This run took 182 seconds.
From 2c9af6aa69280f46ec7bf7413e2419bde5afef69 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Sun, 31 May 2026 08:08:07 +0000
Subject: [PATCH] build: Updating npm dependencies
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
* @cypress/request: 3.0.10 → 4.0.1
* https://github.com/advisories/GHSA-q8mj-m7cp-5q26
* https://github.com/advisories/GHSA-w5hq-g745-h8pq
* cypress: 15.14.2, ^15.14.0 → 15.16.0, ^15.14.0
* https://github.com/advisories/GHSA-q8mj-m7cp-5q26
* https://github.com/advisories/GHSA-w5hq-g745-h8pq
* js-cookie: 3.0.5 → 3.0.8
* https://github.com/advisories/GHSA-qjx8-664m-686j
* qs: 6.14.2 → 6.15.2
* https://github.com/advisories/GHSA-q8mj-m7cp-5q26
* tmp: 0.2.5 → 0.2.7
* https://github.com/advisories/GHSA-ph9p-34f9-6g65
* uuid: 8.3.2 →
* https://github.com/advisories/GHSA-w5hq-g745-h8pq
Change-Id: Ie36b7030af9c714114424ddf11a1d37640c54b6d
---
package-lock.json | 155 ++++++++++++----------------------------------
1 file changed, 39 insertions(+), 116 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index ac81080..f2c6ed6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1851,9 +1851,9 @@
}
},
"node_modules/@cypress/request": {
- "version": "3.0.10",
- "resolved": "https://registry.npmjs.org/@cypress/request/-/request-3.0.10.tgz",
- "integrity": "sha512-hauBrOdvu08vOsagkZ/Aju5XuiZx6ldsLfByg1htFeldhex+PeMrYauANzFsMJeAA0+dyPLbDoX2OYuvVoLDkQ==",
+ "version": "4.0.1",
+ "resolved": "https://registry.npmjs.org/@cypress/request/-/request-4.0.1.tgz",
+ "integrity": "sha512-y20e+e6dFYkOUUJLVUZTsJRuTiXZaUQ32WD+R/ux/HBybbTx4ge7cNINcua0pU8+SNkKuRbOF12mBmzuzM8n5w==",
"dev": true,
"dependencies": {
"aws-sign2": "~0.7.0",
@@ -1869,14 +1869,13 @@
"json-stringify-safe": "~5.0.1",
"mime-types": "~2.1.19",
"performance-now": "^2.1.0",
- "qs": "~6.14.1",
+ "qs": "^6.15.2",
"safe-buffer": "^5.1.2",
"tough-cookie": "^5.0.0",
- "tunnel-agent": "^0.6.0",
- "uuid": "^8.3.2"
+ "tunnel-agent": "^0.6.0"
},
"engines": {
- "node": ">= 6"
+ "node": ">= 14.17.0"
}
},
"node_modules/@cypress/request/node_modules/tough-cookie": {
@@ -1884,7 +1883,6 @@
"resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-5.1.2.tgz",
"integrity": "sha512-FVDYdxtnj0G6Qm/DhNPSb8Ju59ULcup3tuJxkFb5K8Bv2pUXILbf0xZWU8PX8Ov19OXljbUyveOFwRMwkXzO+A==",
"dev": true,
- "license": "BSD-3-Clause",
"dependencies": {
"tldts": "^6.1.32"
},
@@ -4593,16 +4591,6 @@
"integrity": "sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==",
"dev": true
},
- "node_modules/@types/yauzl": {
- "version": "2.10.3",
- "resolved": "https://registry.npmjs.org/@types/yauzl/-/yauzl-2.10.3.tgz",
- "integrity": "sha512-oJoftv0LSuaDZE3Le4DbKX+KS9G36NzOeSap90UIK0yMA/NhKJhqlSGtNDORNRaIbQfzjXDrQa0ytJ6mNRGz/Q==",
- "dev": true,
- "optional": true,
- "dependencies": {
- "@types/node": "*"
- }
- },
"node_modules/@typescript-eslint/eslint-plugin": {
"version": "8.56.0",
"resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.56.0.tgz",
@@ -5751,7 +5739,6 @@
"resolved": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz",
"integrity": "sha512-ix/FxPn0MDjeyJ7i/yoHGFt/EX6LyNbxSEhPPXODPL+KB0VPk86UYfL0lMdy+KCnv+fmvIzySwaK5COwqVbWTQ==",
"dev": true,
- "license": "MIT",
"dependencies": {
"safer-buffer": "~2.1.0"
}
@@ -5761,7 +5748,6 @@
"resolved": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz",
"integrity": "sha512-NfJ4UzBCcQGLDlQq7nHxH+tv3kyZ0hHQqF5BO6J7tNJeP5do1llPr8dZ8zHonfhAu0PHAdMkSo+8o0wxg9lZWw==",
"dev": true,
- "license": "MIT",
"engines": {
"node": ">=0.8"
}
@@ -5814,7 +5800,6 @@
"resolved": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz",
"integrity": "sha512-08kcGqnYf/YmjoRhfxyu+CLxBjUtHLXLXX/vUfx9l2LYzG3c1m61nrpyFUZI6zeS+Li/wWMMidD9KgrqtGq3mA==",
"dev": true,
- "license": "Apache-2.0",
"engines": {
"node": "*"
}
@@ -5823,8 +5808,7 @@
"version": "1.13.2",
"resolved": "https://registry.npmjs.org/aws4/-/aws4-1.13.2.tgz",
"integrity": "sha512-lHe62zvbTB5eEABUVi/AwVh0ZKY9rMMDhmm+eeyuuUQbQ3+J+fONVQOZyj+DdrvD4BY33uYniyRJ4UJIaSKAfw==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/babel-jest": {
"version": "29.7.0",
@@ -6075,7 +6059,6 @@
"resolved": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz",
"integrity": "sha512-qeFIXtP4MSoi6NLqO12WfqARWWuCKi2Rn/9hJLEmtB5yTNr9DqFWkJRCf2qShWzPeAMRnOgCrq0sg/KLv5ES9w==",
"dev": true,
- "license": "BSD-3-Clause",
"dependencies": {
"tweetnacl": "^0.14.3"
}
@@ -6324,8 +6307,7 @@
"version": "0.12.0",
"resolved": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz",
"integrity": "sha512-4tYFyifaFfGacoiObjJegolkwSU4xQNGbVgUiNYVUxbQ2x2lUsFvY4hVgVzGiIe6WLOPqycWXA40l+PWsxthUw==",
- "dev": true,
- "license": "Apache-2.0"
+ "dev": true
},
"node_modules/chai": {
"version": "4.5.0",
@@ -7117,13 +7099,13 @@
"license": "MIT"
},
"node_modules/cypress": {
- "version": "15.14.2",
- "resolved": "https://registry.npmjs.org/cypress/-/cypress-15.14.2.tgz",
- "integrity": "sha512-xMWg/iEImeIThRQZdnf3BFJT1a84apM/R91Feoa4vVWGuYWDphMT5jLhRVTBVlCgi+6axegF1zqhNyjhug2SsQ==",
+ "version": "15.16.0",
+ "resolved": "https://registry.npmjs.org/cypress/-/cypress-15.16.0.tgz",
+ "integrity": "sha512-fy0M0c9xDLEp4v9y7LLKFeAQhIdDsobxDSKpD3JcZpqQefjy9TSzEyVV3HA0zu7hUi0bGHlSYlI7ASub8wgR9A==",
"dev": true,
"hasInstallScript": true,
"dependencies": {
- "@cypress/request": "^3.0.10",
+ "@cypress/request": "^4.0.0",
"@cypress/xvfb": "^1.2.4",
"@types/sinonjs__fake-timers": "8.1.1",
"@types/sizzle": "^2.3.2",
@@ -7143,7 +7125,6 @@
"eventemitter2": "6.4.7",
"execa": "4.1.0",
"executable": "^4.1.1",
- "extract-zip": "2.0.1",
"fs-extra": "^9.1.0",
"hasha": "5.2.2",
"is-installed-globally": "~0.4.0",
@@ -7162,7 +7143,7 @@
"tree-kill": "1.2.2",
"tslib": "1.14.1",
"untildify": "^4.0.0",
- "yauzl": "^2.10.0"
+ "yauzl": "^3.3.1"
},
"bin": {
"cypress": "bin/cypress"
@@ -7561,7 +7542,6 @@
"resolved": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz",
"integrity": "sha512-jRFi8UDGo6j+odZiEpjazZaWqEal3w/basFjQHQEwVtZJGDpxbH1MeYluwCS8Xq5wmLJooDlMgvVarmWfGM44g==",
"dev": true,
- "license": "MIT",
"dependencies": {
"assert-plus": "^1.0.0"
},
@@ -7863,7 +7843,6 @@
"resolved": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz",
"integrity": "sha512-eh9O+hwRHNbG4BLTjEl3nw044CkGm5X6LoaCf7LPp7UU8Qrt47JYNi6nPX8xjW97TKGKm1ouctg0QSpZe9qrnw==",
"dev": true,
- "license": "MIT",
"dependencies": {
"jsbn": "~0.1.0",
"safer-buffer": "^2.1.0"
@@ -9439,26 +9418,6 @@
"integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==",
"dev": true
},
- "node_modules/extract-zip": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/extract-zip/-/extract-zip-2.0.1.tgz",
- "integrity": "sha512-GDhU9ntwuKyGXdZBUgTIe+vXnWj0fppUEtMDL0+idd5Sta8TGpHssn/eusA9mrPr9qNDym6SxAYZjNvCn/9RBg==",
- "dev": true,
- "dependencies": {
- "debug": "^4.1.1",
- "get-stream": "^5.1.0",
- "yauzl": "^2.10.0"
- },
- "bin": {
- "extract-zip": "cli.js"
- },
- "engines": {
- "node": ">= 10.17.0"
- },
- "optionalDependencies": {
- "@types/yauzl": "^2.9.1"
- }
- },
"node_modules/extsprintf": {
"version": "1.3.0",
"resolved": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz",
@@ -9466,8 +9425,7 @@
"dev": true,
"engines": [
"node >=0.6.0"
- ],
- "license": "MIT"
+ ]
},
"node_modules/fast-deep-equal": {
"version": "3.1.3",
@@ -9553,15 +9511,6 @@
"bser": "2.1.1"
}
},
- "node_modules/fd-slicer": {
- "version": "1.1.0",
- "resolved": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz",
- "integrity": "sha512-cE1qsB/VwyQozZ+q1dGxR8LBYNZeofhEdUNGSMbQD3Gw2lAzX9Zb3uIU6Ebc/Fmyjo9AWWfnn0AUCHqtevs/8g==",
