Update npm packages to fix terser vulnerability

2026-08-05 01:29:51 +02:00 · 2022-07-25 13:47:09 +01:00
parent ce06cc38cd
commit 0cf55c9917
5 changed files with 159 additions and 39 deletions
--- a/jumpapp/.jump-version
+++ b/jumpapp/.jump-version
@@ -1 +1 @@
-v1.3.0-dev (1658750209)
+v1.3.0-dev (1658753093)
--- a/jumpapp/assets/js/index.289965f802bd6eed0489.min.js
+++ b/jumpapp/assets/js/index.289965f802bd6eed0489.min.js
--- a/jumpapp/templates/partials/jsbundle.mustache
+++ b/jumpapp/templates/partials/jsbundle.mustache
@@ -1 +1 @@
-<script defer src="{{{wwwurl}}}/assets/js/index.0ed8113773b0d14af2c3.min.js"></script>
+<script defer src="{{{wwwurl}}}/assets/js/index.289965f802bd6eed0489.min.js"></script>
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
    "name": "jump",
-    "version": "1.2.4",
+    "version": "1.3.0-dev",
    "lockfileVersion": 1,
    "requires": true,
    "dependencies": {
@@ -10,12 +10,39 @@
            "integrity": "sha512-dBVuXR082gk3jsFp7Rd/JI4kytwGHecnCoTtXFb7DB6CNHp4rg5k1bhg0nWdLGLnOV71lmDzGQaLMy8iPLY0pw==",
            "dev": true
        },
+        "@jridgewell/gen-mapping": {
+            "version": "0.3.2",
+            "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.2.tgz",
+            "integrity": "sha512-mh65xKQAzI6iBcFzwv28KVWSmCkdRBWoOh+bYQGW3+6OZvbbN3TqMGo5hqYxQniRcH9F2VZIoJCm4pa3BPDK/A==",
+            "dev": true,
+            "requires": {
+                "@jridgewell/set-array": "^1.0.1",
+                "@jridgewell/sourcemap-codec": "^1.4.10",
+                "@jridgewell/trace-mapping": "^0.3.9"
+            }
+        },
        "@jridgewell/resolve-uri": {
            "version": "3.1.0",
            "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.0.tgz",
            "integrity": "sha512-F2msla3tad+Mfht5cJq7LSXcdudKTWCVYUgw6pLFOOHSTtZlj6SWNYAp+AhuqLmWdBO2X5hPrLcu8cVP8fy28w==",
            "dev": true
        },
+        "@jridgewell/set-array": {
+            "version": "1.1.2",
+            "resolved": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.1.2.tgz",
+            "integrity": "sha512-xnkseuNADM0gt2bs+BvhO0p78Mk762YnZdsuzFV018NoG1Sj1SCQvpSqa7XUaTam5vAGasABV9qXASMKnFMwMw==",
+            "dev": true
+        },
+        "@jridgewell/source-map": {
+            "version": "0.3.2",
+            "resolved": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.2.tgz",
+            "integrity": "sha512-m7O9o2uR8k2ObDysZYzdfhb08VuEml5oWGiosa1VdaPZ/A6QyPkAJuwN0Q1lhULOf6B7MtQmHENS743hWtCrgw==",
+            "dev": true,
+            "requires": {
+                "@jridgewell/gen-mapping": "^0.3.0",
+                "@jridgewell/trace-mapping": "^0.3.9"
+            }
+        },
        "@jridgewell/sourcemap-codec": {
            "version": "1.4.14",
            "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.14.tgz",
@@ -278,9 +305,9 @@
            "dev": true
        },
        "acorn": {
-            "version": "8.7.0",
-            "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.7.0.tgz",
-            "integrity": "sha512-V/LGr1APy+PXIwKebEWrkZPwoeoF+w1jiOBUmuxuiUIaOHtob8Qc9BTrYo7VuI5fR8tqsy+buA2WFooR5olqvQ==",
+            "version": "8.8.0",
+            "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.8.0.tgz",
+            "integrity": "sha512-QOxyigPVrpZ2GXT+PFyZTl6TtOFc5egxHIP9IlQ+RbupQuX4RkT/Bee4/kQuC02Xkzg84JcT7oLYtDIQxp+v7w==",
            "dev": true
        },
        "acorn-import-assertions": {
@@ -385,6 +412,12 @@
            "integrity": "sha1-r2rId6Jcx/dOBYiUdThY39sk/bY=",
            "dev": true
        },
+        "async": {
+            "version": "3.2.4",
