mediawiki/extensions/MediaUploader (main)

sourcepatches
From e9769ae74140f571da7ea2e50ce955b6c0d4865f Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Sun, 15 Jun 2025 11:29:26 +0000
Subject: [PATCH] build: Updating brace-expansion to 1.1.12, 2.0.2

* https://github.com/advisories/GHSA-v6h2-p8h4-qcjw

Change-Id: I5bc9c92f6923472b9c6013acf08c3fb9c3d20ee1
---
 package-lock.json | 36 ++++++++++++++++++------------------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 3b9381f..d0a06ad 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -526,9 +526,9 @@
 			}
 		},
 		"node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": {
-			"version": "2.0.1",
-			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-			"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+			"version": "2.0.2",
+			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+			"integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
 			"dev": true,
 			"dependencies": {
 				"balanced-match": "^1.0.0"
@@ -773,9 +773,9 @@
 			"dev": true
 		},
 		"node_modules/brace-expansion": {
-			"version": "1.1.11",
-			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
-			"integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
+			"version": "1.1.12",
+			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+			"integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
 			"dev": true,
 			"dependencies": {
 				"balanced-match": "^1.0.0",
@@ -1677,9 +1677,9 @@
 			}
 		},
 		"node_modules/eslint-plugin-n/node_modules/brace-expansion": {
-			"version": "2.0.1",
-			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-			"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+			"version": "2.0.2",
+			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+			"integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
 			"dev": true,
 			"dependencies": {
 				"balanced-match": "^1.0.0"
@@ -5615,9 +5615,9 @@
 			},
 			"dependencies": {
 				"brace-expansion": {
-					"version": "2.0.1",
-					"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-					"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+					"version": "2.0.2",
+					"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+					"integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
 					"dev": true,
 					"requires": {
 						"balanced-match": "^1.0.0"
@@ -5799,9 +5799,9 @@
 			"dev": true
 		},
 		"brace-expansion": {
-			"version": "1.1.11",
-			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
-			"integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
+			"version": "1.1.12",
+			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+			"integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
 			"dev": true,
 			"requires": {
 				"balanced-match": "^1.0.0",
@@ -6477,9 +6477,9 @@
 			},
 			"dependencies": {
 				"brace-expansion": {
-					"version": "2.0.1",
-					"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-					"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+					"version": "2.0.2",
+					"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+					"integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
 					"dev": true,
 					"requires": {
 						"balanced-match": "^1.0.0"
-- 
2.39.5

$ date
--- stdout ---
Sun Jun 15 11:28:54 UTC 2025

--- end ---
$ git clone file:///srv/git/mediawiki-extensions-MediaUploader.git repo --depth=1 -b master
--- stderr ---
Cloning into 'repo'...
--- stdout ---

--- end ---
$ git config user.name libraryupgrader
--- stdout ---

--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---

--- end ---
$ git submodule update --init
--- stdout ---

--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.

--- end ---
$ git show-ref refs/heads/master
--- stdout ---
e59ee12ef70e9c1011d53f9b41d0ee481c1956bc refs/heads/master

--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "brace-expansion": {
      "name": "brace-expansion",
      "severity": "low",
      "isDirect": false,
      "via": [
        {
          "source": 1105443,
          "name": "brace-expansion",
          "dependency": "brace-expansion",
          "title": "brace-expansion Regular Expression Denial of Service vulnerability",
          "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw",
          "severity": "low",
          "cwe": [
            "CWE-400"
          ],
          "cvss": {
            "score": 3.1,
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
          },
          "range": ">=1.0.0 <=1.1.11"
        },
        {
          "source": 1105444,
          "name": "brace-expansion",
          "dependency": "brace-expansion",
          "title": "brace-expansion Regular Expression Denial of Service vulnerability",
          "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw",
          "severity": "low",
          "cwe": [
            "CWE-400"
          ],
          "cvss": {
            "score": 3.1,
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
          },
          "range": ">=2.0.0 <=2.0.1"
        }
      ],
      "effects": [],
      "range": "1.0.0 - 1.1.11 || 2.0.0 - 2.0.1",
      "nodes": [
        "node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion",
        "node_modules/brace-expansion",
        "node_modules/eslint-plugin-n/node_modules/brace-expansion"
      ],
      "fixAvailable": true
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 1,
      "moderate": 0,
      "high": 0,
      "critical": 0,
      "total": 1
    },
    "dependencies": {
      "prod": 1,
      "dev": 438,
      "optional": 0,
      "peer": 1,
      "peerOptional": 0,
      "total": 438
    }
  }
}