- "dev": true,
- "dependencies": {
- "pend": "~1.2.0"
- }
- },
"node_modules/file-entry-cache": {
"version": "6.0.1",
"resolved": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-6.0.1.tgz",
@@ -9652,7 +9601,6 @@
"resolved": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz",
"integrity": "sha512-j0KLYPhm6zeac4lz3oJ3o65qvgQCcPubiyotZrXqEaG4hNagNYO8qdlUrX5vwqv9ohqeT/Z3j6+yW067yWWdUw==",
"dev": true,
- "license": "Apache-2.0",
"engines": {
"node": "*"
}
@@ -9838,7 +9786,6 @@
"resolved": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz",
"integrity": "sha512-0fzj9JxOLfJ+XGLhR8ze3unN0KZCgZwiSSDz168VERjK8Wl8kVSdcu2kspd4s4wtAa1y/qrVRiAA0WclVsu0ng==",
"dev": true,
- "license": "MIT",
"dependencies": {
"assert-plus": "^1.0.0"
}
@@ -10204,7 +10151,6 @@
"resolved": "https://registry.npmjs.org/http-signature/-/http-signature-1.4.0.tgz",
"integrity": "sha512-G5akfn7eKbpDN+8nPS/cb57YeA1jLTVxjpCj7tmm3QKPdyDy7T+qSC40e9ptydSWvkwjSXw1VbkpyEm39ukeAg==",
"dev": true,
- "license": "MIT",
"dependencies": {
"assert-plus": "^1.0.0",
"jsprim": "^2.0.2",
@@ -10507,8 +10453,7 @@
"version": "1.0.0",
"resolved": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz",
"integrity": "sha512-cyA56iCMHAh5CdzjJIa4aohJyeO1YbwLi3Jc35MmRU6poroFjIGZzUzupGiRPOjgHg9TLu43xbpwXk523fMxKA==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/is-unicode-supported": {
"version": "0.1.0",
@@ -10546,8 +10491,7 @@
"version": "0.1.2",
"resolved": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz",
"integrity": "sha512-Yljz7ffyPbrLpLngrMtZ7NduUgVvi6wG9RJ9IUcyCd59YQ911PBJphODUcbOVbqYfxe1wuYf/LJ8PauMRwsM/g==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/istanbul-lib-coverage": {
"version": "3.2.2",
@@ -12332,13 +12276,10 @@
}
},
"node_modules/js-cookie": {
- "version": "3.0.5",
- "resolved": "https://registry.npmjs.org/js-cookie/-/js-cookie-3.0.5.tgz",
- "integrity": "sha512-cEiJEAEoIbWfCZYKWhVwFuvPX1gETRYPw6LlaTKoxD3s2AkXzkCjnp6h0V77ozyqj0jakteJ4YqDJT830+lVGw==",
- "dev": true,
- "engines": {
- "node": ">=14"
- }
+ "version": "3.0.8",
+ "resolved": "https://registry.npmjs.org/js-cookie/-/js-cookie-3.0.8.tgz",
+ "integrity": "sha512-yeJd4aNAdYZQjaon2bpD/Gb0B/omw7HQOsynXXcOiWVCacbBcPlgn8S/d1X6blFSaHao7ozqtW7NZW19xpCtIw==",
+ "dev": true
},
"node_modules/js-tokens": {
"version": "4.0.0",
@@ -12363,8 +12304,7 @@
"version": "0.1.1",
"resolved": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz",
"integrity": "sha512-UVU9dibq2JcFWxQPA6KCqj5O42VOmAY3zQUfEKxU0KpTGXwNoCjkX1e13eHNvw/xPynt6pU0rZ1htjWTNTSXsg==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/jsdoc-type-pratt-parser": {
"version": "6.10.0",
@@ -12449,8 +12389,7 @@
"version": "0.4.0",
"resolved": "https://registry.npmjs.org/json-schema/-/json-schema-0.4.0.tgz",
"integrity": "sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA==",
- "dev": true,
- "license": "(AFL-2.1 OR BSD-3-Clause)"
+ "dev": true
},
"node_modules/json-schema-traverse": {
"version": "0.4.1",
@@ -12468,8 +12407,7 @@
"version": "5.0.1",
"resolved": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz",
"integrity": "sha512-ZClg6AaYvamvYEE82d3Iyd3vSSIjQ+odgjaTzRuO3s7toCdFKczob2i0zCh7JE8kWn17yvAWhUVxvqGwUalsRA==",
- "dev": true,
- "license": "ISC"
+ "dev": true
},
"node_modules/json5": {
"version": "2.2.3",
@@ -12503,7 +12441,6 @@
"engines": [
"node >=0.6.0"
],
- "license": "MIT",
"dependencies": {
"assert-plus": "1.0.0",
"extsprintf": "1.3.0",
@@ -13795,8 +13732,7 @@
"version": "2.1.0",
"resolved": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz",
"integrity": "sha512-7EAHlyLHI56VEIdK57uwHdHKIaAGbnXPiw0yWbarQZOKaKpvUIgW0jWRVLiatnM+XXlSwsanIBH/hzGMJulMow==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/picocolors": {
"version": "1.1.1",
@@ -14097,9 +14033,9 @@
]
},
"node_modules/qs": {
- "version": "6.14.2",
- "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.2.tgz",
- "integrity": "sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==",
+ "version": "6.15.2",
+ "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.2.tgz",
+ "integrity": "sha512-Rzq0KEyX/w/tEybncDgdkZrJgVUsUMk3xjh3t5bv3S1HTAtg+uOYt72+ZfwiQwKdysThkTBdL/rTi6HDmX9Ddw==",
"dev": true,
"dependencies": {
"side-channel": "^1.1.0"
@@ -14864,7 +14800,6 @@
"resolved": "https://registry.npmjs.org/sshpk/-/sshpk-1.18.0.tgz",
"integrity": "sha512-2p2KJZTSqQ/I3+HX42EpYOa2l3f8Erv8MWKsy2I9uf4wA7yFIkXRffYdsx86y6z4vHtV8u7g+pPlr8/4ouAxsQ==",
"dev": true,
- "license": "MIT",
"dependencies": {
"asn1": "~0.2.3",
"assert-plus": "^1.0.0",
@@ -16139,7 +16074,6 @@
"resolved": "https://registry.npmjs.org/tldts/-/tldts-6.1.86.tgz",
"integrity": "sha512-WMi/OQ2axVTf/ykqCQgXiIct+mSQDFdH2fkwhPwgEwvJ1kSzZRiinb0zF2Xb8u4+OqPChmyI6MEu4EezNJz+FQ==",
"dev": true,
- "license": "MIT",
"dependencies": {
"tldts-core": "^6.1.86"
},
@@ -16151,13 +16085,12 @@
"version": "6.1.86",
"resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-6.1.86.tgz",
"integrity": "sha512-Je6p7pkk+KMzMv2XXKmAE3McmolOQFdxkKw0R8EYNr7sELW46JqnNeTX8ybPiQgvg1ymCoF8LXs5fzFaZvJPTA==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/tmp": {
- "version": "0.2.5",
- "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz",
- "integrity": "sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==",
+ "version": "0.2.7",
+ "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.7.tgz",
+ "integrity": "sha512-e0votIpp4Uo2AJYSzVHV6xCcawuiez3DzqDAbrTc3YxBkplN6e+dM13ZeIcZnDg/QpSuU2zfZ3rzwY8ukEnaXw==",
"dev": true,
"engines": {
"node": ">=14.14"
@@ -16329,7 +16262,6 @@
"resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz",
"integrity": "sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==",
"dev": true,
- "license": "Apache-2.0",
"dependencies": {
"safe-buffer": "^5.0.1"
},
@@ -16341,8 +16273,7 @@
"version": "0.14.5",
"resolved": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
"integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA==",
- "dev": true,
- "license": "Unlicense"
+ "dev": true
},
"node_modules/type-check": {
"version": "0.4.0",
@@ -16525,16 +16456,6 @@
"integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
"dev": true
},
- "node_modules/uuid": {
- "version": "8.3.2",
- "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
- "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
- "dev": true,
- "license": "MIT",
- "bin": {
- "uuid": "dist/bin/uuid"
- }
- },
"node_modules/v8-to-istanbul": {
"version": "9.3.0",
"resolved": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz",
@@ -16577,7 +16498,6 @@
"engines": [
"node >=0.6.0"
],
- "license": "MIT",
"dependencies": {
"assert-plus": "^1.0.0",
"core-util-is": "1.0.2",
@@ -17140,13 +17060,16 @@
}
},
"node_modules/yauzl": {
- "version": "2.10.0",
- "resolved": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz",
- "integrity": "sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==",
+ "version": "3.3.1",
+ "resolved": "https://registry.npmjs.org/yauzl/-/yauzl-3.3.1.tgz",
+ "integrity": "sha512-RNPCUkiE/ZgO4w8i9U5yDQVHaFDdnzaFANElRvpJteCspvmv2VqrRb9lvS6odVD+jqI/zDsxAHJVsafpcheVQQ==",
"dev": true,
"dependencies": {
"buffer-crc32": "~0.2.3",
- "fd-slicer": "~1.1.0"
+ "pend": "~1.2.0"
+ },
+ "engines": {
+ "node": ">=12"
}
},
"node_modules/yocto-queue": {
--
2.47.3
$ date
--- stdout ---
Sun May 31 08:05:23 UTC 2026
--- end ---
$ git clone file:///srv/git/mediawiki-extensions-GrowthExperiments.git /src/repo --depth=1 -b REL1_46
--- stderr ---
Cloning into '/src/repo'...
