Skip to content

Commit 281cf10

Browse files
authored
WIP - Fix js vulnerabilities (#520)
* Autofix using yarn-audit-fix * Update jest to v27 * Upgrade axios * upgrade babel-loader * Upgrade minor versions * Upgrade webpack-cli and imports-loader * Upgrade marked * Ignore linter error for any type
1 parent ad90eba commit 281cf10

File tree

5 files changed

+3341
-3702
lines changed

5 files changed

+3341
-3702
lines changed

client/app/bundles/comments/components/CommentBox/CommentBox.jsx

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,7 @@ class CommentBox extends BaseComponent {
2222
submitCommentError: PropTypes.string,
2323
$$comments: PropTypes.arrayOf(commentPropTypes),
2424
}).isRequired,
25+
// eslint-disable-next-line react/forbid-prop-types
2526
intl: PropTypes.objectOf(PropTypes.any).isRequired,
2627
};
2728

client/app/bundles/comments/components/CommentBox/CommentForm/CommentForm.jsx

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,7 @@ class CommentForm extends BaseComponent {
3838
actions: PropTypes.objectOf(PropTypes.oneOfType([PropTypes.any])).isRequired,
3939
error: PropTypes.oneOfType([PropTypes.any]),
4040
cssTransitionGroupClassNames: PropTypes.oneOfType([PropTypes.func, PropTypes.any]).isRequired,
41+
// eslint-disable-next-line react/forbid-prop-types
4142
intl: PropTypes.objectOf(PropTypes.any).isRequired,
4243
};
4344

client/app/bundles/comments/components/CommentBox/CommentList/Comment/Comment.jsx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ import BaseComponent from 'libs/components/BaseComponent';
22
import React from 'react';
33
import PropTypes from 'prop-types';
44

5-
import marked from 'marked';
5+
import { marked } from 'marked';
66
import css from './Comment.module.scss';
77