--- end ---
$ /usr/bin/composer install
--- stderr ---
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information
Updating dependencies
Lock file operations: 40 installs, 0 updates, 0 removals
  - Locking composer/pcre (3.3.2)
  - Locking composer/semver (3.4.3)
  - Locking composer/spdx-licenses (1.5.9)
  - Locking composer/xdebug-handler (3.0.5)
  - Locking dealerdirect/phpcodesniffer-composer-installer (v1.0.0)
  - Locking doctrine/deprecations (1.1.5)
  - Locking felixfbecker/advanced-json-rpc (v3.2.1)
  - Locking justinrainbow/json-schema (5.3.0)
  - Locking mediawiki/mediawiki-codesniffer (v47.0.0)
  - Locking mediawiki/mediawiki-phan-config (0.15.1)
  - Locking mediawiki/minus-x (1.1.3)
  - Locking mediawiki/phan-taint-check-plugin (6.1.0)
  - Locking microsoft/tolerant-php-parser (v0.1.2)
  - Locking netresearch/jsonmapper (v4.5.0)
  - Locking phan/phan (5.4.5)
  - Locking php-parallel-lint/php-console-color (v1.0.1)
  - Locking php-parallel-lint/php-console-highlighter (v1.0.0)
  - Locking php-parallel-lint/php-parallel-lint (v1.4.0)
  - Locking phpcsstandards/phpcsextra (1.2.1)
  - Locking phpcsstandards/phpcsutils (1.0.12)
  - Locking phpdocumentor/reflection-common (2.2.0)
  - Locking phpdocumentor/reflection-docblock (5.6.2)
  - Locking phpdocumentor/type-resolver (1.10.0)
  - Locking phpstan/phpdoc-parser (2.1.0)
  - Locking psr/container (2.0.2)
  - Locking psr/log (3.0.2)
  - Locking sabre/event (5.1.7)
  - Locking squizlabs/php_codesniffer (3.12.2)
  - Locking symfony/console (v7.3.0)
  - Locking symfony/deprecation-contracts (v3.6.0)
  - Locking symfony/polyfill-ctype (v1.32.0)
  - Locking symfony/polyfill-intl-grapheme (v1.32.0)
  - Locking symfony/polyfill-intl-normalizer (v1.32.0)
  - Locking symfony/polyfill-mbstring (v1.32.0)
  - Locking symfony/polyfill-php80 (v1.32.0)
  - Locking symfony/service-contracts (v3.6.0)
  - Locking symfony/string (v7.3.0)
  - Locking symfony/yaml (v5.4.45)
  - Locking tysonandre/var_representation_polyfill (0.1.3)
  - Locking webmozart/assert (1.11.0)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 40 installs, 0 updates, 0 removals
    0 [>---------------------------]    0 [->--------------------------]
  - Installing squizlabs/php_codesniffer (3.12.2): Extracting archive
  - Installing dealerdirect/phpcodesniffer-composer-installer (v1.0.0): Extracting archive
  - Installing composer/pcre (3.3.2): Extracting archive
  - Installing justinrainbow/json-schema (5.3.0): Extracting archive
  - Installing symfony/polyfill-php80 (v1.32.0): Extracting archive
  - Installing phpcsstandards/phpcsutils (1.0.12): Extracting archive
  - Installing phpcsstandards/phpcsextra (1.2.1): Extracting archive
  - Installing symfony/polyfill-mbstring (v1.32.0): Extracting archive
  - Installing composer/spdx-licenses (1.5.9): Extracting archive
  - Installing composer/semver (3.4.3): Extracting archive
  - Installing mediawiki/mediawiki-codesniffer (v47.0.0): Extracting archive
  - Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive
  - Installing symfony/polyfill-intl-normalizer (v1.32.0): Extracting archive
  - Installing symfony/polyfill-intl-grapheme (v1.32.0): Extracting archive
  - Installing symfony/polyfill-ctype (v1.32.0): Extracting archive
  - Installing symfony/string (v7.3.0): Extracting archive
  - Installing symfony/deprecation-contracts (v3.6.0): Extracting archive
  - Installing psr/container (2.0.2): Extracting archive
  - Installing symfony/service-contracts (v3.6.0): Extracting archive
  - Installing symfony/console (v7.3.0): Extracting archive
  - Installing sabre/event (5.1.7): Extracting archive
  - Installing netresearch/jsonmapper (v4.5.0): Extracting archive
  - Installing microsoft/tolerant-php-parser (v0.1.2): Extracting archive
  - Installing webmozart/assert (1.11.0): Extracting archive
  - Installing phpstan/phpdoc-parser (2.1.0): Extracting archive
  - Installing phpdocumentor/reflection-common (2.2.0): Extracting archive
  - Installing doctrine/deprecations (1.1.5): Extracting archive
  - Installing phpdocumentor/type-resolver (1.10.0): Extracting archive
  - Installing phpdocumentor/reflection-docblock (5.6.2): Extracting archive
  - Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive
  - Installing psr/log (3.0.2): Extracting archive
  - Installing composer/xdebug-handler (3.0.5): Extracting archive
  - Installing phan/phan (5.4.5): Extracting archive
  - Installing mediawiki/phan-taint-check-plugin (6.1.0): Extracting archive
  - Installing mediawiki/mediawiki-phan-config (0.15.1): Extracting archive
  - Installing mediawiki/minus-x (1.1.3): Extracting archive
  - Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive
  - Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive
  - Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive
  - Installing symfony/yaml (v5.4.45): Extracting archive
  0/38 [>---------------------------]   0%
 20/38 [==============>-------------]  52%
 32/38 [=======================>----]  84%
 38/38 [============================] 100%
1 package suggestions were added by new dependencies, use `composer suggest` to see details.
Generating autoload files
17 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---
PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils

--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "brace-expansion": {
      "name": "brace-expansion",
      "severity": "low",
      "isDirect": false,
      "via": [
        {
          "source": 1105443,
          "name": "brace-expansion",
          "dependency": "brace-expansion",
          "title": "brace-expansion Regular Expression Denial of Service vulnerability",
          "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw",
          "severity": "low",
          "cwe": [
            "CWE-400"
          ],
          "cvss": {
            "score": 3.1,
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
          },
          "range": ">=1.0.0 <=1.1.11"
        },
        {
          "source": 1105444,
          "name": "brace-expansion",
          "dependency": "brace-expansion",
          "title": "brace-expansion Regular Expression Denial of Service vulnerability",
          "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw",
          "severity": "low",
          "cwe": [
            "CWE-400"
          ],
          "cvss": {
            "score": 3.1,
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
          },
          "range": ">=2.0.0 <=2.0.1"
        }
      ],
      "effects": [],
      "range": "1.0.0 - 1.1.11 || 2.0.0 - 2.0.1",
      "nodes": [
        "node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion",
        "node_modules/brace-expansion",
        "node_modules/eslint-plugin-n/node_modules/brace-expansion"
      ],
      "fixAvailable": true
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 1,
      "moderate": 0,
      "high": 0,
      "critical": 0,
      "total": 1
    },
    "dependencies": {
      "prod": 1,
      "dev": 438,
      "optional": 0,
      "peer": 1,
      "peerOptional": 0,
      "total": 438
    }
  }
}

--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
{
  "added": 438,
  "removed": 0,
  "changed": 0,
  "audited": 439,
  "funding": 97,
  "audit": {
    "auditReportVersion": 2,
    "vulnerabilities": {
      "brace-expansion": {
        "name": "brace-expansion",
        "severity": "low",
        "isDirect": false,
        "via": [
          {
            "source": 1105443,
            "name": "brace-expansion",
            "dependency": "brace-expansion",
            "title": "brace-expansion Regular Expression Denial of Service vulnerability",
            "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw",
            "severity": "low",
            "cwe": [
              "CWE-400"
            ],
            "cvss": {
              "score": 3.1,
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
            },
            "range": ">=1.0.0 <=1.1.11"
          },
          {
            "source": 1105444,
            "name": "brace-expansion",
            "dependency": "brace-expansion",
            "title": "brace-expansion Regular Expression Denial of Service vulnerability",
            "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw",
            "severity": "low",
            "cwe": [
              "CWE-400"
            ],
            "cvss": {
              "score": 3.1,
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
            },
            "range": ">=2.0.0 <=2.0.1"
          }
        ],
        "effects": [],
        "range": "1.0.0 - 1.1.11 || 2.0.0 - 2.0.1",
        "nodes": [
          "",
          "",
          ""
        ],
        "fixAvailable": true
      }
    },
    "metadata": {
      "vulnerabilities": {
        "info": 0,
        "low": 1,
        "moderate": 0,
        "high": 0,
        "critical": 0,
        "total": 1
      },
      "dependencies": {
        "prod": 1,
        "dev": 438,
        "optional": 0,
        "peer": 1,
        "peerOptional": 0,
        "total": 438
      }
    }
  }
}