--- stdout ---
--- end ---
$ git config user.name libraryupgrader
--- stdout ---
--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---
--- end ---
$ git submodule update --init
--- stdout ---
--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.
--- end ---
$ git show-ref refs/heads/REL1_46
--- stdout ---
b3c2bfbfdb0b6e33c68a2ae78019cf15c116cef1 refs/heads/REL1_46
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"@cypress/request": {
"name": "@cypress/request",
"severity": "moderate",
"isDirect": false,
"via": [
"qs",
"uuid"
],
"effects": [
"cypress"
],
"range": "<=4.0.0",
"nodes": [
"node_modules/@cypress/request"
],
"fixAvailable": true
},
"cypress": {
"name": "cypress",
"severity": "moderate",
"isDirect": true,
"via": [
"@cypress/request"
],
"effects": [],
"range": "13.15.0 - 15.14.2",
"nodes": [
"node_modules/cypress"
],
"fixAvailable": true
},
"js-cookie": {
"name": "js-cookie",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1119459,
"name": "js-cookie",
"dependency": "js-cookie",
"title": "JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection",
"url": "https://github.com/advisories/GHSA-qjx8-664m-686j",
"severity": "high",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
"range": "<=3.0.5"
}
],
"effects": [],
"range": "<=3.0.5",
"nodes": [
"node_modules/js-cookie"
],
"fixAvailable": true
},
"qs": {
"name": "qs",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1119502,
"name": "qs",
"dependency": "qs",
"title": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
"url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26",
"severity": "moderate",
"cwe": [
"CWE-476"
],
"cvss": {
"score": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
"range": ">=6.11.1 <=6.15.1"
}
],
"effects": [
"@cypress/request"
],
"range": "6.11.1 - 6.15.1",
"nodes": [
"node_modules/qs"
],
"fixAvailable": true
},
"tmp": {
"name": "tmp",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1119610,
"name": "tmp",
"dependency": "tmp",
"title": "tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape",
"url": "https://github.com/advisories/GHSA-ph9p-34f9-6g65",
"severity": "high",
"cwe": [
"CWE-22"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<0.2.6"
}
],
"effects": [],
"range": "<0.2.6",
"nodes": [
"node_modules/tmp"
],
"fixAvailable": true
},
"uuid": {
"name": "uuid",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1119441,
"name": "uuid",
"dependency": "uuid",
"title": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq",
"severity": "moderate",
"cwe": [
"CWE-787",
"CWE-1285"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
"range": "<11.1.1"
}
],
"effects": [
"@cypress/request"
],
"range": "<11.1.1",
"nodes": [
"node_modules/uuid"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 4,
"high": 2,
"critical": 0,
"total": 6
},
"dependencies": {
"prod": 1,
"dev": 1298,
"optional": 65,
"peer": 7,
"peerOptional": 0,
"total": 1298
}
}
}
--- end ---
$ /usr/bin/composer install
--- stderr ---
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information
Updating dependencies
Lock file operations: 49 installs, 0 updates, 0 removals
- Locking composer/pcre (3.3.2)
- Locking composer/semver (3.4.4)
- Locking composer/spdx-licenses (1.5.10)
- Locking composer/xdebug-handler (3.0.5)
- Locking danog/advanced-json-rpc (v3.2.3)
- Locking dealerdirect/phpcodesniffer-composer-installer (v1.2.1)
- Locking doctrine/annotations (2.0.2)
- Locking doctrine/deprecations (1.1.6)
- Locking doctrine/lexer (3.0.1)
- Locking mediawiki/mediawiki-codesniffer (v50.0.0)
- Locking mediawiki/mediawiki-phan-config (0.20.0)
- Locking mediawiki/minus-x (2.0.1)
- Locking mediawiki/phan-taint-check-plugin (9.1.0)
- Locking netresearch/jsonmapper (v5.0.1)
- Locking phan/phan (6.0.2)
- Locking phan/tolerant-php-parser (v0.2.0)
- Locking phan/var_representation_polyfill (0.1.4)
- Locking php-parallel-lint/php-console-color (v1.0.1)
- Locking php-parallel-lint/php-console-highlighter (v1.0.0)
- Locking php-parallel-lint/php-parallel-lint (v1.4.0)
- Locking phpbench/container (2.2.3)
- Locking phpbench/phpbench (1.6.1)
- Locking phpcsstandards/phpcsextra (1.4.0)
- Locking phpcsstandards/phpcsutils (1.2.2)
- Locking phpdocumentor/reflection-common (2.2.0)
- Locking phpdocumentor/reflection-docblock (6.0.3)
- Locking phpdocumentor/type-resolver (2.0.0)
- Locking phpstan/phpdoc-parser (2.3.2)
- Locking psr/cache (3.0.0)
- Locking psr/container (2.0.2)
- Locking psr/log (3.0.2)
- Locking sabre/event (6.1.0)
- Locking seld/jsonlint (1.11.0)
- Locking squizlabs/php_codesniffer (3.13.5)
- Locking symfony/console (v8.1.0)
- Locking symfony/deprecation-contracts (v3.7.0)
- Locking symfony/filesystem (v8.1.0)
- Locking symfony/finder (v8.1.0)
- Locking symfony/options-resolver (v8.1.0)
- Locking symfony/polyfill-ctype (v1.37.0)
- Locking symfony/polyfill-intl-grapheme (v1.38.1)
- Locking symfony/polyfill-intl-normalizer (v1.38.0)
- Locking symfony/polyfill-mbstring (v1.38.1)
- Locking symfony/polyfill-php85 (v1.38.1)
- Locking symfony/process (v8.1.0)
- Locking symfony/service-contracts (v3.7.0)
- Locking symfony/string (v8.1.0)
- Locking webmozart/assert (2.4.0)
- Locking webmozart/glob (4.7.0)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 49 installs, 0 updates, 0 removals
0 [>---------------------------] 0 [->--------------------------]
- Installing squizlabs/php_codesniffer (3.13.5): Extracting archive
- Installing dealerdirect/phpcodesniffer-composer-installer (v1.2.1): Extracting archive
- Installing composer/pcre (3.3.2): Extracting archive
- Installing doctrine/lexer (3.0.1): Extracting archive
- Installing phpcsstandards/phpcsutils (1.2.2): Extracting archive
- Installing phpcsstandards/phpcsextra (1.4.0): Extracting archive
- Installing symfony/polyfill-mbstring (v1.38.1): Extracting archive
- Installing composer/spdx-licenses (1.5.10): Extracting archive
- Installing composer/semver (3.4.4): Extracting archive
- Installing mediawiki/mediawiki-codesniffer (v50.0.0): Extracting archive
- Installing symfony/polyfill-intl-normalizer (v1.38.0): Extracting archive
- Installing symfony/polyfill-intl-grapheme (v1.38.1): Extracting archive
- Installing symfony/polyfill-ctype (v1.37.0): Extracting archive
- Installing symfony/string (v8.1.0): Extracting archive
- Installing symfony/deprecation-contracts (v3.7.0): Extracting archive
- Installing psr/container (2.0.2): Extracting archive
- Installing symfony/service-contracts (v3.7.0): Extracting archive
- Installing symfony/polyfill-php85 (v1.38.1): Extracting archive
- Installing symfony/console (v8.1.0): Extracting archive
- Installing sabre/event (6.1.0): Extracting archive
- Installing phan/var_representation_polyfill (0.1.4): Extracting archive
- Installing phan/tolerant-php-parser (v0.2.0): Extracting archive
- Installing netresearch/jsonmapper (v5.0.1): Extracting archive
- Installing webmozart/assert (2.4.0): Extracting archive
- Installing phpstan/phpdoc-parser (2.3.2): Extracting archive
- Installing phpdocumentor/reflection-common (2.2.0): Extracting archive
- Installing doctrine/deprecations (1.1.6): Extracting archive
- Installing phpdocumentor/type-resolver (2.0.0): Extracting archive
- Installing phpdocumentor/reflection-docblock (6.0.3): Extracting archive
- Installing danog/advanced-json-rpc (v3.2.3): Extracting archive
- Installing psr/log (3.0.2): Extracting archive
- Installing composer/xdebug-handler (3.0.5): Extracting archive
- Installing phan/phan (6.0.2): Extracting archive
- Installing mediawiki/phan-taint-check-plugin (9.1.0): Extracting archive
- Installing mediawiki/mediawiki-phan-config (0.20.0): Extracting archive
- Installing mediawiki/minus-x (2.0.1): Extracting archive
- Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive
- Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive
- Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive
- Installing webmozart/glob (4.7.0): Extracting archive
- Installing symfony/process (v8.1.0): Extracting archive
- Installing symfony/options-resolver (v8.1.0): Extracting archive
- Installing symfony/finder (v8.1.0): Extracting archive
- Installing symfony/filesystem (v8.1.0): Extracting archive
- Installing seld/jsonlint (1.11.0): Extracting archive
- Installing phpbench/container (2.2.3): Extracting archive
- Installing psr/cache (3.0.0): Extracting archive
- Installing doctrine/annotations (2.0.2): Extracting archive
- Installing phpbench/phpbench (1.6.1): Extracting archive
0/47 [>---------------------------] 0%
29/47 [=================>----------] 61%
39/47 [=======================>----] 82%
47/47 [============================] 100%
2 package suggestions were added by new dependencies, use `composer suggest` to see details.
Package doctrine/annotations is abandoned, you should avoid using it. No replacement was suggested.
