yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-06-27 00:41:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: upgrade deps and pinned subdeps for CVEs (#21425)

Browse Source
This commit is contained in:
Ben Irvin 2024-09-27 15:43:24 +02:00 committed by GitHub
parent 335b9a2962
commit f91d91eef5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
19 changed files with 3039 additions and 5833 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.github/actions/check-pr-status/dist/index.js vendored
View File

File diff suppressed because one or more lines are too long

2
.github/actions/check-pr-status/package.json vendored
View File

@ -14,6 +14,6 @@
"@actions/github": "6.0.0"
},
"devDependencies": {
"@vercel/ncc": "0.38.0"
"@vercel/ncc": "0.38.2"
}
}

8
docs/package.json
View File

@ -27,9 +27,9 @@
},
"dependencies": {
"@cmfcmf/docusaurus-search-local": "1.1.0",
"@docusaurus/core": "3.1.1",
"@docusaurus/preset-classic": "3.1.1",
"@docusaurus/theme-mermaid": "3.1.1",
"@docusaurus/core": "3.5.2",
"@docusaurus/preset-classic": "3.5.2",
"@docusaurus/theme-mermaid": "3.5.2",
"@mdx-js/react": "^3.0.0",
"clsx": "^1.1.1",
"prism-react-renderer": "^2.1.0",
@ -37,7 +37,7 @@
"react-dom": "18.3.0"
},
"devDependencies": {
"@docusaurus/module-type-aliases": "3.1.1",
"@docusaurus/module-type-aliases": "3.5.2",
"docusaurus-plugin-typedoc": "0.22.0",
"typedoc": "0.25.9",
"typedoc-plugin-markdown": "3.17.1",

4073
docs/yarn.lock
View File

File diff suppressed because it is too large Load Diff

2
examples/experimental-dev/package.json
View File

@ -29,6 +29,6 @@
"devDependencies": {
"@vitejs/plugin-react": "4.2.1",
"babel-plugin-react-compiler": "0.0.0-experimental-c23de8d-20240515",
"vite": "5.1.7"
"vite": "5.2.14"
}
}

4
package.json
View File

@ -101,7 +101,7 @@
"@typescript-eslint/eslint-plugin": "6.7.3",
"@typescript-eslint/parser": "6.7.3",
"chalk": "4.1.2",
"chokidar": "3.5.3",
"chokidar": "3.6.0",
"coffee": "5.5.1",
"core-js": "3.36.0",
"create-strapi-app": "workspace:*",
@ -136,7 +136,7 @@
"jest-environment-jsdom": "29.6.1",
"jest-watch-typeahead": "2.2.2",
"lerna": "8.1.2",
"lint-staged": "13.3.0",
"lint-staged": "15.2.10",
"lodash": "4.17.21",
"nx": "18.2.2",
"plop": "2.7.6",

2
packages/core/admin/package.json
View File

@ -164,7 +164,7 @@
"react-dom": "18.3.1",
"react-router-dom": "6.22.3",
"styled-components": "6.1.8",
"vite": "5.1.7",
"vite": "5.2.14",
"vite-plugin-dts": "3.7.3"
},
"peerDependencies": {

6
packages/core/content-releases/package.json
View File

@ -85,11 +85,11 @@
"react-query": "3.39.3",
"react-router-dom": "6.22.3",
"styled-components": "6.1.8",
"typescript": "5.2.2"
"typescript": "5.3.2"
},
"peerDependencies": {
"@strapi/admin": "^5.0.0 || ^5.0.0-beta || ^5.0.0-alpha || ^5.0.0-rc",
"@strapi/content-manager": "^5.0.0 || ^5.0.0-beta || ^5.0.0-alpha || ^5.0.0-rc",
"@strapi/admin": "^5.0.0",
"@strapi/content-manager": "^5.0.0",
"react": "^17.0.0 || ^18.0.0",
"react-dom": "^17.0.0 || ^18.0.0",
"react-router-dom": "^6.0.0",

2
packages/core/core/package.json
View File

@ -102,7 +102,7 @@
"resolve.exports": "2.0.2",
"semver": "7.5.4",
"statuses": "2.0.1",
"typescript": "5.2.2",
"typescript": "5.3.2",
"undici": "6.19.2",
"yup": "0.32.9"
},

