fix: Bump various versions to remove vulnerable dependencies (#393)

single-spa · Jan 4, 2024 · 181da9a · 181da9a
1 parent e5b4fd4
commit 181da9a
Show file tree

Hide file tree

Showing 17 changed files with 6,329 additions and 4,780 deletions.
diff --git a/.changeset/thirty-cows-give.md b/.changeset/thirty-cows-give.md
@@ -0,0 +1,10 @@
+---
+"webpack-config-single-spa-ts": patch
+"single-spa-web-server-utils": patch
+"webpack-config-single-spa": patch
+"generator-single-spa": patch
+"single-spa-welcome": patch
+"create-single-spa": patch
+---
+
+Bump dependency versions to compatible versions without vulnerabilities
diff --git a/lerna.json b/lerna.json
diff --git a/package.json b/package.json
@@ -1,17 +1,17 @@
 {
   "name": "root",
   "devDependencies": {
-    "@changesets/changelog-github": "^0.4.0",
-    "@changesets/cli": "^2.18.0",
+    "@changesets/changelog-github": "^0.5.0",
+    "@changesets/cli": "^2.27.1",
     "@types/jest": "^27.0.1",
     "husky": "^7.0.2",
-    "jest": "^27.0.6",
-    "jest-cli": "^27.0.6",
-    "jest-util": "^27.0.6",
+    "jest": "^27.5.1",
+    "jest-cli": "^27.5.1",
+    "jest-util": "^27.5.1",
     "mkdirp": "^1.0.4",
     "nixt": "^0.5.1",
     "prettier": "^2.3.2",
-    "pretty-quick": "^3.1.1",
+    "pretty-quick": "^3.1.3",
     "rimraf": "^3.0.2"
   },
   "scripts": {

diff --git a/packages/create-single-spa/package.json b/packages/create-single-spa/package.json
@@ -10,6 +10,6 @@
   "dependencies": {
     "generator-single-spa": "workspace:*",
     "yargs": "^17.1.1",
-    "yeoman-environment": "^3.6.0"
+    "yeoman-environment": "^3.19.3"
   }
 }
diff --git a/packages/generator-single-spa/package.json b/packages/generator-single-spa/package.json
@@ -16,12 +16,12 @@
   "dependencies": {
     "chalk": "^4.1.2",
     "command-exists": "^1.2.9",
-    "ejs": "^3.1.6",
+    "ejs": "^3.1.9",
     "lodash": "^4.17.21",
-    "yeoman-generator": "^5.4.2"
+    "yeoman-generator": "^5.10.0"
   },
   "devDependencies": {
-    "jest": "^27.0.6",
+    "jest": "^27.5.1",
     "yeoman-test": "^6.2.0"
   },
   "jest": {

diff --git a/packages/generator-single-spa/src/common-templates/typescript/typescript.package.json b/packages/generator-single-spa/src/common-templates/typescript/typescript.package.json
@@ -3,7 +3,7 @@
     "build:types": "tsc"
   },
   "devDependencies": {
-    "@babel/preset-typescript": "^7.15.0",
+    "@babel/preset-typescript": "^7.23.3",
     "eslint-config-ts-important-stuff": "^1.1.0",
     "typescript": "^4.3.5",
     "webpack-config-single-spa-ts": "^4.0.0",

diff --git a/packages/generator-single-spa/src/react/templates/react.package.json b/packages/generator-single-spa/src/react/templates/react.package.json
@@ -15,15 +15,15 @@
     "coverage": "cross-env BABEL_ENV=test jest --coverage"
   },
   "devDependencies": {
-    "@babel/core": "^7.15.0",
-    "@babel/eslint-parser": "^7.15.0",
-    "@babel/plugin-transform-runtime": "^7.15.0",
-    "@babel/preset-env": "^7.15.0",
-    "@babel/preset-react": "^7.14.5",
-    "@babel/runtime": "^7.15.3",
-    "@testing-library/jest-dom": "^5.14.1",
+    "@babel/core": "^7.23.3",
+    "@babel/eslint-parser": "^7.23.3",
+    "@babel/plugin-transform-runtime": "^7.23.3",
+    "@babel/preset-env": "^7.23.3",
+    "@babel/preset-react": "^7.23.3",
+    "@babel/runtime": "^7.23.3",
+    "@testing-library/jest-dom": "^5.17.0",
     "@testing-library/react": "^12.0.0",
-    "babel-jest": "^27.0.6",
+    "babel-jest": "^27.5.1",
     "concurrently": "^6.2.1",
     "cross-env": "^7.0.3",
     "eslint": "^7.32.0",
@@ -32,11 +32,11 @@
     "eslint-plugin-prettier": "^3.4.1",
     "husky": "^7.0.2",
     "identity-obj-proxy": "^3.0.0",
-    "jest": "^27.0.6",
-    "jest-cli": "^27.0.6",
+    "jest": "^27.5.1",
+    "jest-cli": "^27.5.1",
     "prettier": "^2.3.2",
     "pretty-quick": "^3.1.1",
-    "webpack": "^5.75.0",
+    "webpack": "^5.89.0",
     "webpack-cli": "^4.10.0",
     "webpack-config-single-spa-react": "^4.0.0",
     "webpack-dev-server": "^4.0.0",