Generating autoload files
24 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---
PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"@cypress/request": {
"name": "@cypress/request",
"severity": "moderate",
"isDirect": false,
"via": [
"qs",
"uuid"
],
"effects": [
"cypress"
],
"range": "<=4.0.0",
"nodes": [
"node_modules/@cypress/request"
],
"fixAvailable": true
},
"cypress": {
"name": "cypress",
"severity": "moderate",
"isDirect": true,
"via": [
"@cypress/request"
],
"effects": [],
"range": "13.15.0 - 15.14.2",
"nodes": [
"node_modules/cypress"
],
"fixAvailable": true
},
"js-cookie": {
"name": "js-cookie",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1119459,
"name": "js-cookie",
"dependency": "js-cookie",
"title": "JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection",
"url": "https://github.com/advisories/GHSA-qjx8-664m-686j",
"severity": "high",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
"range": "<=3.0.5"
}
],
"effects": [],
"range": "<=3.0.5",
"nodes": [
"node_modules/js-cookie"
],
"fixAvailable": true
},
"qs": {
"name": "qs",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1119502,
"name": "qs",
"dependency": "qs",
"title": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
"url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26",
"severity": "moderate",
"cwe": [
"CWE-476"
],
"cvss": {
"score": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
"range": ">=6.11.1 <=6.15.1"
}
],
"effects": [
"@cypress/request"
],
"range": "6.11.1 - 6.15.1",
"nodes": [
"node_modules/qs"
],
"fixAvailable": true
},
"tmp": {
"name": "tmp",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1119610,
"name": "tmp",
"dependency": "tmp",
"title": "tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape",
"url": "https://github.com/advisories/GHSA-ph9p-34f9-6g65",
"severity": "high",
"cwe": [
"CWE-22"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<0.2.6"
}
],
"effects": [],
"range": "<0.2.6",
"nodes": [
"node_modules/tmp"
],
"fixAvailable": true
},
"uuid": {
"name": "uuid",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1119441,
"name": "uuid",
"dependency": "uuid",
"title": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq",
"severity": "moderate",
"cwe": [
"CWE-787",
"CWE-1285"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
"range": "<11.1.1"
}
],
"effects": [
"@cypress/request"
],
"range": "<11.1.1",
"nodes": [
"node_modules/uuid"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 4,
"high": 2,
"critical": 0,
"total": 6
},
"dependencies": {
"prod": 1,
"dev": 1298,
"optional": 65,
"peer": 7,
"peerOptional": 0,
"total": 1298
}
}
}
--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: undefined,
npm WARN EBADENGINE required: { npm: '>=10', node: '>=20' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex@2.4.0',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex-design-tokens@2.4.0',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.1' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex-icons@2.4.0',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: 'npm-run-all2@8.0.4',
npm WARN EBADENGINE required: { node: '^20.5.0 || >=22.0.0', npm: '>= 10' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
--- stdout ---
{
"added": 1294,
"removed": 0,
"changed": 0,
"audited": 1295,
"funding": 206,
"audit": {
"auditReportVersion": 2,
"vulnerabilities": {
"@cypress/request": {
"name": "@cypress/request",
"severity": "moderate",
"isDirect": false,
"via": [
"qs",
"uuid"
],
"effects": [
"cypress"
],
"range": "<=4.0.0",
"nodes": [
""
],
"fixAvailable": true
},
"cypress": {
"name": "cypress",
"severity": "moderate",
"isDirect": false,
"via": [
"@cypress/request"
],
"effects": [],
"range": "13.15.0 - 15.14.2",
"nodes": [
""
],
"fixAvailable": true
},
"js-cookie": {
"name": "js-cookie",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1119459,
"name": "js-cookie",
"dependency": "js-cookie",
"title": "JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection",
"url": "https://github.com/advisories/GHSA-qjx8-664m-686j",
"severity": "high",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
"range": "<=3.0.5"
}
],
"effects": [],
"range": "<=3.0.5",
"nodes": [
""
],
"fixAvailable": true
},
"qs": {
"name": "qs",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1119502,
"name": "qs",
"dependency": "qs",
"title": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
"url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26",
"severity": "moderate",
"cwe": [
"CWE-476"
],
"cvss": {
"score": 5.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
"range": ">=6.11.1 <=6.15.1"
}
],
"effects": [
"@cypress/request"
],
"range": "6.11.1 - 6.15.1",
"nodes": [
""
],
"fixAvailable": true
},
"tmp": {
"name": "tmp",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1119610,
"name": "tmp",
"dependency": "tmp",
"title": "tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape",
"url": "https://github.com/advisories/GHSA-ph9p-34f9-6g65",
"severity": "high",
"cwe": [
"CWE-22"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<0.2.6"
}
],
"effects": [],
"range": "<0.2.6",
"nodes": [
""
],
"fixAvailable": true
},
"uuid": {
"name": "uuid",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1119441,
"name": "uuid",
"dependency": "uuid",
"title": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq",
"severity": "moderate",
"cwe": [
"CWE-787",
"CWE-1285"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
"range": "<11.1.1"
}
],
"effects": [
"@cypress/request"
],
"range": "<11.1.1",
"nodes": [
""
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 4,
"high": 2,
"critical": 0,
"total": 6
},
"dependencies": {
"prod": 1,
"dev": 1294,
"optional": 64,
"peer": 7,
"peerOptional": 0,
"total": 1294
}
}
}
}
--- end ---
{"added": 1294, "removed": 0, "changed": 0, "audited": 1295, "funding": 206, "audit": {"auditReportVersion": 2, "vulnerabilities": {"@cypress/request": {"name": "@cypress/request", "severity": "moderate", "isDirect": false, "via": ["qs", "uuid"], "effects": ["cypress"], "range": "<=4.0.0", "nodes": [""], "fixAvailable": true}, "cypress": {"name": "cypress", "severity": "moderate", "isDirect": false, "via": ["@cypress/request"], "effects": [], "range": "13.15.0 - 15.14.2", "nodes": [""], "fixAvailable": true}, "js-cookie": {"name": "js-cookie", "severity": "high", "isDirect": false, "via": [{"source": 1119459, "name": "js-cookie", "dependency": "js-cookie", "title": "JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection", "url": "https://github.com/advisories/GHSA-qjx8-664m-686j", "severity": "high", "cwe": ["CWE-1321"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "range": "<=3.0.5"}], "effects": [], "range": "<=3.0.5", "nodes": [""], "fixAvailable": true}, "qs": {"name": "qs", "severity": "moderate", "isDirect": false, "via": [{"source": 1119502, "name": "qs", "dependency": "qs", "title": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set", "url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26", "severity": "moderate", "cwe": ["CWE-476"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=6.11.1 <=6.15.1"}], "effects": ["@cypress/request"], "range": "6.11.1 - 6.15.1", "nodes": [""], "fixAvailable": true}, "tmp": {"name": "tmp", "severity": "high", "isDirect": false, "via": [{"source": 1119610, "name": "tmp", "dependency": "tmp", "title": "tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape", "url": "https://github.com/advisories/GHSA-ph9p-34f9-6g65", "severity": "high", "cwe": ["CWE-22"], "cvss": {"score": 0, "vectorString": null}, "range": "<0.2.6"}], "effects": [], "range": "<0.2.6", "nodes": [""], "fixAvailable": true}, "uuid": {"name": "uuid", "severity": "moderate", "isDirect": false, "via": [{"source": 1119441, "name": "uuid", "dependency": "uuid", "title": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided", "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq", "severity": "moderate", "cwe": ["CWE-787", "CWE-1285"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "range": "<11.1.1"}], "effects": ["@cypress/request"], "range": "<11.1.1", "nodes": [""], "fixAvailable": true}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 4, "high": 2, "critical": 0, "total": 6}, "dependencies": {"prod": 1, "dev": 1294, "optional": 64, "peer": 7, "peerOptional": 0, "total": 1294}}}}
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: undefined,
npm WARN EBADENGINE required: { npm: '>=10', node: '>=20' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex@2.4.0',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex-design-tokens@2.4.0',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.1' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex-icons@2.4.0',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: 'npm-run-all2@8.0.4',
npm WARN EBADENGINE required: { node: '^20.5.0 || >=22.0.0', npm: '>= 10' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm WARN deprecated abab@2.0.6: Use your platform's native atob() and btoa() methods instead
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
npm WARN deprecated domexception@4.0.0: Use your platform's native DOMException instead
npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
--- stdout ---
added 1245 packages, and audited 1246 packages in 40s
206 packages are looking for funding
run `npm fund` for details
found 0 vulnerabilities
--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stderr ---
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: undefined,
npm WARN EBADENGINE required: { npm: '>=10', node: '>=20' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex@2.4.0',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex-design-tokens@2.4.0',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.1' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: '@wikimedia/codex-icons@2.4.0',
npm WARN EBADENGINE required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE package: 'npm-run-all2@8.0.4',
npm WARN EBADENGINE required: { node: '^20.5.0 || >=22.0.0', npm: '>= 10' },
npm WARN EBADENGINE current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm WARN deprecated abab@2.0.6: Use your platform's native atob() and btoa() methods instead
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
npm WARN deprecated domexception@4.0.0: Use your platform's native DOMException instead
npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
--- stdout ---
added 1245 packages, and audited 1246 packages in 18s
206 packages are looking for funding
run `npm fund` for details
found 0 vulnerabilities
--- end ---
$ /usr/bin/npm test
--- stderr ---
PASS modules/ext.growthExperiments.MentorDashboard/store/modules/mentees.test.js
PASS modules/ext.growthExperiments.StructuredTask.PreEdit/common/OnboardingDialog.test.js
PASS modules/ext.growthExperiments.StructuredTask.PreEdit/common/MultiPane.test.js
PASS modules/ext.growthExperiments.Homepage.Impact/components/NoEditsDisplay.test.js
PASS modules/ext.growthExperiments.DataStore/NewcomerTasksStore.test.js
PASS modules/ext.growthExperiments.MentorDashboard/components/MenteeOverview/MenteeOverview.test.js
PASS modules/ext.growthExperiments.StructuredTask.PreEdit/revisetone/QuizPill.test.js
PASS modules/vue-components/CScoreCards.test.js
PASS modules/ext.growthExperiments.StructuredTask.PreEdit/common/OnboardingStepper.test.js
PASS modules/ext.growthExperiments.Homepage.Impact/components/ImpactVue.test.js
PASS modules/ext.growthExperiments.Homepage.Impact/components/TrendChart.test.js
PASS modules/vue-components/CScoreCard.test.js
PASS modules/utils/SimpleLevenshtein.test.js
PASS modules/ext.growthExperiments.StructuredTask.PreEdit/revisetone/ReviseToneOnboarding.test.js
PASS modules/ext.growthExperiments.MentorDashboard/components/PersonalizedPraise/PersonalizedPraise.test.js
PASS modules/vue-components/CText.test.js
PASS modules/ext.growthExperiments.Homepage.Impact/components/ErrorDisplay.test.js
PASS modules/ext.growthExperiments.MentorDashboard/components/DataTable/DataTableCellValue.test.js
PASS modules/ext.growthExperiments.Account/WE18ExperimentV1.test.js
PASS modules/ext.growthExperiments.Homepage.Impact/composables/useUserImpact.test.js
PASS modules/ext.growthExperiments.MentorDashboard/components/MenteeOverview/MenteeFiltersForm.test.js
PASS modules/ext.growthExperiments.MentorDashboard/components/PersonalizedPraise/PersonalizedPraiseSettingsForm.test.js
Test Suites: 22 passed, 22 total
Tests: 83 passed, 83 total
Snapshots: 14 passed, 14 total
Time: 9.868 s
Ran all test suites.
