$ date
--- stdout ---
Wed Nov 20 08:35:49 UTC 2024
--- end ---
$ git clone file:///srv/git/oojs-ui.git repo --depth=1 -b master
--- stderr ---
Cloning into 'repo'...
--- stdout ---
--- end ---
$ git config user.name libraryupgrader
--- stdout ---
--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---
--- end ---
$ git submodule update --init
--- stdout ---
--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.
--- end ---
$ git show-ref refs/heads/master
--- stdout ---
9a2b2b42aac087db15c8a91fd6bbcef78dbd9898 refs/heads/master
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"cross-spawn": {
"name": "cross-spawn",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1100556,
"name": "cross-spawn",
"dependency": "cross-spawn",
"title": "Regular Expression Denial of Service (ReDoS) in cross-spawn",
"url": "https://github.com/advisories/GHSA-3xgq-45jj-v275",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=7.0.0 <7.0.5"
}
],
"effects": [],
"range": "7.0.0 - 7.0.4",
"nodes": [
"node_modules/cross-spawn"
],
"fixAvailable": true
},
"grunt-jsdoc": {
"name": "grunt-jsdoc",
"severity": "high",
"isDirect": true,
"via": [
"jsdoc"
],
"effects": [],
"range": ">=0.4.1",
"nodes": [
"node_modules/grunt-jsdoc"
],
"fixAvailable": {
"name": "grunt-jsdoc",
"version": "0.4.0",
"isSemVerMajor": true
}
},
"gulp-util": {
"name": "gulp-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash.template"
],
"effects": [
"remap-istanbul"
],
"range": ">=1.1.0",
"nodes": [
"node_modules/gulp-util"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"jsdoc": {
"name": "jsdoc",
"severity": "high",
"isDirect": false,
"via": [
"taffydb"
],
"effects": [
"grunt-jsdoc"
],
"range": "3.2.0-dev - 3.6.11",
"nodes": [
"node_modules/grunt-jsdoc/node_modules/jsdoc"
],
"fixAvailable": {
"name": "grunt-jsdoc",
"version": "0.4.0",
"isSemVerMajor": true
}
},
"karma-remap-istanbul": {
"name": "karma-remap-istanbul",
"severity": "high",
"isDirect": true,
"via": [
"remap-istanbul"
],
"effects": [],
"range": ">=0.0.3",
"nodes": [
"node_modules/karma-remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"lodash.template": {
"name": "lodash.template",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1096993,
"name": "lodash.template",
"dependency": "lodash.template",
"title": "Command Injection in lodash",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"severity": "high",
"cwe": [
"CWE-77",
"CWE-94"
],
"cvss": {
"score": 7.2,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
"range": "<=4.5.0"
}
],
"effects": [
"gulp-util"
],
"range": "*",
"nodes": [
"node_modules/lodash.template"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"meow": {
"name": "meow",
"severity": "high",
"isDirect": false,
"via": [
"trim-newlines"
],
"effects": [],
"range": "3.4.0 - 5.0.0",
"nodes": [
"node_modules/gulp-util/node_modules/meow"
],
"fixAvailable": true
},
"remap-istanbul": {
"name": "remap-istanbul",
"severity": "high",
"isDirect": false,
"via": [
"gulp-util"
],
"effects": [
"karma-remap-istanbul"
],
"range": "<=0.9.6",
"nodes": [
"node_modules/remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"taffydb": {
"name": "taffydb",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1089386,
"name": "taffydb",
"dependency": "taffydb",
"title": "TaffyDB can allow access to any data items in the DB",
"url": "https://github.com/advisories/GHSA-mxhp-79qh-mcx6",
"severity": "high",
"cwe": [
"CWE-20",
"CWE-668"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
"range": "<=2.7.3"
}
],
"effects": [
"jsdoc"
],
"range": "*",
"nodes": [
"node_modules/taffydb"
],
"fixAvailable": {
"name": "grunt-jsdoc",
"version": "0.4.0",
"isSemVerMajor": true
}
},
"trim-newlines": {
"name": "trim-newlines",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1095100,
"name": "trim-newlines",
"dependency": "trim-newlines",
"title": "Uncontrolled Resource Consumption in trim-newlines",
"url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v",
"severity": "high",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.0.1"
}
],
"effects": [
"meow"
],
"range": "<3.0.1",
"nodes": [
"node_modules/trim-newlines"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"high": 10,
"critical": 0,
"total": 10
},
"dependencies": {
"prod": 4,
"dev": 821,
"optional": 12,
"peer": 1,
"peerOptional": 0,
"total": 824
}
}
}
--- end ---
$ /usr/bin/composer install
--- stderr ---
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information
Updating dependencies
Lock file operations: 66 installs, 0 updates, 0 removals
- Locking composer/pcre (3.3.2)
- Locking composer/semver (3.4.3)
- Locking composer/spdx-licenses (1.5.8)
- Locking composer/xdebug-handler (3.0.5)
- Locking dealerdirect/phpcodesniffer-composer-installer (v1.0.0)
- Locking doctrine/deprecations (1.1.3)
- Locking doctrine/instantiator (2.0.0)
- Locking felixfbecker/advanced-json-rpc (v3.2.1)
- Locking mediawiki/mediawiki-codesniffer (v45.0.0)
- Locking mediawiki/mediawiki-phan-config (0.14.0)
- Locking mediawiki/minus-x (1.1.3)
- Locking mediawiki/phan-taint-check-plugin (6.0.0)
- Locking microsoft/tolerant-php-parser (v0.1.2)
- Locking myclabs/deep-copy (1.12.1)
- Locking netresearch/jsonmapper (v4.5.0)
- Locking nikic/php-parser (v5.3.1)
- Locking phan/phan (5.4.3)
- Locking phar-io/manifest (2.0.4)
- Locking phar-io/version (3.2.1)
- Locking php-parallel-lint/php-console-color (v1.0.1)
- Locking php-parallel-lint/php-console-highlighter (v1.0.0)
- Locking php-parallel-lint/php-parallel-lint (v1.4.0)
- Locking phpcsstandards/phpcsextra (1.2.1)
- Locking phpcsstandards/phpcsutils (1.0.12)
- Locking phpdocumentor/reflection-common (2.2.0)
- Locking phpdocumentor/reflection-docblock (5.6.0)
- Locking phpdocumentor/type-resolver (1.10.0)
- Locking phpstan/phpdoc-parser (2.0.0)
- Locking phpunit/php-code-coverage (9.2.32)
- Locking phpunit/php-file-iterator (3.0.6)
- Locking phpunit/php-invoker (3.1.1)
- Locking phpunit/php-text-template (2.0.4)
- Locking phpunit/php-timer (5.0.3)
- Locking phpunit/phpunit (9.6.16)
