Skip to content

Commit

Permalink
Dependencies update (#1368)
Browse files Browse the repository at this point in the history
## Context

Chore of node dependencies update

## Proposed solution

The current PR is the addition of 3 strategies

* Cherry pick of dependabot suggested updates that passes CI tests.
* `yarn upgrade --latest` of packages indicated by `yarn audit`. Commit
called `bump` and signed by hexaltation
* `yarn upgrade` of packages remaining in `yarn audit`

### Still to do

The following packages needs more work than a simple upgrade strategy :

* connect-redis
* engine.io
* engine.io-client
* express

## Has this been tested?

Tests are done by the CI


## Updated dependencies

###
[axios](f4f02bd)

Bumps [axios](https://github.com/axios/axios) from 1.6.8 to 1.7.4.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.6.8...v1.7.4)


###
[cookie](136d0b4)

Bumps [cookie](https://github.com/jshttp/cookie) from 0.5.0 to 0.7.0.
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.5.0...v0.7.0)


###
[cross-spawn](b785ff9)

Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from
7.0.3 to 7.0.6.
-
[Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
-
[Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)


###
[express](db1097d)

Bumps [express](https://github.com/expressjs/express) from 4.19.2 to
4.20.0.
- [Release notes](https://github.com/expressjs/express/releases)
-
[Changelog](https://github.com/expressjs/express/blob/master/History.md)
-
[Commits](expressjs/express@4.19.2...4.20.0)


###
[braces](f7ec7e5)

Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to
3.0.3.
-
[Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)


###
[elliptic](d699d97)

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.4 to
6.6.1.
- [Commits](indutny/elliptic@v6.5.4...v6.6.1)


###
[tar](7e7a077)

Bumps [tar](https://github.com/isaacs/node-tar) from 6.1.13 to 6.2.1.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.1.13...v6.2.1)


###
[fast-xml-parser](fe78cd8)

Bumps
[fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser)
from 4.3.6 to 4.5.0.
- [Release
notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
-
[Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
-
[Commits](NaturalIntelligence/fast-xml-parser@v4.3.6...v4.5.0)


###
[nodemon](4bccb62)

Bumps [nodemon](https://github.com/remy/nodemon) from 2.0.4 to 3.1.9
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v2.0.4...v3.1.9)


###
[jsdom](73119ae)

Bumps [jsdom](https://github.com/jsdom/jsdom) from 23.0.0 to 25.0.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md)
- [Commits](jsdom/jsdom@23.0.0...25.0.1)


###
[@googleapis/drive](35e1f61)

Bumps
[@googleapis/drive](https://github.com/googleapis/google-api-nodejs-client)
from 0.3.1 to 8.14.0
- [Release
notes](https://github.com/googleapis/google-api-nodejs-client/releases)
-
[Changelog](https://github.com/googleapis/google-api-nodejs-client/blob/main/CHANGELOG.md)
-
[Commits](googleapis/google-api-nodejs-client@drive-v0.3.1...drive-v8.14.0)


###
[@googleapis/oauth2](e8f63a1)

Bumps [@googleapis/oauth2]() from 0.2.0 to 1.0.7
- [Release
notes](https://github.com/googleapis/google-api-nodejs-client/releases)
-
[Changelog](https://github.com/googleapis/google-api-nodejs-client/blob/main/CHANGELOG.md)
-
[Commits](googleapis/google-api-nodejs-client@oauth2-v0.2.0...oauth2-v1.0.7)


###
[ws](a2aa253)

Bumps [ws](https://github.com/websockets/ws) from 8.13.0 to 8.18.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.13.0...8.18.0)


###
[cookie-parser](c7d85f4)

Bumps to [cookie-parser](https://github.com/expressjs/cookie-parser)
from 1.4.3 to 1.4.7
- [Release notes](https://github.com/expressjs/cookie-parser/releases)
-
[Commits](expressjs/cookie-parser@1.4.3...1.4.7)

###
[bootstrap](d036d28)

Bump [bootstrap](https://github.com/twbs/bootstrap) from 3.4.1 to 5.3.3
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v3.4.1...v5.3.3)

Dependencies upgraded:
* bumps
[@popperjs/core](https://github.com/floating-ui/floating-ui/tree/v2.x)
from 2.3.3 to 2.11.8
- [Release notes](https://github.com/floating-ui/floating-ui/releases)
-
[Commits](floating-ui/floating-ui@v2.3.3...v2.10.1)


### [webpack
[dev]](e9e79ea)

Bumps to [webpack](https://github.com/webpack/webpack) from 5.91.0 to
5.97.1
- [Release notes](https://github.com/webpack/webpack/releases)
-
[Commits](webpack/webpack@v5.91.0...v5.97.1)