6
packages/core/strapi/package.json
View File

@ -134,7 +134,7 @@
"browserslist": "^4.23.0",
"browserslist-to-esbuild": "1.2.0",
"chalk": "4.1.2",
"chokidar": "3.5.3",
"chokidar": "3.6.0",
"ci-info": "3.8.0",
"cli-progress": "3.12.0",
"cli-table3": "0.6.5",
@ -159,14 +159,14 @@
"ora": "5.4.1",
"outdent": "0.8.0",
"pkg-up": "3.1.0",
"prettier": "3.2.5",
"prettier": "3.3.3",
"react-refresh": "0.14.0",
"read-pkg-up": "7.0.1",
"resolve-from": "5.0.0",
"semver": "7.5.4",
"style-loader": "3.3.4",
"typescript": "5.3.2",
"vite": "5.1.7",
"vite": "5.2.14",
"webpack": "^5.90.3",
"webpack-bundle-analyzer": "^4.10.1",
"webpack-dev-middleware": "6.1.2",

1
packages/core/strapi/src/node/webpack/watch.ts
View File

@ -23,7 +23,6 @@ const watch = async (ctx: BuildContext): Promise<WebpackWatcher> => {
const devMiddleware = webpackDevMiddleware(compiler);
// @ts-expect-error incompatible types between hotMiddleware and webpack
const hotMiddleware = webpackHotMiddleware(compiler, {
log: false,
path: '/__webpack_hmr',

2
packages/plugins/cloud/package.json
View File

@ -49,7 +49,7 @@
"react-router-dom": "6.22.3",
"styled-components": "6.1.8",
"tsconfig": "workspace:*",
"typescript": "5.2.2"
"typescript": "5.3.2"
},
"peerDependencies": {
"@strapi/strapi": "^5.0.0 || ^5.0.0-beta || ^5.0.0-alpha || ^5.0.0-rc",

2
packages/plugins/documentation/package.json
View File

@ -66,7 +66,7 @@
"immer": "9.0.21",
"koa-static": "^5.0.0",
"lodash": "4.17.21",
"path-to-regexp": "6.2.1",
"path-to-regexp": "6.3.0",
"react-intl": "6.6.2",
"swagger-ui-dist": "4.19.0",
"yaml": "1.10.2",

2
packages/plugins/graphql/package.json
View File

@ -48,7 +48,7 @@
"watch": "strapi-plugin watch"
},
"dependencies": {
"@apollo/server": "4.10.0",
"@apollo/server": "4.11.0",
"@as-integrations/koa": "1.1.1",
"@graphql-tools/schema": "10.0.3",
"@graphql-tools/utils": "^10.1.3",

2
packages/utils/typescript/package.json
View File

@ -39,7 +39,7 @@
"cli-table3": "0.6.5",
"fs-extra": "11.2.0",
"lodash": "4.17.21",
"prettier": "3.2.5",
"prettier": "3.3.3",
"typescript": "5.3.2"
},
"devDependencies": {

2
templates/website/package.json
View File

@ -13,7 +13,7 @@
"@strapi/plugin-graphql": "^5.0.0",
"@strapi/plugin-users-permissions": "^5.0.0",
"@strapi/strapi": "^5.0.0",
"lodash.set": "^4.3.2",
"lodash": "^4.17.19",
"react": "^18.0.0",
"react-dom": "^18.0.0",
"react-router-dom": "^6.0.0",

2
templates/website/src/bootstrap.ts
View File

@ -1,5 +1,5 @@
import fs from 'fs';
import set from 'lodash.set';
import { set } from 'lodash';
import en from '../data/en.json';
import fr from '../data/fr.json';

