12793,13 +12799,13 @@
"dev": true
},
"globule": {
- "version": "1.3.3",
- "resolved": "https://registry.npmjs.org/globule/-/globule-1.3.3.tgz",
- "integrity": "sha512-mb1aYtDbIjTu4ShMB85m3UzjX9BVKe9WCzsnfMSZk+K5GpIbBOexgg4PPCt5eHDEG5/ZQAUX2Kct02zfiPLsKg==",
+ "version": "1.3.4",
+ "resolved": "https://registry.npmjs.org/globule/-/globule-1.3.4.tgz",
+ "integrity": "sha512-OPTIfhMBh7JbBYDpa5b+Q5ptmMWKwcNcFSR/0c6t8V4f3ZAVBEsKNY37QdVqmLRYSMhOUGYrY0QhSoEpzGr/Eg==",
"dev": true,
"requires": {
"glob": "~7.1.1",
- "lodash": "~4.17.10",
+ "lodash": "^4.17.21",
"minimatch": "~3.0.2"
}
},
@@ -13068,14 +13074,14 @@
"grunt-exec": {
"version": "1.0.1",
"resolved": "https://registry.npmjs.org/grunt-exec/-/grunt-exec-1.0.1.tgz",
- "integrity": "sha1-5dU6OcXzRpATBe3uXIfbDyr5mcQ=",
+ "integrity": "sha512-+pB+L+Tr1quazHRvQeyLdsBnw8FDgM5vr2bPashpJKkIYNFqVdFKQKvMC3RlEYFoy9V3oJJyWufyNa/OUGVLHQ==",
"dev": true,
"requires": {}
},
"grunt-file-exists": {
"version": "0.1.4",
"resolved": "https://registry.npmjs.org/grunt-file-exists/-/grunt-file-exists-0.1.4.tgz",
- "integrity": "sha1-Q2Er8418dlRwiUcIdgpuw/sQrrI=",
+ "integrity": "sha512-AKs+2aKdMtCfUYIhPMfj3trgr0ZJX9316Z8Hsno7xoZQ4sF6KdTgeTeYy8rV7zKjuob3+qAETTQEr1TFcvEZUg==",
"dev": true,
"requires": {}
},
@@ -13472,13 +13478,13 @@
}
},
"handlebars": {
- "version": "4.7.7",
- "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz",
- "integrity": "sha512-aAcXm5OAfE/8IXkcZvCepKU3VzW1/39Fb5ZuqMtgI/hT8X2YgoMvBY5dLhq/cpOvw7Lk1nK/UF71aLG/ZnVYRA==",
+ "version": "4.7.9",
+ "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.9.tgz",
+ "integrity": "sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==",
"dev": true,
"requires": {
"minimist": "^1.2.5",
- "neo-async": "^2.6.0",
+ "neo-async": "^2.6.2",
"source-map": "^0.6.1",
"uglify-js": "^3.1.4",
"wordwrap": "^1.0.0"
@@ -15223,9 +15229,9 @@
"dev": true
},
"picomatch": {
- "version": "2.3.1",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
- "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+ "version": "2.3.2",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
+ "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==",
"dev": true
},
"pify": {
@@ -15758,11 +15764,10 @@
"dev": true
},
"sax": {
- "version": "1.2.4",
- "resolved": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz",
- "integrity": "sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw==",
- "dev": true,
- "optional": true
+ "version": "1.6.0",
+ "resolved": "https://registry.npmjs.org/sax/-/sax-1.6.0.tgz",
+ "integrity": "sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==",
+ "dev": true
},
"semver": {
"version": "7.7.3",
@@ -15888,13 +15893,30 @@
}
},
"socket.io-parser": {
- "version": "4.2.4",
- "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.4.tgz",
- "integrity": "sha512-/GbIKmo8ioc+NIWIhwdecY0ge+qVBSMdgxGygevmdHj24bsfgtCmcUUcQ5ZzcylGFHsN3k4HB4Cgkl96KVnuew==",
+ "version": "4.2.6",
+ "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.6.tgz",
+ "integrity": "sha512-asJqbVBDsBCJx0pTqw3WfesSY0iRX+2xzWEWzrpcH7L6fLzrhyF8WPI8UaeM4YCuDfpwA/cgsdugMsmtz8EJeg==",
"dev": true,
"requires": {
"@socket.io/component-emitter": "~3.1.0",
- "debug": "~4.3.1"
+ "debug": "~4.4.1"
+ },
+ "dependencies": {
+ "debug": {
+ "version": "4.4.3",
+ "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+ "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+ "dev": true,
+ "requires": {
+ "ms": "^2.1.3"
+ }
+ },
+ "ms": {
+ "version": "2.1.3",
+ "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+ "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+ "dev": true
+ }
}
},
"source-map": {
@@ -16255,18 +16277,18 @@
"dev": true
},
"svgo": {
- "version": "3.3.2",
- "resolved": "https://registry.npmjs.org/svgo/-/svgo-3.3.2.tgz",
- "integrity": "sha512-OoohrmuUlBs8B8o6MB2Aevn+pRIH9zDALSR+6hhqVfa6fRwG/Qw9VUMSMW9VNg2CFc/MTIfabtdOVl9ODIJjpw==",
+ "version": "3.3.3",
+ "resolved": "https://registry.npmjs.org/svgo/-/svgo-3.3.3.tgz",
+ "integrity": "sha512-+wn7I4p7YgJhHs38k2TNjy1vCfPIfLIJWR5MnCStsN8WuuTcBnRKcMHQLMM2ijxGZmDoZwNv8ipl5aTTen62ng==",
"dev": true,
"requires": {
- "@trysound/sax": "0.2.0",
"commander": "^7.2.0",
"css-select": "^5.1.0",
"css-tree": "^2.3.1",
"css-what": "^6.1.0",
"csso": "^5.0.5",
- "picocolors": "^1.0.0"
+ "picocolors": "^1.0.0",
+ "sax": "^1.5.0"
}
},
"table": {
@@ -16447,9 +16469,9 @@
},
"dependencies": {
"picomatch": {
- "version": "4.0.3",
- "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
- "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+ "version": "4.0.4",
+ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+ "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
"dev": true
}
}
@@ -16517,9 +16539,9 @@
"dev": true
},
"underscore": {
- "version": "1.13.6",
- "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.6.tgz",
- "integrity": "sha512-+A5Sja4HP1M08MaXya7p5LvjuM7K6q/2EaC0+iovj/wOcMsTzMvDFbasi/oSapiwOlt252IqsKqPjCl7huKS0A==",
+ "version": "1.13.8",
+ "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz",
+ "integrity": "sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==",
"dev": true
},
"underscore.string": {
@@ -16755,9 +16777,9 @@
"dev": true
},
"yaml": {
- "version": "2.8.2",
- "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz",
- "integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==",
+ "version": "2.8.3",
+ "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+ "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
"dev": true
},
"yaml-eslint-parser": {
diff --git a/package.json b/package.json
index 0473cad..18008d8 100644
--- a/package.json
+++ b/package.json
@@ -72,6 +72,6 @@
"q": "1.5.1",
"qunit": "2.25.0",
"stylelint-config-wikimedia": "0.18.0",
- "svgo": "3.3.2"
+ "svgo": "3.3.3"
}
}
--
2.47.3
--- end ---