### [sinon
[dev]](9e2df21)

Bumps to [sinon](https://github.com/sinonjs/sinon) from 17.0.1 to 19.0.2
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v17.0.1...v19.0.2)


### [mocha
[dev]](73a7c65)

Bumps to [mocha](https://github.com/mochajs/mocha) from 10.2.0 to 11.0.1
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v10.2.0...v11.0.1)


### [Upgrade
@typescript-eslint/eslint-plugin](aef1220)

### [Upgrade
mocha-webdriver](b7a340e)

### [Resolve ip with
neoip](59bb354)

It appears that [ip](https://github.com/indutny/node-ip) as no longer
maintenance effort.
[This
solution](indutny/node-ip#150 (comment))
of resolving ip by [neoip](https://github.com/Zaptic/neoip) has been
applied to grist-core.

- [Release notes](https://github.com/zaptic/neoip/releases)
- [Commits](Zaptic/neoip@29e2171...ea3694f)
  • Loading branch information
paulfitz authored Jan 14, 2025
2 parents e0772fe + d036d28 commit d6b9512
Show file tree
Hide file tree
Showing 2 changed files with 778 additions and 1,201 deletions.
29 changes: 15 additions & 14 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -94,38 +94,38 @@
"eslint": "8.18.0",
"http-proxy": "1.18.1",
"i18next-scanner": "4.4.0",
"mocha": "10.2.0",
"mocha": "11.0.1",
"mocha-webdriver": "0.3.4",
"moment-locales-webpack-plugin": "^1.2.0",
"nock": "13.5.5",
"nodemon": "^2.0.4",
"nodemon": "^3.1.9",
"otplib": "12.0.1",
"proper-lockfile": "4.1.2",
"sinon": "17.0.1",
"sinon": "19.0.2",
"source-map-loader": "^0.2.4",
"tmp-promise": "1.0.5",
"ts-interface-builder": "0.3.2",
"typescript": "4.7.4",
"webpack": "5.91.0",
"webpack": "5.97.1",
"webpack-cli": "4.10.0",
"why-is-node-running": "2.2.2"
},
"dependencies": {
"@googleapis/drive": "0.3.1",
"@googleapis/oauth2": "0.2.0",
"@googleapis/drive": "8.14.0",
"@googleapis/oauth2": "1.0.7",
"@gristlabs/connect-sqlite3": "0.9.11-grist.5",
"@gristlabs/express-session": "1.17.0",
"@gristlabs/grist-widget": "^0.0.5",
"@gristlabs/moment-guess": "1.2.4-grist.1",
"@gristlabs/pidusage": "2.0.17",
"@gristlabs/sqlite3": "5.1.4-grist.8",
"@popperjs/core": "2.3.3",
"@popperjs/core": "2.11.8",
"accept-language-parser": "1.5.0",
"ace-builds": "1.23.3",
"async-mutex": "0.2.4",
"axios": "1.6.8",
"axios": "1.7.4",
"backbone": "1.3.3",
"bootstrap": "3.4.1",
"bootstrap": "5.3.3",
"bootstrap-datepicker": "1.9.0",
"bowser": "2.7.0",
"bullmq": "5.8.7",
Expand All @@ -134,8 +134,8 @@
"commander": "9.3.0",
"components-jqueryui": "1.12.1",
"connect-redis": "3.4.0",
"cookie": "0.5.0",
"cookie-parser": "1.4.3",
"cookie": "0.7.0",
"cookie-parser": "1.4.7",
"csv": "6.3.8",
"currency-symbol-map": "5.1.0",
"diff-match-patch": "1.0.5",
Expand All @@ -144,7 +144,7 @@
"engine.io": "^6.5.4",
"engine.io-client": "^6.5.3",
"exceljs": "4.2.1",
"express": "4.19.2",
"express": "4.20.0",
"express-rate-limit": "7.2.0",
"file-type": "16.5.4",
"fs-extra": "7.0.0",
Expand All @@ -160,7 +160,7 @@
"image-size": "0.6.3",
"jquery": "3.5.0",
"js-yaml": "3.14.1",
"jsdom": "^23.0.0",
"jsdom": "^25.0.1",
"jsesc": "3.0.2",
"jsonwebtoken": "9.0.2",
"knockout": "3.5.0",
Expand Down Expand Up @@ -200,9 +200,10 @@
"underscore": "1.12.1",
"uuid": "10.0.0",
"winston": "2.4.5",
"ws": "8.13.0"
"ws": "8.18.0"
},
"resolutions": {
"**/ip": "https://registry.npmjs.org/neoip/-/neoip-2.1.0.tgz",
"jquery": "3.5.0",
"ts-interface-checker": "1.0.2",
"@gristlabs/sqlite3": "5.1.4-grist.8"
Expand Down
Loading

0 comments on commit d6b9512

Please sign in to comment.