- Locking psr/container (2.0.2)
- Locking psr/log (3.0.2)
- Locking sabre/event (5.1.7)
- Locking sebastian/cli-parser (1.0.2)
- Locking sebastian/code-unit (1.0.8)
- Locking sebastian/code-unit-reverse-lookup (2.0.3)
- Locking sebastian/comparator (4.0.8)
- Locking sebastian/complexity (2.0.3)
- Locking sebastian/diff (4.0.6)
- Locking sebastian/environment (5.1.5)
- Locking sebastian/exporter (4.0.6)
- Locking sebastian/global-state (5.0.7)
- Locking sebastian/lines-of-code (1.0.4)
- Locking sebastian/object-enumerator (4.0.4)
- Locking sebastian/object-reflector (2.0.4)
- Locking sebastian/recursion-context (4.0.5)
- Locking sebastian/resource-operations (3.0.4)
- Locking sebastian/type (3.2.1)
- Locking sebastian/version (3.0.2)
- Locking squizlabs/php_codesniffer (3.10.3)
- Locking symfony/console (v7.1.8)
- Locking symfony/deprecation-contracts (v3.5.0)
- Locking symfony/polyfill-ctype (v1.31.0)
- Locking symfony/polyfill-intl-grapheme (v1.31.0)
- Locking symfony/polyfill-intl-normalizer (v1.31.0)
- Locking symfony/polyfill-mbstring (v1.31.0)
- Locking symfony/polyfill-php80 (v1.31.0)
- Locking symfony/service-contracts (v3.5.0)
- Locking symfony/string (v7.1.8)
- Locking theseer/tokenizer (1.2.3)
- Locking tysonandre/var_representation_polyfill (0.1.3)
- Locking webmozart/assert (1.11.0)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 66 installs, 0 updates, 0 removals
0 [>---------------------------] 0 [->--------------------------]
- Installing squizlabs/php_codesniffer (3.10.3): Extracting archive
- Installing dealerdirect/phpcodesniffer-composer-installer (v1.0.0): Extracting archive
- Installing composer/pcre (3.3.2): Extracting archive
- Installing symfony/polyfill-php80 (v1.31.0): Extracting archive
- Installing phpcsstandards/phpcsutils (1.0.12): Extracting archive
- Installing phpcsstandards/phpcsextra (1.2.1): Extracting archive
- Installing symfony/polyfill-mbstring (v1.31.0): Extracting archive
- Installing composer/spdx-licenses (1.5.8): Extracting archive
- Installing composer/semver (3.4.3): Extracting archive
- Installing mediawiki/mediawiki-codesniffer (v45.0.0): Extracting archive
- Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive
- Installing symfony/polyfill-intl-normalizer (v1.31.0): Extracting archive
- Installing symfony/polyfill-intl-grapheme (v1.31.0): Extracting archive
- Installing symfony/polyfill-ctype (v1.31.0): Extracting archive
- Installing symfony/string (v7.1.8): Extracting archive
- Installing symfony/deprecation-contracts (v3.5.0): Extracting archive
- Installing psr/container (2.0.2): Extracting archive
- Installing symfony/service-contracts (v3.5.0): Extracting archive
- Installing symfony/console (v7.1.8): Extracting archive
- Installing sabre/event (5.1.7): Extracting archive
- Installing netresearch/jsonmapper (v4.5.0): Extracting archive
- Installing microsoft/tolerant-php-parser (v0.1.2): Extracting archive
- Installing webmozart/assert (1.11.0): Extracting archive
- Installing phpstan/phpdoc-parser (2.0.0): Extracting archive
- Installing phpdocumentor/reflection-common (2.2.0): Extracting archive
- Installing doctrine/deprecations (1.1.3): Extracting archive
- Installing phpdocumentor/type-resolver (1.10.0): Extracting archive
- Installing phpdocumentor/reflection-docblock (5.6.0): Extracting archive
- Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive
- Installing psr/log (3.0.2): Extracting archive
- Installing composer/xdebug-handler (3.0.5): Extracting archive
- Installing phan/phan (5.4.3): Extracting archive
- Installing mediawiki/phan-taint-check-plugin (6.0.0): Extracting archive
- Installing mediawiki/mediawiki-phan-config (0.14.0): Extracting archive
- Installing mediawiki/minus-x (1.1.3): Extracting archive
- Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive
- Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive
- Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive
- Installing sebastian/version (3.0.2): Extracting archive
- Installing sebastian/type (3.2.1): Extracting archive
- Installing sebastian/resource-operations (3.0.4): Extracting archive
- Installing sebastian/recursion-context (4.0.5): Extracting archive
- Installing sebastian/object-reflector (2.0.4): Extracting archive
- Installing sebastian/object-enumerator (4.0.4): Extracting archive
- Installing sebastian/global-state (5.0.7): Extracting archive
- Installing sebastian/exporter (4.0.6): Extracting archive
- Installing sebastian/environment (5.1.5): Extracting archive
- Installing sebastian/diff (4.0.6): Extracting archive
- Installing sebastian/comparator (4.0.8): Extracting archive
- Installing sebastian/code-unit (1.0.8): Extracting archive
- Installing sebastian/cli-parser (1.0.2): Extracting archive
- Installing phpunit/php-timer (5.0.3): Extracting archive
- Installing phpunit/php-text-template (2.0.4): Extracting archive
- Installing phpunit/php-invoker (3.1.1): Extracting archive
- Installing phpunit/php-file-iterator (3.0.6): Extracting archive
- Installing theseer/tokenizer (1.2.3): Extracting archive
- Installing nikic/php-parser (v5.3.1): Extracting archive
- Installing sebastian/lines-of-code (1.0.4): Extracting archive
- Installing sebastian/complexity (2.0.3): Extracting archive
- Installing sebastian/code-unit-reverse-lookup (2.0.3): Extracting archive
- Installing phpunit/php-code-coverage (9.2.32): Extracting archive
- Installing phar-io/version (3.2.1): Extracting archive
- Installing phar-io/manifest (2.0.4): Extracting archive
- Installing myclabs/deep-copy (1.12.1): Extracting archive
- Installing doctrine/instantiator (2.0.0): Extracting archive
- Installing phpunit/phpunit (9.6.16): Extracting archive
0/64 [>---------------------------] 0%
20/64 [========>-------------------] 31%
32/64 [==============>-------------] 50%
47/64 [====================>-------] 73%
57/64 [========================>---] 89%
64/64 [============================] 100%
4 package suggestions were added by new dependencies, use `composer suggest` to see details.
