mediawiki/extensions/ContentTranslation (REL1_39)

sourcepatches
From b0891d122d0d422bc816e555217845f93d23e3ab Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Thu, 21 Nov 2024 05:21:59 +0000
Subject: [PATCH] [DNM] there are no updates

Change-Id: Icf05dda7391fc6061876911a9512f4e0d0510bbd
---
 package-lock.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 45a3aad..40767b4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -629,9 +629,9 @@
 			}
 		},
 		"node_modules/cross-spawn": {
-			"version": "7.0.3",
-			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
-			"integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
+			"version": "7.0.6",
+			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+			"integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
 			"dev": true,
 			"dependencies": {
 				"path-key": "^3.1.0",
@@ -2809,7 +2809,7 @@
 		"node_modules/pre-commit": {
 			"version": "1.2.2",
 			"resolved": "https://registry.npmjs.org/pre-commit/-/pre-commit-1.2.2.tgz",
-			"integrity": "sha1-287g7p3nI15X95xW186UZBpp7sY=",
+			"integrity": "sha512-qokTiqxD6GjODy5ETAIgzsRgnBWWQHQH2ghy86PU7mIn/wuWeTwF3otyNQZxWBwVn8XNr8Tdzj/QfUXpH+gRZA==",
 			"dev": true,
 			"hasInstallScript": true,
 			"dependencies": {
@@ -2821,7 +2821,7 @@
 		"node_modules/pre-commit/node_modules/cross-spawn": {
 			"version": "5.1.0",
 			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz",
-			"integrity": "sha1-6L0O/uWPz/b4+UUQoKVUu/ojVEk=",
+			"integrity": "sha512-pTgQJ5KC0d2hcY8eyL1IzlBPYjTkyH72XRZPnLyKus2mBfNjQs3klqbJU2VILqZryAZUt9JOb3h/mWMy23/f5A==",
 			"dev": true,
 			"dependencies": {
 				"lru-cache": "^4.0.1",
@@ -4475,9 +4475,9 @@
 			}
 		},
 		"cross-spawn": {
-			"version": "7.0.3",
-			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
-			"integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
+			"version": "7.0.6",
+			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+			"integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
 			"dev": true,
 			"requires": {
 				"path-key": "^3.1.0",
@@ -6120,7 +6120,7 @@
 		"pre-commit": {
 			"version": "1.2.2",
 			"resolved": "https://registry.npmjs.org/pre-commit/-/pre-commit-1.2.2.tgz",
-			"integrity": "sha1-287g7p3nI15X95xW186UZBpp7sY=",
+			"integrity": "sha512-qokTiqxD6GjODy5ETAIgzsRgnBWWQHQH2ghy86PU7mIn/wuWeTwF3otyNQZxWBwVn8XNr8Tdzj/QfUXpH+gRZA==",
 			"dev": true,
 			"requires": {
 				"cross-spawn": "^5.0.1",
@@ -6131,7 +6131,7 @@
 				"cross-spawn": {
 					"version": "5.1.0",
 					"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz",
-					"integrity": "sha1-6L0O/uWPz/b4+UUQoKVUu/ojVEk=",
+					"integrity": "sha512-pTgQJ5KC0d2hcY8eyL1IzlBPYjTkyH72XRZPnLyKus2mBfNjQs3klqbJU2VILqZryAZUt9JOb3h/mWMy23/f5A==",
 					"dev": true,
 					"requires": {
 						"lru-cache": "^4.0.1",
-- 
2.39.2

$ date
--- stdout ---
Thu Nov 21 05:20:32 UTC 2024

--- end ---
$ git clone file:///srv/git/mediawiki-extensions-ContentTranslation.git repo --depth=1 -b REL1_39
--- stderr ---
Cloning into 'repo'...
--- stdout ---

--- end ---
$ git config user.name libraryupgrader
--- stdout ---

--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---

--- end ---
$ git submodule update --init
--- stdout ---

--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.

--- end ---
$ git show-ref refs/heads/REL1_39
--- stdout ---
02e0efb63f2f6bea17a750bfe37162f0b2e05db3 refs/heads/REL1_39

--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "cross-spawn": {
      "name": "cross-spawn",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1100562,
          "name": "cross-spawn",
          "dependency": "cross-spawn",
          "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn",
          "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275",
          "severity": "high",
          "cwe": [
            "CWE-1333"
          ],
          "cvss": {
            "score": 7.5,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
          },
          "range": "<6.0.6"
        },
        {
          "source": 1100563,
          "name": "cross-spawn",
          "dependency": "cross-spawn",
          "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn",
          "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275",
          "severity": "high",
          "cwe": [
            "CWE-1333"
          ],
          "cvss": {
            "score": 7.5,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
          },
          "range": ">=7.0.0 <7.0.5"
        }
      ],
      "effects": [
        "pre-commit"
      ],
      "range": "<6.0.6 || >=7.0.0 <7.0.5",
      "nodes": [
        "node_modules/cross-spawn",
        "node_modules/pre-commit/node_modules/cross-spawn"
      ],
      "fixAvailable": {
        "name": "pre-commit",
        "version": "1.0.10",
        "isSemVerMajor": true
      }
    },
    "pre-commit": {
      "name": "pre-commit",
      "severity": "high",
      "isDirect": true,
      "via": [
        "cross-spawn"
      ],
      "effects": [],
      "range": ">=1.1.0",
      "nodes": [
        "node_modules/pre-commit"
      ],
      "fixAvailable": {
        "name": "pre-commit",
        "version": "1.0.10",
        "isSemVerMajor": true
      }
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 2,
      "critical": 0,
      "total": 2
    },
    "dependencies": {
      "prod": 1,
      "dev": 355,
      "optional": 0,
      "peer": 0,
      "peerOptional": 0,
      "total": 355
    }
  }
}