117
templates/website/yarn.lock
View File

@ -5537,9 +5537,9 @@ __metadata:
languageName: node
linkType: hard
"body-parser@npm:1.20.2":
version: 1.20.2
resolution: "body-parser@npm:1.20.2"
"body-parser@npm:1.20.3":
version: 1.20.3
resolution: "body-parser@npm:1.20.3"
dependencies:
bytes: "npm:3.1.2"
content-type: "npm:~1.0.5"
@ -5549,11 +5549,11 @@ __metadata:
http-errors: "npm:2.0.0"
iconv-lite: "npm:0.4.24"
on-finished: "npm:2.4.1"
qs: "npm:6.11.0"
qs: "npm:6.13.0"
raw-body: "npm:2.5.2"
type-is: "npm:~1.6.18"
unpipe: "npm:1.0.0"
checksum: 10c0/06f1438fff388a2e2354c96aa3ea8147b79bfcb1262dfcc2aae68ec13723d01d5781680657b74e9f83c808266d5baf52804032fbde2b7382b89bd8cdb273ace9
checksum: 10c0/0a9a93b7518f222885498dcecaad528cf010dd109b071bf471c93def4bfe30958b83e03496eb9c1ad4896db543d999bb62be1a3087294162a88cfa1b42c16310
languageName: node
linkType: hard
@ -7179,9 +7179,9 @@ __metadata:
linkType: hard
"dset@npm:^3.1.2":
version: 3.1.3
resolution: "dset@npm:3.1.3"
checksum: 10c0/b1ff68f1f42af373baa85b00b04d89094cd0d7f74f94bd11364cba575f2762ed52a0a0503bbfcc92eccd07c6d55426813c8a7a6cfa020338eaea1f4edfd332c2
version: 3.1.4
resolution: "dset@npm:3.1.4"
checksum: 10c0/b67bbd28dd8a539e90c15ffb61100eb64ef995c5270a124d4f99bbb53f4d82f55a051b731ba81f3215dd9dce2b4c8d69927dc20b3be1c5fc88bab159467aa438
languageName: node
linkType: hard
@ -7279,6 +7279,13 @@ __metadata:
languageName: node
linkType: hard
"encodeurl@npm:~2.0.0":
version: 2.0.0
resolution: "encodeurl@npm:2.0.0"
checksum: 10c0/5d317306acb13e6590e28e27924c754163946a2480de11865c991a3a7eed4315cd3fba378b543ca145829569eefe9b899f3d84bb09870f675ae60bc924b01ceb
languageName: node
linkType: hard
"encoding@npm:^0.1.13":
version: 0.1.13
resolution: "encoding@npm:0.1.13"
@ -7896,41 +7903,41 @@ __metadata:
linkType: hard
"express@npm:^4.17.1":
version: 4.19.2
resolution: "express@npm:4.19.2"
version: 4.21.0
resolution: "express@npm:4.21.0"
dependencies:
accepts: "npm:~1.3.8"
array-flatten: "npm:1.1.1"
body-parser: "npm:1.20.2"
body-parser: "npm:1.20.3"
content-disposition: "npm:0.5.4"
content-type: "npm:~1.0.4"
cookie: "npm:0.6.0"
cookie-signature: "npm:1.0.6"
debug: "npm:2.6.9"
depd: "npm:2.0.0"
encodeurl: "npm:~1.0.2"
encodeurl: "npm:~2.0.0"
escape-html: "npm:~1.0.3"
etag: "npm:~1.8.1"
finalhandler: "npm:1.2.0"
finalhandler: "npm:1.3.1"
fresh: "npm:0.5.2"
http-errors: "npm:2.0.0"
merge-descriptors: "npm:1.0.1"
merge-descriptors: "npm:1.0.3"
methods: "npm:~1.1.2"
on-finished: "npm:2.4.1"
parseurl: "npm:~1.3.3"
path-to-regexp: "npm:0.1.7"
path-to-regexp: "npm:0.1.10"
proxy-addr: "npm:~2.0.7"
qs: "npm:6.11.0"
qs: "npm:6.13.0"
range-parser: "npm:~1.2.1"
safe-buffer: "npm:5.2.1"
send: "npm:0.18.0"
serve-static: "npm:1.15.0"
send: "npm:0.19.0"
serve-static: "npm:1.16.2"
setprototypeof: "npm:1.2.0"
statuses: "npm:2.0.1"
