mediawiki/extensions/GrowthExperiments (main)

sourcepatches
From 88df465c088e6e3a9374427730e0e3faf2a90e14 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Thu, 29 Jan 2026 05:34:13 +0000
Subject: [PATCH] build: Updating tar to 7.5.7

* https://github.com/advisories/GHSA-34x7-hfp2-rc4v

Change-Id: Ic92c6a6ae5a5cce674c6e9e925e2f21e5cc786b4
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index fcccae3..df22a28 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17280,9 +17280,9 @@
 			}
 		},
 		"node_modules/tar": {
-			"version": "7.5.5",
-			"resolved": "https://registry.npmjs.org/tar/-/tar-7.5.5.tgz",
-			"integrity": "sha512-ocjwSUBo2V8ExKxy9FH6iROIsK60OCW//h14MFYpivNSYIj7ntgm35ijGT82Jl//xwbxBhIYXkfAovjtVm9nrA==",
+			"version": "7.5.7",
+			"resolved": "https://registry.npmjs.org/tar/-/tar-7.5.7.tgz",
+			"integrity": "sha512-fov56fJiRuThVFXD6o6/Q354S7pnWMJIVlDBYijsTNx6jKSE4pvrDTs6lUnmGvNyfJwFQQwWy3owKz1ucIhveQ==",
 			"dev": true,
 			"dependencies": {
 				"@isaacs/fs-minipass": "^4.0.0",
-- 
2.47.3

$ date
--- stdout ---
Thu Jan 29 05:31:13 UTC 2026

--- end ---
$ git clone file:///srv/git/mediawiki-extensions-GrowthExperiments.git /src/repo --depth=1 -b master
--- stderr ---
Cloning into '/src/repo'...
--- stdout ---

--- end ---
$ git config user.name libraryupgrader
--- stdout ---

--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---

--- end ---
$ git submodule update --init
--- stdout ---

--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.

--- end ---
$ git show-ref refs/heads/master
--- stdout ---
2e8eb22e8bc7f8e6e0041f4da73666bd81455701 refs/heads/master

--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "tar": {
      "name": "tar",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1112659,
          "name": "tar",
          "dependency": "tar",
          "title": "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
          "url": "https://github.com/advisories/GHSA-34x7-hfp2-rc4v",
          "severity": "high",
          "cwe": [
            "CWE-22",
            "CWE-59"
          ],
          "cvss": {
            "score": 8.2,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N"
          },
          "range": "<7.5.7"
        }
      ],
      "effects": [],
      "range": "<7.5.7",
      "nodes": [
        "node_modules/tar"
      ],
      "fixAvailable": true
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 1,
      "critical": 0,
      "total": 1
    },
    "dependencies": {
      "prod": 1,
      "dev": 1386,
      "optional": 61,
      "peer": 0,
      "peerOptional": 0,
      "total": 1386
    }
  }
}