--- end ---
{"added": 438, "removed": 0, "changed": 0, "audited": 439, "funding": 97, "audit": {"auditReportVersion": 2, "vulnerabilities": {"brace-expansion": {"name": "brace-expansion", "severity": "low", "isDirect": false, "via": [{"source": 1105443, "name": "brace-expansion", "dependency": "brace-expansion", "title": "brace-expansion Regular Expression Denial of Service vulnerability", "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw", "severity": "low", "cwe": ["CWE-400"], "cvss": {"score": 3.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=1.0.0 <=1.1.11"}, {"source": 1105444, "name": "brace-expansion", "dependency": "brace-expansion", "title": "brace-expansion Regular Expression Denial of Service vulnerability", "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw", "severity": "low", "cwe": ["CWE-400"], "cvss": {"score": 3.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=2.0.0 <=2.0.1"}], "effects": [], "range": "1.0.0 - 1.1.11 || 2.0.0 - 2.0.1", "nodes": ["", "", ""], "fixAvailable": true}}, "metadata": {"vulnerabilities": {"info": 0, "low": 1, "moderate": 0, "high": 0, "critical": 0, "total": 1}, "dependencies": {"prod": 1, "dev": 438, "optional": 0, "peer": 1, "peerOptional": 0, "total": 438}}}}
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---

added 438 packages, and audited 439 packages in 5s

97 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stdout ---

added 438 packages, and audited 439 packages in 5s

97 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

--- end ---
$ /usr/bin/npm test
--- stdout ---

> test
> grunt test

Running "eslint:all" (eslint) task

/src/repo/resources/controller/uw.controller.Deed.js
  44:4  warning  'deedController' is never reassigned. Use 'const' instead  prefer-const
  52:3  warning  'valid' is never reassigned. Use 'const' instead           prefer-const
  57:4  warning  Mixed spaces and tabs                                      no-mixed-spaces-and-tabs
  57:6  warning  Expected no linebreak before this expression               implicit-arrow-linebreak
  58:3  warning  Mixed spaces and tabs                                      no-mixed-spaces-and-tabs

/src/repo/resources/controller/uw.controller.Details.js
   65:4  warning  'serialized' is never reassigned. Use 'const' instead     prefer-const
   96:4  warning  'invalidStates' is never reassigned. Use 'const' instead  prefer-const
   97:4  warning  'invalids' is never reassigned. Use 'const' instead       prefer-const
   98:4  warning  'valids' is never reassigned. Use 'const' instead         prefer-const
  153:3  warning  Prefer .then to .done                                     no-jquery/no-done-fail
  238:4  warning  '$message' is never reassigned. Use 'const' instead       prefer-const
  239:4  warning  '$ul' is never reassigned. Use 'const' instead            prefer-const

/src/repo/resources/controller/uw.controller.Step.js
  223:7  warning  'okCount' is never reassigned. Use 'const' instead   prefer-const
  233:3  warning  '$buttons' is never reassigned. Use 'const' instead  prefer-const
  324:4  warning  'copy' is never reassigned. Use 'const' instead      prefer-const

/src/repo/resources/controller/uw.controller.Tutorial.js
  63:3  warning  Prefer .then to .done  no-jquery/no-done-fail
  63:3  warning  Prefer .then to .fail  no-jquery/no-done-fail

/src/repo/resources/controller/uw.controller.Upload.js
   69:4  warning  'max' is never reassigned. Use 'const' instead            prefer-const
   71:3  warning  'haveUploads' is never reassigned. Use 'const' instead    prefer-const
   72:3  warning  'fewerThanMax' is never reassigned. Use 'const' instead   prefer-const
  223:3  warning  'upload' is never reassigned. Use 'const' instead         prefer-const
  251:4  warning  'uploadObjs' is never reassigned. Use 'const' instead     prefer-const
  252:4  warning  'controller' is never reassigned. Use 'const' instead     prefer-const
  307:4  warning  'actualMaxSize' is never reassigned. Use 'const' instead  prefer-const
  311:4  warning  'filename' is never reassigned. Use 'const' instead       prefer-const
  312:4  warning  'basename' is never reassigned. Use 'const' instead       prefer-const
  335:3  warning  'extension' is never reassigned. Use 'const' instead      prefer-const

/src/repo/resources/deed/uw.deed.External.js
  66:10  warning  ES2015 'Object.assign' method is forbidden  es-x/no-object-assign

/src/repo/resources/deed/uw.deed.OwnWork.js
   29:7   warning  'deed' is never reassigned. Use 'const' instead                 prefer-const
   88:3   warning  'deed' is never reassigned. Use 'const' instead                 prefer-const
   89:3   warning  'languageCode' is never reassigned. Use 'const' instead         prefer-const
   91:3   warning  'defaultLicense' is never reassigned. Use 'const' instead       prefer-const
   92:3   warning  'defaultLicConfig' is never reassigned. Use 'const' instead     prefer-const
   99:3   warning  '$defaultLicenseLink' is never reassigned. Use 'const' instead  prefer-const
  125:3   warning  '$crossfader' is never reassigned. Use 'const' instead          prefer-const
  128:3   warning  '$customDiv' is never reassigned. Use 'const' instead           prefer-const
  136:3   warning  'crossfaderWidget' is never reassigned. Use 'const' instead     prefer-const
  148:3   warning  '$formFields' is never reassigned. Use 'const' instead          prefer-const
  152:3   warning  '$toggler' is never reassigned. Use 'const' instead             prefer-const
  192:7   warning  'author' is never reassigned. Use 'const' instead               prefer-const
  200:3   warning  'userPageTitle' is never reassigned. Use 'const' instead        prefer-const
  215:10  warning  ES2015 'Object.assign' method is forbidden                      es-x/no-object-assign
  255:16  warning  'ownWork' is never reassigned. Use 'const' instead              prefer-const
  277:3   warning  Prefer .then to .done                                           no-jquery/no-done-fail
  297:3   warning  Prefer .then to .done                                           no-jquery/no-done-fail

/src/repo/resources/deed/uw.deed.ThirdParty.js
  178:10  warning  ES2015 'Object.assign' method is forbidden  es-x/no-object-assign

/src/repo/resources/details/uw.CategoriesDetailsWidget.js
   87:3  warning  Mixed spaces and tabs                                  no-mixed-spaces-and-tabs
   87:5  warning  Expected no linebreak before this expression           implicit-arrow-linebreak
   88:2  warning  Mixed spaces and tabs                                  no-mixed-spaces-and-tabs
   98:3  warning  'categories' is never reassigned. Use 'const' instead  prefer-const
  128:3  warning  Mixed spaces and tabs                                  no-mixed-spaces-and-tabs
  128:5  warning  Expected no linebreak before this expression           implicit-arrow-linebreak
  129:2  warning  Mixed spaces and tabs                                  no-mixed-spaces-and-tabs

