Merge pull request #274 from core-ds/chore/deps-bump

chore(*): up dependencies
core-ds · Oct 14, 2024 · ac2e829 · ac2e829
2 parents 8218cba + db92de7
commit ac2e829
Show file tree

Hide file tree

Showing 8 changed files with 365 additions and 85 deletions.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -16,20 +16,13 @@ jobs:
       - name: Checkout Repository
         uses: actions/checkout@v4
       - name: Use Node.js 18.x
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@v4
         with:
           node-version: '18'
-      - name: Npm Install 
+      - name: yarn install
         run: |
-          npm install -g npm@6
-          cd ./packages/arui-scripts/
-          npm install --force
+          yarn install --immutable
       - name: Run Audit
         id: audit
-        uses: oke-py/npm-audit-action@v2
-        with:
-         audit_level: critical
-         github_token: ${{ secrets.GITHUB_TOKEN }}
-         working_directory: ./packages/arui-scripts
-         issue_assignees: oke-py
-         issue_labels: vulnerability
+        run: |
+          yarn turbo audit
diff --git a/packages/arui-scripts-modules/package.json b/packages/arui-scripts-modules/package.json
@@ -21,7 +21,8 @@
         "lint:scripts": "eslint \"**/*.{js,jsx,ts,tsx}\" --ext .js,.jsx,.ts,.tsx",
         "lint": "yarn lint:scripts",
         "lint:fix": "yarn lint:scripts --fix",
-        "format": "prettier --write $INIT_CWD/{config,src}/**/*.{ts,tsx,js,jsx,css}"
+        "format": "prettier --write $INIT_CWD/{config,src}/**/*.{ts,tsx,js,jsx,css}",
+        "audit": "yarn npm audit --severity high --environment production"
     },
     "peerDependencies": {
         "react": ">16.18.0"

diff --git a/packages/arui-scripts-server/package.json b/packages/arui-scripts-server/package.json
@@ -18,7 +18,8 @@
         "lint:scripts": "eslint \"**/*.{js,jsx,ts,tsx}\" --ext .js,.jsx,.ts,.tsx",
         "lint": "yarn lint:scripts",
         "lint:fix": "yarn lint:scripts --fix",
-        "format": "prettier --write $INIT_CWD/{config,src}/**/*.{ts,tsx,js,jsx,css}"
+        "format": "prettier --write $INIT_CWD/{config,src}/**/*.{ts,tsx,js,jsx,css}",
+        "audit": "yarn npm audit --severity high --environment production"
     },
     "devDependencies": {
         "@alfalab/scripts-modules": "workspace:*",

diff --git a/packages/arui-scripts/package.json b/packages/arui-scripts/package.json
@@ -42,7 +42,7 @@
         "autoprefixer": "^10.3.16",
         "babel-core": "^7.0.0-bridge.0",
         "babel-jest": "28.1.3",
-        "babel-loader": "9.1.3",
+        "babel-loader": "9.2.1",
         "babel-plugin-istanbul": "^7.0.0",
         "babel-plugin-transform-react-remove-prop-types": "0.4.24",
         "case-sensitive-paths-webpack-plugin": "2.4.0",
@@ -102,10 +102,10 @@
         "ts-loader": "9.4.4",
         "ts-node": "9.1.1",
         "tsconfig-paths-webpack-plugin": "3.5.1",
-        "webpack": "^5.88.2",
-        "webpack-bundle-analyzer": "4.9.0",
+        "webpack": "^5.95.0",
+        "webpack-bundle-analyzer": "4.10.2",
         "webpack-deduplication-plugin": "^0.0.8",
-        "webpack-dev-server": "4.15.1",
+        "webpack-dev-server": "4.15.2",
         "webpack-manifest-plugin": "3.2.0",
         "webpack-node-externals": "3.0.0"
     },
@@ -122,17 +122,17 @@
         "@types/shelljs": "^0.8.12",
         "@types/start-server-webpack-plugin": "2.2.2",
         "@types/tar": "^4.0.5",
-        "@types/webpack": "^5.28.1",
-        "@types/webpack-bundle-analyzer": "4.6.0",
+        "@types/webpack": "^5.28.5",
+        "@types/webpack-bundle-analyzer": "4.7.0",
         "@types/webpack-dev-server": "^4.7.1",
         "@types/webpack-manifest-plugin": "3.0.5",
         "@types/webpack-node-externals": "^3.0.0",
         "eslint": "^8.20.0",
-        "eslint-config-custom": "file:../eslint-config-custom",
+        "eslint-config-custom": "workspace:*",
         "prettier": "^2.7.1",
         "stylelint": "^14.9.1",
         "type-fest": "2.19.0",
-        "typescript": "4.9.5"
+        "typescript": "5.6.3"
     },
     "optionalDependencies": {
         "brotli-size": "^4.0.0"
@@ -147,7 +147,8 @@
         "lint:scripts": "eslint \"**/*.{js,jsx,ts,tsx}\" --ext .js,.jsx,.ts,.tsx",
         "lint": "yarn lint:css && yarn lint:scripts",
         "lint:fix": "yarn lint:css --fix && yarn lint:scripts --fix",
-        "format": "prettier --write $INIT_CWD/{config,src}/**/*.{ts,tsx,js,jsx,css}"
+        "format": "prettier --write $INIT_CWD/{config,src}/**/*.{ts,tsx,js,jsx,css}",
+        "audit": "yarn npm audit --severity high --environment production"
     },
     "peerDependencies": {
         "imagemin-gifsicle": "^7.0.0",

diff --git a/packages/arui-scripts/src/commands/bundle-analyze/index.ts b/packages/arui-scripts/src/commands/bundle-analyze/index.ts
@@ -19,7 +19,7 @@ import makeTmpDir from '../util/make-tmp-dir';
                 generateStatsFile: true,
                 statsFilename: configs.statsOutputPath,
                 analyzerPort: 'auto',
-            }),
+            }) as unknown as webpack.WebpackPluginInstance, // webpack-bundle-analyzer has incorrect types
         ];
         webpackConfig.output = {
             ...webpackConfig.output,

diff --git a/packages/client-event-bus/package.json b/packages/client-event-bus/package.json
@@ -21,7 +21,8 @@
         "lint:scripts": "eslint \"**/*.{js,jsx,ts,tsx}\" --ext .js,.jsx,.ts,.tsx",
         "lint": "yarn lint:scripts",
         "lint:fix": "yarn lint:scripts --fix",
-        "format": "prettier --write $INIT_CWD/{config,src}/**/*.{ts,tsx,js,jsx,css}"
+        "format": "prettier --write $INIT_CWD/{config,src}/**/*.{ts,tsx,js,jsx,css}",
+        "audit": "yarn npm audit --severity high --environment production"
     },
     "peerDependencies": {
         "react": ">16.18.0"

diff --git a/turbo.json b/turbo.json
@@ -15,6 +15,7 @@
         "lint": {},
         "validate": {
             "dependsOn": ["build:app"]
-        }
+        },
+        "audit": {}
     }
 }