npm WARN ERESOLVE overriding peer dependency
npm WARN While resolving: @vue/server-renderer@3.3.4
npm WARN Found: vue@3.2.37
npm WARN node_modules/vue
npm WARN dev vue@"3.2.37" from the root project
npm WARN 9 more (vue-demi, @vitejs/plugin-vue, @vue/server-renderer, ...)
npm WARN
npm WARN Could not resolve dependency:
npm WARN peer vue@"3.3.4" from @vue/server-renderer@3.3.4
npm WARN node_modules/@vue/test-utils/node_modules/@vue/server-renderer
npm WARN optional @vue/server-renderer@"^3.0.1" from @vue/test-utils@2.3.2
npm WARN node_modules/@vue/test-utils
npm WARN
npm WARN Conflicting peer dependency: vue@3.3.4
npm WARN node_modules/vue
npm WARN peer vue@"3.3.4" from @vue/server-renderer@3.3.4
npm WARN node_modules/@vue/test-utils/node_modules/@vue/server-renderer
npm WARN optional @vue/server-renderer@"^3.0.1" from @vue/test-utils@2.3.2
npm WARN node_modules/@vue/test-utils
npm WARN deprecated natives@1.1.6: This module relies on Node.js's internals and will break at some point. Do not use it, and update to graceful-fs@4.x.
npm WARN deprecated har-validator@5.1.5: this library is no longer supported
npm WARN deprecated sourcemap-codec@1.4.8: Please use @jridgewell/sourcemap-codec instead
npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
--- stdout ---
> test
> npm-run-all test:*
> test:types
> tsc --noEmit && tsc --noEmit -p cypress/tsconfig.json
> test:eslint
> eslint --cache .
/src/repo/cypress/e2e/ReviseTone.cy.ts
81:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/modules/ext.growthExperiments.Homepage.SuggestedEdits/MatchModeSelectWidget.js
23:20 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
/src/repo/modules/ext.growthExperiments.MentorDashboard/MentorTools/MentorTools.js
55:4 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
/src/repo/modules/ext.growthExperiments.PostEdit/PostEditPanel.js
50:20 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
54:20 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
/src/repo/modules/ext.growthExperiments.StructuredTask.desktop/addlink/RecommendedLinkToolbarDialogDesktop.js
199:21 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
/src/repo/modules/ext.growthExperiments.StructuredTask/addimage/ceRecommendedImageNode.js
59:18 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
/src/repo/modules/ui-components/CollapsibleDrawer.js
112:22 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
✖ 8 problems (0 errors, 8 warnings)
> test:stylelint
> stylelint --cache "**/*.{css,vue,less}"
> test:i18n
> node tests/banana-checker.js
> test:jest
> jest
---------------------------------------------------------------------|---------|----------|---------|---------|---------------------------------------------------------------------------------------
File | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s
---------------------------------------------------------------------|---------|----------|---------|---------|---------------------------------------------------------------------------------------
All files | 44.22 | 34.88 | 33.79 | 44.4 |
ext.growthExperiments.Account | 12.63 | 8.82 | 16.66 | 12.76 |
ConfirmEmail.js | 0 | 0 | 0 | 0 | 1-36
ULSTagMultiselectWidget.js | 0 | 0 | 0 | 0 | 1-115
WE18ExperimentV1.js | 92.3 | 75 | 100 | 92.3 | 5
WelcomeSurvey.js | 0 | 0 | 0 | 0 | 1-47
index.js | 0 | 0 | 0 | 0 | 1-14
ext.growthExperiments.Homepage.Impact | 2.91 | 0 | 0 | 2.94 |
App.vue | 0 | 0 | 0 | 0 | 3-105
constants.js | 100 | 100 | 100 | 100 |
init.js | 0 | 0 | 0 | 0 | 1-165
ext.growthExperiments.Homepage.Impact/components | 70.64 | 69.89 | 67.34 | 71.11 |
ArticlesList.vue | 77.77 | 100 | 20 | 77.77 | 18,41-46
ArticlesListItem.vue | 41.86 | 0 | 0 | 45 | 44-52,83-165
ErrorDisplay.vue | 100 | 100 | 100 | 100 |
ErrorDisplaySummary.vue | 0 | 100 | 0 | 0 | 3-58
Impact.vue | 97.43 | 86.36 | 92.3 | 97.43 | 112
ImpactSummary.vue | 0 | 0 | 0 | 0 | 1-48
InfoBoxes.vue | 0 | 0 | 0 | 0 | 1-83
LayoutWrapper.vue | 0 | 100 | 0 | 0 | 8-34
NoEditsDisplay.vue | 96.36 | 89.18 | 100 | 96.36 | 60-61
RecentActivity.vue | 95 | 50 | 100 | 95 | 41,73
StreakGraph.vue | 95.23 | 100 | 87.5 | 95.23 | 25
TrendChart.vue | 100 | 100 | 100 | 100 |
ext.growthExperiments.Homepage.Impact/composables | 73.21 | 72.72 | 78.94 | 71.69 |
useMWRestApi.js | 0 | 0 | 0 | 0 | 1-35
useUserImpact.js | 97.61 | 88.88 | 100 | 97.43 | 93
ext.growthExperiments.MentorDashboard | 0 | 0 | 0 | 0 |
Discovery.js | 0 | 0 | 0 | 0 | 2-12
PersonalizedPraisePostEdit.js | 0 | 0 | 0 | 0 | 1-18
init.js | 0 | 0 | 0 | 0 | 1-53
ext.growthExperiments.MentorDashboard/MentorTools | 0 | 0 | 0 | 0 |
AwaySettingsDialog.js | 0 | 0 | 0 | 0 | 1-108
MentorMessageChangeDialog.js | 0 | 0 | 0 | 0 | 10-103
MentorTools.js | 0 | 0 | 0 | 0 | 2-223
MentorToolsEllipsisMenu.js | 0 | 0 | 0 | 0 | 1-66
ext.growthExperiments.MentorDashboard/components/CNumberInput | 66.66 | 55.55 | 23.07 | 65.51 |
CNumberInput.vue | 66.66 | 55.55 | 23.07 | 65.51 | 99,102,105,108,129,148-164
ext.growthExperiments.MentorDashboard/components/DataTable | 47 | 0 | 5.26 | 52.38 |
DataTable.vue | 32.25 | 0 | 0 | 39.21 | 37-89,100-103,121-164
DataTableCellLink.vue | 75 | 100 | 0 | 75 | 36-41
DataTableCellValue.vue | 100 | 100 | 100 | 100 |
DataTableLimit.vue | 50 | 0 | 0 | 53.33 | 24-31,49-55
DataTablePagination.vue | 50 | 0 | 0 | 50 | 31-38,53-79
ext.growthExperiments.MentorDashboard/components/HorizontalDivider | 100 | 100 | 100 | 100 |
HorizontalDivider.vue | 100 | 100 | 100 | 100 |
ext.growthExperiments.MentorDashboard/components/MenteeOverview | 66.52 | 41.46 | 37.36 | 66.81 |
DataTableCellMentee.vue | 60.86 | 0 | 0 | 60.86 | 27-45,74-82
LegendBox.vue | 73.33 | 100 | 0 | 73.33 | 21,43-45
MenteeFilters.vue | 40.74 | 0 | 0 | 40.74 | 28-64,82-89
MenteeFiltersForm.vue | 75.47 | 50 | 56.52 | 75.47 | 87-105,160-175,191,206,219
MenteeOverview.vue | 72.5 | 58.82 | 52.5 | 73.41 | 27-99,180-187,219-231,301-326
MenteeSearch.vue | 45.45 | 0 | 0 | 45.45 | 22-43,60-66
NoResults.vue | 84.61 | 0 | 0 | 84.61 | 53-54
ext.growthExperiments.MentorDashboard/components/PersonalizedPraise | 56.65 | 48.48 | 25.58 | 57.39 |
NoResults.vue | 100 | 100 | 100 | 100 |
PersonalizedPraise.vue | 81.25 | 91.66 | 58.82 | 81.25 | 65-80,123,138-148
PersonalizedPraisePagination.vue | 45.45 | 0 | 0 | 45.45 | 33-43,58-92
PersonalizedPraiseSettings.vue | 68.96 | 50 | 33.33 | 68.96 | 44-54,78,90-100
PersonalizedPraiseSettingsForm.vue | 70.73 | 68.18 | 44.44 | 70.73 | 67-70,88,144-164,180-185,200,218
SkipMenteeDialog.vue | 26.31 | 0 | 0 | 28.57 | 34-70,87-136
UserCard.vue | 34.04 | 0 | 0 | 34.04 | 33-123,147-172
ext.growthExperiments.MentorDashboard/logger | 0 | 0 | 0 | 0 |
Logger.js | 0 | 0 | 0 | 0 | 5-41
ext.growthExperiments.MentorDashboard/plugins | 0 | 0 | 0 | 0 |
logger.js | 0 | 0 | 0 | 0 | 9-15
ext.growthExperiments.MentorDashboard/store | 26.66 | 0 | 6.89 | 26.96 |
MenteeOverviewApi.js | 28.91 | 0 | 6.89 | 29.26 | 32,37-52,56-71,83,87,91,95,99,103-110,115-118,122-128,134-145,150-161,167-178,185-186
index.js | 0 | 100 | 100 | 0 | 1-16
ext.growthExperiments.MentorDashboard/store/modules | 44.56 | 49.23 | 25.39 | 44 |
mentees-search.js | 0 | 0 | 0 | 0 | 2-50
mentees.js | 66.36 | 67.39 | 41.66 | 66.01 | 31,61-63,71-74,107,121,128,144,147,150,200-201,217,226,235-243,253-286
praiseworthy-mentees.js | 0 | 0 | 0 | 0 | 1-101
user-preferences.js | 52.94 | 50 | 20 | 52.94 | 12,21,27-32,41
ext.growthExperiments.MentorDashboard/validators | 100 | 100 | 100 | 100 |
align-text.validator.js | 100 | 100 | 100 | 100 |
ext.growthExperiments.StructuredTask.PreEdit | 0 | 0 | 0 | 0 |
App.vue | 0 | 100 | 0 | 0 | 1-31
StructuredTaskOnboardingContent.js | 0 | 0 | 0 | 0 | 2-46
StructuredTaskOnboardingDialog.js | 0 | 0 | 0 | 0 | 1-237
