chore: upgrade deps and pinned subdeps for CVEs (strapi#21425)

otabaga · Sep 27, 2024 · f91d91e · f91d91e
1 parent 335b9a2
commit f91d91e
Show file tree

Hide file tree

Showing 19 changed files with 3,059 additions and 5,853 deletions.
diff --git a/.github/actions/check-pr-status/dist/index.js b/.github/actions/check-pr-status/dist/index.js
diff --git a/.github/actions/check-pr-status/package.json b/.github/actions/check-pr-status/package.json
@@ -14,6 +14,6 @@
     "@actions/github": "6.0.0"
   },
   "devDependencies": {
-    "@vercel/ncc": "0.38.0"
+    "@vercel/ncc": "0.38.2"
   }
 }
diff --git a/docs/package.json b/docs/package.json
@@ -27,17 +27,17 @@
   },
   "dependencies": {
     "@cmfcmf/docusaurus-search-local": "1.1.0",
-    "@docusaurus/core": "3.1.1",
-    "@docusaurus/preset-classic": "3.1.1",
-    "@docusaurus/theme-mermaid": "3.1.1",
+    "@docusaurus/core": "3.5.2",
+    "@docusaurus/preset-classic": "3.5.2",
+    "@docusaurus/theme-mermaid": "3.5.2",
     "@mdx-js/react": "^3.0.0",
     "clsx": "^1.1.1",
     "prism-react-renderer": "^2.1.0",
     "react": "18.3.0",
     "react-dom": "18.3.0"
   },
   "devDependencies": {
-    "@docusaurus/module-type-aliases": "3.1.1",
+    "@docusaurus/module-type-aliases": "3.5.2",
     "docusaurus-plugin-typedoc": "0.22.0",
     "typedoc": "0.25.9",
     "typedoc-plugin-markdown": "3.17.1",

diff --git a/docs/yarn.lock b/docs/yarn.lock
diff --git a/examples/experimental-dev/package.json b/examples/experimental-dev/package.json
@@ -29,6 +29,6 @@
   "devDependencies": {
     "@vitejs/plugin-react": "4.2.1",
     "babel-plugin-react-compiler": "0.0.0-experimental-c23de8d-20240515",
-    "vite": "5.1.7"
+    "vite": "5.2.14"
   }
 }
diff --git a/package.json b/package.json
@@ -101,7 +101,7 @@
     "@typescript-eslint/eslint-plugin": "6.7.3",
     "@typescript-eslint/parser": "6.7.3",
     "chalk": "4.1.2",
-    "chokidar": "3.5.3",
+    "chokidar": "3.6.0",
     "coffee": "5.5.1",
     "core-js": "3.36.0",
     "create-strapi-app": "workspace:*",
@@ -136,7 +136,7 @@
     "jest-environment-jsdom": "29.6.1",
     "jest-watch-typeahead": "2.2.2",
     "lerna": "8.1.2",
-    "lint-staged": "13.3.0",
+    "lint-staged": "15.2.10",
     "lodash": "4.17.21",
     "nx": "18.2.2",
     "plop": "2.7.6",

diff --git a/packages/core/admin/package.json b/packages/core/admin/package.json
@@ -164,7 +164,7 @@
     "react-dom": "18.3.1",
     "react-router-dom": "6.22.3",
     "styled-components": "6.1.8",
-    "vite": "5.1.7",
+    "vite": "5.2.14",
     "vite-plugin-dts": "3.7.3"
   },
   "peerDependencies": {

diff --git a/packages/core/content-releases/package.json b/packages/core/content-releases/package.json
@@ -85,11 +85,11 @@
     "react-query": "3.39.3",
     "react-router-dom": "6.22.3",
     "styled-components": "6.1.8",
-    "typescript": "5.2.2"
+    "typescript": "5.3.2"
   },
   "peerDependencies": {
-    "@strapi/admin": "^5.0.0 || ^5.0.0-beta || ^5.0.0-alpha || ^5.0.0-rc",
-    "@strapi/content-manager": "^5.0.0 || ^5.0.0-beta || ^5.0.0-alpha || ^5.0.0-rc",
+    "@strapi/admin": "^5.0.0",
+    "@strapi/content-manager": "^5.0.0",
     "react": "^17.0.0 || ^18.0.0",
     "react-dom": "^17.0.0 || ^18.0.0",
     "react-router-dom": "^6.0.0",