--- end ---
$ /usr/bin/composer install
--- stderr ---
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information
Updating dependencies
Lock file operations: 49 installs, 0 updates, 0 removals
  - Locking composer/pcre (3.3.2)
  - Locking composer/semver (3.4.4)
  - Locking composer/spdx-licenses (1.5.9)
  - Locking composer/xdebug-handler (3.0.5)
  - Locking dealerdirect/phpcodesniffer-composer-installer (v1.2.0)
  - Locking doctrine/annotations (2.0.2)
  - Locking doctrine/deprecations (1.1.5)
  - Locking doctrine/lexer (3.0.1)
  - Locking felixfbecker/advanced-json-rpc (v3.2.1)
  - Locking mediawiki/mediawiki-codesniffer (v49.0.0)
  - Locking mediawiki/mediawiki-phan-config (0.18.0)
  - Locking mediawiki/minus-x (2.0.0)
  - Locking mediawiki/phan-taint-check-plugin (8.0.0)
  - Locking microsoft/tolerant-php-parser (v0.1.2)
  - Locking netresearch/jsonmapper (v4.5.0)
  - Locking phan/phan (5.5.2)
  - Locking php-parallel-lint/php-console-color (v1.0.1)
  - Locking php-parallel-lint/php-console-highlighter (v1.0.0)
  - Locking php-parallel-lint/php-parallel-lint (v1.4.0)
  - Locking phpbench/container (2.2.3)
  - Locking phpbench/phpbench (1.4.3)
  - Locking phpcsstandards/phpcsextra (1.4.0)
  - Locking phpcsstandards/phpcsutils (1.2.2)
  - Locking phpdocumentor/reflection-common (2.2.0)
  - Locking phpdocumentor/reflection-docblock (5.6.6)
  - Locking phpdocumentor/type-resolver (1.12.0)
  - Locking phpstan/phpdoc-parser (2.3.2)
  - Locking psr/cache (3.0.0)
  - Locking psr/container (2.0.2)
  - Locking psr/log (3.0.2)
  - Locking sabre/event (5.1.7)
  - Locking seld/jsonlint (1.11.0)
  - Locking squizlabs/php_codesniffer (3.13.5)
  - Locking symfony/console (v7.4.4)
  - Locking symfony/deprecation-contracts (v3.6.0)
  - Locking symfony/filesystem (v8.0.1)
  - Locking symfony/finder (v8.0.5)
  - Locking symfony/options-resolver (v8.0.0)
  - Locking symfony/polyfill-ctype (v1.33.0)
  - Locking symfony/polyfill-intl-grapheme (v1.33.0)
  - Locking symfony/polyfill-intl-normalizer (v1.33.0)
  - Locking symfony/polyfill-mbstring (v1.33.0)
  - Locking symfony/polyfill-php80 (v1.33.0)
  - Locking symfony/process (v8.0.5)
  - Locking symfony/service-contracts (v3.6.1)
  - Locking symfony/string (v8.0.4)
  - Locking tysonandre/var_representation_polyfill (0.1.3)
  - Locking webmozart/assert (2.1.2)
  - Locking webmozart/glob (4.7.0)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 49 installs, 0 updates, 0 removals
    0 [>---------------------------]    0 [->--------------------------]
  - Installing squizlabs/php_codesniffer (3.13.5): Extracting archive
  - Installing dealerdirect/phpcodesniffer-composer-installer (v1.2.0): Extracting archive
  - Installing composer/pcre (3.3.2): Extracting archive
  - Installing doctrine/lexer (3.0.1): Extracting archive
  - Installing phpcsstandards/phpcsutils (1.2.2): Extracting archive
  - Installing phpcsstandards/phpcsextra (1.4.0): Extracting archive
  - Installing symfony/polyfill-mbstring (v1.33.0): Extracting archive
  - Installing composer/spdx-licenses (1.5.9): Extracting archive
  - Installing composer/semver (3.4.4): Extracting archive
  - Installing mediawiki/mediawiki-codesniffer (v49.0.0): Extracting archive
  - Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive
  - Installing symfony/polyfill-php80 (v1.33.0): Extracting archive
  - Installing symfony/polyfill-intl-normalizer (v1.33.0): Extracting archive
  - Installing symfony/polyfill-intl-grapheme (v1.33.0): Extracting archive
  - Installing symfony/polyfill-ctype (v1.33.0): Extracting archive
  - Installing symfony/string (v8.0.4): Extracting archive
  - Installing symfony/deprecation-contracts (v3.6.0): Extracting archive
  - Installing psr/container (2.0.2): Extracting archive
  - Installing symfony/service-contracts (v3.6.1): Extracting archive
  - Installing symfony/console (v7.4.4): Extracting archive
  - Installing sabre/event (5.1.7): Extracting archive
  - Installing netresearch/jsonmapper (v4.5.0): Extracting archive
  - Installing microsoft/tolerant-php-parser (v0.1.2): Extracting archive
  - Installing webmozart/assert (2.1.2): Extracting archive
  - Installing phpstan/phpdoc-parser (2.3.2): Extracting archive
  - Installing phpdocumentor/reflection-common (2.2.0): Extracting archive
  - Installing doctrine/deprecations (1.1.5): Extracting archive
  - Installing phpdocumentor/type-resolver (1.12.0): Extracting archive
  - Installing phpdocumentor/reflection-docblock (5.6.6): Extracting archive
  - Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive
  - Installing psr/log (3.0.2): Extracting archive
  - Installing composer/xdebug-handler (3.0.5): Extracting archive
  - Installing phan/phan (5.5.2): Extracting archive
  - Installing mediawiki/phan-taint-check-plugin (8.0.0): Extracting archive
  - Installing mediawiki/mediawiki-phan-config (0.18.0): Extracting archive
  - Installing mediawiki/minus-x (2.0.0): Extracting archive
  - Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive
  - Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive
  - Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive
  - Installing webmozart/glob (4.7.0): Extracting archive
  - Installing symfony/process (v8.0.5): Extracting archive
  - Installing symfony/options-resolver (v8.0.0): Extracting archive
  - Installing symfony/finder (v8.0.5): Extracting archive
  - Installing symfony/filesystem (v8.0.1): Extracting archive
  - Installing seld/jsonlint (1.11.0): Extracting archive
  - Installing phpbench/container (2.2.3): Extracting archive
  - Installing psr/cache (3.0.0): Extracting archive
  - Installing doctrine/annotations (2.0.2): Extracting archive
  - Installing phpbench/phpbench (1.4.3): Extracting archive
  0/47 [>---------------------------]   0%
 28/47 [================>-----------]  59%
 39/47 [=======================>----]  82%
 47/47 [============================] 100%
2 package suggestions were added by new dependencies, use `composer suggest` to see details.
Package doctrine/annotations is abandoned, you should avoid using it. No replacement was suggested.
Generating autoload files
24 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---
PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils

--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "tar": {
      "name": "tar",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1112659,
          "name": "tar",
          "dependency": "tar",
          "title": "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
          "url": "https://github.com/advisories/GHSA-34x7-hfp2-rc4v",
          "severity": "high",
          "cwe": [
            "CWE-22",
            "CWE-59"
          ],
          "cvss": {
            "score": 8.2,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N"
          },
          "range": "<7.5.7"
        }
      ],
      "effects": [],
      "range": "<7.5.7",
      "nodes": [
        "node_modules/tar"
      ],
      "fixAvailable": true
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 1,
      "critical": 0,
      "total": 1
    },
    "dependencies": {
      "prod": 1,
      "dev": 1386,
      "optional": 61,
      "peer": 0,
      "peerOptional": 0,
      "total": 1386
    }
  }
}

--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: undefined,
npm WARN EBADENGINE   required: { npm: '>=10', node: '>=20' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@wikimedia/codex@2.3.2',
npm WARN EBADENGINE   required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@wikimedia/codex-design-tokens@2.3.2',
npm WARN EBADENGINE   required: { node: '>=20.19.1', npm: '>=10.8.1' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@wikimedia/codex-icons@2.3.2',
npm WARN EBADENGINE   required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
--- stdout ---
{
  "added": 1386,
  "removed": 0,
  "changed": 0,
  "audited": 1387,
  "funding": 261,
  "audit": {
    "auditReportVersion": 2,
    "vulnerabilities": {
      "tar": {
        "name": "tar",
        "severity": "high",
        "isDirect": false,
        "via": [
          {
            "source": 1112659,
            "name": "tar",
            "dependency": "tar",
            "title": "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
            "url": "https://github.com/advisories/GHSA-34x7-hfp2-rc4v",
            "severity": "high",
            "cwe": [
              "CWE-22",
              "CWE-59"
            ],
            "cvss": {
              "score": 8.2,
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N"
            },
            "range": "<7.5.7"
          }
        ],
        "effects": [],
        "range": "<7.5.7",
        "nodes": [
          ""
        ],
        "fixAvailable": true
      }
    },
    "metadata": {
      "vulnerabilities": {
        "info": 0,
        "low": 0,
        "moderate": 0,
        "high": 1,
        "critical": 0,
        "total": 1
      },
      "dependencies": {
        "prod": 1,
        "dev": 1386,
        "optional": 61,
        "peer": 0,
        "peerOptional": 0,
        "total": 1386
      }
    }
  }
}

--- end ---
{"added": 1386, "removed": 0, "changed": 0, "audited": 1387, "funding": 261, "audit": {"auditReportVersion": 2, "vulnerabilities": {"tar": {"name": "tar", "severity": "high", "isDirect": false, "via": [{"source": 1112659, "name": "tar", "dependency": "tar", "title": "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal", "url": "https://github.com/advisories/GHSA-34x7-hfp2-rc4v", "severity": "high", "cwe": ["CWE-22", "CWE-59"], "cvss": {"score": 8.2, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N"}, "range": "<7.5.7"}], "effects": [], "range": "<7.5.7", "nodes": [""], "fixAvailable": true}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 0, "high": 1, "critical": 0, "total": 1}, "dependencies": {"prod": 1, "dev": 1386, "optional": 61, "peer": 0, "peerOptional": 0, "total": 1386}}}}
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: undefined,
npm WARN EBADENGINE   required: { npm: '>=10', node: '>=20' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@wikimedia/codex@2.3.2',
npm WARN EBADENGINE   required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@wikimedia/codex-design-tokens@2.3.2',
npm WARN EBADENGINE   required: { node: '>=20.19.1', npm: '>=10.8.1' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@wikimedia/codex-icons@2.3.2',
npm WARN EBADENGINE   required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm WARN deprecated abab@2.0.6: Use your platform's native atob() and btoa() methods instead
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
npm WARN deprecated domexception@4.0.0: Use your platform's native DOMException instead
npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
--- stdout ---

added 1341 packages, and audited 1342 packages in 41s

261 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stderr ---
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: undefined,
npm WARN EBADENGINE   required: { npm: '>=10', node: '>=20' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@wikimedia/codex@2.3.2',
npm WARN EBADENGINE   required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@wikimedia/codex-design-tokens@2.3.2',
npm WARN EBADENGINE   required: { node: '>=20.19.1', npm: '>=10.8.1' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@wikimedia/codex-icons@2.3.2',
npm WARN EBADENGINE   required: { node: '>=20.19.1', npm: '>=10.8.2' },
npm WARN EBADENGINE   current: { node: 'v20.19.2', npm: '9.2.0' }
npm WARN EBADENGINE }
npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm WARN deprecated abab@2.0.6: Use your platform's native atob() and btoa() methods instead
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
npm WARN deprecated domexception@4.0.0: Use your platform's native DOMException instead
npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
--- stdout ---