index.js | 0 | 0 | 0 | 0 | 1-282
ext.growthExperiments.StructuredTask.PreEdit/addimage | 0 | 0 | 0 | 0 |
AddImageOnboardingContent.js | 0 | 0 | 0 | 0 | 1-166
ext.growthExperiments.StructuredTask.PreEdit/addlink | 0 | 0 | 0 | 0 |
AddLinkOnboardingContent.js | 0 | 0 | 0 | 0 | 1-156
ext.growthExperiments.StructuredTask.PreEdit/addsectionimage | 0 | 0 | 0 | 0 |
AddSectionImageOnboardingContent.js | 0 | 0 | 0 | 0 | 1-79
ext.growthExperiments.StructuredTask.PreEdit/common | 86.44 | 69.52 | 85.45 | 91.25 |
MultiPane.vue | 92.64 | 83.33 | 100 | 92.18 | 98,110,117,124,127
OnboardingDialog.vue | 92.5 | 91.66 | 82.75 | 92.3 | 123,153-154,221-223,235
OnboardingStepper.vue | 55.17 | 30.3 | 62.5 | 83.33 | 40-41,44
ext.growthExperiments.StructuredTask.PreEdit/dev/demos | 0 | 0 | 0 | 0 |
CommonComponentsDemo.vue | 0 | 0 | 0 | 0 | 1-93
ReviseToneQuizPillDemo.vue | 0 | 0 | 0 | 0 | 4-63
ext.growthExperiments.StructuredTask.PreEdit/revisetone | 64.89 | 59.32 | 41.86 | 65.36 |
NumberIcon.vue | 100 | 100 | 100 | 100 |
QuizGame.vue | 57.69 | 100 | 0 | 57.69 | 20-40,74-83
QuizPill.vue | 98.27 | 94.11 | 91.66 | 98.14 | 146
ReviseToneOnboarding.vue | 56.06 | 16.66 | 20 | 59.67 | 12-22,52,59,64,71,93-98,128-156
ReviseToneQuizLauncher.js | 0 | 0 | 0 | 0 | 1-60
utils | 22.4 | 11.67 | 20.58 | 20.67 |
HelpPanelLogger.js | 0 | 0 | 0 | 0 | 7-238
IconUtils.js | 0 | 0 | 0 | 0 | 1-30
SimpleLevenshtein.js | 100 | 100 | 100 | 100 |
Utils.js | 15.27 | 10 | 23.07 | 15.27 | 12-72,95-111,136-202,230-233
filters.js | 0 | 100 | 0 | 0 | 14-17
vue-components | 72.41 | 60.71 | 58.92 | 73.73 |
CList.vue | 53.33 | 0 | 33.33 | 53.33 | 22-30
CListItem.vue | 85.71 | 100 | 0 | 85.71 | 21
CScoreCard.vue | 93.33 | 78.57 | 77.77 | 93.1 | 139-141
CScoreCards.vue | 56.66 | 56.25 | 54.83 | 56.66 | 98-101,112,130-193,199,262-292,337-344
CSparkline.vue | 81.08 | 50 | 50 | 90.9 | 63-67,76
CText.vue | 100 | 100 | 100 | 100 |
vue-components/directives | 0 | 0 | 0 | 0 |
click-outside.directive.js | 0 | 0 | 0 | 0 | 1-25
vue-components/plugins | 0 | 100 | 0 | 0 |
logger.js | 0 | 100 | 0 | 0 | 10-20
---------------------------------------------------------------------|---------|----------|---------|---------|---------------------------------------------------------------------------------------
> test:doc
> cd documentation/frontend && npm ci && npm run test
added 319 packages, and audited 320 packages in 4s
34 packages are looking for funding
run `npm fund` for details
20 vulnerabilities (1 low, 10 moderate, 7 high, 2 critical)
To address issues that do not require attention, run:
npm audit fix
To address all issues, run:
npm audit fix --force
Run `npm audit` for details.
> growthexperiments-docs@1.0.0 test
> npm run lint && vitest run --coverage
> growthexperiments-docs@1.0.0 lint
> eslint .
RUN v0.32.0 /src/repo/documentation/frontend
Coverage enabled with v8
✓ components/MultiPane.test.js (10 tests) 163ms
✓ components/FilterDialog.test.js (5 tests) 295ms
✓ components/OnboardingDialog.test.js (14 tests) 470ms
✓ components/OnboardingStepper.test.js (5 tests) 87ms
✓ component-demos/example-component/ExampleComponent.test.js (2 tests) 58ms
✓ components/AddLinkDialog.test.js (4 tests) 262ms
✓ store/example-store/counter.test.js (1 test) 8ms
Test Files 7 passed (7)
Tests 41 passed (41)
Start at 08:08:00
Duration 5.26s (transform 389ms, setup 343ms, collect 2.36s, tests 1.34s, environment 4.30s, prepare 973ms)
% Coverage report from v8
-------------------|---------|----------|---------|---------|-------------------
File | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s
-------------------|---------|----------|---------|---------|-------------------
All files | 78.16 | 91.17 | 63.88 | 78.16 |
...mageDialog.vue | 0 | 0 | 0 | 0 | 1-291
AddLinkDialog.vue | 100 | 100 | 20 | 100 |
FilterDialog.vue | 100 | 100 | 60 | 100 |
MultiPane.vue | 97.79 | 87.87 | 100 | 97.79 | 105,112,120-121
...dingDialog.vue | 98.58 | 95.45 | 57.14 | 98.58 | 215-216,247-249
...ingStepper.vue | 100 | 100 | 100 | 100 |
-------------------|---------|----------|---------|---------|-------------------
--- end ---
{"1119502": {"source": 1119502, "name": "qs", "dependency": "qs", "title": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set", "url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26", "severity": "moderate", "cwe": ["CWE-476"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=6.11.1 <=6.15.1"}, "1119441": {"source": 1119441, "name": "uuid", "dependency": "uuid", "title": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided", "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq", "severity": "moderate", "cwe": ["CWE-787", "CWE-1285"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "range": "<11.1.1"}}
Upgrading n:@cypress/request from 3.0.10 -> 4.0.1
{"1119502": {"source": 1119502, "name": "qs", "dependency": "qs", "title": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set", "url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26", "severity": "moderate", "cwe": ["CWE-476"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=6.11.1 <=6.15.1"}, "1119441": {"source": 1119441, "name": "uuid", "dependency": "uuid", "title": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided", "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq", "severity": "moderate", "cwe": ["CWE-787", "CWE-1285"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "range": "<11.1.1"}}
Upgrading n:cypress from 15.14.2, ^15.14.0 -> 15.16.0, ^15.14.0
{"1119459": {"source": 1119459, "name": "js-cookie", "dependency": "js-cookie", "title": "JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection", "url": "https://github.com/advisories/GHSA-qjx8-664m-686j", "severity": "high", "cwe": ["CWE-1321"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "range": "<=3.0.5"}}
Upgrading n:js-cookie from 3.0.5 -> 3.0.8
{"1119502": {"source": 1119502, "name": "qs", "dependency": "qs", "title": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set", "url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26", "severity": "moderate", "cwe": ["CWE-476"], "cvss": {"score": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=6.11.1 <=6.15.1"}}
Upgrading n:qs from 6.14.2 -> 6.15.2
{"1119610": {"source": 1119610, "name": "tmp", "dependency": "tmp", "title": "tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape", "url": "https://github.com/advisories/GHSA-ph9p-34f9-6g65", "severity": "high", "cwe": ["CWE-22"], "cvss": {"score": 0, "vectorString": null}, "range": "<0.2.6"}}
Upgrading n:tmp from 0.2.5 -> 0.2.7
{"1119441": {"source": 1119441, "name": "uuid", "dependency": "uuid", "title": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided", "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq", "severity": "moderate", "cwe": ["CWE-787", "CWE-1285"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "range": "<11.1.1"}}
Upgrading n:uuid from 8.3.2 ->
$ package-lock-lint /src/repo/package-lock.json
--- stdout ---
Checking /src/repo/package-lock.json
--- end ---
build: Updating npm dependencies
* @cypress/request: 3.0.10 → 4.0.1
* https://github.com/advisories/GHSA-q8mj-m7cp-5q26
* https://github.com/advisories/GHSA-w5hq-g745-h8pq
* cypress: 15.14.2, ^15.14.0 → 15.16.0, ^15.14.0
* https://github.com/advisories/GHSA-q8mj-m7cp-5q26
* https://github.com/advisories/GHSA-w5hq-g745-h8pq
* js-cookie: 3.0.5 → 3.0.8
* https://github.com/advisories/GHSA-qjx8-664m-686j
* qs: 6.14.2 → 6.15.2
* https://github.com/advisories/GHSA-q8mj-m7cp-5q26
* tmp: 0.2.5 → 0.2.7
* https://github.com/advisories/GHSA-ph9p-34f9-6g65
* uuid: 8.3.2 →
* https://github.com/advisories/GHSA-w5hq-g745-h8pq
$ git add .
