From 0942e108001bdc2c3d79a5cb5a5cf60cb59d5323 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 9 Mar 2024 00:47:54 +0000 Subject: [PATCH 1/4] fix: upgrade @sentry/vue from 7.54.0 to 7.101.1 Snyk has created this PR to upgrade @sentry/vue from 7.54.0 to 7.101.1. See this package in npm: https://www.npmjs.com/package/@sentry/vue See this project in Snyk: https://app.snyk.io/org/davidshq/project/f14d4db6-c756-44ff-a784-ede8858ce5c8?utm_source=github&utm_medium=referral&page=upgrade-pr --- web_client/package-lock.json | 118 +++++++++++++++++++++-------------- web_client/package.json | 2 +- 2 files changed, 73 insertions(+), 47 deletions(-) diff --git a/web_client/package-lock.json b/web_client/package-lock.json index af5922d4..80613785 100644 --- a/web_client/package-lock.json +++ b/web_client/package-lock.json @@ -10,7 +10,7 @@ "dependencies": { "@girder/oauth-client": "^0.7.7", "@mdi/font": "^6.5.95", - "@sentry/vue": "^7.54.0", + "@sentry/vue": "^7.101.1", "axios": "^0.24.0", "core-js": "^3.29.1", "django-s3-file-field": "^0.3.0", @@ -2735,92 +2735,117 @@ "integrity": "sha512-a5Sab1C4/icpTZVzZc5Ghpz88yQtGOyNqYXcZgOssB2uuAr+wF/MvN6bgtW32q7HHrvBki+BsZ0OuNv6EV3K9g==", "dev": true }, + "node_modules/@sentry-internal/feedback": { + "version": "7.101.1", + "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-7.101.1.tgz", + "integrity": "sha512-fOKDMVvLX+FuJHJszKBvRg1m7+fd4hchqRnZ9DDfitT6P5Ppl0gbEt/LStqu8Wq5M0tna+hpdwHlVEt7gZVKzw==", + "dependencies": { + "@sentry/core": "7.101.1", + "@sentry/types": "7.101.1", + "@sentry/utils": "7.101.1" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/@sentry-internal/replay-canvas": { + "version": "7.101.1", + "resolved": "https://registry.npmjs.org/@sentry-internal/replay-canvas/-/replay-canvas-7.101.1.tgz", + "integrity": "sha512-09l6nD+lxWvwkpXLlIZuzj/z79Llbo6mcH33TJvxrUTjAqSGF/i3Pd5bTLWro9atippOyQgIV/yTGG4Bc5FhyQ==", + "dependencies": { + "@sentry/core": "7.101.1", + "@sentry/replay": "7.101.1", + "@sentry/types": "7.101.1", + "@sentry/utils": "7.101.1" + }, + "engines": { + "node": ">=12" + } + }, "node_modules/@sentry-internal/tracing": { - "version": "7.54.0", - "resolved": "https://registry.npmjs.org/@sentry-internal/tracing/-/tracing-7.54.0.tgz", - "integrity": "sha512-JsyhZ0wWZ+VqbHJg+azqRGdYJDkcI5R9+pnkO6SzbzxrRewqMAIwzkpPee3oI7vG99uhMEkOkMjHu0nQGwkOQw==", + "version": "7.101.1", + "resolved": "https://registry.npmjs.org/@sentry-internal/tracing/-/tracing-7.101.1.tgz", + "integrity": "sha512-ihjWG8x4x0ozx6t+EHoXLKbsPrgzYLCpeBLWyS+M6n3hn6cmHM76c8nZw3ldhUQi5UYL3LFC/JZ50b4oSxtlrg==", "dependencies": { - "@sentry/core": "7.54.0", - "@sentry/types": "7.54.0", - "@sentry/utils": "7.54.0", - "tslib": "^1.9.3" + "@sentry/core": "7.101.1", + "@sentry/types": "7.101.1", + "@sentry/utils": "7.101.1" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/browser": { - "version": "7.54.0", - "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-7.54.0.tgz", - "integrity": "sha512-EvLAw03N9WE2m1CMl2/1YMeIs1icw9IEOVJhWmf3uJEysNJOFWXu6ZzdtHEz1E6DiJYhc1HzDya0ExZeJxNARA==", + "version": "7.101.1", + "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-7.101.1.tgz", + "integrity": "sha512-+rIFoWPdO29AHVYsAwq8QEl2Ihv17Xh9Bt2aPFvLTGDA0caHjnx98g2jSOvLIOah6HI7Nwp3Njg2zBEzDtHkNw==", "dependencies": { - "@sentry-internal/tracing": "7.54.0", - "