Generating autoload files
42 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---
PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"cross-spawn": {
"name": "cross-spawn",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1100556,
"name": "cross-spawn",
"dependency": "cross-spawn",
"title": "Regular Expression Denial of Service (ReDoS) in cross-spawn",
"url": "https://github.com/advisories/GHSA-3xgq-45jj-v275",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=7.0.0 <7.0.5"
}
],
"effects": [],
"range": "7.0.0 - 7.0.4",
"nodes": [
"node_modules/cross-spawn"
],
"fixAvailable": true
},
"grunt-jsdoc": {
"name": "grunt-jsdoc",
"severity": "high",
"isDirect": true,
"via": [
"jsdoc"
],
"effects": [],
"range": ">=0.4.1",
"nodes": [
"node_modules/grunt-jsdoc"
],
"fixAvailable": {
"name": "grunt-jsdoc",
"version": "0.4.0",
"isSemVerMajor": true
}
},
"gulp-util": {
"name": "gulp-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash.template"
],
"effects": [
"remap-istanbul"
],
"range": ">=1.1.0",
"nodes": [
"node_modules/gulp-util"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"jsdoc": {
"name": "jsdoc",
"severity": "high",
"isDirect": false,
"via": [
"taffydb"
],
"effects": [
"grunt-jsdoc"
],
"range": "3.2.0-dev - 3.6.11",
"nodes": [
"node_modules/grunt-jsdoc/node_modules/jsdoc"
],
"fixAvailable": {
"name": "grunt-jsdoc",
"version": "0.4.0",
"isSemVerMajor": true
}
},
"karma-remap-istanbul": {
"name": "karma-remap-istanbul",
"severity": "high",
"isDirect": true,
"via": [
"remap-istanbul"
],
"effects": [],
"range": ">=0.0.3",
"nodes": [
"node_modules/karma-remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"lodash.template": {
"name": "lodash.template",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1096993,
"name": "lodash.template",
"dependency": "lodash.template",
"title": "Command Injection in lodash",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"severity": "high",
"cwe": [
"CWE-77",
"CWE-94"
],
"cvss": {
"score": 7.2,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
"range": "<=4.5.0"
}
],
"effects": [
"gulp-util"
],
"range": "*",
"nodes": [
"node_modules/lodash.template"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"meow": {
"name": "meow",
"severity": "high",
"isDirect": false,
"via": [
"trim-newlines"
],
"effects": [],
"range": "3.4.0 - 5.0.0",
"nodes": [
"node_modules/gulp-util/node_modules/meow"
],
"fixAvailable": true
},
"remap-istanbul": {
"name": "remap-istanbul",
"severity": "high",
"isDirect": false,
"via": [
"gulp-util"
],
"effects": [
"karma-remap-istanbul"
],
"range": "<=0.9.6",
"nodes": [
"node_modules/remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"taffydb": {
"name": "taffydb",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1089386,
"name": "taffydb",
"dependency": "taffydb",
"title": "TaffyDB can allow access to any data items in the DB",
"url": "https://github.com/advisories/GHSA-mxhp-79qh-mcx6",
"severity": "high",
"cwe": [
"CWE-20",
"CWE-668"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
"range": "<=2.7.3"
}
],
"effects": [
"jsdoc"
],
"range": "*",
"nodes": [
"node_modules/taffydb"
],
"fixAvailable": {
"name": "grunt-jsdoc",
"version": "0.4.0",
"isSemVerMajor": true
}
},
"trim-newlines": {
"name": "trim-newlines",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1095100,
"name": "trim-newlines",
"dependency": "trim-newlines",
"title": "Uncontrolled Resource Consumption in trim-newlines",
"url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v",
"severity": "high",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.0.1"
}
],
"effects": [
"meow"
],
"range": "<3.0.1",
"nodes": [
"node_modules/trim-newlines"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"high": 10,
"critical": 0,
"total": 10
},
"dependencies": {
"prod": 4,
"dev": 821,
"optional": 12,
"peer": 1,
"peerOptional": 0,
"total": 824
}
}
}
--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
{
"added": 824,
"removed": 0,
"changed": 0,
"audited": 825,
"funding": 114,
"audit": {
"auditReportVersion": 2,
"vulnerabilities": {
"cross-spawn": {
"name": "cross-spawn",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1100556,
"name": "cross-spawn",
"dependency": "cross-spawn",
"title": "Regular Expression Denial of Service (ReDoS) in cross-spawn",
"url": "https://github.com/advisories/GHSA-3xgq-45jj-v275",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": ">=7.0.0 <7.0.5"
}
],
"effects": [],
"range": "7.0.0 - 7.0.4",
"nodes": [
""
],
"fixAvailable": true
},
"grunt-jsdoc": {
"name": "grunt-jsdoc",
"severity": "high",
"isDirect": true,
"via": [
"jsdoc"
],
"effects": [],
"range": ">=0.4.1",
"nodes": [
"node_modules/grunt-jsdoc"
],
"fixAvailable": {
"name": "grunt-jsdoc",
"version": "0.4.0",
"isSemVerMajor": true
}
},
"gulp-util": {
"name": "gulp-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash.template"
],
"effects": [
"remap-istanbul"
],
"range": ">=1.1.0",
"nodes": [
"node_modules/gulp-util"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"jsdoc": {
"name": "jsdoc",
"severity": "high",
"isDirect": false,
"via": [
"taffydb"
],
"effects": [
"grunt-jsdoc"
],
"range": "3.2.0-dev - 3.6.11",
"nodes": [
"node_modules/grunt-jsdoc/node_modules/jsdoc"
],
"fixAvailable": {
"name": "grunt-jsdoc",
"version": "0.4.0",
"isSemVerMajor": true
}
},
"karma-remap-istanbul": {
"name": "karma-remap-istanbul",
"severity": "high",
"isDirect": true,
"via": [
"remap-istanbul"
],
"effects": [],
"range": ">=0.0.3",
"nodes": [
"node_modules/karma-remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"lodash.template": {
"name": "lodash.template",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1096993,
"name": "lodash.template",
"dependency": "lodash.template",
"title": "Command Injection in lodash",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"severity": "high",
"cwe": [
"CWE-77",
"CWE-94"
],
"cvss": {
"score": 7.2,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
"range": "<=4.5.0"
}
],
"effects": [
"gulp-util"
],
"range": "*",
"nodes": [
"node_modules/lodash.template"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"meow": {
"name": "meow",
"severity": "high",
"isDirect": false,
"via": [
"trim-newlines"
],
"effects": [],
"range": "3.4.0 - 5.0.0",
"nodes": [
"node_modules/gulp-util/node_modules/meow"
],
"fixAvailable": true
},
"remap-istanbul": {
"name": "remap-istanbul",
"severity": "high",
"isDirect": false,
"via": [
"gulp-util"
],
"effects": [
"karma-remap-istanbul"
],
"range": "<=0.9.6",
"nodes": [
"node_modules/remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"taffydb": {
"name": "taffydb",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1089386,
"name": "taffydb",
"dependency": "taffydb",
"title": "TaffyDB can allow access to any data items in the DB",
"url": "https://github.com/advisories/GHSA-mxhp-79qh-mcx6",
"severity": "high",
"cwe": [
"CWE-20",
"CWE-668"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
"range": "<=2.7.3"
}
],
"effects": [
"jsdoc"
],
"range": "*",
"nodes": [
"node_modules/taffydb"
],
"fixAvailable": {
"name": "grunt-jsdoc",
"version": "0.4.0",
"isSemVerMajor": true
}
},
"trim-newlines": {
"name": "trim-newlines",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1095100,
"name": "trim-newlines",
"dependency": "trim-newlines",
"title": "Uncontrolled Resource Consumption in trim-newlines",
"url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v",
"severity": "high",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.0.1"
}
],
"effects": [
"meow"
],
"range": "<3.0.1",
"nodes": [
"node_modules/trim-newlines"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"high": 10,
"critical": 0,
"total": 10
},
"dependencies": {
"prod": 4,
"dev": 821,
"optional": 12,
"peer": 1,
"peerOptional": 0,
"total": 824
}
}
}
}
--- end ---
