fix: Remove CVE-2020-7774 vulnerability by updating the y18n package (#…

…4693) * Update y18n package to latest non-vulnerable version * Fix ini and ssri * Merge branch 'main' into southworks/update/y18n * Fix lint
microsoft · Jun 25, 2024 · 73d4e4a · 73d4e4a
1 parent 031c2ac
commit 73d4e4a
Show file tree

Hide file tree

Showing 4 changed files with 443 additions and 1,341 deletions.
diff --git a/libraries/adaptive-expressions-ie11/package.json b/libraries/adaptive-expressions-ie11/package.json
@@ -20,9 +20,9 @@
   "types": "./dist/index.d.ts",
   "dependencies": {
     "adaptive-expressions": "4.1.6",
-    "clean-webpack-plugin": "^3.0.0",
+    "clean-webpack-plugin": "^4.0.0",
     "core-js": "^3.3.2",
-    "terser-webpack-plugin": "^4.2.3"
+    "terser-webpack-plugin": "^5.3.10"
   },
   "devDependencies": {
     "@babel/core": "^7.23.2",
@@ -35,8 +35,8 @@
     "babel-loader": "^8.0.6",
     "ts-loader": "^7.0.5",
     "typescript": "3.5.3",
-    "webpack": "^4.43.0",
-    "webpack-cli": "^3.3.12"
+    "webpack": "^5.92.0",
+    "webpack-cli": "^5.1.4"
   },
   "scripts": {
     "build": "webpack",

diff --git a/libraries/adaptive-expressions-ie11/webpack.config.js b/libraries/adaptive-expressions-ie11/webpack.config.js
@@ -23,9 +23,11 @@ module.exports = () => {
             minimize: true,
             minimizer: [new TerserPlugin()],
         },
-        devtool: 'none',
         resolve: {
             extensions: ['.ts', '.js'],
+            fallback: {
+                'adaptive-expressions': require.resolve('adaptive-expressions'),
+            },
         },
         module: {
             rules: [
@@ -37,7 +39,7 @@ module.exports = () => {
                 {
                     test: /\.js$/,
                     loader: 'babel-loader',
-                    query: { compact: false },
+                    options: { compact: false },
                     include: [
                         resolvePackageRoot('adaptive-expressions'),
                         resolvePackageRoot('@microsoft/recognizers-text-data-types-timex-expression'),

diff --git a/tools/package.json b/tools/package.json
@@ -56,8 +56,7 @@
     "random-js": "1.0.4",
     "should": "^8.3.1",
     "sinon": "^2.1.0",
-    "xmlbuilder": "0.4.3",
-    "yargs": "3.29.0"
+    "xmlbuilder": "0.4.3"
   },
   "homepage": "http://github.com/azure/azure-sdk-for-node",
   "repository": {