From 0c5779c230d8caf66de1e4135a1a9a0e2e656bed Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 14 Aug 2024 19:44:00 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-7361793 --- package-lock.json | 181 +++++++++++++++++++++++++++++++--------------- package.json | 2 +- 2 files changed, 124 insertions(+), 59 deletions(-) diff --git a/package-lock.json b/package-lock.json index d5f79aa1d158e..773ced11d9933 100644 --- a/package-lock.json +++ b/package-lock.json @@ -57,7 +57,7 @@ "marked": "^11.2.0", "moment": "^2.30.1", "moment-timezone": "^0.5.45", - "nextcloud-vue-collections": "^0.12.0", + "nextcloud-vue-collections": "^0.13.0", "node-vibrant": "^3.1.6", "p-limit": "^4.0.0", "p-queue": "^7.4.1", @@ -4196,30 +4196,18 @@ } }, "node_modules/@nextcloud/axios": { - "version": "2.4.0", - "resolved": "https://registry.npmjs.org/@nextcloud/axios/-/axios-2.4.0.tgz", - "integrity": "sha512-ARGzT9p45L0sjRIV3JZWGPtMbwgxd4eEMcMJNn58NA7UQIsMkTwHb5pXQjL+5elXY9zp/JMz7n/7SHTp0bkuXQ==", - "dependencies": { - "@nextcloud/auth": "^2.1.0", - "@nextcloud/router": "^2.1.2", - "axios": "^1.4.0" - }, - "engines": { - "node": "^20.0.0", - "npm": "^9.0.0" - } - }, - "node_modules/@nextcloud/axios/node_modules/@nextcloud/router": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@nextcloud/router/-/router-2.2.0.tgz", - "integrity": "sha512-M4AVGnB5tt3MYO5RpH/R2jq7z/nW05AmRhk4Lh68krVwRIYGo8pgNikKrPGogHd2Q3UgzF5Py1drHz3uuV99bQ==", + "version": "2.5.0", + "resolved": "https://registry.npmjs.org/@nextcloud/axios/-/axios-2.5.0.tgz", + "integrity": "sha512-82LQ5PZA0ZVUnS8QiGoAGOR5kE7EKD84qEEgeZJ+Y7p5iljwi3AT6niQuP7YuHjt3MKM+6jQiyghZk5SquiszQ==", + "license": "GPL-3.0", "dependencies": { - "@nextcloud/typings": "^1.7.0", - "core-js": "^3.6.4" + "@nextcloud/auth": "^2.3.0", + "@nextcloud/router": "^3.0.1", + "axios": "^1.6.8" }, "engines": { "node": "^20.0.0", - "npm": "^9.0.0" + "npm": "^10.0.0" } }, "node_modules/@nextcloud/babel-config": { @@ -4288,19 +4276,6 @@ "vue": "^2.7" } }, - "node_modules/@nextcloud/calendar-js": { - "version": "6.1.0", - "resolved": "https://registry.npmjs.org/@nextcloud/calendar-js/-/calendar-js-6.1.0.tgz", - "integrity": "sha512-thVS6Bz+TV7rUB+LO5yFbOhdm65zICDRKcHDUquaZiWL9r6TyV9hCYDcP7cDRV+62wZJh8QPmf1E+d7ZFUOVeA==", - "engines": { - "node": "^20.0.0", - "npm": "^9.0.0" - }, - "peerDependencies": { - "ical.js": "^1.5.0", - "uuid": "^9.0.0" - } - }, "node_modules/@nextcloud/capabilities": { "version": "1.2.0", "resolved": "https://registry.npmjs.org/@nextcloud/capabilities/-/capabilities-1.2.0.tgz", @@ -4626,6 +4601,25 @@ "stylelint-config-recommended-vue": "^1.1.0" } }, + "node_modules/@nextcloud/timezones": { + "version": "0.1.1", + "resolved": "https://registry.npmjs.org/@nextcloud/timezones/-/timezones-0.1.1.tgz", + "integrity": "sha512-ldLuLyz605sszetnp6jy6mtlThu4ICKsZThxHIZwn6t4QzjQH3xr+k8mRU7GIvKq9egUFDqBp4gBjxm3/ROZig==", + "license": "AGPL-3.0-or-later", + "dependencies": { + "ical.js": "^2.0.1" + }, + "engines": { + "node": "^20.0.0", + "npm": "^10.0.0" + } + }, + "node_modules/@nextcloud/timezones/node_modules/ical.js": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/ical.js/-/ical.js-2.0.1.tgz", + "integrity": "sha512-uYYb1CwTXbd9NP/xTtgQZ5ivv6bpUjQu9VM98s3X78L3XRu00uJW5ZtmnLwyxhztpf5fSiRyDpFW7ZNCePlaPw==", + "license": "MPL-2.0" + }, "node_modules/@nextcloud/typings": { "version": "1.8.0", "resolved": "https://registry.npmjs.org/@nextcloud/typings/-/typings-1.8.0.tgz", @@ -4701,27 +4695,29 @@ } }, "node_modules/@nextcloud/vue": { - "version": "8.11.2", - "resolved": "https://registry.npmjs.org/@nextcloud/vue/-/vue-8.11.2.tgz", - "integrity": "sha512-mjA3Ni2CB3gOkKFMYFhQUjqaUos8hnwglfvz3lPp5LVrORsXaHa3C2ZudVp+hAKslVsRKkjfMYOKrlquw8vxQw==", + "version": "8.16.0", + "resolved": "https://registry.npmjs.org/@nextcloud/vue/-/vue-8.16.0.tgz", + "integrity": "sha512-xkoR2VeWk+WTTmXC01Z7hI0yztSf222XMPXhy9OkDNQBXmCl/idEjNnMWmxezJMyqALtFD/csouW+GS7JUVoFw==", + "license": "AGPL-3.0-or-later", "dependencies": { "@floating-ui/dom": "^1.1.0", "@linusborg/vue-simple-portal": "^0.1.5", "@nextcloud/auth": "^2.2.1", "@nextcloud/axios": "^2.4.0", - "@nextcloud/browser-storage": "^0.3.0", - "@nextcloud/calendar-js": "^6.1.0", + "@nextcloud/browser-storage": "^0.4.0", "@nextcloud/capabilities": "^1.1.0", "@nextcloud/event-bus": "^3.1.0", "@nextcloud/initial-state": "^2.1.0", - "@nextcloud/l10n": "^2.2.0", - "@nextcloud/logger": "^2.7.0", + "@nextcloud/l10n": "^3.0.1", + "@nextcloud/logger": "^3.0.1", "@nextcloud/router": "^3.0.0", + "@nextcloud/sharing": "^0.2.2", + "@nextcloud/timezones": "^0.1.1", "@nextcloud/vue-select": "^3.25.0", "@vueuse/components": "^10.9.0", "@vueuse/core": "^10.9.0", "clone": "^2.1.2", - "debounce": "2.0.0", + "debounce": "2.1.0", "dompurify": "^3.0.5", "emoji-mart-vue-fast": "^15.0.1", "escape-html": "^1.0.3", @@ -4745,11 +4741,12 @@ "vue": "^2.7.16", "vue-color": "^2.8.1", "vue-frag": "^1.4.3", + "vue-router": "^3.6.5", "vue2-datepicker": "^3.11.0" }, "engines": { "node": "^20.0.0", - "npm": "^9.0.0" + "npm": "^10.0.0" } }, "node_modules/@nextcloud/vue-select": { @@ -4763,10 +4760,69 @@ "vue": "2.x" } }, + "node_modules/@nextcloud/vue/node_modules/@nextcloud/browser-storage": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/@nextcloud/browser-storage/-/browser-storage-0.4.0.tgz", + "integrity": "sha512-D6XxznxCYmJ3oBCC3p0JB6GZJ2RZ9dgbB1UqtTePXrIvHUMBAeF/YkiGKYxLAVZCZb+NSNZXgAYHm/3LnIUbDg==", + "license": "GPL-3.0-or-later", + "dependencies": { + "core-js": "3.37.0" + }, + "engines": { + "node": "^20.0.0", + "npm": "^10.0.0" + } + }, + "node_modules/@nextcloud/vue/node_modules/@nextcloud/l10n": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/@nextcloud/l10n/-/l10n-3.1.0.tgz", + "integrity": "sha512-unciqr8QSJ29vFBw9S1bquyoj1PTWHszNL8tcUNuxUAYpq0hX+8o7rpB5gimELA4sj4m9+VCJwgLtBZd1Yj0lg==", + "license": "GPL-3.0-or-later", + "dependencies": { + "@nextcloud/router": "^3.0.1", + "@nextcloud/typings": "^1.8.0", + "@types/dompurify": "^3.0.5", + "@types/escape-html": "^1.0.4", + "dompurify": "^3.1.2", + "escape-html": "^1.0.3", + "node-gettext": "^3.0.0" + }, + "engines": { + "node": "^20.0.0", + "npm": "^10.0.0" + } + }, + "node_modules/@nextcloud/vue/node_modules/@nextcloud/logger": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/@nextcloud/logger/-/logger-3.0.2.tgz", + "integrity": "sha512-wByt0R0/6QC44RBpaJr1MWghjjOxk/pRbACHo/ZWWKht1qYbJRHB4GtEi+35KEIHY07ZpqxiDk6dIRuN7sXYWQ==", + "license": "GPL-3.0-or-later", + "dependencies": { + "@nextcloud/auth": "^2.3.0" + }, + "engines": { + "node": "^20.0.0", + "npm": "^10.0.0" + } + }, + "node_modules/@nextcloud/vue/node_modules/@nextcloud/sharing": { + "version": "0.2.3", + "resolved": "https://registry.npmjs.org/@nextcloud/sharing/-/sharing-0.2.3.tgz", + "integrity": "sha512-hxQFOBBahbJkcmAGZFVS3943pQGSafNF6LMHmgcj0JPqExu1DWKuZvsCXZnGkaRJVcewHnZFcLAhpOf+VfcZmA==", + "license": "GPL-3.0-or-later", + "dependencies": { + "@nextcloud/initial-state": "^2.2.0" + }, + "engines": { + "node": "^20.0.0", + "npm": "^10.0.0" + } + }, "node_modules/@nextcloud/vue/node_modules/debounce": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/debounce/-/debounce-2.0.0.tgz", - "integrity": "sha512-xRetU6gL1VJbs85Mc4FoEGSjQxzpdxRyFhe3lmWFyy2EzydIcD4xzUvRJMD+NPDfMwKNhxa3PvsIOU32luIWeA==", + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/debounce/-/debounce-2.1.0.tgz", + "integrity": "sha512-OkL3+0pPWCqoBc/nhO9u6TIQNTK44fnBnzuVtJAbp13Naxw9R6u21x+8tVTka87AhDZ3htqZ2pSSsZl9fqL2Wg==", + "license": "MIT", "engines": { "node": ">=18" }, @@ -20594,13 +20650,16 @@ } }, "node_modules/nextcloud-vue-collections": { - "version": "0.12.0", - "resolved": "https://registry.npmjs.org/nextcloud-vue-collections/-/nextcloud-vue-collections-0.12.0.tgz", - "integrity": "sha512-8qcvLfGcPlqafgidUi4Pxdn1C62WuLWpHRK0FxZ26uptbPJvjWBZbd/EVZbw1geYAAyW2tSOVuuYNemuolibJw==", + "version": "0.13.0", + "resolved": "https://registry.npmjs.org/nextcloud-vue-collections/-/nextcloud-vue-collections-0.13.0.tgz", + "integrity": "sha512-J5n2Kf9h/HVKFM0YdcHnNcbbqSossq7ocQwC9fHFs87/5iKgkUMPmVmla6uTKZHUKYCNnKSJtG7pDOWD4AP47A==", + "deprecated": "This package is now deprecated, the components have been merged into @nextcloud/vue as of version 8.14.0.", + "license": "AGPL-3.0-or-later", "dependencies": { - "@nextcloud/axios": "^2.4.0", - "@nextcloud/router": "^2.2.1", - "@nextcloud/vue": "^8.5.1", + "@nextcloud/axios": "^2.5.0", + "@nextcloud/l10n": "^3.1.0", + "@nextcloud/router": "^3.0.1", + "@nextcloud/vue": "^8.12.0", "lodash-es": "^4.17.21" }, "engines": { @@ -20611,13 +20670,19 @@ "vue": "^2.7.16" } }, - "node_modules/nextcloud-vue-collections/node_modules/@nextcloud/router": { - "version": "2.2.1", - "resolved": "https://registry.npmjs.org/@nextcloud/router/-/router-2.2.1.tgz", - "integrity": "sha512-ZRc/WI0RaksEJMz08H/6LimIdP+1A1xTHThCYEghs7VgAKNp5917vT2OKSpG0cMRbIwk0ongFVt5FB5qjy/iFg==", + "node_modules/nextcloud-vue-collections/node_modules/@nextcloud/l10n": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/@nextcloud/l10n/-/l10n-3.1.0.tgz", + "integrity": "sha512-unciqr8QSJ29vFBw9S1bquyoj1PTWHszNL8tcUNuxUAYpq0hX+8o7rpB5gimELA4sj4m9+VCJwgLtBZd1Yj0lg==", + "license": "GPL-3.0-or-later", "dependencies": { - "@nextcloud/typings": "^1.7.0", - "core-js": "^3.6.4" + "@nextcloud/router": "^3.0.1", + "@nextcloud/typings": "^1.8.0", + "@types/dompurify": "^3.0.5", + "@types/escape-html": "^1.0.4", + "dompurify": "^3.1.2", + "escape-html": "^1.0.3", + "node-gettext": "^3.0.0" }, "engines": { "node": "^20.0.0", diff --git a/package.json b/package.json index 1cf20d7505bcd..3fd4bd3c54d61 100644 --- a/package.json +++ b/package.json @@ -84,7 +84,7 @@ "marked": "^11.2.0", "moment": "^2.30.1", "moment-timezone": "^0.5.45", - "nextcloud-vue-collections": "^0.12.0", + "nextcloud-vue-collections": "^0.13.0", "node-vibrant": "^3.1.6", "p-limit": "^4.0.0", "p-queue": "^7.4.1",