{"added": 824, "removed": 0, "changed": 0, "audited": 825, "funding": 114, "audit": {"auditReportVersion": 2, "vulnerabilities": {"cross-spawn": {"name": "cross-spawn", "severity": "high", "isDirect": false, "via": [{"source": 1100556, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=7.0.0 <7.0.5"}], "effects": [], "range": "7.0.0 - 7.0.4", "nodes": [""], "fixAvailable": true}, "grunt-jsdoc": {"name": "grunt-jsdoc", "severity": "high", "isDirect": true, "via": ["jsdoc"], "effects": [], "range": ">=0.4.1", "nodes": ["node_modules/grunt-jsdoc"], "fixAvailable": {"name": "grunt-jsdoc", "version": "0.4.0", "isSemVerMajor": true}}, "gulp-util": {"name": "gulp-util", "severity": "high", "isDirect": false, "via": ["lodash.template"], "effects": ["remap-istanbul"], "range": ">=1.1.0", "nodes": ["node_modules/gulp-util"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "jsdoc": {"name": "jsdoc", "severity": "high", "isDirect": false, "via": ["taffydb"], "effects": ["grunt-jsdoc"], "range": "3.2.0-dev - 3.6.11", "nodes": ["node_modules/grunt-jsdoc/node_modules/jsdoc"], "fixAvailable": {"name": "grunt-jsdoc", "version": "0.4.0", "isSemVerMajor": true}}, "karma-remap-istanbul": {"name": "karma-remap-istanbul", "severity": "high", "isDirect": true, "via": ["remap-istanbul"], "effects": [], "range": ">=0.0.3", "nodes": ["node_modules/karma-remap-istanbul"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "lodash.template": {"name": "lodash.template", "severity": "high", "isDirect": false, "via": [{"source": 1096993, "name": "lodash.template", "dependency": "lodash.template", "title": "Command Injection in lodash", "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm", "severity": "high", "cwe": ["CWE-77", "CWE-94"], "cvss": {"score": 7.2, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}, "range": "<=4.5.0"}], "effects": ["gulp-util"], "range": "*", "nodes": ["node_modules/lodash.template"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "meow": {"name": "meow", "severity": "high", "isDirect": false, "via": ["trim-newlines"], "effects": [], "range": "3.4.0 - 5.0.0", "nodes": ["node_modules/gulp-util/node_modules/meow"], "fixAvailable": true}, "remap-istanbul": {"name": "remap-istanbul", "severity": "high", "isDirect": false, "via": ["gulp-util"], "effects": ["karma-remap-istanbul"], "range": "<=0.9.6", "nodes": ["node_modules/remap-istanbul"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "taffydb": {"name": "taffydb", "severity": "high", "isDirect": false, "via": [{"source": 1089386, "name": "taffydb", "dependency": "taffydb", "title": "TaffyDB can allow access to any data items in the DB", "url": "https://github.com/advisories/GHSA-mxhp-79qh-mcx6", "severity": "high", "cwe": ["CWE-20", "CWE-668"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}, "range": "<=2.7.3"}], "effects": ["jsdoc"], "range": "*", "nodes": ["node_modules/taffydb"], "fixAvailable": {"name": "grunt-jsdoc", "version": "0.4.0", "isSemVerMajor": true}}, "trim-newlines": {"name": "trim-newlines", "severity": "high", "isDirect": false, "via": [{"source": 1095100, "name": "trim-newlines", "dependency": "trim-newlines", "title": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "severity": "high", "cwe": ["CWE-400"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.1"}], "effects": ["meow"], "range": "<3.0.1", "nodes": ["node_modules/trim-newlines"], "fixAvailable": true}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 0, "high": 10, "critical": 0, "total": 10}, "dependencies": {"prod": 4, "dev": 821, "optional": 12, "peer": 1, "peerOptional": 0, "total": 824}}}}
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN skipping integrity check for git dependency ssh://git@github.com/jdforrester/grunt-promise-q.git
npm WARN deprecated gulp-util@3.0.7: gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5
npm WARN deprecated istanbul@0.4.5: This module is no longer maintained, try this instead:
npm WARN deprecated npm i nyc
npm WARN deprecated Visit https://istanbul.js.org/integrations for other alternatives.
--- stdout ---
added 823 packages, and audited 824 packages in 10s
114 packages are looking for funding
run `npm fund` for details
# npm audit report
lodash.template *
Severity: high
Command Injection in lodash - https://github.com/advisories/GHSA-35jh-r3h4-6jhm
fix available via `npm audit fix --force`
Will install karma-remap-istanbul@0.0.2, which is a breaking change
node_modules/lodash.template
gulp-util >=1.1.0
Depends on vulnerable versions of lodash.template
node_modules/gulp-util
remap-istanbul <=0.9.6
Depends on vulnerable versions of gulp-util
node_modules/remap-istanbul
karma-remap-istanbul >=0.0.3
Depends on vulnerable versions of remap-istanbul
node_modules/karma-remap-istanbul
taffydb *
Severity: high
TaffyDB can allow access to any data items in the DB - https://github.com/advisories/GHSA-mxhp-79qh-mcx6
fix available via `npm audit fix --force`
Will install grunt-jsdoc@0.4.0, which is a breaking change
node_modules/taffydb
jsdoc 3.2.0-dev - 3.6.11
Depends on vulnerable versions of taffydb
node_modules/grunt-jsdoc/node_modules/jsdoc
grunt-jsdoc >=0.4.1
Depends on vulnerable versions of jsdoc
node_modules/grunt-jsdoc
trim-newlines <3.0.1
Severity: high
Uncontrolled Resource Consumption in trim-newlines - https://github.com/advisories/GHSA-7p7h-4mm5-852v
fix available via `npm audit fix`
node_modules/trim-newlines
meow 3.4.0 - 5.0.0
Depends on vulnerable versions of trim-newlines
node_modules/gulp-util/node_modules/meow
9 high severity vulnerabilities
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stderr ---
npm WARN skipping integrity check for git dependency ssh://git@github.com/jdforrester/grunt-promise-q.git
npm WARN deprecated gulp-util@3.0.7: gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5
npm WARN deprecated istanbul@0.4.5: This module is no longer maintained, try this instead:
npm WARN deprecated npm i nyc
npm WARN deprecated Visit https://istanbul.js.org/integrations for other alternatives.
--- stdout ---
added 823 packages, and audited 824 packages in 11s
114 packages are looking for funding
run `npm fund` for details
9 high severity vulnerabilities
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
Run `npm audit` for details.
--- end ---
$ /usr/bin/npm test
--- stderr ---
(node:433) Warning: Accessing non-existent property 'VERSION' of module exports inside circular dependency
(Use `node --trace-warnings ...` to show where the warning was created)
--- stdout ---
> oojs-ui@0.51.2 test
> npm run minify:svg:src && grunt test
> oojs-ui@0.51.2 minify:svg:src
> svgo --config=.svgo.config.js --pretty --quiet --recursive --folder ./src/themes/wikimediaui/images/
Running "eslint:all" (eslint) task
/src/repo/Gruntfile.js
510:17 warning Found non-literal argument to RegExp Constructor security/detect-non-literal-regexp
514:17 warning Found non-literal argument to RegExp Constructor security/detect-non-literal-regexp
518:17 warning Found non-literal argument to RegExp Constructor security/detect-non-literal-regexp
640:19 warning Found non-literal argument in require security/detect-non-literal-require
/src/repo/build/tasks/colorize-svg.js
339:1 warning This line has a length of 122. Maximum allowed is 100 max-len
/src/repo/demos/demo.js
476:1 warning This line has a length of 101. Maximum allowed is 100 max-len
/src/repo/src/ActionSet.js
157:1 warning This line has a length of 121. Maximum allowed is 100 max-len
158:1 warning This line has a length of 113. Maximum allowed is 100 max-len
/src/repo/src/Dialog.js
232:1 warning This line has a length of 110. Maximum allowed is 100 max-len
/src/repo/src/Element.js
14:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/Tool.js
31:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/ToolGroup.js
28:1 warning This line has a length of 104. Maximum allowed is 100 max-len
30:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/Toolbar.js
141:1 warning This line has a length of 120. Maximum allowed is 100 max-len
275:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/Widget.js
13:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/Window.js
12:1 warning This line has a length of 111. Maximum allowed is 100 max-len
22:1 warning This line has a length of 112. Maximum allowed is 100 max-len
26:1 warning This line has a length of 130. Maximum allowed is 100 max-len
45:1 warning This line has a length of 106. Maximum allowed is 100 max-len
46:1 warning This line has a length of 109. Maximum allowed is 100 max-len
136:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
364:1 warning This line has a length of 106. Maximum allowed is 100 max-len
563:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/WindowManager.js
717:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/dialogs/MessageDialog.js
145:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/dialogs/ProcessDialog.js
248:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/layouts/BookletLayout.js
50:1 warning This line has a length of 105. Maximum allowed is 100 max-len
127:1 warning This line has a length of 105. Maximum allowed is 100 max-len
135:1 warning This line has a length of 109. Maximum allowed is 100 max-len
/src/repo/src/layouts/FieldsetLayout.js
51:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/layouts/FormLayout.js
117:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/layouts/HorizontalLayout.js
24:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/src/layouts/IndexLayout.js
39:1 warning This line has a length of 104. Maximum allowed is 100 max-len
42:1 warning This line has a length of 102. Maximum allowed is 100 max-len
122:1 warning This line has a length of 112. Maximum allowed is 100 max-len
130:1 warning This line has a length of 114. Maximum allowed is 100 max-len
138:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/layouts/MenuLayout.js
84:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/layouts/PanelLayout.js
22:1 warning This line has a length of 101. Maximum allowed is 100 max-len
24:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/layouts/StackLayout.js
31:1 warning This line has a length of 108. Maximum allowed is 100 max-len
34:1 warning This line has a length of 104. Maximum allowed is 100 max-len
67:1 warning This line has a length of 132. Maximum allowed is 100 max-len
/src/repo/src/mixins/AccessKeyedElement.js
24:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/src/mixins/ClippableElement.js
21:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/src/mixins/DraggableElement.js
12:1 warning This line has a length of 103. Maximum allowed is 100 max-len
14:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/mixins/DraggableGroupElement.js
17:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/mixins/FlaggedElement.js
40:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/mixins/FloatableElement.js
18:1 warning This line has a length of 103. Maximum allowed is 100 max-len
220:1 warning This line has a length of 101. Maximum allowed is 100 max-len
/src/repo/src/mixins/IconElement.js
15:1 warning This line has a length of 106. Maximum allowed is 100 max-len
26:1 warning This line has a length of 105. Maximum allowed is 100 max-len
116:1 warning This line has a length of 127. Maximum allowed is 100 max-len
/src/repo/src/mixins/LabelElement.js
19:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/mixins/LookupElement.js
24:1 warning This line has a length of 103. Maximum allowed is 100 max-len
28:1 warning This line has a length of 103. Maximum allowed is 100 max-len
31:1 warning This line has a length of 102. Maximum allowed is 100 max-len
34:1 warning This line has a length of 106. Maximum allowed is 100 max-len
225:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/mixins/RequestManager.js
10:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/mixins/RequiredElement.js
13:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/mixins/TabIndexedElement.js
37:1 warning This line has a length of 107. Maximum allowed is 100 max-len
40:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/mixins/TitledElement.js
24:1 warning This line has a length of 122. Maximum allowed is 100 max-len
/src/repo/src/toolgroups/ListToolGroup.js
87:1 warning This line has a length of 107. Maximum allowed is 100 max-len
93:1 warning This line has a length of 104. Maximum allowed is 100 max-len
96:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/ActionWidget.js
19:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/ButtonInputWidget.js
32:1 warning This line has a length of 112. Maximum allowed is 100 max-len
33:1 warning This line has a length of 169. Maximum allowed is 100 max-len
130:1 warning This line has a length of 119. Maximum allowed is 100 max-len
/src/repo/src/widgets/ButtonMenuSelectWidget.js
46:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/CheckboxInputWidget.js
40:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/widgets/CheckboxMultiselectInputWidget.js
149:1 warning This line has a length of 125. Maximum allowed is 100 max-len
/src/repo/src/widgets/ComboBoxInputWidget.js
60:1 warning This line has a length of 104. Maximum allowed is 100 max-len
62:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/DropdownInputWidget.js
33:1 warning This line has a length of 106. Maximum allowed is 100 max-len
34:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/DropdownWidget.js
53:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/InputWidget.js
23:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/LabelWidget.js
38:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/MenuSelectWidget.js
32:1 warning This line has a length of 106. Maximum allowed is 100 max-len
36:1 warning This line has a length of 109. Maximum allowed is 100 max-len
39:1 warning This line has a length of 107. Maximum allowed is 100 max-len
45:1 warning This line has a length of 101. Maximum allowed is 100 max-len
51:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/MenuTagMultiselectWidget.js
23:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/widgets/MultilineTextInputWidget.js
179:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/NumberInputWidget.js
27:1 warning This line has a length of 109. Maximum allowed is 100 max-len
/src/repo/src/widgets/PopupButtonWidget.js
25:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/PopupWidget.js
31:1 warning This line has a length of 104. Maximum allowed is 100 max-len
32:1 warning This line has a length of 108. Maximum allowed is 100 max-len
34:1 warning This line has a length of 104. Maximum allowed is 100 max-len
54:1 warning This line has a length of 103. Maximum allowed is 100 max-len
57:1 warning This line has a length of 104. Maximum allowed is 100 max-len
60:1 warning This line has a length of 107. Maximum allowed is 100 max-len
69:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/ProgressBarWidget.js
41:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/RadioInputWidget.js
40:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/SearchInputWidget.js
56:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
71:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/widgets/SearchWidget.js
22:1 warning This line has a length of 104. Maximum allowed is 100 max-len
77:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/widgets/TabOptionWidget.js
67:1 warning This line has a length of 101. Maximum allowed is 100 max-len
/src/repo/src/widgets/TagMultiselectWidget.js
230:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
248:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
269:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
364:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/widgets/TextInputWidget.js
42:1 warning This line has a length of 102. Maximum allowed is 100 max-len
44:1 warning This line has a length of 104. Maximum allowed is 100 max-len
46:1 warning This line has a length of 105. Maximum allowed is 100 max-len
48:1 warning This line has a length of 106. Maximum allowed is 100 max-len
505:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/tests/TestTimer.js
68:1 warning This line has a length of 116. Maximum allowed is 100 max-len
✖ 116 problems (0 errors, 116 warnings)
Running "stylelint:dev" (stylelint) task
>> src/themes/apex/elements.less
>> 358:3 ⚠ Unexpected browser feature "css-dir-pseudo" is not supported by Edge 96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119, Chrome 97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119, Safari 12,13,14,15,11.1,12.1,13.1,14.1,15.1,15.2-15.3,15.4,15.5,15.6,16.0,16.1,16.2,16.3, Safari on iOS 11.3-11.4,12.0-12.1,12.2-12.5,13.0-13.1,13.2,13.3,13.4-13.7,14.0-14.4,14.5-14.8,15.0-15.1,15.2-15.3,15.4,15.5,15.6-15.8,16.0,16.1,16.2,16.3 plugin/no-unsupported-browser-features
>>
>> src/themes/wikimediaui/elements.less
>> 443:3 ⚠ Unexpected browser feature "css-dir-pseudo" is not supported by Edge 96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119, Chrome 97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119, Safari 12,13,14,15,11.1,12.1,13.1,14.1,15.1,15.2-15.3,15.4,15.5,15.6,16.0,16.1,16.2,16.3, Safari on iOS 11.3-11.4,12.0-12.1,12.2-12.5,13.0-13.1,13.2,13.3,13.4-13.7,14.0-14.4,14.5-14.8,15.0-15.1,15.2-15.3,15.4,15.5,15.6-15.8,16.0,16.1,16.2,16.3 plugin/no-unsupported-browser-features
>>
>> ⚠ 2 problems (0 errors, 2 warnings)
⚠ 2 warnings
>> Linted 125 files without errors
Running "banana:all" (banana) task
>> 1 message directory checked.
Running "pre-git-build" task
Running "clean:build" (clean) task
>> 0 paths cleaned.
Running "fileExists:src" (fileExists) task
Checking 247 files for existence...
OK
Running "tyops:src" (tyops) task
>> No typos found; 271 files checked for 16 typos.