--- stdout ---
--- end ---
$ git commit -F /tmp/tmps767f8r4
--- stdout ---
[REL1_46 2c9af6a] build: Updating npm dependencies
1 file changed, 39 insertions(+), 116 deletions(-)
--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From 2c9af6aa69280f46ec7bf7413e2419bde5afef69 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Sun, 31 May 2026 08:08:07 +0000
Subject: [PATCH] build: Updating npm dependencies
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
* @cypress/request: 3.0.10 → 4.0.1
* https://github.com/advisories/GHSA-q8mj-m7cp-5q26
* https://github.com/advisories/GHSA-w5hq-g745-h8pq
* cypress: 15.14.2, ^15.14.0 → 15.16.0, ^15.14.0
* https://github.com/advisories/GHSA-q8mj-m7cp-5q26
* https://github.com/advisories/GHSA-w5hq-g745-h8pq
* js-cookie: 3.0.5 → 3.0.8
* https://github.com/advisories/GHSA-qjx8-664m-686j
* qs: 6.14.2 → 6.15.2
* https://github.com/advisories/GHSA-q8mj-m7cp-5q26
* tmp: 0.2.5 → 0.2.7
* https://github.com/advisories/GHSA-ph9p-34f9-6g65
* uuid: 8.3.2 →
* https://github.com/advisories/GHSA-w5hq-g745-h8pq
Change-Id: Ie36b7030af9c714114424ddf11a1d37640c54b6d
---
package-lock.json | 155 ++++++++++++----------------------------------
1 file changed, 39 insertions(+), 116 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index ac81080..f2c6ed6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1851,9 +1851,9 @@
}
},
"node_modules/@cypress/request": {
- "version": "3.0.10",
- "resolved": "https://registry.npmjs.org/@cypress/request/-/request-3.0.10.tgz",
- "integrity": "sha512-hauBrOdvu08vOsagkZ/Aju5XuiZx6ldsLfByg1htFeldhex+PeMrYauANzFsMJeAA0+dyPLbDoX2OYuvVoLDkQ==",
+ "version": "4.0.1",
+ "resolved": "https://registry.npmjs.org/@cypress/request/-/request-4.0.1.tgz",
+ "integrity": "sha512-y20e+e6dFYkOUUJLVUZTsJRuTiXZaUQ32WD+R/ux/HBybbTx4ge7cNINcua0pU8+SNkKuRbOF12mBmzuzM8n5w==",
"dev": true,
"dependencies": {
"aws-sign2": "~0.7.0",
@@ -1869,14 +1869,13 @@
"json-stringify-safe": "~5.0.1",
"mime-types": "~2.1.19",
"performance-now": "^2.1.0",
- "qs": "~6.14.1",
+ "qs": "^6.15.2",
"safe-buffer": "^5.1.2",
"tough-cookie": "^5.0.0",
- "tunnel-agent": "^0.6.0",
- "uuid": "^8.3.2"
+ "tunnel-agent": "^0.6.0"
},
"engines": {
- "node": ">= 6"
+ "node": ">= 14.17.0"
}
},
"node_modules/@cypress/request/node_modules/tough-cookie": {
@@ -1884,7 +1883,6 @@
"resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-5.1.2.tgz",
"integrity": "sha512-FVDYdxtnj0G6Qm/DhNPSb8Ju59ULcup3tuJxkFb5K8Bv2pUXILbf0xZWU8PX8Ov19OXljbUyveOFwRMwkXzO+A==",
"dev": true,
- "license": "BSD-3-Clause",
"dependencies": {
"tldts": "^6.1.32"
},
@@ -4593,16 +4591,6 @@
"integrity": "sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==",
"dev": true
},
- "node_modules/@types/yauzl": {
- "version": "2.10.3",
- "resolved": "https://registry.npmjs.org/@types/yauzl/-/yauzl-2.10.3.tgz",
- "integrity": "sha512-oJoftv0LSuaDZE3Le4DbKX+KS9G36NzOeSap90UIK0yMA/NhKJhqlSGtNDORNRaIbQfzjXDrQa0ytJ6mNRGz/Q==",
- "dev": true,
- "optional": true,
- "dependencies": {
- "@types/node": "*"
- }
- },
"node_modules/@typescript-eslint/eslint-plugin": {
"version": "8.56.0",
"resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.56.0.tgz",
@@ -5751,7 +5739,6 @@
"resolved": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz",
"integrity": "sha512-ix/FxPn0MDjeyJ7i/yoHGFt/EX6LyNbxSEhPPXODPL+KB0VPk86UYfL0lMdy+KCnv+fmvIzySwaK5COwqVbWTQ==",
"dev": true,
- "license": "MIT",
"dependencies": {
"safer-buffer": "~2.1.0"
}
@@ -5761,7 +5748,6 @@
"resolved": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz",
"integrity": "sha512-NfJ4UzBCcQGLDlQq7nHxH+tv3kyZ0hHQqF5BO6J7tNJeP5do1llPr8dZ8zHonfhAu0PHAdMkSo+8o0wxg9lZWw==",
"dev": true,
- "license": "MIT",
"engines": {
"node": ">=0.8"
}
@@ -5814,7 +5800,6 @@
"resolved": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz",
"integrity": "sha512-08kcGqnYf/YmjoRhfxyu+CLxBjUtHLXLXX/vUfx9l2LYzG3c1m61nrpyFUZI6zeS+Li/wWMMidD9KgrqtGq3mA==",
"dev": true,
- "license": "Apache-2.0",
"engines": {
"node": "*"
}
@@ -5823,8 +5808,7 @@
"version": "1.13.2",
"resolved": "https://registry.npmjs.org/aws4/-/aws4-1.13.2.tgz",
"integrity": "sha512-lHe62zvbTB5eEABUVi/AwVh0ZKY9rMMDhmm+eeyuuUQbQ3+J+fONVQOZyj+DdrvD4BY33uYniyRJ4UJIaSKAfw==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/babel-jest": {
"version": "29.7.0",
@@ -6075,7 +6059,6 @@
"resolved": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz",
"integrity": "sha512-qeFIXtP4MSoi6NLqO12WfqARWWuCKi2Rn/9hJLEmtB5yTNr9DqFWkJRCf2qShWzPeAMRnOgCrq0sg/KLv5ES9w==",
"dev": true,
- "license": "BSD-3-Clause",
"dependencies": {
"tweetnacl": "^0.14.3"
}
@@ -6324,8 +6307,7 @@
"version": "0.12.0",
"resolved": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz",
"integrity": "sha512-4tYFyifaFfGacoiObjJegolkwSU4xQNGbVgUiNYVUxbQ2x2lUsFvY4hVgVzGiIe6WLOPqycWXA40l+PWsxthUw==",
- "dev": true,
- "license": "Apache-2.0"
+ "dev": true
},
"node_modules/chai": {
"version": "4.5.0",
@@ -7117,13 +7099,13 @@
"license": "MIT"
},
"node_modules/cypress": {
- "version": "15.14.2",
- "resolved": "https://registry.npmjs.org/cypress/-/cypress-15.14.2.tgz",
- "integrity": "sha512-xMWg/iEImeIThRQZdnf3BFJT1a84apM/R91Feoa4vVWGuYWDphMT5jLhRVTBVlCgi+6axegF1zqhNyjhug2SsQ==",
+ "version": "15.16.0",
+ "resolved": "https://registry.npmjs.org/cypress/-/cypress-15.16.0.tgz",
+ "integrity": "sha512-fy0M0c9xDLEp4v9y7LLKFeAQhIdDsobxDSKpD3JcZpqQefjy9TSzEyVV3HA0zu7hUi0bGHlSYlI7ASub8wgR9A==",
"dev": true,
"hasInstallScript": true,
"dependencies": {
- "@cypress/request": "^3.0.10",
+ "@cypress/request": "^4.0.0",
"@cypress/xvfb": "^1.2.4",
"@types/sinonjs__fake-timers": "8.1.1",
"@types/sizzle": "^2.3.2",
@@ -7143,7 +7125,6 @@
"eventemitter2": "6.4.7",
"execa": "4.1.0",
"executable": "^4.1.1",
- "extract-zip": "2.0.1",
"fs-extra": "^9.1.0",
"hasha": "5.2.2",
"is-installed-globally": "~0.4.0",
@@ -7162,7 +7143,7 @@
"tree-kill": "1.2.2",
"tslib": "1.14.1",
"untildify": "^4.0.0",
- "yauzl": "^2.10.0"
+ "yauzl": "^3.3.1"
},
"bin": {
"cypress": "bin/cypress"
@@ -7561,7 +7542,6 @@
"resolved": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz",
"integrity": "sha512-jRFi8UDGo6j+odZiEpjazZaWqEal3w/basFjQHQEwVtZJGDpxbH1MeYluwCS8Xq5wmLJooDlMgvVarmWfGM44g==",
"dev": true,
- "license": "MIT",
"dependencies": {
"assert-plus": "^1.0.0"
},
@@ -7863,7 +7843,6 @@
"resolved": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz",
"integrity": "sha512-eh9O+hwRHNbG4BLTjEl3nw044CkGm5X6LoaCf7LPp7UU8Qrt47JYNi6nPX8xjW97TKGKm1ouctg0QSpZe9qrnw==",
"dev": true,
- "license": "MIT",
"dependencies": {
"jsbn": "~0.1.0",
"safer-buffer": "^2.1.0"
@@ -9439,26 +9418,6 @@
"integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==",
"dev": true
},
- "node_modules/extract-zip": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/extract-zip/-/extract-zip-2.0.1.tgz",
- "integrity": "sha512-GDhU9ntwuKyGXdZBUgTIe+vXnWj0fppUEtMDL0+idd5Sta8TGpHssn/eusA9mrPr9qNDym6SxAYZjNvCn/9RBg==",
- "dev": true,
- "dependencies": {
- "debug": "^4.1.1",
- "get-stream": "^5.1.0",
- "yauzl": "^2.10.0"
- },
- "bin": {
- "extract-zip": "cli.js"
- },
- "engines": {
- "node": ">= 10.17.0"
- },
- "optionalDependencies": {
- "@types/yauzl": "^2.9.1"
- }
- },
"node_modules/extsprintf": {
"version": "1.3.0",
"resolved": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz",
@@ -9466,8 +9425,7 @@
"dev": true,
"engines": [
"node >=0.6.0"
- ],
- "license": "MIT"
+ ]
},
"node_modules/fast-deep-equal": {
"version": "3.1.3",
@@ -9553,15 +9511,6 @@
"bser": "2.1.1"
}
},