+            "resolved": "https://registry.npmjs.org/async/-/async-3.2.4.tgz",
+            "integrity": "sha512-iAB+JbDEGXhyIUavoDl9WP/Jj106Kz9DEn1DPgYw5ruDn0e3Wgi3sKFm55sASdGBNOQB8F59d9qQ7deqrHA8wQ==",
+            "dev": true
+        },
        "balanced-match": {
            "version": "1.0.2",
            "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
@@ -845,10 +878,13 @@
            }
        },
        "ejs": {
-            "version": "2.7.4",
-            "resolved": "https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz",
-            "integrity": "sha512-7vmuyh5+kuUyJKePhQfRQBhXV5Ce+RnaeeQArKu1EAMpL3WbgMt5WG6uQZpEVvYSSsxMXRKOewtDk9RaTKXRlA==",
-            "dev": true
+            "version": "3.1.8",
+            "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.8.tgz",
+            "integrity": "sha512-/sXZeMlhS0ArkfX2Aw780gJzXSMPnKjtspYZv+f3NiKLlubezAHDU5+9xz6gd3/NhG3txQCo6xlglmTS+oTGEQ==",
+            "dev": true,
+            "requires": {
+                "jake": "^10.8.5"
+            }
        },
        "electron-to-chromium": {
            "version": "1.4.65",
@@ -958,6 +994,35 @@
            "integrity": "sha512-tFfWHjnuUfKE186Tfgr+jtaFc0mZTApEgKDOeyN+FwOqRkO/zK/3h1AiRd8u8CY53owL3CUmGr/oI9p/RdyLTA==",
            "dev": true
        },
+        "filelist": {
+            "version": "1.0.4",
+            "resolved": "https://registry.npmjs.org/filelist/-/filelist-1.0.4.tgz",
+            "integrity": "sha512-w1cEuf3S+DrLCQL7ET6kz+gmlJdbq9J7yXCSjK/OZCPA+qEN1WyF4ZAf0YYJa4/shHJra2t/d/r8SV4Ji+x+8Q==",
+            "dev": true,
+            "requires": {
+                "minimatch": "^5.0.1"
+            },
+            "dependencies": {
+                "brace-expansion": {
+                    "version": "2.0.1",
+                    "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
+                    "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+                    "dev": true,
+                    "requires": {
+                        "balanced-match": "^1.0.0"
+                    }
+                },
+                "minimatch": {
+                    "version": "5.1.0",
+                    "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.0.tgz",
+                    "integrity": "sha512-9TPBGGak4nHfGZsPBohm9AWg6NoT7QTCehS3BIJABslyZbzxfV78QM2Y6+i741OPZIafFAaiiEMh5OyIrJPgtg==",
+                    "dev": true,
+                    "requires": {
+                        "brace-expansion": "^2.0.1"
+                    }
+                }
+            }
+        },
        "fill-range": {
            "version": "7.0.1",
            "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz",
@@ -1254,6 +1319,63 @@
            "integrity": "sha512-WhB9zCku7EGTj/HQQRz5aUQEUeoQZH2bWcltRErOpymJ4boYE6wL9Tbr23krRPSZ+C5zqNSrSw+Cc7sZZ4b7vg==",
            "dev": true
        },
+        "jake": {
+            "version": "10.8.5",
+            "resolved": "https://registry.npmjs.org/jake/-/jake-10.8.5.tgz",
+            "integrity": "sha512-sVpxYeuAhWt0OTWITwT98oyV0GsXyMlXCF+3L1SuafBVUIr/uILGRB+NqwkzhgXKvoJpDIpQvqkUALgdmQsQxw==",
+            "dev": true,
+            "requires": {
+                "async": "^3.2.3",
+                "chalk": "^4.0.2",
+                "filelist": "^1.0.1",
+                "minimatch": "^3.0.4"
+            },
+            "dependencies": {
+                "ansi-styles": {
+                    "version": "4.3.0",
+                    "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
+                    "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+                    "dev": true,