--- end ---
$ /usr/bin/composer install
--- stderr ---
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information
Updating dependencies
Lock file operations: 38 installs, 0 updates, 0 removals
  - Locking composer/installers (v2.3.0)
  - Locking composer/pcre (1.0.1)
  - Locking composer/semver (3.3.2)
  - Locking composer/spdx-licenses (1.5.8)
  - Locking composer/xdebug-handler (2.0.5)
  - Locking doctrine/deprecations (1.1.3)
  - Locking felixfbecker/advanced-json-rpc (v3.2.1)
  - Locking firebase/php-jwt (v5.5.1)
  - Locking mediawiki/mediawiki-codesniffer (v39.0.0)
  - Locking mediawiki/mediawiki-phan-config (0.11.1)
  - Locking mediawiki/minus-x (1.1.1)
  - Locking mediawiki/phan-taint-check-plugin (3.3.2)
  - Locking microsoft/tolerant-php-parser (v0.1.2)
  - Locking netresearch/jsonmapper (v4.5.0)
  - Locking phan/phan (5.2.0)
  - Locking php-parallel-lint/php-console-color (v1.0.1)
  - Locking php-parallel-lint/php-console-highlighter (v1.0.0)
  - Locking php-parallel-lint/php-parallel-lint (v1.3.2)
  - Locking phpdocumentor/reflection-common (2.2.0)
  - Locking phpdocumentor/reflection-docblock (5.6.0)
  - Locking phpdocumentor/type-resolver (1.10.0)
  - Locking phpstan/phpdoc-parser (2.0.0)
  - Locking psr/container (2.0.2)
  - Locking psr/log (2.0.0)
  - Locking sabre/event (5.1.7)
  - Locking squizlabs/php_codesniffer (3.6.2)
  - Locking symfony/console (v5.4.47)
  - Locking symfony/deprecation-contracts (v3.5.0)
  - Locking symfony/polyfill-ctype (v1.31.0)
  - Locking symfony/polyfill-intl-grapheme (v1.31.0)
  - Locking symfony/polyfill-intl-normalizer (v1.31.0)
  - Locking symfony/polyfill-mbstring (v1.31.0)
  - Locking symfony/polyfill-php73 (v1.31.0)
  - Locking symfony/polyfill-php80 (v1.31.0)
  - Locking symfony/service-contracts (v3.5.0)
  - Locking symfony/string (v6.4.15)
  - Locking tysonandre/var_representation_polyfill (0.1.3)
  - Locking webmozart/assert (1.11.0)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 38 installs, 0 updates, 0 removals
    0 [>---------------------------]    0 [->--------------------------]
  - Installing composer/installers (v2.3.0): Extracting archive
  - Installing composer/pcre (1.0.1): Extracting archive
  - Installing firebase/php-jwt (v5.5.1): Extracting archive
  - Installing squizlabs/php_codesniffer (3.6.2): Extracting archive
  - Installing symfony/polyfill-mbstring (v1.31.0): Extracting archive
  - Installing composer/spdx-licenses (1.5.8): Extracting archive
  - Installing composer/semver (3.3.2): Extracting archive
  - Installing mediawiki/mediawiki-codesniffer (v39.0.0): Extracting archive
  - Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive
  - Installing symfony/polyfill-php80 (v1.31.0): Extracting archive
  - Installing symfony/polyfill-intl-normalizer (v1.31.0): Extracting archive
  - Installing symfony/polyfill-intl-grapheme (v1.31.0): Extracting archive
  - Installing symfony/polyfill-ctype (v1.31.0): Extracting archive
  - Installing symfony/string (v6.4.15): Extracting archive
  - Installing symfony/deprecation-contracts (v3.5.0): Extracting archive
  - Installing psr/container (2.0.2): Extracting archive
  - Installing symfony/service-contracts (v3.5.0): Extracting archive
  - Installing symfony/polyfill-php73 (v1.31.0): Extracting archive
  - Installing symfony/console (v5.4.47): Extracting archive
  - Installing sabre/event (5.1.7): Extracting archive
  - Installing netresearch/jsonmapper (v4.5.0): Extracting archive
  - Installing microsoft/tolerant-php-parser (v0.1.2): Extracting archive
  - Installing webmozart/assert (1.11.0): Extracting archive
  - Installing phpstan/phpdoc-parser (2.0.0): Extracting archive
  - Installing phpdocumentor/reflection-common (2.2.0): Extracting archive
  - Installing doctrine/deprecations (1.1.3): Extracting archive
  - Installing phpdocumentor/type-resolver (1.10.0): Extracting archive
  - Installing phpdocumentor/reflection-docblock (5.6.0): Extracting archive
  - Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive
  - Installing psr/log (2.0.0): Extracting archive
  - Installing composer/xdebug-handler (2.0.5): Extracting archive
  - Installing phan/phan (5.2.0): Extracting archive
  - Installing mediawiki/phan-taint-check-plugin (3.3.2): Extracting archive
  - Installing mediawiki/mediawiki-phan-config (0.11.1): Extracting archive
  - Installing mediawiki/minus-x (1.1.1): Extracting archive
  - Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive
  - Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive
  - Installing php-parallel-lint/php-parallel-lint (v1.3.2): Extracting archive
  0/37 [>---------------------------]   0%
 19/37 [==============>-------------]  51%
 34/37 [=========================>--]  91%
 37/37 [============================] 100%
4 package suggestions were added by new dependencies, use `composer suggest` to see details.
Generating autoload files
16 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---