/src/repo/resources/details/uw.DropdownWidget.js
  13:12  warning  ES2015 'Object.assign' method is forbidden  es-x/no-object-assign

/src/repo/resources/details/uw.LocationDetailsWidget.js
   12:17  warning  ES2015 'Object.assign' method is forbidden             es-x/no-object-assign
   71:3   warning  Prefer .then to .done                                  no-jquery/no-done-fail
   84:3   warning  Prefer .then to .done                                  no-jquery/no-done-fail
  115:7   warning  'errors' is never reassigned. Use 'const' instead      prefer-const
  116:4   warning  'serialized' is never reassigned. Use 'const' instead  prefer-const
  117:4   warning  'parsed' is never reassigned. Use 'const' instead      prefer-const
  165:4   warning  'serialized' is never reassigned. Use 'const' instead  prefer-const
  194:4   warning  'result' is never reassigned. Use 'const' instead      prefer-const
  210:4   warning  'result' is never reassigned. Use 'const' instead      prefer-const
  211:4   warning  'serialized' is never reassigned. Use 'const' instead  prefer-const
  258:7   warning  'sign' is never reassigned. Use 'const' instead        prefer-const
  268:3   warning  'parts' is never reassigned. Use 'const' instead       prefer-const

/src/repo/resources/details/uw.MultipleLanguageInputWidget.js
   16:17  warning  ES2015 'Object.assign' method is forbidden                  es-x/no-object-assign
   50:26  warning  ES2015 'Object.assign' method is forbidden                  es-x/no-object-assign
   60:7   warning  'allLanguages' is never reassigned. Use 'const' instead     prefer-const
   61:4   warning  'unusedLanguages' is never reassigned. Use 'const' instead  prefer-const
   73:16  warning  ES2015 'Object.assign' method is forbidden                  es-x/no-object-assign
   78:12  warning  ES2015 'Object.assign' method is forbidden                  es-x/no-object-assign
   82:3   warning  'item' is never reassigned. Use 'const' instead             prefer-const
  100:7   warning  'allLanguages' is never reassigned. Use 'const' instead     prefer-const
  101:4   warning  'unusedLanguages' is never reassigned. Use 'const' instead  prefer-const
  102:4   warning  'items' is never reassigned. Use 'const' instead            prefer-const
  114:16  warning  ES2015 'Object.assign' method is forbidden                  es-x/no-object-assign
  192:4   warning  'errors' is never reassigned. Use 'const' instead           prefer-const
  215:7   warning  'values' is never reassigned. Use 'const' instead           prefer-const
  216:4   warning  'widgets' is never reassigned. Use 'const' instead          prefer-const
  272:13  warning  ES2015 'Object.assign' method is forbidden                  es-x/no-object-assign

/src/repo/resources/details/uw.SingleLanguageInputWidget.js
   17:17  warning  ES2015 'Object.assign' method is forbidden       es-x/no-object-assign
  226:4   warning  'text' is never reassigned. Use 'const' instead  prefer-const

/src/repo/resources/details/uw.TextWidget.js
  13:17  warning  ES2015 'Object.assign' method is forbidden  es-x/no-object-assign

/src/repo/resources/details/uw.TitleDetailsWidget.js
   49:4  warning  'illegalFileChars' is never reassigned. Use 'const' instead  prefer-const
   82:3  warning  'value' is never reassigned. Use 'const' instead             prefer-const
   94:3  warning  'title' is never reassigned. Use 'const' instead             prefer-const
  156:7  warning  Mixed spaces and tabs                                        no-mixed-spaces-and-tabs
  156:9  warning  Expected no linebreak before this expression                 implicit-arrow-linebreak
  157:6  warning  Mixed spaces and tabs                                        no-mixed-spaces-and-tabs
  181:3  warning  'errors' is never reassigned. Use 'const' instead            prefer-const

/src/repo/resources/handlers/mw.ApiUploadHandler.js
  224:7   warning  'allDuplicates' is never reassigned. Use 'const' instead  prefer-const
  224:23  warning  ES2015 'Object.assign' method is forbidden                es-x/no-object-assign
  225:4   warning  '$extra' is never reassigned. Use 'const' instead         prefer-const
  226:4   warning  '$ul' is never reassigned. Use 'const' instead            prefer-const

/src/repo/resources/jquery.arrowSteps/jquery.arrowSteps.js
  39:4  warning  '$el' is never reassigned. Use 'const' instead     prefer-const
  42:3  warning  '$steps' is never reassigned. Use 'const' instead  prefer-const
  44:3  warning  'width' is never reassigned. Use 'const' instead   prefer-const
  71:4  warning  '$steps' is never reassigned. Use 'const' instead  prefer-const

/src/repo/resources/mw.DestinationChecker.js
   77:4  warning  Mixed spaces and tabs                                no-mixed-spaces-and-tabs
   77:6  warning  Expected no linebreak before this expression         implicit-arrow-linebreak
   78:3  warning  Mixed spaces and tabs                                no-mixed-spaces-and-tabs
   94:8  warning  'checker' is never reassigned. Use 'const' instead   prefer-const
   95:5  warning  'NS_FILE' is never reassigned. Use 'const' instead   prefer-const
   98:4  warning  'titleObj' is never reassigned. Use 'const' instead  prefer-const
   99:4  warning  'ext' is never reassigned. Use 'const' instead       prefer-const
  101:4  warning  'prefix' is never reassigned. Use 'const' instead    prefer-const

/src/repo/resources/mw.Escaper.js
  31:4   warning  'extractedTemplates' is never reassigned. Use 'const' instead  prefer-const
  32:4   warning  'extractedLinks' is never reassigned. Use 'const' instead      prefer-const
  34:43  warning  ES2015 'Object.assign' method is forbidden                     es-x/no-object-assign
  52:8   warning  'extracts' is never reassigned. Use 'const' instead            prefer-const
  61:5   warning  'regex' is never reassigned. Use 'const' instead               prefer-const
  62:5   warning  'callback' is never reassigned. Use 'const' instead            prefer-const

/src/repo/resources/mw.GroupProgressBar.js
   59:8  warning  'bar' is never reassigned. Use 'const' instead            prefer-const
  146:5  warning  'remainingTime' is never reassigned. Use 'const' instead  prefer-const

