From 0a17896cb6a3d705474d0c46d67e18efb6b90d8d Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 17 Nov 2025 01:35:18 +0000 Subject: [PATCH] build(deps-dev): bump all Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/codeql-analysis.yml | 4 +- .github/workflows/semgrep.yml | 2 +- package.json | 12 +-- pnpm-lock.yaml | 133 +++++++++++++++----------- 4 files changed, 87 insertions(+), 64 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 88f4e354..045786db 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -29,12 +29,12 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@5d5cd550d3e189c569da8f16ea8de2d821c9bf7a # v3.31.2 + uses: github/codeql-action/init@f94c9befffa4412c356fb5463a959ab7821dd57e # v3.31.3 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@5d5cd550d3e189c569da8f16ea8de2d821c9bf7a # v3.31.2 + uses: github/codeql-action/analyze@f94c9befffa4412c356fb5463a959ab7821dd57e # v3.31.3 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 76f90222..5cc51ad2 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -16,7 +16,7 @@ jobs: env: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} container: - image: returntocorp/semgrep@sha256:142b5fbdd9427ebdda0fe796168f83ae85679a5f9a5683e70bd7ddfd88533600 # latest + image: returntocorp/semgrep@sha256:3d1a3467804ae22460f8c3f46d9406a8c541aa1c48aa62808b06de28b4bf27a6 # latest steps: - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - run: semgrep ci diff --git a/package.json b/package.json index 3b89c664..be8d2472 100644 --- a/package.json +++ b/package.json @@ -3,10 +3,10 @@ "author": "The OpenINF Authors & Friends", "private": "true", "description": "The OpenINF portal, other static resources, and more static electricity", - "packageManager": "pnpm@10.21.0", + "packageManager": "pnpm@10.22.0", "engines": { "node": "22.21.1", - "pnpm": "10.21.0" + "pnpm": "10.22.0" }, "exports": { "./build/constants": "./build/shared/constants.mjs", @@ -30,13 +30,13 @@ "@isaacs/catcher": "1.0.4", "@openinf/gh-file-importer": "2.0.1", "@shopify/prettier-plugin-liquid": "1.10.0", - "@tsconfig/node-lts": "22.0.2", + "@tsconfig/node-lts": "22.0.3", "@types/console-log-level": "1.4.5", "@types/gulp": "4.0.18", "@types/js-yaml": "4.0.9", - "@types/node": "22.19.0", + "@types/node": "22.19.1", "@yarnpkg/shell": "4.1.3", - "autoprefixer": "10.4.21", + "autoprefixer": "10.4.22", "bootstrap": "5.3.8", "browser-sync": "3.0.4", "browserslist-lint": "0.3.3", @@ -59,7 +59,7 @@ "markdown-it-sub": "2.0.0", "markdown-it-sup": "2.0.0", "markdown-it-task-lists": "2.1.1", - "markdownlint-cli2": "0.18.1", + "markdownlint-cli2": "0.19.0", "markdownlint-cli2-formatter-default": "0.0.6", "nps": "5.10.0", "prettier": "3.6.2", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index