--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "cross-spawn": {
      "name": "cross-spawn",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1100562,
          "name": "cross-spawn",
          "dependency": "cross-spawn",
          "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn",
          "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275",
          "severity": "high",
          "cwe": [
            "CWE-1333"
          ],
          "cvss": {
            "score": 7.5,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
          },
          "range": "<6.0.6"
        },
        {
          "source": 1100563,
          "name": "cross-spawn",
          "dependency": "cross-spawn",
          "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn",
          "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275",
          "severity": "high",
          "cwe": [
            "CWE-1333"
          ],
          "cvss": {
            "score": 7.5,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
          },
          "range": ">=7.0.0 <7.0.5"
        }
      ],
      "effects": [
        "pre-commit"
      ],
      "range": "<6.0.6 || >=7.0.0 <7.0.5",
      "nodes": [
        "node_modules/cross-spawn",
        "node_modules/pre-commit/node_modules/cross-spawn"
      ],
      "fixAvailable": {
        "name": "pre-commit",
        "version": "1.0.10",
        "isSemVerMajor": true
      }
    },
    "pre-commit": {
      "name": "pre-commit",
      "severity": "high",
      "isDirect": true,
      "via": [
        "cross-spawn"
      ],
      "effects": [],
      "range": ">=1.1.0",
      "nodes": [
        "node_modules/pre-commit"
      ],
      "fixAvailable": {
        "name": "pre-commit",
        "version": "1.0.10",
        "isSemVerMajor": true
      }
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 2,
      "critical": 0,
      "total": 2
    },
    "dependencies": {
      "prod": 1,
      "dev": 355,
      "optional": 0,
      "peer": 0,
      "peerOptional": 0,
      "total": 355
    }
  }
}

--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@es-joy/jsdoccomment@0.20.1',
npm WARN EBADENGINE   required: { node: '^12 || ^14 || ^16 || ^17' },
npm WARN EBADENGINE   current: { node: 'v18.19.0', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: 'eslint-plugin-jsdoc@37.9.7',
npm WARN EBADENGINE   required: { node: '^12 || ^14 || ^16 || ^17' },
npm WARN EBADENGINE   current: { node: 'v18.19.0', npm: '9.2.0' }
npm WARN EBADENGINE }
--- stdout ---
{
  "added": 355,
  "removed": 0,
  "changed": 0,
  "audited": 356,
  "funding": 53,
  "audit": {
    "auditReportVersion": 2,
    "vulnerabilities": {
      "cross-spawn": {
        "name": "cross-spawn",
        "severity": "high",
        "isDirect": false,
        "via": [
          {
            "source": 1100562,
            "name": "cross-spawn",
            "dependency": "cross-spawn",
            "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn",
            "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275",
            "severity": "high",
            "cwe": [
              "CWE-1333"
            ],
            "cvss": {
              "score": 7.5,
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
            },
            "range": "<6.0.6"
          },
          {
            "source": 1100563,
            "name": "cross-spawn",
            "dependency": "cross-spawn",
            "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn",
            "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275",
            "severity": "high",
            "cwe": [
              "CWE-1333"
            ],
            "cvss": {
              "score": 7.5,
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
            },
            "range": ">=7.0.0 <7.0.5"
          }
        ],
        "effects": [
          "pre-commit"
        ],
        "range": "<6.0.6 || >=7.0.0 <7.0.5",
        "nodes": [
          "",
          ""
        ],
        "fixAvailable": {
          "name": "pre-commit",
          "version": "1.0.10",
          "isSemVerMajor": true
        }
      },
      "pre-commit": {
        "name": "pre-commit",
        "severity": "high",
        "isDirect": false,
        "via": [
          "cross-spawn"
        ],
        "effects": [],
        "range": ">=1.1.0",
        "nodes": [
          ""
        ],
        "fixAvailable": {
          "name": "pre-commit",
          "version": "1.0.10",
          "isSemVerMajor": true
        }
      }
    },
    "metadata": {
      "vulnerabilities": {
        "info": 0,
        "low": 0,
        "moderate": 0,
        "high": 2,
        "critical": 0,
        "total": 2
      },
      "dependencies": {
        "prod": 1,
        "dev": 355,
        "optional": 0,
        "peer": 0,
        "peerOptional": 0,
        "total": 355
      }
    }
  }
}