/src/repo/resources/mw.UploadWizard.js
    4:1  warning  Missing JSDoc @param "uw" type                           jsdoc/require-param-type
   22:3  warning  'maxSimPref' is never reassigned. Use 'const' instead    prefer-const
   64:8  warning  'self' is never reassigned. Use 'const' instead          prefer-const
   65:5  warning  'steps' is never reassigned. Use 'const' instead         prefer-const
   74:4  warning  'uploadStep' is never reassigned. Use 'const' instead    prefer-const
  127:5  warning  ES2015 'Object.assign' method is forbidden               es-x/no-object-assign
  134:5  warning  'original' is never reassigned. Use 'const' instead      prefer-const
  138:5  warning  'override' is never reassigned. Use 'const' instead      prefer-const
  187:4  warning  'deeds' is never reassigned. Use 'const' instead         prefer-const
  188:4  warning  'doOwnWork' is never reassigned. Use 'const' instead     prefer-const
  189:4  warning  'doThirdParty' is never reassigned. Use 'const' instead  prefer-const
  197:3  warning  'api' is never reassigned. Use 'const' instead           prefer-const

/src/repo/resources/mw.UploadWizardDetails.js
   45:8   warning  '$moreDetailsWrapperDiv' is never reassigned. Use 'const' instead                  prefer-const
   47:5   warning  'details' is never reassigned. Use 'const' instead                                 prefer-const
   48:5   warning  'config' is never reassigned. Use 'const' instead                                  prefer-const
   56:13  warning  ES2015 'Object.assign' method is forbidden                                         es-x/no-object-assign
   73:48  warning  ES2015 'Object.assign' method is forbidden                                         es-x/no-object-assign
   83:40  warning  ES2015 'Object.assign' method is forbidden                                         es-x/no-object-assign
   90:55  warning  ES2015 'Object.assign' method is forbidden                                         es-x/no-object-assign
   98:57  warning  ES2015 'Object.assign' method is forbidden                                         es-x/no-object-assign
  105:44  warning  ES2015 'Object.assign' method is forbidden                                         es-x/no-object-assign
  113:47  warning  ES2015 'Object.assign' method is forbidden                                         es-x/no-object-assign
  118:51  warning  ES2015 'Object.assign' method is forbidden                                         es-x/no-object-assign
  123:53  warning  ES2015 'Object.assign' method is forbidden                                         es-x/no-object-assign
  151:4   warning  '$moreDetailsDiv' is never reassigned. Use 'const' instead                         prefer-const
  215:5   warning  Prefer .then to .done                                                              no-jquery/no-done-fail
  255:4   warning  Prefer .then to .done                                                              no-jquery/no-done-fail
  383:4   warning  Mixed spaces and tabs                                                              no-mixed-spaces-and-tabs
  383:6   warning  Expected no linebreak before this expression                                       implicit-arrow-linebreak
  384:3   warning  Mixed spaces and tabs                                                              no-mixed-spaces-and-tabs
  448:5   warning  'yyyyMmDdRegex' is never reassigned. Use 'const' instead                           prefer-const
  449:5   warning  'timeRegex' is never reassigned. Use 'const' instead                               prefer-const
  470:7   warning  'dateInfo' is never reassigned. Use 'const' instead                                prefer-const
  508:4   warning  'saneTime' is never reassigned. Use 'const' instead                                prefer-const
  601:5   warning  'm' is never reassigned. Use 'const' instead                                       prefer-const
  603:5   warning  'values' is never reassigned. Use 'const' instead                                  prefer-const
  653:4   warning  'languages' is never reassigned. Use 'const' instead                               prefer-const
  662:3   warning  JSDoc @return declaration present but return expression not available in function  jsdoc/require-returns-check
  672:21  warning  'serialized' is never reassigned. Use 'const' instead                              prefer-const
  734:5   warning  'substitutions' is never reassigned. Use 'const' instead                           prefer-const
  734:25  warning  'substList' is never reassigned. Use 'const' instead                               prefer-const
  735:5   warning  'deed' is never reassigned. Use 'const' instead                                    prefer-const
  793:10  warning  ES2015 RegExp 'u' flag is forbidden                                                es-x/no-regexp-u-flag
  813:8   warning  'details' is never reassigned. Use 'const' instead                                 prefer-const
  823:4   warning  'wikitext' is never reassigned. Use 'const' instead                                prefer-const
  824:4   warning  'promise' is never reassigned. Use 'const' instead                                 prefer-const
  843:5   warning  'tags' is never reassigned. Use 'const' instead                                    prefer-const
  844:5   warning  'deed' is never reassigned. Use 'const' instead                                    prefer-const
  846:5   warning  'config' is never reassigned. Use 'const' instead                                  prefer-const
  869:4   warning  'params' is never reassigned. Use 'const' instead                                  prefer-const
  936:5   warning  'details' is never reassigned. Use 'const' instead                                 prefer-const
  939:5   warning  'deferred' is never reassigned. Use 'const' instead                                prefer-const

/src/repo/resources/mw.UploadWizardLicenseInput.js
   17:7   warning  'self' is never reassigned. Use 'const' instead            prefer-const
   18:4   warning  'groups' is never reassigned. Use 'const' instead          prefer-const
   77:2   warning  ES2015 'Object.assign' method is forbidden                 es-x/no-object-assign
  183:9   warning  'templates' is never reassigned. Use 'const' instead       prefer-const
  209:5   warning  'addError' is never reassigned. Use 'const' instead        prefer-const
  216:5   warning  'selectedInputs' is never reassigned. Use 'const' instead  prefer-const
  226:7   warning  'data' is never reassigned. Use 'const' instead            prefer-const
  232:6   warning  'wikitext' is never reassigned. Use 'const' instead        prefer-const
  268:28  warning  ES2015 'Object.assign' method is forbidden                 es-x/no-object-assign

/src/repo/resources/mw.UploadWizardPage.js
  31:4  warning  'config' is never reassigned. Use 'const' instead        prefer-const
  53:3  warning  'uploadWizard' is never reassigned. Use 'const' instead  prefer-const