+                    "requires": {
+                        "color-convert": "^2.0.1"
+                    }
+                },
+                "chalk": {
+                    "version": "4.1.2",
+                    "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
+                    "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==",
+                    "dev": true,
+                    "requires": {
+                        "ansi-styles": "^4.1.0",
+                        "supports-color": "^7.1.0"
+                    }
+                },
+                "color-convert": {
+                    "version": "2.0.1",
+                    "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
+                    "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+                    "dev": true,
+                    "requires": {
+                        "color-name": "~1.1.4"
+                    }
+                },
+                "color-name": {
+                    "version": "1.1.4",
+                    "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
+                    "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+                    "dev": true
+                },
+                "supports-color": {
+                    "version": "7.2.0",
+                    "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
+                    "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
+                    "dev": true,
+                    "requires": {
+                        "has-flag": "^4.0.0"
+                    }
+                }
+            }
+        },
        "jest-worker": {
            "version": "27.5.1",
            "resolved": "https://registry.npmjs.org/jest-worker/-/jest-worker-27.5.1.tgz",
@@ -1994,9 +2116,9 @@
            "dev": true
        },
        "sass": {
-            "version": "1.53.0",
-            "resolved": "https://registry.npmjs.org/sass/-/sass-1.53.0.tgz",
-            "integrity": "sha512-zb/oMirbKhUgRQ0/GFz8TSAwRq2IlR29vOUJZOx0l8sV+CkHUfHa4u5nqrG+1VceZp7Jfj59SVW9ogdhTvJDcQ==",
+            "version": "1.54.0",
+            "resolved": "https://registry.npmjs.org/sass/-/sass-1.54.0.tgz",
+            "integrity": "sha512-C4zp79GCXZfK0yoHZg+GxF818/aclhp9F48XBu/+bm9vXEVAYov9iU3FBVRMq3Hx3OA4jfKL+p2K9180mEh0xQ==",
            "dev": true,
            "requires": {
                "chokidar": ">=3.0.0 <4.0.0",
@@ -2160,23 +2282,15 @@
            "dev": true
        },
        "terser": {
-            "version": "5.12.1",
-            "resolved": "https://registry.npmjs.org/terser/-/terser-5.12.1.tgz",
-            "integrity": "sha512-NXbs+7nisos5E+yXwAD+y7zrcTkMqb0dEJxIGtSKPdCBzopf7ni4odPul2aechpV7EXNvOudYOX2bb5tln1jbQ==",
+            "version": "5.14.2",
+            "resolved": "https://registry.npmjs.org/terser/-/terser-5.14.2.tgz",
+            "integrity": "sha512-oL0rGeM/WFQCUd0y2QrWxYnq7tfSuKBiqTjRPWrRgB46WD/kiwHwF8T23z78H6Q6kGCuuHcPB+KULHRdxvVGQA==",
            "dev": true,
            "requires": {
+                "@jridgewell/source-map": "^0.3.2",
                "acorn": "^8.5.0",
                "commander": "^2.20.0",
-                "source-map": "~0.7.2",
                "source-map-support": "~0.5.20"
-            },
-            "dependencies": {
-                "source-map": {
-                    "version": "0.7.3",
-                    "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.7.3.tgz",
-                    "integrity": "sha512-CkCj6giN3S+n9qrYiBTX5gystlENnRW5jZeNLHpe6aue+SrHcG5VYwujhW9s4dY31mEGsxBDrHR6oI69fTXsaQ==",