--- end ---
{"added": 355, "removed": 0, "changed": 0, "audited": 356, "funding": 53, "audit": {"auditReportVersion": 2, "vulnerabilities": {"cross-spawn": {"name": "cross-spawn", "severity": "high", "isDirect": false, "via": [{"source": 1100562, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<6.0.6"}, {"source": 1100563, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=7.0.0 <7.0.5"}], "effects": ["pre-commit"], "range": "<6.0.6 || >=7.0.0 <7.0.5", "nodes": ["", ""], "fixAvailable": {"name": "pre-commit", "version": "1.0.10", "isSemVerMajor": true}}, "pre-commit": {"name": "pre-commit", "severity": "high", "isDirect": false, "via": ["cross-spawn"], "effects": [], "range": ">=1.1.0", "nodes": [""], "fixAvailable": {"name": "pre-commit", "version": "1.0.10", "isSemVerMajor": true}}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 0, "high": 2, "critical": 0, "total": 2}, "dependencies": {"prod": 1, "dev": 355, "optional": 0, "peer": 0, "peerOptional": 0, "total": 355}}}}
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@es-joy/jsdoccomment@0.20.1',
npm WARN EBADENGINE   required: { node: '^12 || ^14 || ^16 || ^17' },
npm WARN EBADENGINE   current: { node: 'v18.19.0', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: 'eslint-plugin-jsdoc@37.9.7',
npm WARN EBADENGINE   required: { node: '^12 || ^14 || ^16 || ^17' },
npm WARN EBADENGINE   current: { node: 'v18.19.0', npm: '9.2.0' }
npm WARN EBADENGINE }
--- stdout ---

added 355 packages, and audited 356 packages in 4s

53 packages are looking for funding
  run `npm fund` for details

# npm audit report

cross-spawn  <6.0.6
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - https://github.com/advisories/GHSA-3xgq-45jj-v275
fix available via `npm audit fix --force`
Will install pre-commit@1.0.10, which is a breaking change
node_modules/pre-commit/node_modules/cross-spawn
  pre-commit  >=1.1.0
  Depends on vulnerable versions of cross-spawn
  node_modules/pre-commit

2 high severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stderr ---
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@es-joy/jsdoccomment@0.20.1',
npm WARN EBADENGINE   required: { node: '^12 || ^14 || ^16 || ^17' },
npm WARN EBADENGINE   current: { node: 'v18.19.0', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: 'eslint-plugin-jsdoc@37.9.7',
npm WARN EBADENGINE   required: { node: '^12 || ^14 || ^16 || ^17' },
npm WARN EBADENGINE   current: { node: 'v18.19.0', npm: '9.2.0' }
npm WARN EBADENGINE }
--- stdout ---

added 355 packages, and audited 356 packages in 4s

53 packages are looking for funding
  run `npm fund` for details

2 high severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

Run `npm audit` for details.

--- end ---
$ /usr/bin/npm test
--- stderr ---
npm WARN deprecated source-map-url@0.4.1: See https://github.com/lydell/source-map-url#deprecated
npm WARN deprecated urix@0.1.0: Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated source-map-resolve@0.5.3: See https://github.com/lydell/source-map-resolve#deprecated
npm WARN deprecated iltorb@2.4.5: The zlib module provides APIs for brotli compression/decompression starting with Node.js v10.16.0, please use it over iltorb
PASS src/utils/publishHelper.test.js
PASS src/store/modules/suggestions/suggestions.test.js
PASS src/store/modules/translator/tests/actions/publishTranslation.test.js
PASS src/components/SXSentenceSelector/tests/SubSection.test.js
PASS src/components/SXTranslationConfirmer/useActionPanel.test.js
PASS src/utils/getInitialLanguagePair.test.js
PASS src/wiki/cx/models/subSection.test.js
PASS src/store/modules/translator/tests/getters/getSectionNumberForPublishing.test.js
PASS src/components/SXPublisher/SXPublisherReviewInfo.test.js
PASS src/store/modules/translator/tests/actions/validateMT.test.js
PASS src/wiki/mw/models/page.test.js
PASS src/utils/segmentedContentConverter.test.js
PASS src/store/modules/application/tests/actions/getCXServerToken.test.js
PASS src/components/SXSentenceSelector/tests/ProposedTranslationActionButtons.test.js
PASS src/lib/mediawiki.ui/components/MWButton/MWButton.test.js
PASS src/components/SXArticleSearch/SearchResultsCard.test.js
PASS src/components/SXSectionSelector/SXSectionSelectorSectionList.test.js
PASS src/components/SXPublisher/useEditTranslation.test.js
PASS src/components/SXArticleSearch/SXArticleSearch.test.js
PASS src/store/modules/mediawiki/actions.test.js
PASS src/components/SXSentenceSelector/tests/ProposedTranslationCard.test.js
PASS src/components/SXArticleSearch/ArticleSuggestionsCard.test.js
PASS src/components/SXSentenceSelector/tests/ProposedTranslationHeader.test.js
PASS src/lib/mediawiki.ui/components/MWSelect/MWSelect.test.js
PASS src/utils/mtHelper.test.js
PASS src/components/SXSectionSelector/SXSectionSelectorSectionListPresent.test.js
PASS src/lib/mediawiki.ui/components/MWInput/MWInput.test.js
PASS src/components/SXArticleSearch/useSuggestedSourceLanguages.test.js
PASS src/components/SXContentComparator/SXContentComparatorHeaderNavigation.test.js
PASS src/components/SXArticleSearch/SXSearchArticleSuggestion.test.js
PASS src/components/SXTranslationConfirmer/SXTranslationConfirmerActionPanel.test.js
PASS src/lib/mediawiki.ui/components/MWExpandableContent/MWExpandableContent.test.js
PASS src/utils/mtValidator.test.js
PASS src/components/SXSentenceSelector/tests/SXSentenceSelector.test.js
PASS src/plugins/eventlogging/index.test.js
PASS src/components/SXTranslationConfirmer/SXTranslationConfirmerArticleInformation.test.js
PASS src/lib/mediawiki.ui/components/MWIcon/MWIcon.test.js
PASS src/lib/mediawiki.ui/components/MWButtonGroup/MWButtonGroup.test.js
PASS src/lib/mediawiki.ui/components/MWRadioGroup/MWRadioGroup.test.js
PASS src/components/SXSectionSelector/SXSectionSelectorViewArticleItem.test.js
PASS src/lib/mediawiki.ui/components/MWMessage/MWMessage.test.js
PASS src/lib/mediawiki.ui/components/MWThumbnail/MWThumbnail.test.js
PASS src/components/SXSentenceSelector/tests/SXSentenceSelectorContentHeader.test.js
PASS src/lib/mediawiki.ui/components/MWRadioGroup/MWRadio.test.js
PASS src/lib/mediawiki.ui/components/MWCard/MWcard.test.js
PASS src/lib/mediawiki.ui/components/MWBottomNavigation/MWBottomNavigation.test.js
PASS src/lib/mediawiki.ui/components/MWDialog/MWDialog.test.js
PASS src/utils/mediawikiHelper.test.js
PASS src/wiki/cx/models/sectionSuggestion.test.js