@sentry/core": "7.54.0", - "@sentry/replay": "7.54.0", - "@sentry/types": "7.54.0", - "@sentry/utils": "7.54.0", - "tslib": "^1.9.3" + "@sentry-internal/feedback": "7.101.1", + "@sentry-internal/replay-canvas": "7.101.1", + "@sentry-internal/tracing": "7.101.1", + "@sentry/core": "7.101.1", + "@sentry/replay": "7.101.1", + "@sentry/types": "7.101.1", + "@sentry/utils": "7.101.1" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/core": { - "version": "7.54.0", - "resolved": "https://registry.npmjs.org/@sentry/core/-/core-7.54.0.tgz", - "integrity": "sha512-MAn0E2EwgNn1pFQn4qxhU+1kz6edullWg6VE5wCmtpXWOVw6sILBUsQpeIG5djBKMcneJCdOlz5jeqcKPrLvZQ==", + "version": "7.101.1", + "resolved": "https://registry.npmjs.org/@sentry/core/-/core-7.101.1.tgz", + "integrity": "sha512-XSmXXeYT1d4O14eDF3OXPJFUgaN2qYEeIGUztqPX9nBs9/ij8y/kZOayFqlIMnfGvjOUM+63sy/2xDBOpFn6ug==", "dependencies": { - "@sentry/types": "7.54.0", - "@sentry/utils": "7.54.0", - "tslib": "^1.9.3" + "@sentry/types": "7.101.1", + "@sentry/utils": "7.101.1" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/replay": { - "version": "7.54.0", - "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-7.54.0.tgz", - "integrity": "sha512-C0F0568ybphzGmKGe23duB6n5wJcgM7WLYhoeqW3o2bHeqpj1dGPSka/K3s9KzGaAgzn1zeOUYXJsOs+T/XdsA==", + "version": "7.101.1", + "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-7.101.1.tgz", + "integrity": "sha512-l4jmj2Rf/myzk3TA83PdMiomassG8okdBh1b2Hp1+ycBRVZFDmsR81gKPvnefSXwGwGNGKEmp6Q2bdGzekpp3Q==", "dependencies": { - "@sentry/core": "7.54.0", - "@sentry/types": "7.54.0", - "@sentry/utils": "7.54.0" + "@sentry-internal/tracing": "7.101.1", + "@sentry/core": "7.101.1", + "@sentry/types": "7.101.1", + "@sentry/utils": "7.101.1" }, "engines": { "node": ">=12" } }, "node_modules/@sentry/types": { - "version": "7.54.0", - "resolved": "https://registry.npmjs.org/@sentry/types/-/types-7.54.0.tgz", - "integrity": "sha512-D+i9xogBeawvQi2r0NOrM7zYcUaPuijeME4O9eOTrDF20tj71hWtJLilK+KTGLYFtpGg1h+9bPaz7OHEIyVopg==", + "version": "7.101.1", + "resolved": "https://registry.npmjs.org/@sentry/types/-/types-7.101.1.tgz", + "integrity": "sha512-bwtkQvrCZ6JGc7vqX7TEAKBgkbQFORt84FFS3JQQb8G3efTt9fZd2ReY4buteKQdlALl8h1QWVngTLmI+kyUuw==", "engines": { "node": ">=8" } }, "node_modules/@sentry/utils": { - "version": "7.54.0", - "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-7.54.0.tgz", - "integrity": "sha512-3Yf5KlKjIcYLddOexSt2ovu2TWlR4Fi7M+aCK8yUTzwNzf/xwFSWOstHlD/WiDy9HvfhWAOB/ukNTuAeJmtasw==", + "version": "7.101.1", + "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-7.101.1.tgz", + "integrity": "sha512-Nrg0nrEI3nrOCd9SLJ/WGzxS5KMQE4cryLOvrDcHJRWpsSyGBF1hLLerk84Nsw/0myMsn7zTYU+xoq7idNsX5A==", "dependencies": { - "@sentry/types": "7.54.0", - "tslib": "^1.9.3" + "@sentry/types": "7.101.1" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/vue": { - "version": "7.54.0", - "resolved": "https://registry.npmjs.org/@sentry/vue/-/vue-7.54.0.tgz", - "integrity": "sha512-HUEEYuL86dHNCiLM4fcMn40Bp1j6+CHsEiWuw7vvQ8BZ3Ni8Xb6vbADXCwr99iCfao3ghkAlrjQaOZrKZIHzGg==", + "version": "7.101.1", + "resolved": "https://registry.npmjs.org/@sentry/vue/-/vue-7.101.1.tgz", + "integrity": "sha512-SIlusW6A6lZPPcTRpaZC3K8TyYNxhpO5hsk/CFf849m2I9ZOFyrIc+18Wwohd0IABqXweNu+O3cnssGjdVlnUw==", "dependencies": { - "@sentry/browser": "7.54.0", - "@sentry/core": "7.54.0", - "@sentry/types": "7.54.0", - "@sentry/utils": "7.54.0", - "tslib": "^1.9.3" + "@sentry/browser": "7.101.1", + "@sentry/core": "7.101.1", + "@sentry/types": "7.101.1", + "@sentry/utils": "7.101.1" }, "engines": { "node": ">=8" @@ -16869,7 +16894,8 @@ "node_modules/tslib": { "version": "1.14.1", "resolved": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz", - "integrity": "sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==" + "integrity": "sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==", + "dev": true }, "node_modules/tsutils": { "version": "3.21.0", diff --git a/web_client/package.json b/web_client/package.json index 76bc0fc8..f03f60eb 100644 --- a/web_client/package.json +++ b/web_client/package.json @@ -12,7 +12,7 @@ "dependencies": { "@girder/oauth-client": "^0.7.7", "@mdi/font": "^6.5.95", - "@sentry/vue": "^7.54.0", + "@sentry/vue": "^7.101.1", "axios": "^0.24.0", "core-js": "^3.29.1", "django-s3-file-field": "^0.3.0", From 11ae39d5202797e9729e42bf00c48c263bb6bf40 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 9 Mar 2024 00:47:58 +0000 Subject: [PATCH 2/4] fix: upgrade core-js from 3.30.1 to 3.36.0 Snyk has created this PR to upgrade core-js from 3.30.1 to 3.36.0. See this package in npm: https://www.npmjs.com/package/core-js See this project in Snyk: https://app.snyk.io/org/davidshq/project/f14d4db6-c756-44ff-a784-ede8858ce5c8?utm_source=github&utm_medium=referral&page=upgrade-pr --- web_client/package-lock.json | 8 ++++---- web_client/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/web_client/package-lock.json b/web_client/package-lock.json index af5922d4..969e0150 100644 --- a/web_client/package-lock.json +++ b/web_client/package-lock.json @@ -12,7 +12,7 @@ "@mdi/font": "^6.5.95", "@sentry/vue": "^7.54.0", "axios": "^0.24.0", - "core-js": "^3.29.1", + "core-js": "^3.36.0", "django-s3-file-field": "^0.3.0", "gl-matrix": "^3.4.3", "idle-js": "^1.2.0", @@ -6421,9 +6421,9 @@ } }, "node_modules/core-js": { - "version": "3.30.1", - "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.30.1.tgz", - "integrity": "sha512-ZNS5nbiSwDTq4hFosEDqm65izl2CWmLz0hARJMyNQBgkUZMIF51cQiMvIQKA6hvuaeWxQDP3hEedM1JZIgTldQ==", + "version": "3.36.0", + "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.36.0.tgz", + "integrity": "sha512-mt7+TUBbTFg5+GngsAxeKBTl5/VS0guFeJacYge9OmHb+m058UwwIm41SE9T4Den7ClatV57B6TYTuJ0CX1MAw==", "hasInstallScript": true, "funding": { "type": "opencollective", diff --git a/web_client/package.json b/web_client/package.json index 76bc0fc8..70069db7 100644 --- a/web_client/package.json +++ b/web_client/package.json @@ -14,7 +14,7 @@ "@mdi/font": "^6.5.95", "@sentry/vue": "^7.54.0", "axios": "^0.24.0", - "core-js": "^3.29.1", + "core-js": "^3.36.0", "django-s3-file-field": "^0.3.0", "gl-matrix": "^3.4.3", "idle-js": "^1.2.0", From 66386987911b495c145a49be05e8c5c83c655c45 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 9 Mar 2024 00:48:07 +0000 Subject: [PATCH 3/4] fix: upgrade vtk.js from 22.5.7 to 22.6.2 Snyk has created this PR to upgrade vtk.js from 22.5.7 to 22.6.2. See this package in npm: https://www.npmjs.com/package/vtk.js See this project in Snyk: https://app.snyk.io/org/davidshq/project/f14d4db6-c756-44ff-a784-ede8858ce5c8?utm_source=github&utm_medium=referral&page=upgrade-pr --- web_client/package-lock.json | 8 ++++---- web_client/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/web_client/package-lock.json b/web_client/package-lock.json index af5922d4..870895c2 100644 --- a/web_client/package-lock.json +++ b/web_client/package-lock.json @@ -20,7 +20,7 @@ "lodash": "^4.17.21", "polyfill-object.fromentries": "^1.0.1", "uuid": "^3.4.0", - "vtk.js": "22.5.7", + "vtk.js": "^22.6.2", "vue": "^2.7.14", "vue-async-computed": "^3.5.1", "vue-css-donut-chart": "^1.3.2", @@ -17174,9 +17174,9 @@ } }, "node_modules/vtk.js": { - "version": "22.5.7", - "resolved": "https://registry.npmjs.org/vtk.js/-/vtk.js-22.5.7.tgz", - "integrity": "sha512-sc4YPtZsvhZeqsTm/oXIHq/YsWOcN+V/cH62v3hrPI4zMhdfPg0UV0E69BAniAQ4jGxQ8q+9X7GeyMqOUrFvSQ==", + "version": "22.6.2", + "resolved": "https://registry.npmjs.org/vtk.js/-/vtk.js-22.6.2.tgz", + "integrity": "sha512-OVJtVosFmbNk2qd669hO50q/Uj+Dp66e77xgoRc4pJa5/11RGypnpKvqPkgt2kfF/tuUNmlXkT6UAyuikTm1+g==", "dependencies": { "@babel/runtime": "7.16.7", "commander": "8.3.0", diff --git a/web_client/package.json b/web_client/package.json index 76bc0fc8..9ed481fb 100644 --- a/web_client/package.json +++ b/web_client/package.json @@ -22,7 +22,7 @@ "lodash": "^4.17.21", "polyfill-object.fromentries": "^1.0.1", "uuid": "^3.4.0", - "vtk.js": "22.5.7", + "vtk.js": "22.6.2", "vue": "^2.7.14", "vue-async-computed": "^3.5.1", "vue-css-donut-chart": "^1.3.2", From d16b54a7c3946c68495ec043c48dad1105044ef3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 9 Mar 2024 00:48:10 +0000 Subject: [PATCH 4/4] fix: upgrade vue from 2.7.14 to 2.7.16 Snyk has created this PR to upgrade vue from 2.7.14 to 2.7.16. See this package in npm: https://www.npmjs.com/package/vue See this project in Snyk: https://app.snyk.io/org/davidshq/project/f14d4db6-c756-44ff-a784-ede8858ce5c8?utm_source=github&utm_medium=referral&page=upgrade-pr --- web_client/package-lock.json | 76 ++++++++---------------------------- web_client/package.json | 2 +- 2 files changed, 17 insertions(+), 61 deletions(-) diff --git a/web_client/package-lock.json b/web_client/package-lock.json index af5922d4..ec83db8b 100644 --- a/web_client/package-lock.json +++ b/web_client/package-lock.json @@ -21,7 +21,7 @@ "polyfill-object.fromentries": "^1.0.1", "uuid": "^3.4.0", "vtk.js": "22.5.7", - "vue": "^2.7.14", + "vue": "^2.7.16", "vue-async-computed": "^3.5.1", "vue-css-donut-chart": "^1.3.2", "vue-router": "^3.6.5", @@ -609,10 +609,9 @@ } }, "node_modules/@babel/parser": { - "version": "7.21.4", - "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.21.4.tgz", - "integrity": "sha512-alVJj7k7zIxqBZ7BTRhz0IqJFxW1VJbm6N8JbcYhQ186df9ZBPbZBmWSqAMXwHGsCJdYks7z/voa3ibiS5bCIw==", - "dev": true, + "version": "7.24.0", + "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.24.0.tgz", + "integrity": "sha512-QuP/FxEAzMSjXygs8v4N9dvdXzEHN4W1oF3PxuWAtPo08UdM17u89RDMgjLn/mlc56iM0HlLmVkO/wgR+rDgHg==", "bin": { "parser": "bin/babel-parser.js" }, @@ -4145,59 +4144,16 @@ } }, "node_modules/@vue/compiler-sfc": { - "version": "2.7.14", - "resolved": "https://registry.npmjs.org/@vue/compiler-sfc/-/compiler-sfc-2.7.14.tgz", - "integrity": "sha512-aNmNHyLPsw+sVvlQFQ2/8sjNuLtK54TC6cuKnVzAY93ks4ZBrvwQSnkkIh7bsbNhum5hJBS00wSDipQ937f5DA==", + "version": "2.7.16", + "resolved": "https://registry.npmjs.org/@vue/compiler-sfc/-/compiler-sfc-2.7.16.tgz", + "integrity": "sha512-KWhJ9k5nXuNtygPU7+t1rX6baZeqOYLEforUPjgNDBnLicfHCoi48H87Q8XyLZOrNNsmhuwKqtpDQWjEFe6Ekg==", "dependencies": { - "@babel/parser": "^7.18.4", + "@babel/parser": "^7.23.5", "postcss": "^8.4.14", "source-map": "^0.6.1" - } - }, - "node_modules/@vue/compiler-sfc/node_modules/@babel/parser": { - "version": "7.21.4", - "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.21.4.tgz", - "integrity": "sha512-alVJj7k7zIxqBZ7BTRhz0IqJFxW1VJbm6N8JbcYhQ186df9ZBPbZBmWSqAMXwHGsCJdYks7z/voa3ibiS5bCIw==", - "bin": { - "parser": "bin/babel-parser.js" - }, - "engines": { - "node": ">=6.0.0" - } - }, - "node_modules/@vue/compiler-sfc/node_modules/postcss": { - "version": "8.4.23", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.23.tgz", - "integrity": "sha512-bQ3qMcpF6A/YjR55xtoTr0jGOlnPOKAIMdOWiv0EIT6HVPEaJiJB4NLljSbiHoC2RX7DN5Uvjtpbg1NPdwv1oA==", - "funding": [ - { - "type": "opencollective", - "url": "https://opencollective.com/postcss/" - }, - { - "type": "tidelift", - "url": "https://tidelift.com/funding/github/npm/postcss" - }, - { - "type": "github", - "url": "https://github.com/sponsors/ai" - } - ], - "dependencies": { - "nanoid": "^3.3.6", - "picocolors": "^1.0.0", - "source-map-js": "^1.0.2" }, - "engines": { - "node": "^10 || ^12 || >=14" - } - }, - "node_modules/@vue/compiler-sfc/node_modules/source-map": { - "version": "0.6.1", - "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz", - "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==", - "engines": { - "node": ">=0.10.0" + "optionalDependencies": { + "prettier": "^1.18.2 || ^2.0.0" } }, "node_modules/@vue/component-compiler-utils": { @@ -14077,7 +14033,6 @@ "version": "8.4.23", "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.23.tgz", "integrity": "sha512-bQ3qMcpF6A/YjR55xtoTr0jGOlnPOKAIMdOWiv0EIT6HVPEaJiJB4NLljSbiHoC2RX7DN5Uvjtpbg1NPdwv1oA==", - "dev": true, "funding": [ { "type": "opencollective", @@ -14716,7 +14671,7 @@ "version": "2.8.8", "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.8.8.tgz", "integrity": "sha512-tdN8qQGvNjw4CHbY+XXk0JgCXn9QiF21a55rBe5LJAU+kDyC4WQn4+awm2Xfk2lQMk5fKup9XgzTZtGkjBdP9Q==", - "dev": true, + "devOptional": true, "bin": { "prettier": "bin-prettier.js" }, @@ -17222,11 +17177,12 @@ } }, "node_modules/vue": { - "version": "2.7.14", - "resolved": "https://registry.npmjs.org/vue/-/vue-2.7.14.tgz", - "integrity": "sha512-b2qkFyOM0kwqWFuQmgd4o+uHGU7T+2z3T+WQp8UBjADfEv2n4FEMffzBmCKNP0IGzOEEfYjvtcC62xaSKeQDrQ==", + "version": "2.7.16", + "resolved": "https://registry.npmjs.org/vue/-/vue-2.7.16.tgz", + "integrity": "sha512-4gCtFXaAA3zYZdTp5s4Hl2sozuySsgz4jy1EnpBHNfpMa9dK1ZCG7viqBPCwXtmgc8nHqUsAu3G4gtmXkkY3Sw==", + "deprecated": "Vue 2 has reached EOL and is no longer actively maintained. See https://v2.vuejs.org/eol/ for more details.", "dependencies": { - "@vue/compiler-sfc": "2.7.14", + "@vue/compiler-sfc": "2.7.16", "csstype": "^3.1.0" } }, diff --git a/web_client/package.json b/web_client/package.json index 76bc0fc8..ac9b581c 100644 --- a/web_client/package.json +++ b/web_client/package.json @@ -23,7 +23,7 @@ "polyfill-object.fromentries": "^1.0.1", "uuid": "^3.4.0", "vtk.js": "22.5.7", - "vue": "^2.7.14", + "vue": "^2.7.16", "vue-async-computed": "^3.5.1", "vue-css-donut-chart": "^1.3.2", "vue-router": "^3.6.5",