added 1341 packages, and audited 1342 packages in 39s

261 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

--- end ---
$ /usr/bin/npm test
--- stderr ---
[baseline-browser-mapping] The data in this module is over two months old.  To ensure accurate Baseline data, please update: `npm i baseline-browser-mapping@latest -D`
[baseline-browser-mapping] The data in this module is over two months old.  To ensure accurate Baseline data, please update: `npm i baseline-browser-mapping@latest -D`
[baseline-browser-mapping] The data in this module is over two months old.  To ensure accurate Baseline data, please update: `npm i baseline-browser-mapping@latest -D`
[baseline-browser-mapping] The data in this module is over two months old.  To ensure accurate Baseline data, please update: `npm i baseline-browser-mapping@latest -D`
PASS modules/ext.growthExperiments.MentorDashboard/store/modules/mentees.test.js
PASS modules/ext.growthExperiments.Homepage.Impact/components/NoEditsDisplay.test.js
PASS modules/ext.growthExperiments.StructuredTask.PreEdit/common/OnboardingDialog.test.js
PASS modules/ext.growthExperiments.StructuredTask.PreEdit/common/MultiPane.test.js
PASS modules/ext.growthExperiments.DataStore/NewcomerTasksStore.test.js
PASS modules/ext.growthExperiments.MentorDashboard/components/MenteeOverview/MenteeOverview.test.js
PASS modules/ext.growthExperiments.StructuredTask.PreEdit/revisetone/QuizPill.test.js
PASS modules/vue-components/CScoreCards.test.js
PASS modules/ext.growthExperiments.StructuredTask.PreEdit/common/OnboardingStepper.test.js
PASS modules/ext.growthExperiments.Homepage.Impact/components/ImpactVue.test.js
PASS modules/ext.growthExperiments.Homepage.Impact/components/TrendChart.test.js
PASS modules/vue-components/CScoreCard.test.js
PASS modules/ext.growthExperiments.StructuredTask.PreEdit/revisetone/ReviseToneOnboarding.test.js
PASS modules/utils/SimpleLevenshtein.test.js
PASS modules/vue-components/CText.test.js
PASS modules/ext.growthExperiments.MentorDashboard/components/PersonalizedPraise/PersonalizedPraise.test.js
PASS modules/ext.growthExperiments.MentorDashboard/components/DataTable/DataTableCellValue.test.js
PASS modules/ext.growthExperiments.Homepage.Impact/components/ErrorDisplay.test.js
PASS modules/ext.growthExperiments.Homepage.Impact/composables/useUserImpact.test.js
PASS modules/ext.growthExperiments.MentorDashboard/components/MenteeOverview/MenteeFiltersForm.test.js
PASS modules/ext.growthExperiments.MentorDashboard/components/PersonalizedPraise/PersonalizedPraiseSettingsForm.test.js

Test Suites: 21 passed, 21 total
Tests:       81 passed, 81 total
Snapshots:   14 passed, 14 total
Time:        9.837 s
Ran all test suites.
npm WARN ERESOLVE overriding peer dependency
npm WARN While resolving: @vue/server-renderer@3.3.4
npm WARN Found: vue@3.2.37
npm WARN node_modules/vue
npm WARN   dev vue@"3.2.37" from the root project
npm WARN   9 more (vue-demi, @vitejs/plugin-vue, @vue/server-renderer, ...)
npm WARN 
npm WARN Could not resolve dependency:
npm WARN peer vue@"3.3.4" from @vue/server-renderer@3.3.4
npm WARN node_modules/@vue/test-utils/node_modules/@vue/server-renderer
npm WARN   optional @vue/server-renderer@"^3.0.1" from @vue/test-utils@2.3.2
npm WARN   node_modules/@vue/test-utils
npm WARN 
npm WARN Conflicting peer dependency: vue@3.3.4
npm WARN node_modules/vue
npm WARN   peer vue@"3.3.4" from @vue/server-renderer@3.3.4
npm WARN   node_modules/@vue/test-utils/node_modules/@vue/server-renderer
npm WARN     optional @vue/server-renderer@"^3.0.1" from @vue/test-utils@2.3.2
npm WARN     node_modules/@vue/test-utils
npm WARN deprecated natives@1.1.6: This module relies on Node.js's internals and will break at some point. Do not use it, and update to graceful-fs@4.x.
npm WARN deprecated har-validator@5.1.5: this library is no longer supported
npm WARN deprecated sourcemap-codec@1.4.8: Please use @jridgewell/sourcemap-codec instead
npm WARN deprecated uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
[baseline-browser-mapping] The data in this module is over two months old.  To ensure accurate Baseline data, please update: `npm i baseline-browser-mapping@latest -D`
--- stdout ---