88
export default class Comment extends BaseComponent {

package.json

Lines changed: 34 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -27,34 +27,34 @@
2727
"build:clean": "rm -rf public/webpack || true"
2828
},
2929
"dependencies": {
30-
"@babel/cli": "^7.12.10",
31-
"@babel/core": "^7.12.10",
32-
"@babel/plugin-transform-runtime": "^7.12.10",
33-
"@babel/preset-env": "^7.12.10",
34-
"@babel/preset-react": "^7.12.10",
30+
"@babel/cli": "^7.21.0",
31+
"@babel/core": "^7.21.0",
32+
"@babel/plugin-transform-runtime": "^7.21.0",
33+
"@babel/preset-env": "^7.20.2",
34+
"@babel/preset-react": "^7.18.6",
3535
"@rails/actioncable": "7.0.4-1",
3636
"autoprefixer": "^7.1.5",
37-
"axios": "^0.17.1",
38-
"babel-loader": "^8.2.3",
37+
"axios": "^0.21.1",
38+
"babel-loader": "^9.1.2",
3939
"babel-plugin-macros": "^3.1.0",
4040
"babel-plugin-transform-react-remove-prop-types": "^0.4.24",
41-
"bootstrap-loader": "^4.0.0",
42-
"bootstrap-sass": "^3.3.7",
43-
"classnames": "^2.2.5",
41+
"bootstrap-loader": "^4.0.2",
42+
"bootstrap-sass": "^3.4.3",
43+
"classnames": "^2.3.2",
4444
"compression-webpack-plugin": "9",
45-
"css-loader": "^6.5.1",
46-
"css-minimizer-webpack-plugin": "^3.3.1",
47-
"es5-shim": "^4.5.9",
45+
"css-loader": "^6.7.3",
46+
"css-minimizer-webpack-plugin": "^3.4.1",
47+
"es5-shim": "^4.6.7",
4848
"estraverse": "^4.2.0",
4949
"expose-loader": "^4.0.0",
5050
"immutable": "^3.8.2",
51-
"imports-loader": "^1.1.0",
51+
"imports-loader": "^4.0.0",
5252
"intl": "^1.2.5",
5353
"jquery": "^3.2.1",
5454
"jquery-ujs": "^1.2.2",
5555
"loader-utils": "^1.1.0",
5656
"lodash": "^4.17.4",
57-
"marked": "^0.3.6",
57+
"marked": "^4.0.0",
5858
"node-uuid": "^1.4.8",
5959
"postcss": "^8.4.5",
6060
"postcss-loader": "6.2.1",
@@ -72,49 +72,49 @@
7272
"redux": "^3.7.2",
7373
"redux-thunk": "^2.2.0",
7474
"resolve-url-loader": "^2.2.0",
75-
"sass": "^1.46.0",
76-
"sass-loader": "^12.4.0",
77-
"sass-resources-loader": "^2.2.4",
75+
"sass": "^1.58.3",
76+
"sass-loader": "^12.6.0",
77+
"sass-resources-loader": "^2.2.5",
7878
"shakapacker": "6.5.5",
7979
"style-loader": "^3.3.1",
8080
"terser-webpack-plugin": "5",
8181
"turbolinks": "^5.2.0",
8282
"url-loader": "^0.6.2",
8383
"webpack": "5",
8484
"webpack-assets-manifest": "5",
85-
"webpack-cli": "4",
85+
"webpack-cli": "5",
8686
"webpack-merge": "5"
8787
},
8888
"devDependencies": {
8989
"@babel/eslint-parser": "^7.16.5",
90-
"@pmmmwh/react-refresh-webpack-plugin": "^0.5.4",
90+
"@pmmmwh/react-refresh-webpack-plugin": "^0.5.10",
9191
"@webpack-cli/serve": "^1.6.0",
9292
"babel-eslint": "^8.0.2",
93-
"babel-jest": "^23.4.2",
94-
"body-parser": "^1.18.2",
95-
"eslint": "^8.6.0",
96-
"eslint-config-prettier": "^8.3.0",
93+
"babel-jest": "^27.2.1",
94+
"body-parser": "^1.20.2",
95+
"eslint": "^8.35.0",
96+
"eslint-config-prettier": "^8.6.0",
9797
"eslint-config-shakacode": "^19.0.0",
9898
"eslint-import-resolver-webpack": "^0.8.3",
99-
"eslint-plugin-import": "^2.25.4",
100-
"eslint-plugin-jest": "^25.3.4",
101-
"eslint-plugin-jsx-a11y": "^6.5.1",
102-
"eslint-plugin-prettier": "^4.0.0",
103-
"eslint-plugin-react": "^7.28.0",
104-
"eslint-plugin-react-hooks": "^4.3.0",
99+
"eslint-plugin-import": "^2.27.5",
100+
"eslint-plugin-jest": "^27.2.1",
101+
"eslint-plugin-jsx-a11y": "^6.7.1",
102+
"eslint-plugin-prettier": "^4.2.1",
103+
"eslint-plugin-react": "^7.32.2",
104+
"eslint-plugin-react-hooks": "^4.6.0",
105105
"estraverse-fb": "^1.3.2",
106-
"express": "^4.16.2",
106+
"express": "^4.18.2",
107107
"identity-obj-proxy": "^3.0.0",
108-
"jest": "^23.5.0",
109-
"mini-css-extract-plugin": "^2.4.6",
108+
"jest": "^27.2.1",
109+
"mini-css-extract-plugin": "^2.7.2",
110110
"preload-webpack-plugin": "^3.0.0-alpha.1",
111111
"prettier": "^2.2.1",
112112
"prettier-eslint-cli": "^5.0.1",
113113
"react-refresh": "^0.11.0",
114114
"react-transform-hmr": "^1.0.4",
115115
"regenerator-runtime": "^0.12.1",
116116
"sleep": "^6.2.0",
117-
"webpack-dev-server": "^4.7.3"
117+
"webpack-dev-server": "^4.11.1"
118118
},
119119
"browser": {
120120
"fs": false

0 commit comments

Comments
 (0)