type-is: "npm:~1.6.18"
utils-merge: "npm:1.0.1"
vary: "npm:~1.1.2"
checksum: 10c0/e82e2662ea9971c1407aea9fc3c16d6b963e55e3830cd0ef5e00b533feda8b770af4e3be630488ef8a752d7c75c4fcefb15892868eeaafe7353cb9e3e269fdcb
checksum: 10c0/4cf7ca328f3fdeb720f30ccb2ea7708bfa7d345f9cc460b64a82bf1b2c91e5b5852ba15a9a11b2a165d6089acf83457fc477dc904d59cd71ed34c7a91762c6cc
languageName: node
linkType: hard
@ -8081,18 +8088,18 @@ __metadata:
languageName: node
linkType: hard
"finalhandler@npm:1.2.0":
version: 1.2.0
resolution: "finalhandler@npm:1.2.0"
"finalhandler@npm:1.3.1":
version: 1.3.1
resolution: "finalhandler@npm:1.3.1"
dependencies:
debug: "npm:2.6.9"
encodeurl: "npm:~1.0.2"
encodeurl: "npm:~2.0.0"
escape-html: "npm:~1.0.3"
on-finished: "npm:2.4.1"
parseurl: "npm:~1.3.3"
statuses: "npm:2.0.1"
unpipe: "npm:~1.0.0"
checksum: 10c0/64b7e5ff2ad1fcb14931cd012651631b721ce657da24aedb5650ddde9378bf8e95daa451da43398123f5de161a81e79ff5affe4f9f2a6d2df4a813d6d3e254b7
checksum: 10c0/d38035831865a49b5610206a3a9a9aae4e8523cbbcd01175d0480ffbf1278c47f11d89be3ca7f617ae6d94f29cf797546a4619cd84dd109009ef33f12f69019f
languageName: node
linkType: hard
@ -10678,13 +10685,6 @@ __metadata:
languageName: node
linkType: hard
"lodash.set@npm:^4.3.2":
version: 4.3.2
resolution: "lodash.set@npm:4.3.2"
checksum: 10c0/c641d31905e51df43170dce8a1d11a1cff11356e2e2e75fe2615995408e9687d58c3e1d64c3c284c2df2bc519f79a98af737d2944d382ff82ffd244ff6075c29
languageName: node
linkType: hard
"lodash.sortby@npm:^4.7.0":
version: 4.7.0
resolution: "lodash.sortby@npm:4.7.0"
@ -11059,10 +11059,10 @@ __metadata:
languageName: node
linkType: hard
"merge-descriptors@npm:1.0.1":
version: 1.0.1
resolution: "merge-descriptors@npm:1.0.1"
checksum: 10c0/b67d07bd44cfc45cebdec349bb6e1f7b077ee2fd5beb15d1f7af073849208cb6f144fe403e29a36571baf3f4e86469ac39acf13c318381e958e186b2766f54ec
"merge-descriptors@npm:1.0.3":
version: 1.0.3
resolution: "merge-descriptors@npm:1.0.3"
checksum: 10c0/866b7094afd9293b5ea5dcd82d71f80e51514bed33b4c4e9f516795dc366612a4cbb4dc94356e943a8a6914889a914530badff27f397191b9b75cda20b6bae93
languageName: node
linkType: hard
@ -12324,17 +12324,17 @@ __metadata:
languageName: node
linkType: hard
"path-to-regexp@npm:0.1.7":
version: 0.1.7
resolution: "path-to-regexp@npm:0.1.7"
checksum: 10c0/50a1ddb1af41a9e68bd67ca8e331a705899d16fb720a1ea3a41e310480948387daf603abb14d7b0826c58f10146d49050a1291ba6a82b78a382d1c02c0b8f905
"path-to-regexp@npm:0.1.10":
version: 0.1.10
resolution: "path-to-regexp@npm:0.1.10"
checksum: 10c0/34196775b9113ca6df88e94c8d83ba82c0e1a2063dd33bfe2803a980da8d49b91db8104f49d5191b44ea780d46b8670ce2b7f4a5e349b0c48c6779b653f1afe4
languageName: node
linkType: hard
"path-to-regexp@npm:^6.2.0, path-to-regexp@npm:^6.2.1":
version: 6.2.2
resolution: "path-to-regexp@npm:6.2.2"