/src/repo/resources/mw.UploadWizardUpload.js
    8:1   warning  Missing JSDoc @param "uw" type                                 jsdoc/require-param-type
   11:14  warning  'uw' is defined but never used                                 no-unused-vars
  204:4   warning  'deferred' is never reassigned. Use 'const' instead            prefer-const
  205:4   warning  'upload' is never reassigned. Use 'const' instead              prefer-const
  222:16  warning  'Uint8Array' is already defined as a built-in global variable  no-redeclare
  223:16  warning  ES2015 'Uint8Array' is forbidden                               es-x/no-typed-arrays
  314:4   warning  'upload' is never reassigned. Use 'const' instead              prefer-const
  382:3   warning  Prefer .then to .done                                          no-jquery/no-done-fail
  382:3   warning  Prefer .then to .fail                                          no-jquery/no-done-fail
  396:7   warning  'requestedTitle' is never reassigned. Use 'const' instead      prefer-const
  430:3   warning  'params' is never reassigned. Use 'const' instead              prefer-const
  448:3   warning  Prefer .then to .done                                          no-jquery/no-done-fail
  448:3   warning  Prefer .then to .fail                                          no-jquery/no-done-fail
  488:21  warning  'image' is never reassigned. Use 'const' instead               prefer-const
  585:5   warning  'constraint' is never reassigned. Use 'const' instead          prefer-const
  629:3   warning  'scaling' is never reassigned. Use 'const' instead             prefer-const
  631:3   warning  'width' is never reassigned. Use 'const' instead               prefer-const
  632:3   warning  'height' is never reassigned. Use 'const' instead              prefer-const
  640:3   warning  'dx' is never reassigned. Use 'const' instead                  prefer-const
  641:3   warning  'dy' is never reassigned. Use 'const' instead                  prefer-const
  666:3   warning  '$canvas' is never reassigned. Use 'const' instead             prefer-const
  667:3   warning  'ctx' is never reassigned. Use 'const' instead                 prefer-const
  715:7   warning  'constraints' is never reassigned. Use 'const' instead         prefer-const
  767:3   warning  Prefer .then to .done                                          no-jquery/no-done-fail
  767:3   warning  Prefer .then to .fail                                          no-jquery/no-done-fail
  775:6   warning  Prefer .then to .done                                          no-jquery/no-done-fail
  778:7   warning  Prefer .then to .done                                          no-jquery/no-done-fail
  802:4   warning  'deferred' is never reassigned. Use 'const' instead            prefer-const
  803:4   warning  'upload' is never reassigned. Use 'const' instead              prefer-const
  828:9   warning  'canvas' is never reassigned. Use 'const' instead              prefer-const
  831:8   warning  'context' is never reassigned. Use 'const' instead             prefer-const

/src/repo/resources/mw.UploadWizardUploadInterface.js
  206:3  warning  Prefer .then to .done  no-jquery/no-done-fail

/src/repo/resources/transports/mw.FormDataTransport.js
   97:3  warning  ES2015 'Object.assign' method is forbidden                 es-x/no-object-assign
  156:4  warning  'deferred' is never reassigned. Use 'const' instead        prefer-const
  157:4  warning  'fileSize' is never reassigned. Use 'const' instead        prefer-const
  158:4  warning  'chunkSize' is never reassigned. Use 'const' instead       prefer-const
  159:4  warning  'transport' is never reassigned. Use 'const' instead       prefer-const
  169:5  warning  Prefer .then to .done                                      no-jquery/no-done-fail
  170:6  warning  Prefer .then to .done                                      no-jquery/no-done-fail
  170:6  warning  Prefer .then to .fail                                      no-jquery/no-done-fail
  194:7  warning  'params' is never reassigned. Use 'const' instead          prefer-const
  195:4  warning  'transport' is never reassigned. Use 'const' instead       prefer-const
  196:4  warning  'bytesAvailable' is never reassigned. Use 'const' instead  prefer-const

/src/repo/resources/ui/steps/uw.ui.Deed.js
  55:3  warning  Prefer .then to .done  no-jquery/no-done-fail

/src/repo/resources/ui/steps/uw.ui.Details.js
  90:3  warning  Prefer .then to .done  no-jquery/no-done-fail

/src/repo/resources/ui/steps/uw.ui.Thanks.js
   30:4  warning  'thanks' is never reassigned. Use 'const' instead             prefer-const
   48:3  warning  '$header' is never reassigned. Use 'const' instead            prefer-const
   69:3  warning  'beginButtonTarget' is never reassigned. Use 'const' instead  prefer-const
   98:3  warning  'thumbWikiText' is never reassigned. Use 'const' instead      prefer-const
  104:3  warning  '$thanksDiv' is never reassigned. Use 'const' instead         prefer-const
  106:3  warning  '$thumbnailWrapDiv' is never reassigned. Use 'const' instead  prefer-const
  109:3  warning  '$thumbnailDiv' is never reassigned. Use 'const' instead      prefer-const
  112:3  warning  '$thumbnailCaption' is never reassigned. Use 'const' instead  prefer-const
  115:3  warning  '$thumbnailLink' is never reassigned. Use 'const' instead     prefer-const
  128:3  warning  Prefer .then to .done                                         no-jquery/no-done-fail

/src/repo/resources/ui/steps/uw.ui.Tutorial.js
  125:3  warning  Prefer .then to .done  no-jquery/no-done-fail

/src/repo/resources/ui/steps/uw.ui.Upload.js
  210:6  warning  Prefer .then to .done  no-jquery/no-done-fail
  222:3  warning  Prefer .then to .done  no-jquery/no-done-fail

/src/repo/resources/ui/uw.ui.DeedPreview.js
  30:3  warning  Prefer .then to .done  no-jquery/no-done-fail

/src/repo/resources/ui/uw.ui.Step.js
  101:3  warning  Prefer .then to .done  no-jquery/no-done-fail
  119:3  warning  Prefer .then to .done  no-jquery/no-done-fail

/src/repo/resources/uw.ConcurrentQueue.js
  117:3  warning  'index' is never reassigned. Use 'const' instead    prefer-const
  139:3  warning  'item' is never reassigned. Use 'const' instead     prefer-const
  145:3  warning  'promise' is never reassigned. Use 'const' instead  prefer-const

/src/repo/resources/uw.CopyMetadataWidget.js
   14:4  warning  'checkboxes' is never reassigned. Use 'const' instead               prefer-const
   15:4  warning  '$copyMetadataWrapperDiv' is never reassigned. Use 'const' instead  prefer-const
   16:4  warning  '$copyMetadataDiv' is never reassigned. Use 'const' instead         prefer-const
  157:4  warning  'uploads' is never reassigned. Use 'const' instead                  prefer-const
  158:4  warning  'sourceUpload' is never reassigned. Use 'const' instead             prefer-const
  159:4  warning  'serialized' is never reassigned. Use 'const' instead               prefer-const
  161:4  warning  'sourceValue' is never reassigned. Use 'const' instead              prefer-const
  214:4  warning  'uploads' is never reassigned. Use 'const' instead                  prefer-const

/src/repo/resources/uw.FieldLayout.js
  20:12  warning  ES2015 'Object.assign' method is forbidden  es-x/no-object-assign