Running "concat:i18nMessages" (concat) task
Running "concat:js" (concat) task
Running "concat:omnibusJs" (concat) task
Running "colorizeSvg:wikimediaui-icons-movement" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-movement.less".
Created "dist/tmp/themes/wikimediaui/icons-movement.rtl.less".
Created 69 SVG files.
Running "colorizeSvg:wikimediaui-icons-content" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-content.less".
Created "dist/tmp/themes/wikimediaui/icons-content.rtl.less".
Created 105 SVG files.
Running "colorizeSvg:wikimediaui-icons-alerts" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-alerts.less".
Created "dist/tmp/themes/wikimediaui/icons-alerts.rtl.less".
Created 45 SVG files.
Running "colorizeSvg:wikimediaui-icons-interactions" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-interactions.less".
Created "dist/tmp/themes/wikimediaui/icons-interactions.rtl.less".
Created 124 SVG files.
Running "colorizeSvg:wikimediaui-icons-moderation" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-moderation.less".
Created "dist/tmp/themes/wikimediaui/icons-moderation.rtl.less".
Created 61 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-core" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-core.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-core.rtl.less".
Created 40 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-styling" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-styling.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-styling.rtl.less".
Created 132 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-functions" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-functions.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-functions.rtl.less".
Created 21 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-list" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-list.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-list.rtl.less".
Created 24 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-advanced" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-advanced.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-advanced.rtl.less".
Created 189 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-citation" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-citation.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-citation.rtl.less".
Created 33 SVG files.
Running "colorizeSvg:wikimediaui-icons-media" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-media.less".
Created "dist/tmp/themes/wikimediaui/icons-media.rtl.less".
Created 69 SVG files.
Running "colorizeSvg:wikimediaui-icons-location" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-location.less".
Created "dist/tmp/themes/wikimediaui/icons-location.rtl.less".
Created 18 SVG files.
Running "colorizeSvg:wikimediaui-icons-user" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-user.less".
Created "dist/tmp/themes/wikimediaui/icons-user.rtl.less".
Created 51 SVG files.
Running "colorizeSvg:wikimediaui-icons-layout" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-layout.less".
Created "dist/tmp/themes/wikimediaui/icons-layout.rtl.less".
Created 30 SVG files.
Running "colorizeSvg:wikimediaui-icons-accessibility" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-accessibility.less".
Created "dist/tmp/themes/wikimediaui/icons-accessibility.rtl.less".
Created 33 SVG files.
Running "colorizeSvg:wikimediaui-icons-wikimedia" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-wikimedia.less".
Created "dist/tmp/themes/wikimediaui/icons-wikimedia.rtl.less".
Created 34 SVG files.
Running "colorizeSvg:wikimediaui-indicators" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/indicators.less".
Created "dist/tmp/themes/wikimediaui/indicators.rtl.less".
Created 8 SVG files.
Running "colorizeSvg:apex-icons-movement" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-movement.less".
Created "dist/tmp/themes/apex/icons-movement.rtl.less".
Created 23 SVG files.
Running "colorizeSvg:apex-icons-content" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-content.less".
Created "dist/tmp/themes/apex/icons-content.rtl.less".
Created 33 SVG files.
Running "colorizeSvg:apex-icons-alerts" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-alerts.less".
Created "dist/tmp/themes/apex/icons-alerts.rtl.less".
Created 14 SVG files.
Running "colorizeSvg:apex-icons-interactions" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-interactions.less".
Created "dist/tmp/themes/apex/icons-interactions.rtl.less".
Created 39 SVG files.
Running "colorizeSvg:apex-icons-moderation" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-moderation.less".
Created "dist/tmp/themes/apex/icons-moderation.rtl.less".
Created 19 SVG files.
Running "colorizeSvg:apex-icons-editing-core" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-core.less".
Created "dist/tmp/themes/apex/icons-editing-core.rtl.less".
Created 13 SVG files.
Running "colorizeSvg:apex-icons-editing-styling" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-styling.less".
Created "dist/tmp/themes/apex/icons-editing-styling.rtl.less".
Created 44 SVG files.
Running "colorizeSvg:apex-icons-editing-functions" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-functions.less".
Created "dist/tmp/themes/apex/icons-editing-functions.rtl.less".
Created 7 SVG files.
Running "colorizeSvg:apex-icons-editing-list" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-list.less".
Created "dist/tmp/themes/apex/icons-editing-list.rtl.less".
Created 8 SVG files.
Running "colorizeSvg:apex-icons-editing-advanced" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-advanced.less".
Created "dist/tmp/themes/apex/icons-editing-advanced.rtl.less".
Created 63 SVG files.
Running "colorizeSvg:apex-icons-editing-citation" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-citation.less".
Created "dist/tmp/themes/apex/icons-editing-citation.rtl.less".
Created 11 SVG files.
Running "colorizeSvg:apex-icons-media" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-media.less".
Created "dist/tmp/themes/apex/icons-media.rtl.less".
Created 23 SVG files.
Running "colorizeSvg:apex-icons-location" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-location.less".
Created "dist/tmp/themes/apex/icons-location.rtl.less".
Created 6 SVG files.
Running "colorizeSvg:apex-icons-user" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-user.less".
Created "dist/tmp/themes/apex/icons-user.rtl.less".
Created 15 SVG files.
Running "colorizeSvg:apex-icons-layout" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-layout.less".
Created "dist/tmp/themes/apex/icons-layout.rtl.less".
Created 10 SVG files.
Running "colorizeSvg:apex-icons-accessibility" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-accessibility.less".
Created "dist/tmp/themes/apex/icons-accessibility.rtl.less".
Created 11 SVG files.
Running "colorizeSvg:apex-icons-wikimedia" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-wikimedia.less".
Created "dist/tmp/themes/apex/icons-wikimedia.rtl.less".
Created 17 SVG files.
Running "colorizeSvg:apex-indicators" (colorizeSvg) task
Created "dist/tmp/themes/apex/indicators.less".
Created "dist/tmp/themes/apex/indicators.rtl.less".
Created 4 SVG files.
Running "less:wikimediaui" (less) task
>> 131 stylesheets created.
Running "less:apex" (less) task
>> 131 stylesheets created.
Running "cssjanus:dist" (cssjanus) task
File "dist/tmp/wikimediaui/styles/Element.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/ButtonElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/ClippableElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/FloatableElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/FlaggedElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/GroupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/LabelElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/IconElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/IndicatorElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/PendingElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/PopupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/TabIndexedElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/TitledElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Layout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/FieldLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/ActionFieldLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/FieldsetLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/FormLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/PanelLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/HorizontalLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Widget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/SelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/DecoratedOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/LabelWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MessageWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/IconWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/IndicatorWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonGroupWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/PopupWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/PopupButtonWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/InputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxMultiselectInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/DropdownInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioSelectInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TextInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuSectionOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/DropdownWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ComboBoxInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MultioptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxMultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxMultioptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ProgressBarWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/NumberInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/SelectFileInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ToggleWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ToggleSwitchWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/core.rtl.css" created.
File "dist/tmp/apex/styles/Element.rtl.css" created.
File "dist/tmp/apex/styles/elements/ButtonElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/ClippableElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/FloatableElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/FlaggedElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/GroupElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/LabelElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/IconElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/IndicatorElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/PendingElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/PopupElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/TabIndexedElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/TitledElement.rtl.css" created.
File "dist/tmp/apex/styles/Layout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/FieldLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/ActionFieldLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/FieldsetLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/FormLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/PanelLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/HorizontalLayout.rtl.css" created.