-                    "dev": true
-                }
            }
        },
        "terser-webpack-plugin": {
@@ -2276,9 +2390,9 @@
            }
        },
        "webpack": {
-            "version": "5.73.0",
-            "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.73.0.tgz",
-            "integrity": "sha512-svjudQRPPa0YiOYa2lM/Gacw0r6PvxptHj4FuEKQ2kX05ZLkjbVc5MnPs6its5j7IZljnIqSVo/OsY2X0IpHGA==",
+            "version": "5.74.0",
+            "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.74.0.tgz",
+            "integrity": "sha512-A2InDwnhhGN4LYctJj6M1JEaGL7Luj6LOmyBHjcI8529cm5p6VXiTIW2sn6ffvEAKmveLzvu4jrihwXtPojlAA==",
            "dev": true,
            "requires": {
                "@types/eslint-scope": "^3.7.3",
@@ -2286,11 +2400,11 @@
                "@webassemblyjs/ast": "1.11.1",
                "@webassemblyjs/wasm-edit": "1.11.1",
                "@webassemblyjs/wasm-parser": "1.11.1",
-                "acorn": "^8.4.1",
+                "acorn": "^8.7.1",
                "acorn-import-assertions": "^1.7.6",
                "browserslist": "^4.14.5",
                "chrome-trace-event": "^1.0.2",
-                "enhanced-resolve": "^5.9.3",
+                "enhanced-resolve": "^5.10.0",
                "es-module-lexer": "^0.9.0",
                "eslint-scope": "5.1.1",
                "events": "^3.2.0",
@@ -2303,10 +2417,16 @@
                "schema-utils": "^3.1.0",
                "tapable": "^2.1.1",
                "terser-webpack-plugin": "^5.1.3",
-                "watchpack": "^2.3.1",
+                "watchpack": "^2.4.0",
                "webpack-sources": "^3.2.3"
            },
            "dependencies": {
+                "acorn": {
+                    "version": "8.8.0",
+                    "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.8.0.tgz",
+                    "integrity": "sha512-QOxyigPVrpZ2GXT+PFyZTl6TtOFc5egxHIP9IlQ+RbupQuX4RkT/Bee4/kQuC02Xkzg84JcT7oLYtDIQxp+v7w==",
+                    "dev": true
+                },
                "ajv": {
                    "version": "6.12.6",
                    "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
@@ -2398,13 +2518,13 @@
            "dev": true
        },
        "webpack-version-file": {
-            "version": "0.1.6",
-            "resolved": "https://registry.npmjs.org/webpack-version-file/-/webpack-version-file-0.1.6.tgz",
-            "integrity": "sha512-vGc2h2i+3s15fidvzGxUIWrnZZvYlPDSlbowoI8SRW3MV5wS6IJJ8O3BRKXlTg+VwDxyiEXh67v1T28qRBoY2A==",
+            "version": "0.1.7",
+            "resolved": "https://registry.npmjs.org/webpack-version-file/-/webpack-version-file-0.1.7.tgz",
+            "integrity": "sha512-OfFlH36UH+mM9SdYjfDKCKyLxOuJmEBroGLhd3fkd+aHuaLYUnCpBQAO1DygRLPs6atGYQd44e1JKUqODe3y/A==",
            "dev": true,
            "requires": {
                "chalk": "^2.1.0",
-                "ejs": "^2.5.2"
+                "ejs": "^3.1.8"
            }
        },
        "which": {
--- a/package.json
+++ b/package.json
@@ -12,13 +12,13 @@
        "css-minimizer-webpack-plugin": "^3.4.1",
        "html-webpack-plugin": "^5.5.0",
        "mini-css-extract-plugin": "^2.6.1",
-        "sass": "^1.53.0",
+        "sass": "^1.54.0",
        "sass-loader": "^12.6.0",
        "terser-webpack-plugin": "^5.3.3",
-        "webpack": "^5.73.0",
+        "webpack": "^5.74.0",
        "webpack-cli": "^4.10.0",
        "webpack-remove-empty-scripts": "^0.8.1",
-        "webpack-version-file": "^0.1.6"
+        "webpack-version-file": "^0.1.7"
    },
    "dependencies": {
        "eventemitter3": "^4.0.7",