diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index bbc264dd..f897541d 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -29,12 +29,12 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14 + uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14 + uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 1ff7ee6b..fd5bf7c1 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -26,7 +26,7 @@ jobs: - name: Check out project repository uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Set up Node.js runtime - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version-file: 'package.json' - name: Install diff --git a/.github/workflows/lint-and-test.yml b/.github/workflows/lint-and-test.yml index 034e6add..3c2dd200 100755 --- a/.github/workflows/lint-and-test.yml +++ b/.github/workflows/lint-and-test.yml @@ -11,7 +11,7 @@ jobs: - name: Check out project repository uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Set up Node.js runtime - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version-file: 'package.json' - name: Install diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 0336ed27..eea6adf6 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -16,7 +16,7 @@ jobs: env: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} container: - image: returntocorp/semgrep@sha256:1844697a3d8b80166e2eaadb93f189a9372e6c8dc025cb14d9400f06e7475261 # latest + image: returntocorp/semgrep@sha256:f435f06d2332f24d76a93791c8c5bd8c5bef7b426061eb04ff452a9d41e1b596 # latest steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - run: semgrep ci diff --git a/package.json b/package.json index 2af275ed..8f440c60 100644 --- a/package.json +++ b/package.json @@ -3,10 +3,10 @@ "author": "The OpenINF Authors & Friends", "private": "true", "description": "The OpenINF portal, other static resources, and more static electricity", - "packageManager": "pnpm@10.7.1", + "packageManager": "pnpm@10.8.0", "engines": { "node": "22.14.0", - "pnpm": "10.7.1" + "pnpm": "10.8.0" }, "exports": { "./build/constants": "./build/shared/constants.mjs", @@ -29,12 +29,12 @@ "@cspell/dict-lorem-ipsum": "4.0.4", "@isaacs/catcher": "1.0.4", "@openinf/gh-file-importer": "2.0.1", - "@shopify/prettier-plugin-liquid": "1.9.0", + "@shopify/prettier-plugin-liquid": "1.9.2", "@tsconfig/node-lts": "22.0.1", "@types/console-log-level": "1.4.5", "@types/gulp": "4.0.17", "@types/js-yaml": "4.0.9", - "@types/node": "22.14.0", + "@types/node": "22.14.1", "@yarnpkg/shell": "4.1.2", "autoprefixer": "10.4.21", "bootstrap": "5.3.5", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 550d31d4..5d6738c3 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -24,8 +24,8 @@ importers: specifier: 2.0.1 version: 2.0.1 '@shopify/prettier-plugin-liquid': - specifier: 1.9.0 - version: 1.9.0(prettier@3.5.3) + specifier: 1.9.2 + version: 1.9.2(prettier@3.5.3) '@tsconfig/node-lts': specifier: 22.0.1 version: 22.0.1 @@ -39,8 +39,8 @@ importers: specifier: 4.0.9 version: 4.0.9 '@types/node': - specifier: 22.14.0 - version: 22.14.0 + specifier: 22.14.1 + version: 22.14.1 '@yarnpkg/shell': specifier: 4.1.2 version: 4.1.2(typanion@3.14.0) @@ -1023,11 +1023,11 @@ packages: '@popperjs/core@2.11.8': resolution: {integrity: sha512-P1st0aksCrn9sGZhp8GMYwBnQsbvAWsZAX44oXNNvLHGqAOcoVxmjZiohstwQ7SqKnbR47akdNi+uleWD8+g6A==} - '@shopify/liquid-html-parser@2.7.0': - resolution: {integrity: sha512-DIkG3cs9vpIRpbaoU/Bv1TNnGXKiJTdCuJeiJlGhADcF4Ic4Da6ZsLI+/z1CoNn/fS59z0wOI/p2NsFWr6XJ8w==} + '@shopify/liquid-html-parser@2.8.1': + resolution: {integrity: sha512-+uXoVsxcry7w77Er/spothOfhzodvbvSGdULl/l2bdgvQwn/6FhomJn1D6vuPzdyuYfOBUmVMyvt1cgooqzgYg==} - '@shopify/prettier-plugin-liquid@1.9.0': - resolution: {integrity: sha512-79y7ZgaZcTTe9ODQN7QYnqZvj1BlaRt5wyxr4U6uYPaOPoTjRPLpvLkvnFUv9XoiPSlYwECk00vQCsYjPcO1nQ==} + '@shopify/prettier-plugin-liquid@1.9.2': + resolution: {integrity: sha512-T9XVzAUqBUFgPIzGpDJzwJMsoneA+3twKWNy2HMdcHHhZ/Ok1O+GSsci8nlkoPlcfPcFEjJQH1kEuoL6DIDR/w==} peerDependencies: prettier: ^2.0.0 || ^3.0.0 @@ -1113,8 +1113,8 @@ packages: '@types/nlcst@2.0.3': resolution: {integrity: sha512-vSYNSDe6Ix3q+6Z7ri9lyWqgGhJTmzRjZRqyq15N0Z/1/UnVsno9G/N40NBijoYx2seFDIl0+B2mgAb9mezUCA==} - '@types/node@22.14.0': - resolution: {integrity: sha512-Kmpl+z84ILoG+3T/zQFyAJsU6EPTmOCj8/2+83fSN6djd6I4o7uOuGIH6vq3PrjY5BGitSbFuMN18j3iknubbA==} + '@types/node@22.14.1': + resolution: {integrity: sha512-u0HuPQwe/dHrItgHHpmw3N2fYCR6x4ivMNbPHRkBVP4CvN+kiRrKHWk3i8tXiO/joPwXLMYvF9TTF0eqgHIuOw==} '@types/picomatch@3.0.2': resolution: {integrity: sha512-n0i8TD3UDB7paoMMxA3Y65vUncFJXjcUf7lQY7YyKGl6031FNjfsLs6pdLFCy2GNFxItPJG8GvvpbZc2skH7WA==} @@ -5482,14 +5482,14 @@ snapshots: '@popperjs/core@2.11.8': {} - '@shopify/liquid-html-parser@2.7.0': + '@shopify/liquid-html-parser@2.8.1': dependencies: line-column: 1.0.2 ohm-js: 16.6.0 - '@shopify/prettier-plugin-liquid@1.9.0(prettier@3.5.3)': + '@shopify/prettier-plugin-liquid@1.9.2(prettier@3.5.3)': dependencies: - '@shopify/liquid-html-parser': 2.7.0 + '@shopify/liquid-html-parser': 2.8.1 html-styles: 1.0.0 prettier: 3.5.3 @@ -5512,13 +5512,13 @@ snapshots: '@types/concat-stream@2.0.3': dependencies: - '@types/node': 22.14.0 + '@types/node': 22.14.1 '@types/console-log-level@1.4.5': {} '@types/cors@2.8.17': dependencies: - '@types/node': 22.14.0 + '@types/node': 22.14.1 '@types/debug@4.1.12': dependencies: @@ -5534,13 +5534,13 @@ snapshots: '@types/glob-stream@8.0.2': dependencies: - '@types/node': 22.14.0 + '@types/node': 22.14.1 '@types/picomatch': 3.0.2 '@types/streamx': 2.9.5 '@types/gulp@4.0.17': dependencies: - '@types/node': 22.14.0 + '@types/node': 22.14.1 '@types/undertaker': 1.2.11 '@types/vinyl-fs': 3.0.5 chokidar: 3.6.0 @@ -5576,7 +5576,7 @@ snapshots: dependencies: '@types/unist': 3.0.3 - '@types/node@22.14.0': + '@types/node@22.14.1': dependencies: undici-types: 6.21.0 @@ -5586,7 +5586,7 @@ snapshots: '@types/streamx@2.9.5': dependencies: - '@types/node': 22.14.0 + '@types/node': 22.14.1 '@types/supports-color@8.1.3': {} @@ -5596,7 +5596,7 @@ snapshots: '@types/undertaker@1.2.11': dependencies: - '@types/node': 22.14.0 + '@types/node': 22.14.1 '@types/undertaker-registry': 1.0.4 async-done: 1.3.2 @@ -5607,13 +5607,13 @@ snapshots: '@types/vinyl-fs@3.0.5': dependencies: '@types/glob-stream': 8.0.2 - '@types/node': 22.14.0 + '@types/node': 22.14.1 '@types/vinyl': 2.0.12 '@types/vinyl@2.0.12': dependencies: '@types/expect': 1.20.4 - '@types/node': 22.14.0 + '@types/node': 22.14.1 '@ungap/structured-clone@1.3.0': {} @@ -6468,7 +6468,7 @@ snapshots: engine.io@6.6.4: dependencies: '@types/cors': 2.8.17 - '@types/node': 22.14.0 + '@types/node': 22.14.1 accepts: 1.3.8 base64id: 2.0.0 cookie: 0.7.2 @@ -9957,7 +9957,7 @@ snapshots: '@types/concat-stream': 2.0.3 '@types/debug': 4.1.12 '@types/is-empty': 1.2.3 - '@types/node': 22.14.0 + '@types/node': 22.14.1 '@types/unist': 3.0.3 concat-stream: 2.0.0 debug: 4.4.0