/src/repo/resources/uw.LicenseGroup.js
   37:17  warning  ES2015 'Object.assign' method is forbidden               es-x/no-object-assign
  132:4   warning  'option' is never reassigned. Use 'const' instead        prefer-const
  167:4   warning  'option' is never reassigned. Use 'const' instead        prefer-const
  191:4   warning  'self' is never reassigned. Use 'const' instead          prefer-const
  192:4   warning  'values' is never reassigned. Use 'const' instead        prefer-const
  194:3   warning  'wikiTexts' is never reassigned. Use 'const' instead     prefer-const
  196:5   warning  'value' is never reassigned. Use 'const' instead         prefer-const
  222:7   warning  'self' is never reassigned. Use 'const' instead          prefer-const
  223:4   warning  'result' is never reassigned. Use 'const' instead        prefer-const
  248:7   warning  'self' is never reassigned. Use 'const' instead          prefer-const
  249:4   warning  'selectArray' is never reassigned. Use 'const' instead   prefer-const
  303:7   warning  'licenseInfo' is never reassigned. Use 'const' instead   prefer-const
  306:3   warning  'licenseText' is never reassigned. Use 'const' instead   prefer-const
  319:7   warning  'licenseInfo' is never reassigned. Use 'const' instead   prefer-const
  320:4   warning  'messageKey' is never reassigned. Use 'const' instead    prefer-const
  323:4   warning  'languageCode' is never reassigned. Use 'const' instead  prefer-const
  328:4   warning  '$icons' is never reassigned. Use 'const' instead        prefer-const
  334:3   warning  '$licenseLink' is never reassigned. Use 'const' instead  prefer-const
  343:3   warning  '$label' is never reassigned. Use 'const' instead        prefer-const
  361:7   warning  'self' is never reassigned. Use 'const' instead          prefer-const
  372:3   warning  'button' is never reassigned. Use 'const' instead        prefer-const
  397:3   warning  'input' is never reassigned. Use 'const' instead         prefer-const
  413:3   warning  Prefer .then to .done                                    no-jquery/no-done-fail
  413:3   warning  Prefer .then to .fail                                    no-jquery/no-done-fail

/src/repo/resources/uw.ValidationMessageElement.js
  39:2  warning  JSDoc @return declaration present but return expression not available in function  jsdoc/require-returns-check
  91:3  warning  '$listItem' is never reassigned. Use 'const' instead                               prefer-const

/src/repo/tests/qunit/controller/uw.controller.Details.test.js
   57:7  warning  'step' is never reassigned. Use 'const' instead        prefer-const
   61:4  warning  'stepUiStub' is never reassigned. Use 'const' instead  prefer-const
  110:4  warning  'done' is never reassigned. Use 'const' instead        prefer-const
  111:4  warning  'donestub' is never reassigned. Use 'const' instead    prefer-const
  112:4  warning  'ds' is never reassigned. Use 'const' instead          prefer-const
  113:4  warning  'ps' is never reassigned. Use 'const' instead          prefer-const
  117:3  warning  'tostub' is never reassigned. Use 'const' instead      prefer-const
  124:3  warning  'step' is never reassigned. Use 'const' instead        prefer-const
  135:3  warning  Prefer .then to .done                                  no-jquery/no-done-fail

/src/repo/tests/qunit/controller/uw.controller.Tutorial.test.js
  33:4  warning  'acwStub' is never reassigned. Use 'const' instead  prefer-const
  54:3  warning  'mnStub' is never reassigned. Use 'const' instead   prefer-const

/src/repo/tests/qunit/mw.UploadWizardLicenseInput.test.js
  17:6  warning  'config' is never reassigned. Use 'const' instead          prefer-const
  18:3  warning  '$fixture' is never reassigned. Use 'const' instead        prefer-const
  21:2  warning  'uwLicenseInput' is never reassigned. Use 'const' instead  prefer-const
  27:6  warning  'config' is never reassigned. Use 'const' instead          prefer-const
  28:3  warning  '$fixture' is never reassigned. Use 'const' instead        prefer-const
  33:2  warning  'uwLicenseInput' is never reassigned. Use 'const' instead  prefer-const
  37:2  warning  '$input' is never reassigned. Use 'const' instead          prefer-const
  41:2  warning  '$label' is never reassigned. Use 'const' instead          prefer-const
  46:6  warning  'config' is never reassigned. Use 'const' instead          prefer-const
  56:3  warning  '$fixture' is never reassigned. Use 'const' instead        prefer-const
  59:2  warning  'uwLicenseInput' is never reassigned. Use 'const' instead  prefer-const

/src/repo/tests/qunit/mw.UploadWizardUpload.test.js
  23:4  warning  'oldconf' is never reassigned. Use 'const' instead  prefer-const
  27:3  warning  'upload' is never reassigned. Use 'const' instead   prefer-const

/src/repo/tests/qunit/mw.fileApi.test.js
  46:15  warning  'testFile' is never reassigned. Use 'const' instead   prefer-const
  47:4   warning  'fakeVideo' is never reassigned. Use 'const' instead  prefer-const

/src/repo/tests/qunit/transports/mw.FormDataTransport.test.js
   27:3   warning  'config' is never reassigned. Use 'const' instead     prefer-const
   86:4   warning  'transport' is never reassigned. Use 'const' instead  prefer-const
   87:4   warning  'fakeFile' is never reassigned. Use 'const' instead   prefer-const
   97:3   warning  'request' is never reassigned. Use 'const' instead    prefer-const
  107:4   warning  'transport' is never reassigned. Use 'const' instead  prefer-const
  108:4   warning  'fakeFile' is never reassigned. Use 'const' instead   prefer-const
  125:3   warning  'request' is never reassigned. Use 'const' instead    prefer-const
  146:3   warning  Prefer .then to .fail                                 no-jquery/no-done-fail
  179:10  warning  Prefer .then to .done                                 no-jquery/no-done-fail
  198:10  warning  Prefer .then to .done                                 no-jquery/no-done-fail
  218:3   warning  Prefer .then to .fail                                 no-jquery/no-done-fail