File "dist/tmp/apex/styles/Widget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/SelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/DecoratedOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/LabelWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MessageWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/IconWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/IndicatorWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonGroupWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/PopupWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/PopupButtonWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/InputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxMultiselectInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/DropdownInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioSelectInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TextInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuSectionOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/DropdownWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ComboBoxInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MultioptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxMultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxMultioptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ProgressBarWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/NumberInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/SelectFileInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ToggleWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ToggleSwitchWidget.rtl.css" created.
File "dist/tmp/apex/styles/core.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/DraggableElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/DraggableGroupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/LookupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/BookletLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/IndexLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/CopyTextLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/MenuLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/TabPanelLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/PageLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/StackLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ToggleButtonWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OutlineSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OutlineOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OutlineControlsWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TabSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TabOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonMenuSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TagMultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuTagMultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TagItemWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/SearchWidget.rtl.css" created.
File "dist/tmp/apex/styles/elements/DraggableElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/DraggableGroupElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/LookupElement.rtl.css" created.
File "dist/tmp/apex/styles/layouts/BookletLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/IndexLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/CopyTextLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/MenuLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/TabPanelLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/PageLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/StackLayout.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ToggleButtonWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OutlineSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OutlineOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OutlineControlsWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TabSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TabOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonMenuSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TagMultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuTagMultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TagItemWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/SearchWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Tool.rtl.css" created.
File "dist/tmp/wikimediaui/styles/tools/PopupTool.rtl.css" created.
File "dist/tmp/wikimediaui/styles/tools/ToolGroupTool.rtl.css" created.
File "dist/tmp/wikimediaui/styles/ToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/BarToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/PopupToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/ListToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/MenuToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Toolbar.rtl.css" created.
File "dist/tmp/apex/styles/Tool.rtl.css" created.
File "dist/tmp/apex/styles/tools/PopupTool.rtl.css" created.
File "dist/tmp/apex/styles/tools/ToolGroupTool.rtl.css" created.
File "dist/tmp/apex/styles/ToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/BarToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/PopupToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/ListToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/MenuToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/Toolbar.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ActionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Window.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Dialog.rtl.css" created.
File "dist/tmp/wikimediaui/styles/dialogs/MessageDialog.rtl.css" created.
File "dist/tmp/wikimediaui/styles/dialogs/ProcessDialog.rtl.css" created.
File "dist/tmp/wikimediaui/styles/WindowManager.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ActionWidget.rtl.css" created.
File "dist/tmp/apex/styles/Window.rtl.css" created.
File "dist/tmp/apex/styles/Dialog.rtl.css" created.
File "dist/tmp/apex/styles/dialogs/MessageDialog.rtl.css" created.
File "dist/tmp/apex/styles/dialogs/ProcessDialog.rtl.css" created.
File "dist/tmp/apex/styles/WindowManager.rtl.css" created.
Running "cssjanus:demoCss" (cssjanus) task
File "demos/styles/demo.rtl.css" created.
Running "concat:css" (concat) task
Running "concat:omnibusCss" (concat) task
Running "concat:codexTokensCss" (concat) task
Running "concat:demoCss" (concat) task
Running "copy:images" (copy) task
Copied 36 files
Running "copy:i18n" (copy) task
Copied 219 files
Running "copy:dist" (copy) task
Copied 4 files
Running "clean:tmp" (clean) task
>> 1 path cleaned.
Running "clean:demos" (clean) task
>> 0 paths cleaned.
Running "copy:demos" (copy) task
Created 40 directories, copied 2217 files
Running "demo-image-list" task
Running "exec:demos" (exec) task
>> [32mLoading composer repositories with package information[39m
>> [32mUpdating dependencies[39m
>> [32mLock file operations: 66 installs, 0 updates, 0 removals[39m
>> - Locking [32mcomposer/pcre[39m ([33m3.3.2[39m)
>> - Locking [32mcomposer/semver[39m ([33m3.4.3[39m)
>> - Locking [32mcomposer/spdx-licenses[39m ([33m1.5.8[39m)
>> - Locking [32mcomposer/xdebug-handler[39m ([33m3.0.5[39m)
>> - Locking [32mdealerdirect/phpcodesniffer-composer-installer[39m ([33mv1.0.0[39m)
>> - Locking [32mdoctrine/deprecations[39m ([33m1.1.3[39m)
>> - Locking [32mdoctrine/instantiator[39m ([33m2.0.0[39m)
>> - Locking [32mfelixfbecker/advanced-json-rpc[39m ([33mv3.2.1[39m)
>> - Locking [32mmediawiki/mediawiki-codesniffer[39m ([33mv45.0.0[39m)
>> - Locking [32mmediawiki/mediawiki-phan-config[39m ([33m0.14.0[39m)
>> - Locking [32mmediawiki/minus-x[39m ([33m1.1.3[39m)
>> - Locking [32mmediawiki/phan-taint-check-plugin[39m ([33m6.0.0[39m)
>> - Locking [32mmicrosoft/tolerant-php-parser[39m ([33mv0.1.2[39m)
>> - Locking [32mmyclabs/deep-copy[39m ([33m1.12.1[39m)
>> - Locking [32mnetresearch/jsonmapper[39m ([33mv4.5.0[39m)
>> - Locking [32mnikic/php-parser[39m ([33mv5.3.1[39m)
>> - Locking [32mphan/phan[39m ([33m5.4.3[39m)
>> - Locking [32mphar-io/manifest[39m ([33m2.0.4[39m)
>> - Locking [32mphar-io/version[39m ([33m3.2.1[39m)