> test
> npm-run-all test:*


> test:types
> tsc --noEmit && tsc --noEmit -p cypress/tsconfig.json


> test:eslint
> eslint --cache . --max-warnings=0


> test:stylelint
> stylelint --cache "**/*.{css,vue,less}"


> test:i18n
> node-jq '.MessagesDirs.GrowthExperiments[]' extension.json -r | xargs banana-checker --requireLowerCase=0

Checked 10 message directories.

> test:jest
> jest

---------------------------------------------------------------------|---------|----------|---------|---------|---------------------------------------------------------------------------------------
File                                                                 | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s                                                                     
---------------------------------------------------------------------|---------|----------|---------|---------|---------------------------------------------------------------------------------------
All files                                                            |   44.93 |    35.83 |   33.58 |   45.15 |                                                                                       
 ext.growthExperiments.Homepage.Impact                               |    2.91 |        0 |       0 |    2.94 |                                                                                       
  App.vue                                                            |       0 |        0 |       0 |       0 | 3-105                                                                                 
  constants.js                                                       |     100 |      100 |     100 |     100 |                                                                                       
  init.js                                                            |       0 |        0 |       0 |       0 | 1-165                                                                                 
 ext.growthExperiments.Homepage.Impact/components                    |   70.49 |    70.32 |   67.01 |   70.97 |                                                                                       
  ArticlesList.vue                                                   |   77.77 |      100 |      20 |   77.77 | 18,41-46                                                                              
  ArticlesListItem.vue                                               |   41.86 |        0 |       0 |      45 | 44-52,83-165                                                                          
  ErrorDisplay.vue                                                   |     100 |      100 |     100 |     100 |                                                                                       
  ErrorDisplaySummary.vue                                            |       0 |      100 |       0 |       0 | 3-58                                                                                  
  Impact.vue                                                         |   97.43 |    86.36 |    92.3 |   97.43 | 112                                                                                   
  ImpactSummary.vue                                                  |       0 |        0 |       0 |       0 | 1-48                                                                                  
  InfoBoxes.vue                                                      |       0 |        0 |       0 |       0 | 1-83                                                                                  
  LayoutWrapper.vue                                                  |       0 |      100 |       0 |       0 | 8-34                                                                                  
  NoEditsDisplay.vue                                                 |   96.36 |    89.18 |     100 |   96.36 | 60-61                                                                                 
  RecentActivity.vue                                                 |   97.14 |       50 |     100 |   97.14 | 63                                                                                    
  StreakGraph.vue                                                    |   95.23 |      100 |    87.5 |   95.23 | 25                                                                                    
  TrendChart.vue                                                     |     100 |      100 |     100 |     100 |                                                                                       
 ext.growthExperiments.Homepage.Impact/composables                   |   73.21 |    72.72 |   78.94 |   71.69 |                                                                                       
  useMWRestApi.js                                                    |       0 |        0 |       0 |       0 | 1-35                                                                                  
  useUserImpact.js                                                   |   97.61 |    88.88 |     100 |   97.43 | 93                                                                                    
 ext.growthExperiments.MentorDashboard                               |       0 |        0 |       0 |       0 |                                                                                       
  Discovery.js                                                       |       0 |        0 |       0 |       0 | 2-12                                                                                  
  PersonalizedPraisePostEdit.js                                      |       0 |        0 |       0 |       0 | 1-18                                                                                  
  init.js                                                            |       0 |        0 |       0 |       0 | 1-53                                                                                  
 ext.growthExperiments.MentorDashboard/MentorTools                   |       0 |        0 |       0 |       0 |                                                                                       
  AwaySettingsDialog.js                                              |       0 |        0 |       0 |       0 | 1-108                                                                                 
  MentorMessageChangeDialog.js                                       |       0 |        0 |       0 |       0 | 10-103                                                                                
  MentorTools.js                                                     |       0 |        0 |       0 |       0 | 2-223                                                                                 
  MentorToolsEllipsisMenu.js                                         |       0 |        0 |       0 |       0 | 1-63                                                                                  
 ext.growthExperiments.MentorDashboard/components/CNumberInput       |   66.66 |    55.55 |   23.07 |   65.51 |                                                                                       
  CNumberInput.vue                                                   |   66.66 |    55.55 |   23.07 |   65.51 | 99,102,105,108,129,148-164                                                            
 ext.growthExperiments.MentorDashboard/components/DataTable          |      47 |        0 |    5.26 |   52.38 |                                                                                       
  DataTable.vue                                                      |   32.25 |        0 |       0 |   39.21 | 37-89,100-103,121-164                                                                 