c3ece953..7c70054e 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -27,8 +27,8 @@ importers: specifier: 1.10.0 version: 1.10.0(prettier@3.6.2) '@tsconfig/node-lts': - specifier: 22.0.2 - version: 22.0.2 + specifier: 22.0.3 + version: 22.0.3 '@types/console-log-level': specifier: 1.4.5 version: 1.4.5 @@ -39,14 +39,14 @@ importers: specifier: 4.0.9 version: 4.0.9 '@types/node': - specifier: 22.19.0 - version: 22.19.0 + specifier: 22.19.1 + version: 22.19.1 '@yarnpkg/shell': specifier: 4.1.3 version: 4.1.3(typanion@3.14.0) autoprefixer: - specifier: 10.4.21 - version: 10.4.21(postcss@8.5.6) + specifier: 10.4.22 + version: 10.4.22(postcss@8.5.6) bootstrap: specifier: 5.3.8 version: 5.3.8(@popperjs/core@2.11.8) @@ -114,11 +114,11 @@ importers: specifier: 2.1.1 version: 2.1.1 markdownlint-cli2: - specifier: 0.18.1 - version: 0.18.1 + specifier: 0.19.0 + version: 0.19.0 markdownlint-cli2-formatter-default: specifier: 0.0.6 - version: 0.0.6(markdownlint-cli2@0.18.1) + version: 0.0.6(markdownlint-cli2@0.19.0) nps: specifier: 5.10.0 version: 5.10.0 @@ -1053,6 +1053,10 @@ packages: resolution: {integrity: sha512-LtoMMhxAlorcGhmFYI+LhPgbPZCkgP6ra1YL604EeF6U98pLlQ3iWIGMdWSC+vWmPBWBNgmDBAhnAobLROJmwg==} engines: {node: '>=18'} + '@sindresorhus/merge-streams@4.0.0': + resolution: {integrity: sha512-tlqY9xq5ukxTUZBmoOp+m61cqwQD5pHJtFY3Mn8CA8ps6yghLH/Hw8UPdqg4OLmFW3IFlcXnQNmo/dh8HzXYIQ==} + engines: {node: '>=18'} + '@sindresorhus/slugify@2.2.1': resolution: {integrity: sha512-MkngSCRZ8JdSOCHRaYd+D01XhvU3Hjy6MGl06zhOk614hp9EOAp5gIkBeQg7wtmxpitU6eAL4kdiRMcJa2dlrw==} engines: {node: '>=12'} @@ -1064,8 +1068,8 @@ packages: '@socket.io/component-emitter@3.1.2': resolution: {integrity: sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==} - '@tsconfig/node-lts@22.0.2': - resolution: {integrity: sha512-Kgq5yXTvnUnvlhob0xJpOH4na9PWtuFhHSf94MpDwnENWgiFeJKDNANQV2MT1WpXZYkK2WSWfVYKhVkR7bc8TA==} + '@tsconfig/node-lts@22.0.3': + resolution: {integrity: sha512-+d99ek2teCR/AYgGw/LBC2xtNu2YswIR38SL653KQipi4YWkKJKmAf+rzVf0AR6s65fhahmmJw8KWNQSP57+ag==} '@types/concat-stream@2.0.3': resolution: {integrity: sha512-3qe4oQAPNwVNwK4C9c8u+VJqv9kez+2MR4qJpoPFfXtgxxif1QbFusvXzK0/Wra2VX07smostI2VMmJNSpZjuQ==} @@ -1127,8 +1131,8 @@ packages: '@types/nlcst@2.0.3': resolution: {integrity: sha512-vSYNSDe6Ix3q+6Z7ri9lyWqgGhJTmzRjZRqyq15N0Z/1/UnVsno9G/N40NBijoYx2seFDIl0+B2mgAb9mezUCA==} - '@types/node@22.19.0': - resolution: {integrity: sha512-xpr/lmLPQEj+TUnHmR+Ab91/glhJvsqcjB+yY0Ix9GO70H6Lb4FHH5GeqdOE5btAx7eIMwuHkp4H2MSkLcqWbA==} + '@types/node@22.19.1': + resolution: {integrity: sha512-LCCV0HdSZZZb34qifBsyWlUmok6W7ouER+oQIGBScS8EsZsQbrtFTUrDX4hOl+CS6p7cnNC4td+qrSVGSCTUfQ==} '@types/picomatch@4.0.2': resolution: {integrity: sha512-qHHxQ+P9PysNEGbALT8f8YOSHW0KJu6l2xU8DYY0fu/EmGxXdVnuTLvFUvBgPJMSqXq29SYHveejeAha+4AYgA==} @@ -1333,8 +1337,8 @@ packages: automated-readability@2.0.1: resolution: {integrity: sha512-/csT54oO/8qjtqaCZoNqA0srbHv3z1YAxj0ee4UQkYC7x6lb6jU0f9LIo7DLJKHWSEI4nsvnFyy34vILDqA7xw==} - autoprefixer@10.4.21: - resolution: {integrity: sha512-O+A6LWV5LDHSJD3LjHYoNi4VLsj/Whi7k6zG12xTYaU4cQ8oxQGckXNX8cRHK5yOZ/ppVHe0ZBXGzSV9jXdVbQ==} + autoprefixer@10.4.22: + resolution: {integrity: sha512-ARe0v/t9gO28Bznv6GgqARmVqcWOV3mfgUPn9becPHMiD3o9BwlRgaeccZnwTpZ7Zwqrm+c1sUSsMxIzQzc8Xg==} engines: {node: ^10 || ^12 || >=14} hasBin: true peerDependencies: @@ -1471,6 +1475,9 @@ packages: caniuse-lite@1.0.30001753: resolution: {integrity: sha512-Bj5H35MD/ebaOV4iDLqPEtiliTN29qkGtEHCwawWn4cYm+bPJM2NsaP30vtZcnERClMzp52J4+aw2UNbK4o+zw==} + caniuse-lite@1.0.30001755: + resolution: {integrity: sha512-44V+Jm6ctPj7R52Na4TLi3Zri4dWUljJd+RDm+j8LtNCc/ihLCT+X1TzoOAkRETEWqjuLnh9581Tl80FvK7jVA==} + ccount@2.0.1: resolution: {integrity: sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==} @@ -2185,8 +2192,8 @@ packages: resolution: {integrity: sha512-wzsgA6WOq+09wrU1tsJ09udeR/YZRaeArL9e1wPbFg3GG2yDnC2ldKpxs4xunpFF9DgqCqOIra3bc1HWrJ37Ww==} engines: {node: '>=0.4.x'} - fraction.js@4.3.7: - resolution: {integrity: sha512-ZsDfxO51wGAXREY55a7la9LScWpwv9RxIrYABrlvOFBlH/ShPnrtsXeuUIfXKKOVicNxQ+o8JTbJvjS4M89yew==} + fraction.js@5.3.4: + resolution: {integrity: sha512-1X1NTtiJphryn/uLQz3whtY6jK3fTqoE3ohKs0tT+Ujr1W59oopxmoEh7Lu5p6vBaPbgoM0bzveAW4Qi5RyWDQ==} fresh@0.5.2: resolution: {integrity: sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==} @@ -2276,6 +2283,10 @@ packages: resolution: {integrity: sha512-0Ia46fDOaT7k4og1PDW4YbodWWr3scS2vAr2lTbsplOt2WkKp0vQbkI9wKis/T5LV/dqPjO3bpS/z6GTJB82LA==} engines: {node: '>=18'} + globby@15.0.0: + resolution: {integrity: sha512-oB4vkQGqlMl682wL1IlWd02tXCbquGWM4voPEI85QmNKCaw8zGTm1f1rubFgkg3Eli2PtKlFgrnmUqasbQWlkw==} + engines: {node: '>=20'} + globjoin@0.1.4: resolution: {integrity: sha512-xYfnw62CKG8nLkZBfWbhWwDw02CHty86jfPcc2cr3ZfeuK9ysoVPPEUxf21bAD/rWAgk52SuBrLJlefNy8mvFg==} @@ -2600,6 +2611,10 @@ packages: resolution: {integrity: sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==} hasBin: true + js-yaml@4.1.1: + resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==} + hasBin: true + json-parse-even-better-errors@2.3.1: resolution: {integrity: sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==} @@ -2774,23 +2789,18 @@ packages: markdown-table@3.0.4: resolution: {integrity: sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw==} - markdownlint-cli2-formatter-default@0.0.5: - resolution: {integrity: sha512-4XKTwQ5m1+Txo2kuQ3Jgpo/KmnG+X90dWt4acufg6HVGadTUG5hzHF/wssp9b5MBYOMCnZ9RMPaU//uHsszF8Q==} - peerDependencies: - markdownlint-cli2: '>=0.0.4' - markdownlint-cli2-formatter-default@0.0.6: resolution: {integrity: sha512-VVDGKsq9sgzu378swJ0fcHfSicUnMxnL8gnLm/Q4J/xsNJ4e5bA6lvAz7PCzIl0/No0lHyaWdqVD2jotxOSFMQ==} peerDependencies: markdownlint-cli2: '>=0.0.4' - markdownlint-cli2@0.18.1: - resolution: {integrity: sha512-/4Osri9QFGCZOCTkfA8qJF+XGjKYERSHkXzxSyS1hd3ZERJGjvsUao2h4wdnvpHp6Tu2Jh/bPHM0FE9JJza6ng==} + markdownlint-cli2@0.19.0: + resolution: {integrity: sha512-0+g7Fi/Y3qfvwfhJr77CpC/dEEoc4k7SvumlnL1tb68O+7fjKtIUG7aKzNUQIMXTVi8x63jcfXg4swz/ZYKyCw==} engines: {node: '>=20'} hasBin: true - markdownlint@0.38.0: - resolution: {integrity: sha512-xaSxkaU7wY/0852zGApM8LdlIfGCW8ETZ0Rr62IQtAnUMlMuifsg09vWJcNYeL4f0anvr8Vo4ZQar8jGpV0btQ==} + markdownlint@0.39.0: + resolution: {integrity: sha512-Xt/oY7bAiHwukL1iru2np5LIkhwD19Y7frlsiDILK62v3jucXCD6JXlZlwMG12HZOR+roHIVuJZrfCkOhp6k3g==} engines: {node: '>=20'} mathml-tag-names@2.1.3: @@ -5476,6 +5486,8 @@ snapshots: '@sindresorhus/merge-streams@2.3.0': {} + '@sindresorhus/merge-streams@4.0.0': {} + '@sindresorhus/slugify@2.2.1': dependencies: '@sindresorhus/transliterate': 1.6.0 @@ -5487,17 +5499,17 @@ snapshots: '@socket.io/component-emitter@3.1.2': {} - '@tsconfig/node-lts@22.0.2': {} + '@tsconfig/node-lts@22.0.3': {} '@types/concat-stream@2.0.3': dependencies: - '@types/node': 22.19.0 + '@types/node': 22.19.1 '@types/console-log-level@1.4.5': {} '@types/cors@2.8.19': dependencies: - '@types/node': 22.19.0 + '@types/node': 22.19.1 '@types/debug@4.1.12': dependencies: @@ -5513,13 +5525,13 @@ snapshots: '@types/glob-stream@8.0.3': dependencies: - '@types/node': 22.19.0 + '@types/node': 22.19.1 '@types/picomatch': 4.0.2 '@types/streamx': 2.9.5 '@types/gulp@4.0.18': dependencies: - '@types/node': 22.19.0 + '@types/node': 22.19.1 '@types/undertaker': 1.2.12 '@types/vinyl-fs': 3.0.7 chokidar: 3.6.0 @@ -5555,7 +5567,7 @@ snapshots: dependencies: '@types/unist': 3.0.3 - '@types/node@22.19.0': + '@types/node@22.19.1': dependencies: undici-types: 6.21.0 @@ -5565,7 +5577,7 @@ snapshots: '@types/streamx@2.9.5': dependencies: - '@types/node': 22.19.0 + '@types/node': 22.19.1 '@types/supports-color@8.1.3': {} @@ -5575,7 +5587,7 @@ snapshots: '@types/undertaker@1.2.12': dependencies: - '@types/node': 22.19.0 + '@types/node': 22.19.1 '@types/undertaker-registry': 1.0.4 async-done: 1.3.2 @@ -5586,13 +5598,13 @@ snapshots: '@types/vinyl-fs@3.0.7': dependencies: '@types/glob-stream': 8.0.3 - '@types/node': 22.19.0 + '@types/node': 22.19.1 '@types/vinyl': 2.0.12 '@types/vinyl@2.0.12': dependencies: '@types/expect': 1.20.4 - '@types/node': 22.19.0 + '@types/node': 22.19.1 '@ungap/structured-clone@1.3.0': {} @@ -5734,11 +5746,11 @@ snapshots: automated-readability@2.0.1: {} - autoprefixer@10.4.21(postcss@8.5.6): + autoprefixer@10.4.22(postcss@8.5.6): dependencies: browserslist: 4.27.0 - caniuse-lite: 1.0.30001753 - fraction.js: 4.3.7 + caniuse-lite: 1.0.30001755 + fraction.js: 5.3.4 normalize-range: 0.1.2 picocolors: 1.1.1 postcss: 8.5.6 @@ -5874,7 +5886,7 @@ snapshots: browserslist@4.27.0: dependencies: baseline-browser-mapping: 2.8.23 - caniuse-lite: 1.0.30001753 + caniuse-lite: 1.0.30001755 electron-to-chromium: 1.5.244 node-releases: 2.0.27 update-browserslist-db: 1.1.4(browserslist@4.27.0) @@ -5912,6 +5924,8 @@ snapshots: caniuse-lite@1.0.30001753: {} + caniuse-lite@1.0.30001755: {} + ccount@2.0.1: {} chalk-template@1.1.2: @@ -6436,7 +6450,7 @@ snapshots: engine.io@6.6.4: dependencies: '@types/cors': 2.8.19 - '@types/node': 22.19.0 + '@types/node': 22.19.1 accepts: 1.3.8 base64id: 2.0.0 cookie: 0.7.2 @@ -6716,7 +6730,7 @@ snapshots: format@0.2.2: {} - fraction.js@4.3.7: {} + fraction.js@5.3.4: {} fresh@0.5.2: {} @@ -6835,6 +6849,15 @@ snapshots: slash: 5.1.0 unicorn-magic: 0.3.0 + globby@15.0.0: + dependencies: + '@sindresorhus/merge-streams': 4.0.0 + fast-glob: 3.3.3 + ignore: 7.0.5 + path-type: 6.0.0 + slash: 5.1.0 + unicorn-magic: 0.3.0 + globjoin@0.1.4: {} glogg@2.2.0: @@ -7159,6 +7182,10 @@ snapshots: dependencies: argparse: 2.0.1 + js-yaml@4.1.1: + dependencies: + argparse: 2.0.1 + json-parse-even-better-errors@2.3.1: {} json-parse-even-better-errors@3.0.2: {} @@ -7303,27 +7330,23 @@ snapshots: markdown-table@3.0.4: {} - markdownlint-cli2-formatter-default@0.0.5(markdownlint-cli2@0.18.1): + markdownlint-cli2-formatter-default@0.0.6(markdownlint-cli2@0.19.0): dependencies: - markdownlint-cli2: 0.18.1 + markdownlint-cli2: 0.19.0 - markdownlint-cli2-formatter-default@0.0.6(markdownlint-cli2@0.18.1): + markdownlint-cli2@0.19.0: dependencies: - markdownlint-cli2: 0.18.1 - - markdownlint-cli2@0.18.1: - dependencies: - globby: 14.1.0 - js-yaml: 4.1.0 + globby: 15.0.0 + js-yaml: 4.1.1 jsonc-parser: 3.3.1 markdown-it: 14.1.0 - markdownlint: 0.38.0 - markdownlint-cli2-formatter-default: 0.0.5(markdownlint-cli2@0.18.1) + markdownlint: 0.39.0 + markdownlint-cli2-formatter-default: 0.0.6(markdownlint-cli2@0.19.0) micromatch: 4.0.8 transitivePeerDependencies: - supports-color - markdownlint@0.38.0: + markdownlint@0.39.0: dependencies: micromark: 4.0.2 micromark-core-commonmark: 2.0.3 @@ -9861,7 +9884,7 @@ snapshots: '@types/concat-stream': 2.0.3 '@types/debug': 4.1.12 '@types/is-empty': 1.2.3 - '@types/node': 22.19.0 + '@types/node': 22.19.1 '@types/unist': 3.0.3 concat-stream: 2.0.0 debug: 4.4.3