Test Suites: 49 passed, 49 total
Tests:       134 passed, 134 total
Snapshots:   33 passed, 33 total
Time:        9.29 s
Ran all test suites.
--- stdout ---

> test
> npm run test:cx2 && npm run test:cx3


> test:cx2
> npm -s run lint

Checked 1 message directory.

/src/repo/modules/dashboard/mw.cx.DashboardList.js
  127:7  warning  'language' is already declared in the upper scope on line 122 column 13  no-shadow

/src/repo/modules/dashboard/mw.cx.SuggestionList.js
  141:10  warning  'list' is already declared in the upper scope on line 120 column 57  no-shadow

/src/repo/modules/entrypoints/ext.cx.entrypoints.mffrequentlanguages.js
  144:0  warning  The type 'LanguageSearcher' is undefined  jsdoc/no-undefined-types

/src/repo/modules/entrypoints/ext.cx.entrypoints.newbytranslation.js
  177:35  warning  navigator.languages() is not supported in Safari 9.1, iOS Safari 9.0-9.2, IE 11  compat/compat

/src/repo/modules/entrypoints/ext.cx.entrypoints.newbytranslation.mobile.js
  10:35  warning  navigator.languages() is not supported in Safari 9.1, iOS Safari 9.0-9.2, IE 11  compat/compat
  38:10  warning  fetch is not supported in Safari 9.1, IE 11                                      compat/compat

/src/repo/modules/entrypoints/ext.cx.entrypoints.recenttranslation/RecentTranslationEntrypointDialog.vue
    7:10  warning  Don't use 'v-text'                           vue/no-v-text
   16:6   warning  Don't use 'v-text'                           vue/no-v-text
   22:6   warning  Don't use 'v-text'                           vue/no-v-text
   33:7   warning  Don't use 'v-text'                           vue/no-v-text
   37:12  warning  Don't use 'v-text'                           vue/no-v-text
   38:11  warning  Don't use 'v-text'                           vue/no-v-text
   41:12  warning  Don't use 'v-text'                           vue/no-v-text
   42:11  warning  Don't use 'v-text'                           vue/no-v-text
   46:12  warning  Don't use 'v-text'                           vue/no-v-text
   47:11  warning  Don't use 'v-text'                           vue/no-v-text
   54:13  warning  Don't use 'v-text'                           vue/no-v-text
   61:8   warning  Don't use 'v-text'                           vue/no-v-text
   75:7   warning  Don't use 'v-text'                           vue/no-v-text
   80:13  warning  Don't use 'v-text'                           vue/no-v-text
   84:7   warning  Don't use 'v-text'                           vue/no-v-text
  176:4   warning  fetch is not supported in Safari 9.1, IE 11  compat/compat
  180:7   warning  Promise.reject() is not supported in IE 11   compat/compat
  180:7   warning  ES2015 'Promise' class is forbidden          es/no-promise

/src/repo/modules/entrypoints/ext.cx.entrypoints.uls.relevantlanguages/CxUlsEntrypoint.vue
  30:6  warning  Don't use 'v-text'  vue/no-v-text
  40:5  warning  Don't use 'v-text'  vue/no-v-text
  68:7  warning  Don't use 'v-text'  vue/no-v-text