  DataTableCellLink.vue                                              |      75 |      100 |       0 |      75 | 36-41                                                                                 
  DataTableCellValue.vue                                             |     100 |      100 |     100 |     100 |                                                                                       
  DataTableLimit.vue                                                 |      50 |        0 |       0 |   53.33 | 24-31,49-55                                                                           
  DataTablePagination.vue                                            |      50 |        0 |       0 |      50 | 31-38,53-79                                                                           
 ext.growthExperiments.MentorDashboard/components/HorizontalDivider  |     100 |      100 |     100 |     100 |                                                                                       
  HorizontalDivider.vue                                              |     100 |      100 |     100 |     100 |                                                                                       
 ext.growthExperiments.MentorDashboard/components/MenteeOverview     |   66.52 |    41.46 |   37.36 |   66.81 |                                                                                       
  DataTableCellMentee.vue                                            |   60.86 |        0 |       0 |   60.86 | 27-45,74-82                                                                           
  LegendBox.vue                                                      |   73.33 |      100 |       0 |   73.33 | 21,43-45                                                                              
  MenteeFilters.vue                                                  |   40.74 |        0 |       0 |   40.74 | 28-64,82-89                                                                           
  MenteeFiltersForm.vue                                              |   75.47 |       50 |   56.52 |   75.47 | 87-105,160-175,191,206,219                                                            
  MenteeOverview.vue                                                 |    72.5 |    58.82 |    52.5 |   73.41 | 27-99,180-187,219-231,301-326                                                         
  MenteeSearch.vue                                                   |   45.45 |        0 |       0 |   45.45 | 22-43,60-66                                                                           
  NoResults.vue                                                      |   84.61 |        0 |       0 |   84.61 | 53-54                                                                                 
 ext.growthExperiments.MentorDashboard/components/PersonalizedPraise |   56.65 |    48.48 |   25.58 |   57.39 |                                                                                       
  NoResults.vue                                                      |     100 |      100 |     100 |     100 |                                                                                       
  PersonalizedPraise.vue                                             |   81.25 |    91.66 |   58.82 |   81.25 | 65-80,123,138-148                                                                     
  PersonalizedPraisePagination.vue                                   |   45.45 |        0 |       0 |   45.45 | 33-43,58-92                                                                           
  PersonalizedPraiseSettings.vue                                     |   68.96 |       50 |   33.33 |   68.96 | 44-54,78,90-100                                                                       
  PersonalizedPraiseSettingsForm.vue                                 |   70.73 |    68.18 |   44.44 |   70.73 | 67-70,88,144-164,180-185,200,218                                                      
  SkipMenteeDialog.vue                                               |   26.31 |        0 |       0 |   28.57 | 34-70,87-136                                                                          
  UserCard.vue                                                       |   34.04 |        0 |       0 |   34.04 | 33-123,147-172                                                                        
 ext.growthExperiments.MentorDashboard/logger                        |       0 |        0 |       0 |       0 |                                                                                       
  Logger.js                                                          |       0 |        0 |       0 |       0 | 5-41                                                                                  
 ext.growthExperiments.MentorDashboard/plugins                       |       0 |        0 |       0 |       0 |                                                                                       
  logger.js                                                          |       0 |        0 |       0 |       0 | 9-15                                                                                  
 ext.growthExperiments.MentorDashboard/store                         |   26.66 |        0 |    6.89 |   26.96 |                                                                                       
  MenteeOverviewApi.js                                               |   28.91 |        0 |    6.89 |   29.26 | 32,37-52,56-71,83,87,91,95,99,103-110,115-118,122-128,134-145,150-161,167-178,185-186 
  index.js                                                           |       0 |      100 |     100 |       0 | 1-16                                                                                  
 ext.growthExperiments.MentorDashboard/store/modules                 |   44.56 |    49.23 |   25.39 |      44 |                                                                                       
  mentees-search.js                                                  |       0 |        0 |       0 |       0 | 2-50                                                                                  
  mentees.js                                                         |   66.36 |    67.39 |   41.66 |   66.01 | 31,61-63,71-74,107,121,128,144,147,150,200-201,217,226,235-243,253-286                
  praiseworthy-mentees.js                                            |       0 |        0 |       0 |       0 | 1-101                                                                                 
  user-preferences.js                                                |   52.94 |       50 |      20 |   52.94 | 12,21,27-32,41                                                                        
 ext.growthExperiments.MentorDashboard/validators                    |     100 |      100 |     100 |     100 |                                                                                       
  align-text.validator.js                                            |     100 |      100 |     100 |     100 |                                                                                       
 ext.growthExperiments.StructuredTask.PreEdit                        |       0 |        0 |       0 |       0 |                                                                                       
  App.vue                                                            |       0 |      100 |       0 |       0 | 1-31                                                                                  
  StructuredTaskOnboardingContent.js                                 |       0 |        0 |       0 |       0 | 2-46                                                                                  