diff --git a/packages/generator-single-spa/src/react/templates/typescript/typescript-react.package.json b/packages/generator-single-spa/src/react/templates/typescript/typescript-react.package.json
@@ -1,6 +1,5 @@
 {
   "devDependencies": {
-    "@types/testing-library__jest-dom": "^5.14.1",
     "eslint-config-ts-react-important-stuff": "^3.0.0",
     "webpack-config-single-spa-react-ts": "^4.0.0"
   }

diff --git a/packages/generator-single-spa/src/root-config/templates/root-config.package.json b/packages/generator-single-spa/src/root-config/templates/root-config.package.json
@@ -11,11 +11,11 @@
     "build:webpack": "webpack --mode=production"
   },
   "devDependencies": {
-    "@babel/core": "^7.15.0",
-    "@babel/eslint-parser": "^7.15.0",
-    "@babel/plugin-transform-runtime": "^7.15.0",
-    "@babel/preset-env": "^7.15.0",
-    "@babel/runtime": "^7.15.3",
+    "@babel/core": "^7.23.3",
+    "@babel/eslint-parser": "^7.23.3",
+    "@babel/plugin-transform-runtime": "^7.23.3",
+    "@babel/preset-env": "^7.23.3",
+    "@babel/runtime": "^7.23.3",
     "concurrently": "^6.2.1",
     "cross-env": "^7.0.3",
     "eslint": "^7.32.0",
@@ -24,12 +24,12 @@
     "eslint-plugin-prettier": "^3.4.1",
     "html-webpack-plugin": "^5.3.2",
     "husky": "^7.0.2",
-    "jest": "^27.0.6",
-    "jest-cli": "^27.0.6",
+    "jest": "^27.5.1",
+    "jest-cli": "^27.5.1",
     "prettier": "^2.3.2",
     "pretty-quick": "^3.1.1",
-    "serve": "^12.0.0",
-    "webpack": "^5.75.0",
+    "serve": "^13.0.0",
+    "webpack": "^5.89.0",
     "webpack-cli": "^4.10.0",
     "webpack-config-single-spa": "^5.0.0",
     "webpack-dev-server": "^4.0.0",

diff --git a/packages/generator-single-spa/src/svelte/templates/svelte.package.json b/packages/generator-single-spa/src/svelte/templates/svelte.package.json
@@ -11,23 +11,23 @@
     "check-format": "prettier --plugin-search-dir=. --check ."
   },
   "devDependencies": {
-    "@babel/core": "^7.15.0",
-    "@babel/preset-env": "^7.15.0",
+    "@babel/core": "^7.23.3",
+    "@babel/preset-env": "^7.23.3",
     "@rollup/plugin-commonjs": "^20.0.0",
     "@rollup/plugin-node-resolve": "^13.0.4",
-    "@testing-library/jest-dom": "^5.14.1",
+    "@testing-library/jest-dom": "^5.17.0",
     "@testing-library/svelte": "^3.0.3",
-    "babel-jest": "^27.0.6",
+    "babel-jest": "^27.5.1",
     "concurrently": "^6.2.1",
-    "jest": "^27.0.6",
+    "jest": "^27.5.1",
     "prettier": "^2.3.2",
     "prettier-plugin-svelte": "^2.3.1",
     "rollup": "^2.56.3",
     "rollup-plugin-livereload": "^2.0.5",
     "rollup-plugin-svelte": "^7.1.0",
     "rollup-plugin-terser": "^7.0.2",
     "svelte": "^3.42.3",
-    "svelte-jester": "^1.7.0"
+    "svelte-jester": "^2.0.0"
   },
   "dependencies": {
     "single-spa-svelte": "^2.1.1",

diff --git a/packages/generator-single-spa/src/util-module/templates/util-module.package.json b/packages/generator-single-spa/src/util-module/templates/util-module.package.json
@@ -15,12 +15,12 @@
     "coverage": "cross-env BABEL_ENV=test jest --coverage"
   },
   "devDependencies": {
-    "@babel/core": "^7.15.0",
-    "@babel/eslint-parser": "^7.15.0",
-    "@babel/plugin-transform-runtime": "^7.15.0",
-    "@babel/preset-env": "^7.15.0",
-    "@babel/runtime": "^7.15.3",
-    "babel-jest": "^27.0.6",
+    "@babel/core": "^7.23.3",
+    "@babel/eslint-parser": "^7.23.3",
+    "@babel/plugin-transform-runtime": "^7.23.3",
+    "@babel/preset-env": "^7.23.3",
+    "@babel/runtime": "^7.23.3",
+    "babel-jest": "^27.5.1",
     "concurrently": "^6.2.1",
     "cross-env": "^7.0.3",
     "eslint": "^7.32.0",
@@ -29,11 +29,11 @@
     "eslint-plugin-prettier": "^3.4.1",
     "husky": "^7.0.2",
     "identity-obj-proxy": "^3.0.0",
-    "jest": "^27.0.6",
-    "jest-cli": "^27.0.6",
+    "jest": "^27.5.1",
+    "jest-cli": "^27.5.1",
     "prettier": "^2.3.2",
     "pretty-quick": "^3.1.1",
-    "webpack": "^5.75.0",
+    "webpack": "^5.89.0",
     "webpack-config-single-spa": "^5.0.0",
     "webpack-merge": "^5.8.0",
     "webpack-cli": "^4.10.0",