/src/repo/modules/mw.cx.TargetArticle.js
  511:7  warning  'title' is already declared in the upper scope on line 502 column 66  no-shadow

/src/repo/modules/mw.cx.init.Translation.js
  195:7   warning  'sourceDom' is already declared in the upper scope on line 167 column 6    no-shadow
  195:18  warning  'targetDom' is already declared in the upper scope on line 167 column 17   no-shadow
  197:4   warning  'sourceHtml' is already declared in the upper scope on line 166 column 68  no-shadow

/src/repo/modules/publish/ext.cx.wikibase.link.js
  30:11  warning  ES2015 'Promise' class is forbidden          es/no-promise
  43:10  warning  Promise.resolve() is not supported in IE 11  compat/compat
  43:10  warning  ES2015 'Promise' class is forbidden          es/no-promise

/src/repo/modules/stats/ext.cx.stats.js
  617:55  warning  'data' is already declared in the upper scope on line 612 column 7   no-shadow
  629:55  warning  'data' is already declared in the upper scope on line 612 column 7   no-shadow
  641:49  warning  'data' is already declared in the upper scope on line 612 column 7   no-shadow
  662:58  warning  'data' is already declared in the upper scope on line 657 column 7   no-shadow
  674:58  warning  'data' is already declared in the upper scope on line 657 column 7   no-shadow
  686:52  warning  'data' is already declared in the upper scope on line 657 column 7   no-shadow
  698:55  warning  'data' is already declared in the upper scope on line 657 column 7   no-shadow
  718:55  warning  'data' is already declared in the upper scope on line 714 column 7   no-shadow
  727:55  warning  'data' is already declared in the upper scope on line 714 column 7   no-shadow
  736:49  warning  'data' is already declared in the upper scope on line 714 column 7   no-shadow
  757:58  warning  'data' is already declared in the upper scope on line 752 column 12  no-shadow
  766:58  warning  'data' is already declared in the upper scope on line 752 column 12  no-shadow
  775:52  warning  'data' is already declared in the upper scope on line 752 column 12  no-shadow
  784:55  warning  'data' is already declared in the upper scope on line 752 column 12  no-shadow

/src/repo/modules/ui/widgets/mw.cx.ui.PageSelectorWidget.js
  219:31  warning  'pages' is already declared in the upper scope on line 184 column 71  no-shadow

/src/repo/modules/ve-cx/init/ve.init.mw.CXTarget.js
  786:7   warning  'model' is already declared in the upper scope on line 772 column 3  no-shadow
  866:34  warning  'tx' is already declared in the upper scope on line 846 column 42    no-shadow
  866:38  warning  'doc' is already declared in the upper scope on line 848 column 3    no-shadow

/src/repo/modules/ve-cx/ui/ve.ui.CXLinkContextItem.js
  166:38  warning  'adaptationInfo' is already declared in the upper scope on line 140 column 3  no-shadow

/src/repo/modules/ve-cx/ui/ve.ui.CXTranslationToolbar.js
  51:65  warning  'MTManager' is already declared in the upper scope on line 50 column 62  no-shadow

✖ 54 problems (0 errors, 54 warnings)


> test:cx3
> cd app && npm run test


> cx3@0.2.0+20220905 test
> npm install && npm -s run test:bundle && npm run lint && npm run test:unit


added 897 packages, and audited 898 packages in 31s

71 packages are looking for funding
  run `npm fund` for details

19 vulnerabilities (9 moderate, 9 high, 1 critical)

To address issues that do not require attention, run:
  npm audit fix

To address all issues (including breaking changes), run:
  npm audit fix --force

Run `npm audit` for details.
There are no staged changes to the dist folder in this change.

> cx3@0.2.0+20220905 lint
> eslint .


/src/repo/app/src/components/SXArticleSearch/SXArticleSearch.snap.js
  3:9  warning  Replace ``SXArticleSearch·component·test·Component·output·matches·snapshot·1`` with `⏎··`SXArticleSearch·component·test·Component·output·matches·snapshot·1`⏎`  prettier/prettier

/src/repo/app/src/components/SXPublisher/SXPublisherReviewInfo.snap.js
   3:9  warning  Replace ``SXPublisher·review·info·panel·test·should·match·snapshot·when·no·publishFeedbackMessages·exist·1`` with `⏎··`SXPublisher·review·info·panel·test·should·match·snapshot·when·no·publishFeedbackMessages·exist·1`⏎`  prettier/prettier
  63:9  warning  Replace ``SXPublisher·review·info·panel·test·should·match·snapshot·when·the·active·message·is·a·warning·1`` with `⏎··`SXPublisher·review·info·panel·test·should·match·snapshot·when·the·active·message·is·a·warning·1`⏎`    prettier/prettier

/src/repo/app/src/components/SXSectionSelector/SXSectionSelectorSectionListPresent.snap.js
  3:9  warning  Replace ``SXSectionSelector·Section·List·Component·output·matches·snapshot·1`` with `⏎··`SXSectionSelector·Section·List·Component·output·matches·snapshot·1`⏎`  prettier/prettier

/src/repo/app/src/components/SXSentenceSelector/tests/SubSection.snap.js
  3:9  warning  Replace ``SXSentenceSelector·SubSection·component·Component·output·matches·snapshot·1`` with `⏎··`SXSentenceSelector·SubSection·component·Component·output·matches·snapshot·1`⏎`  prettier/prettier

✖ 5 problems (0 errors, 5 warnings)
  0 errors and 5 warnings potentially fixable with the `--fix` option.