  StructuredTaskOnboardingDialog.js                                  |       0 |        0 |       0 |       0 | 1-237                                                                                 
  index.js                                                           |       0 |        0 |       0 |       0 | 1-282                                                                                 
 ext.growthExperiments.StructuredTask.PreEdit/addimage               |       0 |        0 |       0 |       0 |                                                                                       
  AddImageOnboardingContent.js                                       |       0 |        0 |       0 |       0 | 1-166                                                                                 
 ext.growthExperiments.StructuredTask.PreEdit/addlink                |       0 |        0 |       0 |       0 |                                                                                       
  AddLinkOnboardingContent.js                                        |       0 |        0 |       0 |       0 | 1-156                                                                                 
 ext.growthExperiments.StructuredTask.PreEdit/addsectionimage        |       0 |        0 |       0 |       0 |                                                                                       
  AddSectionImageOnboardingContent.js                                |       0 |        0 |       0 |       0 | 1-79                                                                                  
 ext.growthExperiments.StructuredTask.PreEdit/common                 |   86.44 |    69.52 |   85.45 |   91.25 |                                                                                       
  MultiPane.vue                                                      |   92.64 |    83.33 |     100 |   92.18 | 98,110,117,124,127                                                                    
  OnboardingDialog.vue                                               |    92.5 |    91.66 |   82.75 |    92.3 | 123,153-154,221-223,235                                                               
  OnboardingStepper.vue                                              |   55.17 |     30.3 |    62.5 |   83.33 | 40-41,44                                                                              
 ext.growthExperiments.StructuredTask.PreEdit/dev/demos              |       0 |        0 |       0 |       0 |                                                                                       
  CommonComponentsDemo.vue                                           |       0 |        0 |       0 |       0 | 1-93                                                                                  
  ReviseToneQuizPillDemo.vue                                         |       0 |        0 |       0 |       0 | 4-63                                                                                  
 ext.growthExperiments.StructuredTask.PreEdit/revisetone             |   62.92 |    56.14 |   39.02 |   63.31 |                                                                                       
  NumberIcon.vue                                                     |     100 |      100 |     100 |     100 |                                                                                       
  QuizGame.vue                                                       |   57.69 |      100 |       0 |   57.69 | 20-40,74-83                                                                           
  QuizPill.vue                                                       |   97.95 |    90.62 |      90 |   97.77 | 129                                                                                   
  ReviseToneOnboarding.vue                                           |   55.38 |    16.66 |      20 |   59.01 | 12-22,51,58,63,70,92-97,126-154                                                       
  ReviseToneQuizLauncher.js                                          |       0 |        0 |       0 |       0 | 1-60                                                                                  
 utils                                                               |   20.32 |    10.83 |   14.28 |   18.64 |                                                                                       
  HelpPanelLogger.js                                                 |       0 |        0 |       0 |       0 | 7-238                                                                                 
  IconUtils.js                                                       |       0 |        0 |       0 |       0 | 1-30                                                                                  
  SimpleLevenshtein.js                                               |     100 |      100 |     100 |     100 |                                                                                       
  Utils.js                                                           |    9.85 |     6.97 |    9.52 |      10 | 13-188,219-248                                                                        
  filters.js                                                         |       0 |      100 |       0 |       0 | 14-17                                                                                 
 vue-components                                                      |   72.41 |    60.71 |   58.92 |   73.73 |                                                                                       
  CList.vue                                                          |   53.33 |        0 |   33.33 |   53.33 | 22-30                                                                                 
  CListItem.vue                                                      |   85.71 |      100 |       0 |   85.71 | 21                                                                                    
  CScoreCard.vue                                                     |   93.33 |    78.57 |   77.77 |    93.1 | 139-141                                                                               
  CScoreCards.vue                                                    |   56.66 |    56.25 |   54.83 |   56.66 | 98-101,112,130-193,199,262-292,337-344                                                
  CSparkline.vue                                                     |   81.08 |       50 |      50 |    90.9 | 63-67,76                                                                              
  CText.vue                                                          |     100 |      100 |     100 |     100 |                                                                                       
 vue-components/directives                                           |       0 |        0 |       0 |       0 |                                                                                       
  click-outside.directive.js                                         |       0 |        0 |       0 |       0 | 1-25                                                                                  
 vue-components/plugins                                              |       0 |      100 |       0 |       0 |                                                                                       
  logger.js                                                          |       0 |      100 |       0 |       0 | 10-20                                                                                 
---------------------------------------------------------------------|---------|----------|---------|---------|---------------------------------------------------------------------------------------