>> - Locking [32mphp-parallel-lint/php-console-color[39m ([33mv1.0.1[39m)
>> - Locking [32mphp-parallel-lint/php-console-highlighter[39m ([33mv1.0.0[39m)
>> - Locking [32mphp-parallel-lint/php-parallel-lint[39m ([33mv1.4.0[39m)
>> - Locking [32mphpcsstandards/phpcsextra[39m ([33m1.2.1[39m)
>> - Locking [32mphpcsstandards/phpcsutils[39m ([33m1.0.12[39m)
>> - Locking [32mphpdocumentor/reflection-common[39m ([33m2.2.0[39m)
>> - Locking [32mphpdocumentor/reflection-docblock[39m ([33m5.6.0[39m)
>> - Locking [32mphpdocumentor/type-resolver[39m ([33m1.10.0[39m)
>> - Locking [32mphpstan/phpdoc-parser[39m ([33m2.0.0[39m)
>> - Locking [32mphpunit/php-code-coverage[39m ([33m9.2.32[39m)
>> - Locking [32mphpunit/php-file-iterator[39m ([33m3.0.6[39m)
>> - Locking [32mphpunit/php-invoker[39m ([33m3.1.1[39m)
>> - Locking [32mphpunit/php-text-template[39m ([33m2.0.4[39m)
>> - Locking [32mphpunit/php-timer[39m ([33m5.0.3[39m)
>> - Locking [32mphpunit/phpunit[39m ([33m9.6.16[39m)
>> - Locking [32mpsr/container[39m ([33m2.0.2[39m)
>> - Locking [32mpsr/log[39m ([33m3.0.2[39m)
>> - Locking [32msabre/event[39m ([33m5.1.7[39m)
>> - Locking [32msebastian/cli-parser[39m ([33m1.0.2[39m)
>> - Locking [32msebastian/code-unit[39m ([33m1.0.8[39m)
>> - Locking [32msebastian/code-unit-reverse-lookup[39m ([33m2.0.3[39m)
>> - Locking [32msebastian/comparator[39m ([33m4.0.8[39m)
>> - Locking [32msebastian/complexity[39m ([33m2.0.3[39m)
>> - Locking [32msebastian/diff[39m ([33m4.0.6[39m)
>> - Locking [32msebastian/environment[39m ([33m5.1.5[39m)
>> - Locking [32msebastian/exporter[39m ([33m4.0.6[39m)
>> - Locking [32msebastian/global-state[39m ([33m5.0.7[39m)
>> - Locking [32msebastian/lines-of-code[39m ([33m1.0.4[39m)
>> - Locking [32msebastian/object-enumerator[39m ([33m4.0.4[39m)
>> - Locking [32msebastian/object-reflector[39m ([33m2.0.4[39m)
>> - Locking [32msebastian/recursion-context[39m ([33m4.0.5[39m)
>> - Locking [32msebastian/resource-operations[39m ([33m3.0.4[39m)
>> - Locking [32msebastian/type[39m ([33m3.2.1[39m)
>> - Locking [32msebastian/version[39m ([33m3.0.2[39m)
>> - Locking [32msquizlabs/php_codesniffer[39m ([33m3.10.3[39m)
>> - Locking [32msymfony/console[39m ([33mv7.1.8[39m)
>> - Locking [32msymfony/deprecation-contracts[39m ([33mv3.5.0[39m)
>> - Locking [32msymfony/polyfill-ctype[39m ([33mv1.31.0[39m)
>> - Locking [32msymfony/polyfill-intl-grapheme[39m ([33mv1.31.0[39m)
>> - Locking [32msymfony/polyfill-intl-normalizer[39m ([33mv1.31.0[39m)
>> - Locking [32msymfony/polyfill-mbstring[39m ([33mv1.31.0[39m)
>> - Locking [32msymfony/polyfill-php80[39m ([33mv1.31.0[39m)
>> - Locking [32msymfony/service-contracts[39m ([33mv3.5.0[39m)
>> - Locking [32msymfony/string[39m ([33mv7.1.8[39m)
>> - Locking [32mtheseer/tokenizer[39m ([33m1.2.3[39m)
>> - Locking [32mtysonandre/var_representation_polyfill[39m ([33m0.1.3[39m)
>> - Locking [32mwebmozart/assert[39m ([33m1.11.0[39m)
>> [32mWriting lock file[39m
>> [32mInstalling dependencies from lock file[39m
>> Nothing to install, update or remove
>> [32m8 package suggestions were added by new dependencies, use `composer suggest` to see details.[39m
>> [32mGenerating autoload files[39m
>> No installed packages - skipping audit.
Running "exec:rubyTestSuiteGenerator" (exec) task
>> Generated 8253 test cases.
>> * ActionFieldLayout: 480
>> * FieldLayout: 544
>> * FieldsetLayout: 79
>> * FormLayout: 6
>> * HorizontalLayout: 1
>> * IndexLayout: 106
>> * MenuLayout: 78
>> * PanelLayout: 69
>> * StackLayout: 73
>> * TabPanelLayout: 69
>> * ButtonGroupWidget: 14
>> * ButtonInputWidget: 568
>> * ButtonWidget: 616
>> * CheckboxInputWidget: 160
>> * CheckboxMultiselectInputWidget: 156
>> * ComboBoxInputWidget: 751
>> * DropdownInputWidget: 194
>> * HiddenInputWidget: 9
>> * IconWidget: 92
>> * IndicatorWidget: 66
>> * LabelWidget: 34
>> * MessageWidget: 92
>> * MultilineTextInputWidget: 715
>> * NumberInputWidget: 964
>> * OptionWidget: 122
>> * ProgressBarWidget: 29
>> * RadioInputWidget: 160
>> * RadioSelectInputWidget: 156
>> * SearchInputWidget: 607
>> * SelectFileInputWidget: 338
>> * SelectWidget: 6
>> * TabOptionWidget: 139
>> * TabSelectWidget: 38
>> * TextInputWidget: 675
>> * ToggleSwitchWidget: 38
>> * ToggleWidget: 9
Running "exec:phpGenerateJSPHPForKarma" (exec) task
>> [32mLoading composer repositories with package information[39m
>> [32mUpdating dependencies[39m
>> Nothing to modify in lock file
>> [32mInstalling dependencies from lock file (including require-dev)[39m
>> Nothing to install, update or remove
>> [32mGenerating autoload files[39m
>> [32m42 packages you are using are looking for funding.[39m
>> [32mUse the `composer fund` command to find out more![39m
>> [32mNo security vulnerability advisories found[39m
Running "clean:coverage" (clean) task
>> 0 paths cleaned.
Running "karma:main" (karma) task
[32m20 11 2024 08:37:59.275:INFO [karma-server]: [39mKarma v6.3.20 server started at http://localhost:9876/
[32m20 11 2024 08:37:59.277:INFO [launcher]: [39mLaunching browsers ChromeCustom with concurrency unlimited
[32m20 11 2024 08:37:59.280:INFO [launcher]: [39mStarting browser ChromeHeadless
[32m20 11 2024 08:37:59.788:INFO [Chrome Headless 126.0.6478.182 (Linux x86_64)]: [39mConnected on socket pDiDozCopzHNQszaAAAB with id 53169352
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
..................................................................
Chrome Headless 126.0.6478.182 (Linux x86_64): Executed 8306 of 8306 SUCCESS (38.752 secs / 37.147 secs)
TOTAL: 8306 SUCCESS
=============================== Coverage summary ===============================
Statements : 56.11% ( 4222/7524 )
Branches : 36.14% ( 1437/3976 )
Functions : 49.37% ( 550/1114 )
Lines : 56.2% ( 4168/7417 )
================================================================================
Done.
--- end ---
{"1100556": {"source": 1100556, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=7.0.0 <7.0.5"}}
Upgrading n:cross-spawn from 7.0.3 -> 7.0.6
{"1095100": {"source": 1095100, "name": "trim-newlines", "dependency": "trim-newlines", "title": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "severity": "high", "cwe": ["CWE-400"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.1"}}
{"1095100": {"source": 1095100, "name": "trim-newlines", "dependency": "trim-newlines", "title": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "severity": "high", "cwe": ["CWE-400"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.1"}}
$ package-lock-lint package-lock.json
--- stdout ---
Checking package-lock.json
--- end ---
build: Updating cross-spawn to 7.0.6
* https://github.com/advisories/GHSA-3xgq-45jj-v275
$ git add .
--- stdout ---
--- end ---
$ git commit -F /tmp/tmpc4a4hlxo
--- stdout ---
[master ddff60c] build: Updating cross-spawn to 7.0.6
1 file changed, 6 insertions(+), 6 deletions(-)
--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From ddff60c695245435a90d217c31306d5f2fc0ec34 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Wed, 20 Nov 2024 08:38:42 +0000
Subject: [PATCH] build: Updating cross-spawn to 7.0.6
* https://github.com/advisories/GHSA-3xgq-45jj-v275
Change-Id: I4a72e8f06d407782a4eb467ce0bc8caf6b02403f
---
package-lock.json | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index 5f091a5..abdedeb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2030,9 +2030,9 @@
}
},
"node_modules/cross-spawn": {
- "version": "7.0.3",
- "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
- "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
+ "version": "7.0.6",
+ "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+ "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
"dev": true,
"dependencies": {
"path-key": "^3.1.0",
@@ -11046,9 +11046,9 @@
}
},
"cross-spawn": {
- "version": "7.0.3",
- "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
- "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
+ "version": "7.0.6",
+ "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+ "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
"dev": true,
"requires": {
"path-key": "^3.1.0",
--
2.39.2
--- end ---