/src/repo/tests/qunit/uw.ConcurrentQueue.test.js
   38:3  warning  'calls' is never reassigned. Use 'const' instead            prefer-const
   65:3  warning  'done' is never reassigned. Use 'const' instead             prefer-const
   66:3  warning  'action' is never reassigned. Use 'const' instead           prefer-const
   67:3  warning  'queue' is never reassigned. Use 'const' instead            prefer-const
   98:3  warning  'done' is never reassigned. Use 'const' instead             prefer-const
   99:3  warning  'changeHandler' is never reassigned. Use 'const' instead    prefer-const
  100:3  warning  'progressHandler' is never reassigned. Use 'const' instead  prefer-const
  101:3  warning  'completeHandler' is never reassigned. Use 'const' instead  prefer-const
  102:3  warning  'queue' is never reassigned. Use 'const' instead            prefer-const
  139:3  warning  'done' is never reassigned. Use 'const' instead             prefer-const
  140:3  warning  'queue' is never reassigned. Use 'const' instead            prefer-const
  167:3  warning  'done' is never reassigned. Use 'const' instead             prefer-const
  168:3  warning  'queue' is never reassigned. Use 'const' instead            prefer-const
  184:3  warning  'done' is never reassigned. Use 'const' instead             prefer-const
  185:3  warning  'changeHandler' is never reassigned. Use 'const' instead    prefer-const
  186:3  warning  'progressHandler' is never reassigned. Use 'const' instead  prefer-const
  187:3  warning  'completeHandler' is never reassigned. Use 'const' instead  prefer-const
  188:3  warning  'queue' is never reassigned. Use 'const' instead            prefer-const
  240:3  warning  'done' is never reassigned. Use 'const' instead             prefer-const
  241:3  warning  'changeHandler' is never reassigned. Use 'const' instead    prefer-const
  242:3  warning  'progressHandler' is never reassigned. Use 'const' instead  prefer-const
  243:3  warning  'completeHandler' is never reassigned. Use 'const' instead  prefer-const
  244:3  warning  'queue' is never reassigned. Use 'const' instead            prefer-const
  297:3  warning  'done' is never reassigned. Use 'const' instead             prefer-const
  298:3  warning  'action' is never reassigned. Use 'const' instead           prefer-const
  299:3  warning  'changeHandler' is never reassigned. Use 'const' instead    prefer-const
  300:3  warning  'progressHandler' is never reassigned. Use 'const' instead  prefer-const
  301:3  warning  'completeHandler' is never reassigned. Use 'const' instead  prefer-const
  302:3  warning  'queue' is never reassigned. Use 'const' instead            prefer-const
  353:3  warning  'done' is never reassigned. Use 'const' instead             prefer-const
  355:3  warning  'action' is never reassigned. Use 'const' instead           prefer-const
  356:3  warning  'changeHandler' is never reassigned. Use 'const' instead    prefer-const
  357:3  warning  'progressHandler' is never reassigned. Use 'const' instead  prefer-const
  358:3  warning  'completeHandler' is never reassigned. Use 'const' instead  prefer-const
  359:3  warning  'queue' is never reassigned. Use 'const' instead            prefer-const
  402:3  warning  'onProgress' is never reassigned. Use 'const' instead       prefer-const

/src/repo/tests/qunit/uw.TitleDetailsWidget.test.js
  5:2  warning  'fileNs' is never reassigned. Use 'const' instead                  prefer-const
  6:2  warning  'makeTitleInFileNSCases' is never reassigned. Use 'const' instead  prefer-const

✖ 352 problems (0 errors, 352 warnings)


Running "stylelint:all" (stylelint) task
>> Linted 14 files without errors

Running "banana:MediaUploader" (banana) task
>> 3 message directories checked.

Done.

--- end ---
{"1105443": {"source": 1105443, "name": "brace-expansion", "dependency": "brace-expansion", "title": "brace-expansion Regular Expression Denial of Service vulnerability", "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw", "severity": "low", "cwe": ["CWE-400"], "cvss": {"score": 3.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=1.0.0 <=1.1.11"}, "1105444": {"source": 1105444, "name": "brace-expansion", "dependency": "brace-expansion", "title": "brace-expansion Regular Expression Denial of Service vulnerability", "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw", "severity": "low", "cwe": ["CWE-400"], "cvss": {"score": 3.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"}, "range": ">=2.0.0 <=2.0.1"}}
Upgrading n:brace-expansion from 1.1.11, 2.0.1 -> 1.1.12, 2.0.2
$ package-lock-lint package-lock.json
--- stdout ---
Checking package-lock.json

--- end ---
build: Updating brace-expansion to 1.1.12, 2.0.2

* https://github.com/advisories/GHSA-v6h2-p8h4-qcjw

$ git add .
--- stdout ---

--- end ---
$ git commit -F /tmp/tmp8c7wlaub
--- stdout ---
[master e9769ae] build: Updating brace-expansion to 1.1.12, 2.0.2
 1 file changed, 18 insertions(+), 18 deletions(-)

--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From e9769ae74140f571da7ea2e50ce955b6c0d4865f Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Sun, 15 Jun 2025 11:29:26 +0000
Subject: [PATCH] build: Updating brace-expansion to 1.1.12, 2.0.2

* https://github.com/advisories/GHSA-v6h2-p8h4-qcjw

Change-Id: I5bc9c92f6923472b9c6013acf08c3fb9c3d20ee1
---
 package-lock.json | 36 ++++++++++++++++++------------------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 3b9381f..d0a06ad 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -526,9 +526,9 @@
 			}
 		},
 		"node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": {
-			"version": "2.0.1",
-			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-			"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+			"version": "2.0.2",
+			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+			"integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
 			"dev": true,
 			"dependencies": {
 				"balanced-match": "^1.0.0"
@@ -773,9 +773,9 @@
 			"dev": true
 		},
 		"node_modules/brace-expansion": {
-			"version": "1.1.11",
-			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
-			"integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
+			"version": "1.1.12",
+			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+			"integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
 			"dev": true,
 			"dependencies": {
 				"balanced-match": "^1.0.0",
@@ -1677,9 +1677,9 @@
 			}
 		},
 		"node_modules/eslint-plugin-n/node_modules/brace-expansion": {
-			"version": "2.0.1",
-			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-			"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+			"version": "2.0.2",
+			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+			"integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
 			"dev": true,
 			"dependencies": {
 				"balanced-match": "^1.0.0"
@@ -5615,9 +5615,9 @@
 			},
 			"dependencies": {
 				"brace-expansion": {
-					"version": "2.0.1",
-					"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-					"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+					"version": "2.0.2",
+					"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+					"integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
 					"dev": true,
 					"requires": {
 						"balanced-match": "^1.0.0"
@@ -5799,9 +5799,9 @@
 			"dev": true
 		},
 		"brace-expansion": {
-			"version": "1.1.11",
-			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
-			"integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
+			"version": "1.1.12",
+			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+			"integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
 			"dev": true,
 			"requires": {
 				"balanced-match": "^1.0.0",
@@ -6477,9 +6477,9 @@
 			},
 			"dependencies": {
 				"brace-expansion": {
-					"version": "2.0.1",
-					"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-					"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+					"version": "2.0.2",
+					"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+					"integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
 					"dev": true,
 					"requires": {
 						"balanced-match": "^1.0.0"
-- 
2.39.5


--- end ---

composer dependencies

Dependencies
Development dependencies

npm dependencies

Development dependencies

Logs

Source code is licensed under the AGPL.