> test:doc
> cd documentation/frontend && npm ci && npm run test


added 319 packages, and audited 320 packages in 4s

34 packages are looking for funding
  run `npm fund` for details

16 vulnerabilities (1 low, 7 moderate, 6 high, 2 critical)

To address issues that do not require attention, run:
  npm audit fix

To address all issues, run:
  npm audit fix --force

Run `npm audit` for details.

> growthexperiments-docs@1.0.0 test
> npm run lint && vitest run --coverage


> growthexperiments-docs@1.0.0 lint
> eslint .


 RUN  v0.32.0 /src/repo/documentation/frontend
      Coverage enabled with v8

 ✓ components/FilterDialog.test.js  (5 tests) 196ms
 ✓ components/MultiPane.test.js  (10 tests) 210ms
 ✓ components/OnboardingDialog.test.js  (14 tests) 491ms
 ✓ components/OnboardingStepper.test.js  (5 tests) 84ms
 ✓ components/AddLinkDialog.test.js  (4 tests) 260ms
 ✓ component-demos/example-component/ExampleComponent.test.js  (2 tests) 70ms
 ✓ store/example-store/counter.test.js  (1 test) 8ms

 Test Files  7 passed (7)
      Tests  41 passed (41)
   Start at  05:34:06
   Duration  5.49s (transform 456ms, setup 213ms, collect 2.91s, tests 1.32s, environment 4.31s, prepare 1.44s)

 % Coverage report from v8
-------------------|---------|----------|---------|---------|-------------------
File               | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s 
-------------------|---------|----------|---------|---------|-------------------
All files          |   78.16 |    91.17 |   63.88 |   78.16 |                   
 ...mageDialog.vue |       0 |        0 |       0 |       0 | 1-291             
 AddLinkDialog.vue |     100 |      100 |      20 |     100 |                   
 FilterDialog.vue  |     100 |      100 |      60 |     100 |                   
 MultiPane.vue     |   97.79 |    87.87 |     100 |   97.79 | 105,112,120-121   
 ...dingDialog.vue |   98.58 |    95.45 |   57.14 |   98.58 | 215-216,247-249   
 ...ingStepper.vue |     100 |      100 |     100 |     100 |                   
-------------------|---------|----------|---------|---------|-------------------

--- end ---
{"1112659": {"source": 1112659, "name": "tar", "dependency": "tar", "title": "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal", "url": "https://github.com/advisories/GHSA-34x7-hfp2-rc4v", "severity": "high", "cwe": ["CWE-22", "CWE-59"], "cvss": {"score": 8.2, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N"}, "range": "<7.5.7"}}
Upgrading n:tar from 7.5.5 -> 7.5.7
$ package-lock-lint /src/repo/package-lock.json
--- stdout ---
Checking /src/repo/package-lock.json

--- end ---
build: Updating tar to 7.5.7

* https://github.com/advisories/GHSA-34x7-hfp2-rc4v

$ git add .
--- stdout ---

--- end ---
$ git commit -F /tmp/tmp3szfvll2
--- stdout ---
[master 88df465] build: Updating tar to 7.5.7
 1 file changed, 3 insertions(+), 3 deletions(-)

--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From 88df465c088e6e3a9374427730e0e3faf2a90e14 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Thu, 29 Jan 2026 05:34:13 +0000
Subject: [PATCH] build: Updating tar to 7.5.7

* https://github.com/advisories/GHSA-34x7-hfp2-rc4v

Change-Id: Ic92c6a6ae5a5cce674c6e9e925e2f21e5cc786b4
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index fcccae3..df22a28 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17280,9 +17280,9 @@
 			}
 		},
 		"node_modules/tar": {
-			"version": "7.5.5",
-			"resolved": "https://registry.npmjs.org/tar/-/tar-7.5.5.tgz",
-			"integrity": "sha512-ocjwSUBo2V8ExKxy9FH6iROIsK60OCW//h14MFYpivNSYIj7ntgm35ijGT82Jl//xwbxBhIYXkfAovjtVm9nrA==",
+			"version": "7.5.7",
+			"resolved": "https://registry.npmjs.org/tar/-/tar-7.5.7.tgz",
+			"integrity": "sha512-fov56fJiRuThVFXD6o6/Q354S7pnWMJIVlDBYijsTNx6jKSE4pvrDTs6lUnmGvNyfJwFQQwWy3owKz1ucIhveQ==",
 			"dev": true,
 			"dependencies": {
 				"@isaacs/fs-minipass": "^4.0.0",
-- 
2.47.3


--- end ---

composer dependencies

Development dependencies

npm dependencies

Development dependencies

Logs

Source code is licensed under the AGPL.