diff --git a/packages/core/core/package.json b/packages/core/core/package.json
@@ -102,7 +102,7 @@
     "resolve.exports": "2.0.2",
     "semver": "7.5.4",
     "statuses": "2.0.1",
-    "typescript": "5.2.2",
+    "typescript": "5.3.2",
     "undici": "6.19.2",
     "yup": "0.32.9"
   },

diff --git a/packages/core/strapi/package.json b/packages/core/strapi/package.json
@@ -134,7 +134,7 @@
     "browserslist": "^4.23.0",
     "browserslist-to-esbuild": "1.2.0",
     "chalk": "4.1.2",
-    "chokidar": "3.5.3",
+    "chokidar": "3.6.0",
     "ci-info": "3.8.0",
     "cli-progress": "3.12.0",
     "cli-table3": "0.6.5",
@@ -159,14 +159,14 @@
     "ora": "5.4.1",
     "outdent": "0.8.0",
     "pkg-up": "3.1.0",
-    "prettier": "3.2.5",
+    "prettier": "3.3.3",
     "react-refresh": "0.14.0",
     "read-pkg-up": "7.0.1",
     "resolve-from": "5.0.0",
     "semver": "7.5.4",
     "style-loader": "3.3.4",
     "typescript": "5.3.2",
-    "vite": "5.1.7",
+    "vite": "5.2.14",
     "webpack": "^5.90.3",
     "webpack-bundle-analyzer": "^4.10.1",
     "webpack-dev-middleware": "6.1.2",

diff --git a/packages/core/strapi/src/node/webpack/watch.ts b/packages/core/strapi/src/node/webpack/watch.ts
@@ -23,7 +23,6 @@ const watch = async (ctx: BuildContext): Promise<WebpackWatcher> => {
 
     const devMiddleware = webpackDevMiddleware(compiler);
 
-    // @ts-expect-error incompatible types between hotMiddleware and webpack
     const hotMiddleware = webpackHotMiddleware(compiler, {
       log: false,
       path: '/__webpack_hmr',

diff --git a/packages/plugins/cloud/package.json b/packages/plugins/cloud/package.json
@@ -49,7 +49,7 @@
     "react-router-dom": "6.22.3",
     "styled-components": "6.1.8",
     "tsconfig": "workspace:*",
-    "typescript": "5.2.2"
+    "typescript": "5.3.2"
   },
   "peerDependencies": {
     "@strapi/strapi": "^5.0.0 || ^5.0.0-beta || ^5.0.0-alpha || ^5.0.0-rc",

diff --git a/packages/plugins/documentation/package.json b/packages/plugins/documentation/package.json
@@ -66,7 +66,7 @@
     "immer": "9.0.21",
     "koa-static": "^5.0.0",
     "lodash": "4.17.21",
-    "path-to-regexp": "6.2.1",
+    "path-to-regexp": "6.3.0",
     "react-intl": "6.6.2",
     "swagger-ui-dist": "4.19.0",
     "yaml": "1.10.2",

diff --git a/packages/plugins/graphql/package.json b/packages/plugins/graphql/package.json
@@ -48,7 +48,7 @@
     "watch": "strapi-plugin watch"
   },
   "dependencies": {
-    "@apollo/server": "4.10.0",
+    "@apollo/server": "4.11.0",
     "@as-integrations/koa": "1.1.1",
     "@graphql-tools/schema": "10.0.3",
     "@graphql-tools/utils": "^10.1.3",

diff --git a/packages/utils/typescript/package.json b/packages/utils/typescript/package.json
@@ -39,7 +39,7 @@
     "cli-table3": "0.6.5",
     "fs-extra": "11.2.0",
     "lodash": "4.17.21",
-    "prettier": "3.2.5",
+    "prettier": "3.3.3",
     "typescript": "5.3.2"
   },
   "devDependencies": {

diff --git a/templates/website/package.json b/templates/website/package.json
@@ -13,7 +13,7 @@
     "@strapi/plugin-graphql": "^5.0.0",
     "@strapi/plugin-users-permissions": "^5.0.0",
     "@strapi/strapi": "^5.0.0",
-    "lodash.set": "^4.3.2",
+    "lodash": "^4.17.19",
     "react": "^18.0.0",
     "react-dom": "^18.0.0",
     "react-router-dom": "^6.0.0",

diff --git a/templates/website/src/bootstrap.ts b/templates/website/src/bootstrap.ts
@@ -1,5 +1,5 @@
 import fs from 'fs';
-import set from 'lodash.set';
+import { set } from 'lodash';
 
 import en from '../data/en.json';
 import fr from '../data/fr.json';