diff --git a/packages/single-spa-web-server-utils/package.json b/packages/single-spa-web-server-utils/package.json
@@ -31,9 +31,9 @@
     "url": "https://github.com/single-spa/create-single-spa/issues"
   },
   "dependencies": {
-    "import-map-overrides": "^2.4.1",
+    "import-map-overrides": "^3.1.1",
     "lodash": "^4.17.21",
-    "node-fetch": "^2.6.1"
+    "node-fetch": "^2.7.0"
   },
   "devDependencies": {
     "@jest/globals": "^27.4.6",

diff --git a/packages/single-spa-welcome/package.json b/packages/single-spa-welcome/package.json
@@ -29,36 +29,35 @@
     "prepublishOnly": "pnpm run build"
   },
   "devDependencies": {
-    "@babel/core": "^7.15.0",
-    "@babel/eslint-parser": "^7.15.0",
-    "@babel/plugin-transform-runtime": "^7.15.0",
-    "@babel/preset-env": "^7.15.0",
-    "@babel/preset-react": "^7.14.5",
-    "@babel/runtime": "^7.15.3",
-    "@testing-library/jest-dom": "^5.14.1",
+    "@babel/core": "^7.23.3",
+    "@babel/eslint-parser": "^7.23.3",
+    "@babel/plugin-transform-runtime": "^7.23.3",
+    "@babel/preset-env": "^7.23.3",
+    "@babel/preset-react": "^7.23.3",
+    "@babel/runtime": "^7.23.3",
+    "@testing-library/jest-dom": "^5.17.0",
     "@testing-library/react": "^12.0.0",
     "@types/jest": "^27.0.1",
-    "babel-jest": "^27.0.6",
-    "babel-loader": "^8.2.2",
-    "concurrently": "^6.2.1",
+    "babel-jest": "^27.5.1",
+    "babel-loader": "^8.2.5",
     "cross-env": "^7.0.3",
     "css-loader": "^5.2.7",
     "eslint": "^7.32.0",
     "eslint-config-prettier": "^8.3.0",
     "eslint-config-react-important-stuff": "^3.0.0",
     "eslint-plugin-prettier": "^3.4.1",
     "identity-obj-proxy": "^3.0.0",
-    "jest": "^27.0.6",
-    "jest-cli": "^27.0.6",
+    "jest": "^27.5.1",
+    "jest-cli": "^27.5.1",
     "prettier": "^2.3.2",
     "pretty-quick": "^3.1.1",
-    "single-spa-react": "^4.3.1",
+    "single-spa-react": "^5.1.4",
     "style-loader": "^3.2.1",
     "ts-config-single-spa": "workspace:*",
-    "webpack": "^5.75.0",
-    "webpack-cli": "^4.8.0",
+    "webpack": "^5.89.0",
+    "webpack-cli": "^4.10.0",
     "webpack-config-single-spa-react": "workspace:*",
-    "webpack-dev-server": "^4.0.0",
+    "webpack-dev-server": "^4.15.1",
     "webpack-merge": "^5.8.0"
   },
   "dependencies": {

diff --git a/packages/webpack-config-single-spa-ts/package.json b/packages/webpack-config-single-spa-ts/package.json
@@ -29,7 +29,7 @@
     "url": "https://github.com/single-spa/create-single-spa/issues"
   },
   "dependencies": {
-    "fork-ts-checker-webpack-plugin": "^6.3.2",
+    "fork-ts-checker-webpack-plugin": "^8.0.0",
     "typescript": "^4.1.2",
     "webpack-config-single-spa": "workspace:*",
     "webpack-merge": "^5.8.0"

diff --git a/packages/webpack-config-single-spa/package.json b/packages/webpack-config-single-spa/package.json
@@ -22,15 +22,15 @@
     "url": "https://github.com/single-spa/create-single-spa/issues"
   },
   "dependencies": {
-    "babel-loader": "^8.2.2",
-    "css-loader": "^5.2.7",
-    "html-webpack-plugin": "^5.3.2",
+    "babel-loader": "^8.2.5",
+    "css-loader": "^6.8.1",
+    "html-webpack-plugin": "^5.5.4",
     "standalone-single-spa-webpack-plugin": "^4.0.0",
     "style-loader": "^3.2.1",
     "systemjs-webpack-interop": "^2.3.7",
     "webpack-bundle-analyzer": "^4.4.2"
   },
   "devDependencies": {
-    "webpack": "^5.75.0"
+    "webpack": "^5.89.0"
   }
 }