checksum: 10c0/4b60852d3501fd05ca9dd08c70033d73844e5eca14e41f499f069afa8364f780f15c5098002f93bd42af8b3514de62ac6e82a53b5662de881d2b08c9ef21ea6b
version: 6.3.0
resolution: "path-to-regexp@npm:6.3.0"
checksum: 10c0/73b67f4638b41cde56254e6354e46ae3a2ebc08279583f6af3d96fe4664fc75788f74ed0d18ca44fa4a98491b69434f9eee73b97bb5314bd1b5adb700f5c18d6
languageName: node
linkType: hard
@ -12745,15 +12745,6 @@ __metadata:
languageName: node
linkType: hard
"qs@npm:6.11.0":
version: 6.11.0
resolution: "qs@npm:6.11.0"
dependencies:
side-channel: "npm:^1.0.4"
checksum: 10c0/4e4875e4d7c7c31c233d07a448e7e4650f456178b9dd3766b7cfa13158fdb24ecb8c4f059fa91e820dc6ab9f2d243721d071c9c0378892dcdad86e9e9a27c68f
languageName: node
linkType: hard
"qs@npm:6.11.1":
version: 6.11.1
resolution: "qs@npm:6.11.1"
@ -12763,7 +12754,7 @@ __metadata:
languageName: node
linkType: hard
"qs@npm:^6.10.3, qs@npm:^6.11.0, qs@npm:^6.11.2, qs@npm:^6.5.2, qs@npm:^6.9.6":
"qs@npm:6.13.0, qs@npm:^6.10.3, qs@npm:^6.11.0, qs@npm:^6.11.2, qs@npm:^6.5.2, qs@npm:^6.9.6":
version: 6.13.0
resolution: "qs@npm:6.13.0"
dependencies:
@ -13848,9 +13839,9 @@ __metadata:
languageName: node
linkType: hard
"send@npm:0.18.0":
version: 0.18.0
resolution: "send@npm:0.18.0"
"send@npm:0.19.0":
version: 0.19.0
resolution: "send@npm:0.19.0"
dependencies:
debug: "npm:2.6.9"
depd: "npm:2.0.0"
@ -13865,7 +13856,7 @@ __metadata:
on-finished: "npm:2.4.1"
range-parser: "npm:~1.2.1"
statuses: "npm:2.0.1"
checksum: 10c0/0eb134d6a51fc13bbcb976a1f4214ea1e33f242fae046efc311e80aff66c7a43603e26a79d9d06670283a13000e51be6e0a2cb80ff0942eaf9f1cd30b7ae736a
checksum: 10c0/ea3f8a67a8f0be3d6bf9080f0baed6d2c51d11d4f7b4470de96a5029c598a7011c497511ccc28968b70ef05508675cebff27da9151dd2ceadd60be4e6cf845e3
languageName: node
linkType: hard
@ -13907,15 +13898,15 @@ __metadata:
languageName: node
linkType: hard
"serve-static@npm:1.15.0":
version: 1.15.0
resolution: "serve-static@npm:1.15.0"
"serve-static@npm:1.16.2":
version: 1.16.2
resolution: "serve-static@npm:1.16.2"
dependencies:
encodeurl: "npm:~1.0.2"
encodeurl: "npm:~2.0.0"
escape-html: "npm:~1.0.3"
parseurl: "npm:~1.3.3"
send: "npm:0.18.0"
checksum: 10c0/fa9f0e21a540a28f301258dfe1e57bb4f81cd460d28f0e973860477dd4acef946a1f41748b5bd41c73b621bea2029569c935faa38578fd34cd42a9b4947088ba
send: "npm:0.19.0"
checksum: 10c0/528fff6f5e12d0c5a391229ad893910709bc51b5705962b09404a1d813857578149b8815f35d3ee5752f44cd378d0f31669d4b1d7e2d11f41e08283d5134bd1f
languageName: node
linkType: hard
@ -15889,7 +15880,7 @@ __metadata:
"@strapi/plugin-graphql": "npm:^5.0.0"
"@strapi/plugin-users-permissions": "npm:^5.0.0"
"@strapi/strapi": "npm:^5.0.0"
lodash.set: "npm:^4.3.2"
lodash: "npm:^4.17.19"
react: "npm:^18.0.0"
react-dom: "npm:^18.0.0"
react-router-dom: "npm:^6.0.0"

4629
yarn.lock
View File

File diff suppressed because it is too large Load Diff