- "node_modules/fd-slicer": {
- "version": "1.1.0",
- "resolved": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz",
- "integrity": "sha512-cE1qsB/VwyQozZ+q1dGxR8LBYNZeofhEdUNGSMbQD3Gw2lAzX9Zb3uIU6Ebc/Fmyjo9AWWfnn0AUCHqtevs/8g==",
- "dev": true,
- "dependencies": {
- "pend": "~1.2.0"
- }
- },
"node_modules/file-entry-cache": {
"version": "6.0.1",
"resolved": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-6.0.1.tgz",
@@ -9652,7 +9601,6 @@
"resolved": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz",
"integrity": "sha512-j0KLYPhm6zeac4lz3oJ3o65qvgQCcPubiyotZrXqEaG4hNagNYO8qdlUrX5vwqv9ohqeT/Z3j6+yW067yWWdUw==",
"dev": true,
- "license": "Apache-2.0",
"engines": {
"node": "*"
}
@@ -9838,7 +9786,6 @@
"resolved": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz",
"integrity": "sha512-0fzj9JxOLfJ+XGLhR8ze3unN0KZCgZwiSSDz168VERjK8Wl8kVSdcu2kspd4s4wtAa1y/qrVRiAA0WclVsu0ng==",
"dev": true,
- "license": "MIT",
"dependencies": {
"assert-plus": "^1.0.0"
}
@@ -10204,7 +10151,6 @@
"resolved": "https://registry.npmjs.org/http-signature/-/http-signature-1.4.0.tgz",
"integrity": "sha512-G5akfn7eKbpDN+8nPS/cb57YeA1jLTVxjpCj7tmm3QKPdyDy7T+qSC40e9ptydSWvkwjSXw1VbkpyEm39ukeAg==",
"dev": true,
- "license": "MIT",
"dependencies": {
"assert-plus": "^1.0.0",
"jsprim": "^2.0.2",
@@ -10507,8 +10453,7 @@
"version": "1.0.0",
"resolved": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz",
"integrity": "sha512-cyA56iCMHAh5CdzjJIa4aohJyeO1YbwLi3Jc35MmRU6poroFjIGZzUzupGiRPOjgHg9TLu43xbpwXk523fMxKA==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/is-unicode-supported": {
"version": "0.1.0",
@@ -10546,8 +10491,7 @@
"version": "0.1.2",
"resolved": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz",
"integrity": "sha512-Yljz7ffyPbrLpLngrMtZ7NduUgVvi6wG9RJ9IUcyCd59YQ911PBJphODUcbOVbqYfxe1wuYf/LJ8PauMRwsM/g==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/istanbul-lib-coverage": {
"version": "3.2.2",
@@ -12332,13 +12276,10 @@
}
},
"node_modules/js-cookie": {
- "version": "3.0.5",
- "resolved": "https://registry.npmjs.org/js-cookie/-/js-cookie-3.0.5.tgz",
- "integrity": "sha512-cEiJEAEoIbWfCZYKWhVwFuvPX1gETRYPw6LlaTKoxD3s2AkXzkCjnp6h0V77ozyqj0jakteJ4YqDJT830+lVGw==",
- "dev": true,
- "engines": {
- "node": ">=14"
- }
+ "version": "3.0.8",
+ "resolved": "https://registry.npmjs.org/js-cookie/-/js-cookie-3.0.8.tgz",
+ "integrity": "sha512-yeJd4aNAdYZQjaon2bpD/Gb0B/omw7HQOsynXXcOiWVCacbBcPlgn8S/d1X6blFSaHao7ozqtW7NZW19xpCtIw==",
+ "dev": true
},
"node_modules/js-tokens": {
"version": "4.0.0",
@@ -12363,8 +12304,7 @@
"version": "0.1.1",
"resolved": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz",
"integrity": "sha512-UVU9dibq2JcFWxQPA6KCqj5O42VOmAY3zQUfEKxU0KpTGXwNoCjkX1e13eHNvw/xPynt6pU0rZ1htjWTNTSXsg==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/jsdoc-type-pratt-parser": {
"version": "6.10.0",
@@ -12449,8 +12389,7 @@
"version": "0.4.0",
"resolved": "https://registry.npmjs.org/json-schema/-/json-schema-0.4.0.tgz",
"integrity": "sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA==",
- "dev": true,
- "license": "(AFL-2.1 OR BSD-3-Clause)"
+ "dev": true
},
"node_modules/json-schema-traverse": {
"version": "0.4.1",
@@ -12468,8 +12407,7 @@
"version": "5.0.1",
"resolved": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz",
"integrity": "sha512-ZClg6AaYvamvYEE82d3Iyd3vSSIjQ+odgjaTzRuO3s7toCdFKczob2i0zCh7JE8kWn17yvAWhUVxvqGwUalsRA==",
- "dev": true,
- "license": "ISC"
+ "dev": true
},
"node_modules/json5": {
"version": "2.2.3",
@@ -12503,7 +12441,6 @@
"engines": [
"node >=0.6.0"
],
- "license": "MIT",
"dependencies": {
"assert-plus": "1.0.0",
"extsprintf": "1.3.0",
@@ -13795,8 +13732,7 @@
"version": "2.1.0",
"resolved": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz",
"integrity": "sha512-7EAHlyLHI56VEIdK57uwHdHKIaAGbnXPiw0yWbarQZOKaKpvUIgW0jWRVLiatnM+XXlSwsanIBH/hzGMJulMow==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/picocolors": {
"version": "1.1.1",
@@ -14097,9 +14033,9 @@
]
},
"node_modules/qs": {
- "version": "6.14.2",
- "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.2.tgz",
- "integrity": "sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==",
+ "version": "6.15.2",
+ "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.2.tgz",
+ "integrity": "sha512-Rzq0KEyX/w/tEybncDgdkZrJgVUsUMk3xjh3t5bv3S1HTAtg+uOYt72+ZfwiQwKdysThkTBdL/rTi6HDmX9Ddw==",
"dev": true,
"dependencies": {
"side-channel": "^1.1.0"
@@ -14864,7 +14800,6 @@
"resolved": "https://registry.npmjs.org/sshpk/-/sshpk-1.18.0.tgz",
"integrity": "sha512-2p2KJZTSqQ/I3+HX42EpYOa2l3f8Erv8MWKsy2I9uf4wA7yFIkXRffYdsx86y6z4vHtV8u7g+pPlr8/4ouAxsQ==",
"dev": true,
- "license": "MIT",
"dependencies": {
"asn1": "~0.2.3",
"assert-plus": "^1.0.0",
@@ -16139,7 +16074,6 @@
"resolved": "https://registry.npmjs.org/tldts/-/tldts-6.1.86.tgz",
"integrity": "sha512-WMi/OQ2axVTf/ykqCQgXiIct+mSQDFdH2fkwhPwgEwvJ1kSzZRiinb0zF2Xb8u4+OqPChmyI6MEu4EezNJz+FQ==",
"dev": true,
- "license": "MIT",
"dependencies": {
"tldts-core": "^6.1.86"
},
@@ -16151,13 +16085,12 @@
"version": "6.1.86",
"resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-6.1.86.tgz",
"integrity": "sha512-Je6p7pkk+KMzMv2XXKmAE3McmolOQFdxkKw0R8EYNr7sELW46JqnNeTX8ybPiQgvg1ymCoF8LXs5fzFaZvJPTA==",
- "dev": true,
- "license": "MIT"
+ "dev": true
},
"node_modules/tmp": {
- "version": "0.2.5",
- "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz",
- "integrity": "sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==",
+ "version": "0.2.7",
+ "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.7.tgz",
+ "integrity": "sha512-e0votIpp4Uo2AJYSzVHV6xCcawuiez3DzqDAbrTc3YxBkplN6e+dM13ZeIcZnDg/QpSuU2zfZ3rzwY8ukEnaXw==",
"dev": true,
"engines": {
"node": ">=14.14"
@@ -16329,7 +16262,6 @@
"resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz",
"integrity": "sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==",
"dev": true,
- "license": "Apache-2.0",
"dependencies": {
"safe-buffer": "^5.0.1"
},
@@ -16341,8 +16273,7 @@
"version": "0.14.5",
"resolved": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
"integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA==",
- "dev": true,
- "license": "Unlicense"
+ "dev": true
},
"node_modules/type-check": {
"version": "0.4.0",
@@ -16525,16 +16456,6 @@
"integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
"dev": true
},
- "node_modules/uuid": {
- "version": "8.3.2",
- "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
- "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
- "dev": true,
- "license": "MIT",
- "bin": {
- "uuid": "dist/bin/uuid"
- }
- },
"node_modules/v8-to-istanbul": {
"version": "9.3.0",
"resolved": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz",
@@ -16577,7 +16498,6 @@
"engines": [
"node >=0.6.0"
],
- "license": "MIT",
"dependencies": {
"assert-plus": "^1.0.0",
"core-util-is": "1.0.2",
@@ -17140,13 +17060,16 @@
}
},
"node_modules/yauzl": {
- "version": "2.10.0",
- "resolved": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz",
- "integrity": "sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==",
+ "version": "3.3.1",
+ "resolved": "https://registry.npmjs.org/yauzl/-/yauzl-3.3.1.tgz",
+ "integrity": "sha512-RNPCUkiE/ZgO4w8i9U5yDQVHaFDdnzaFANElRvpJteCspvmv2VqrRb9lvS6odVD+jqI/zDsxAHJVsafpcheVQQ==",
"dev": true,
"dependencies": {
"buffer-crc32": "~0.2.3",
- "fd-slicer": "~1.1.0"
+ "pend": "~1.2.0"
+ },
+ "engines": {
+ "node": ">=12"
}
},
"node_modules/yocto-queue": {
--
2.47.3
--- end ---