> cx3@0.2.0+20220905 test:unit
> jest -c config/jest/jest.config.js


--- end ---
$ package-lock-lint package-lock.json
--- stdout ---
Checking package-lock.json

--- end ---
[DNM] there are no updates
$ git add .
--- stdout ---

--- end ---
$ git commit -F /tmp/tmpu3trnoo2
--- stderr ---
Checked 1 message directory.

/src/repo/modules/dashboard/mw.cx.DashboardList.js
  127:7  warning  'language' is already declared in the upper scope on line 122 column 13  no-shadow

/src/repo/modules/dashboard/mw.cx.SuggestionList.js
  141:10  warning  'list' is already declared in the upper scope on line 120 column 57  no-shadow

/src/repo/modules/entrypoints/ext.cx.entrypoints.mffrequentlanguages.js
  144:0  warning  The type 'LanguageSearcher' is undefined  jsdoc/no-undefined-types

/src/repo/modules/entrypoints/ext.cx.entrypoints.newbytranslation.js
  177:35  warning  navigator.languages() is not supported in Safari 9.1, iOS Safari 9.0-9.2, IE 11  compat/compat

/src/repo/modules/entrypoints/ext.cx.entrypoints.newbytranslation.mobile.js
  10:35  warning  navigator.languages() is not supported in Safari 9.1, iOS Safari 9.0-9.2, IE 11  compat/compat
  38:10  warning  fetch is not supported in Safari 9.1, IE 11                                      compat/compat

/src/repo/modules/entrypoints/ext.cx.entrypoints.recenttranslation/RecentTranslationEntrypointDialog.vue
    7:10  warning  Don't use 'v-text'                           vue/no-v-text
   16:6   warning  Don't use 'v-text'                           vue/no-v-text
   22:6   warning  Don't use 'v-text'                           vue/no-v-text
   33:7   warning  Don't use 'v-text'                           vue/no-v-text
   37:12  warning  Don't use 'v-text'                           vue/no-v-text
   38:11  warning  Don't use 'v-text'                           vue/no-v-text
   41:12  warning  Don't use 'v-text'                           vue/no-v-text
   42:11  warning  Don't use 'v-text'                           vue/no-v-text
   46:12  warning  Don't use 'v-text'                           vue/no-v-text
   47:11  warning  Don't use 'v-text'                           vue/no-v-text
   54:13  warning  Don't use 'v-text'                           vue/no-v-text
   61:8   warning  Don't use 'v-text'                           vue/no-v-text
   75:7   warning  Don't use 'v-text'                           vue/no-v-text
   80:13  warning  Don't use 'v-text'                           vue/no-v-text
   84:7   warning  Don't use 'v-text'                           vue/no-v-text
  176:4   warning  fetch is not supported in Safari 9.1, IE 11  compat/compat
  180:7   warning  Promise.reject() is not supported in IE 11   compat/compat
  180:7   warning  ES2015 'Promise' class is forbidden          es/no-promise

/src/repo/modules/entrypoints/ext.cx.entrypoints.uls.relevantlanguages/CxUlsEntrypoint.vue
  30:6  warning  Don't use 'v-text'  vue/no-v-text
  40:5  warning  Don't use 'v-text'  vue/no-v-text
  68:7  warning  Don't use 'v-text'  vue/no-v-text

/src/repo/modules/mw.cx.TargetArticle.js
  511:7  warning  'title' is already declared in the upper scope on line 502 column 66  no-shadow

/src/repo/modules/mw.cx.init.Translation.js
  195:7   warning  'sourceDom' is already declared in the upper scope on line 167 column 6    no-shadow
  195:18  warning  'targetDom' is already declared in the upper scope on line 167 column 17   no-shadow
  197:4   warning  'sourceHtml' is already declared in the upper scope on line 166 column 68  no-shadow

/src/repo/modules/publish/ext.cx.wikibase.link.js
  30:11  warning  ES2015 'Promise' class is forbidden          es/no-promise
  43:10  warning  Promise.resolve() is not supported in IE 11  compat/compat
  43:10  warning  ES2015 'Promise' class is forbidden          es/no-promise

/src/repo/modules/stats/ext.cx.stats.js
  617:55  warning  'data' is already declared in the upper scope on line 612 column 7   no-shadow
  629:55  warning  'data' is already declared in the upper scope on line 612 column 7   no-shadow
  641:49  warning  'data' is already declared in the upper scope on line 612 column 7   no-shadow
  662:58  warning  'data' is already declared in the upper scope on line 657 column 7   no-shadow
  674:58  warning  'data' is already declared in the upper scope on line 657 column 7   no-shadow
  686:52  warning  'data' is already declared in the upper scope on line 657 column 7   no-shadow
  698:55  warning  'data' is already declared in the upper scope on line 657 column 7   no-shadow
  718:55  warning  'data' is already declared in the upper scope on line 714 column 7   no-shadow
  727:55  warning  'data' is already declared in the upper scope on line 714 column 7   no-shadow
  736:49  warning  'data' is already declared in the upper scope on line 714 column 7   no-shadow
  757:58  warning  'data' is already declared in the upper scope on line 752 column 12  no-shadow
  766:58  warning  'data' is already declared in the upper scope on line 752 column 12  no-shadow
  775:52  warning  'data' is already declared in the upper scope on line 752 column 12  no-shadow
  784:55  warning  'data' is already declared in the upper scope on line 752 column 12  no-shadow

/src/repo/modules/ui/widgets/mw.cx.ui.PageSelectorWidget.js
  219:31  warning  'pages' is already declared in the upper scope on line 184 column 71  no-shadow

/src/repo/modules/ve-cx/init/ve.init.mw.CXTarget.js
  786:7   warning  'model' is already declared in the upper scope on line 772 column 3  no-shadow
  866:34  warning  'tx' is already declared in the upper scope on line 846 column 42    no-shadow
  866:38  warning  'doc' is already declared in the upper scope on line 848 column 3    no-shadow

/src/repo/modules/ve-cx/ui/ve.ui.CXLinkContextItem.js
  166:38  warning  'adaptationInfo' is already declared in the upper scope on line 140 column 3  no-shadow

/src/repo/modules/ve-cx/ui/ve.ui.CXTranslationToolbar.js
  51:65  warning  'MTManager' is already declared in the upper scope on line 50 column 62  no-shadow

✖ 54 problems (0 errors, 54 warnings)
--- stdout ---
[REL1_39 b0891d1] [DNM] there are no updates
 1 file changed, 10 insertions(+), 10 deletions(-)

--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From b0891d122d0d422bc816e555217845f93d23e3ab Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Thu, 21 Nov 2024 05:21:59 +0000
Subject: [PATCH] [DNM] there are no updates

Change-Id: Icf05dda7391fc6061876911a9512f4e0d0510bbd
---
 package-lock.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 45a3aad..40767b4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -629,9 +629,9 @@
 			}
 		},
 		"node_modules/cross-spawn": {
-			"version": "7.0.3",
-			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
-			"integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
+			"version": "7.0.6",
+			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+			"integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
 			"dev": true,
 			"dependencies": {
 				"path-key": "^3.1.0",
@@ -2809,7 +2809,7 @@
 		"node_modules/pre-commit": {
 			"version": "1.2.2",
 			"resolved": "https://registry.npmjs.org/pre-commit/-/pre-commit-1.2.2.tgz",
-			"integrity": "sha1-287g7p3nI15X95xW186UZBpp7sY=",
+			"integrity": "sha512-qokTiqxD6GjODy5ETAIgzsRgnBWWQHQH2ghy86PU7mIn/wuWeTwF3otyNQZxWBwVn8XNr8Tdzj/QfUXpH+gRZA==",
 			"dev": true,
 			"hasInstallScript": true,
 			"dependencies": {
@@ -2821,7 +2821,7 @@
 		"node_modules/pre-commit/node_modules/cross-spawn": {
 			"version": "5.1.0",
 			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz",
-			"integrity": "sha1-6L0O/uWPz/b4+UUQoKVUu/ojVEk=",
+			"integrity": "sha512-pTgQJ5KC0d2hcY8eyL1IzlBPYjTkyH72XRZPnLyKus2mBfNjQs3klqbJU2VILqZryAZUt9JOb3h/mWMy23/f5A==",
 			"dev": true,
 			"dependencies": {
 				"lru-cache": "^4.0.1",
@@ -4475,9 +4475,9 @@
 			}
 		},
 		"cross-spawn": {
-			"version": "7.0.3",
-			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
-			"integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
+			"version": "7.0.6",
+			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+			"integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
 			"dev": true,
 			"requires": {
 				"path-key": "^3.1.0",
@@ -6120,7 +6120,7 @@
 		"pre-commit": {
 			"version": "1.2.2",
 			"resolved": "https://registry.npmjs.org/pre-commit/-/pre-commit-1.2.2.tgz",
-			"integrity": "sha1-287g7p3nI15X95xW186UZBpp7sY=",
+			"integrity": "sha512-qokTiqxD6GjODy5ETAIgzsRgnBWWQHQH2ghy86PU7mIn/wuWeTwF3otyNQZxWBwVn8XNr8Tdzj/QfUXpH+gRZA==",
 			"dev": true,
 			"requires": {
 				"cross-spawn": "^5.0.1",
@@ -6131,7 +6131,7 @@
 				"cross-spawn": {
 					"version": "5.1.0",
 					"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz",
-					"integrity": "sha1-6L0O/uWPz/b4+UUQoKVUu/ojVEk=",
+					"integrity": "sha512-pTgQJ5KC0d2hcY8eyL1IzlBPYjTkyH72XRZPnLyKus2mBfNjQs3klqbJU2VILqZryAZUt9JOb3h/mWMy23/f5A==",
 					"dev": true,
 					"requires": {
 						"lru-cache": "^4.0.1",
-- 
2.39.2


--- end ---

composer dependencies

Dependencies
Development dependencies

npm dependencies

Development dependencies

Logs

Source code is licensed under the AGPL.