diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index f897541d..02378705 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -29,12 +29,12 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15 + uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15 + uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index eea6adf6..3d94d6a9 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -16,7 +16,7 @@ jobs: env: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} container: - image: returntocorp/semgrep@sha256:f435f06d2332f24d76a93791c8c5bd8c5bef7b426061eb04ff452a9d41e1b596 # latest + image: returntocorp/semgrep@sha256:f552de9f1ad268552aaea0487a9c1694eb08071b01ff3e51fbdb02420ce828a6 # latest steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - run: semgrep ci diff --git a/package.json b/package.json index 0e4d5518..4cd86f2f 100644 --- a/package.json +++ b/package.json @@ -3,10 +3,10 @@ "author": "The OpenINF Authors & Friends", "private": "true", "description": "The OpenINF portal, other static resources, and more static electricity", - "packageManager": "pnpm@10.8.1", + "packageManager": "pnpm@10.10.0", "engines": { - "node": "22.14.0", - "pnpm": "10.8.1" + "node": "22.15.0", + "pnpm": "10.10.0" }, "exports": { "./build/constants": "./build/shared/constants.mjs", @@ -29,12 +29,12 @@ "@cspell/dict-lorem-ipsum": "4.0.4", "@isaacs/catcher": "1.0.4", "@openinf/gh-file-importer": "2.0.1", - "@shopify/prettier-plugin-liquid": "1.9.2", + "@shopify/prettier-plugin-liquid": "1.9.3", "@tsconfig/node-lts": "22.0.1", "@types/console-log-level": "1.4.5", "@types/gulp": "4.0.17", "@types/js-yaml": "4.0.9", - "@types/node": "22.14.1", + "@types/node": "22.15.3", "@yarnpkg/shell": "4.1.2", "autoprefixer": "10.4.21", "bootstrap": "5.3.5", @@ -103,7 +103,7 @@ "retext-syntax-mentions": "4.0.0", "retext-syntax-urls": "4.0.0", "strip-comments": "2.0.1", - "stylelint": "16.18.0", + "stylelint": "16.19.1", "stylelint-config-recess-order": "6.0.0", "stylelint-config-standard-scss": "14.0.0", "tsx": "4.19.3", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index e6b26743..b5a339b0 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -24,8 +24,8 @@ importers: specifier: 2.0.1 version: 2.0.1 '@shopify/prettier-plugin-liquid': - specifier: 1.9.2 - version: 1.9.2(prettier@3.5.3) + specifier: 1.9.3 + version: 1.9.3(prettier@3.5.3) '@tsconfig/node-lts': specifier: 22.0.1 version: 22.0.1 @@ -39,8 +39,8 @@ importers: specifier: 4.0.9 version: 4.0.9 '@types/node': - specifier: 22.14.1 - version: 22.14.1 + specifier: 22.15.3 + version: 22.15.3 '@yarnpkg/shell': specifier: 4.1.2 version: 4.1.2(typanion@3.14.0) @@ -246,14 +246,14 @@ importers: specifier: 2.0.1 version: 2.0.1 stylelint: - specifier: 16.18.0 - version: 16.18.0(typescript@5.8.3) + specifier: 16.19.1 + version: 16.19.1(typescript@5.8.3) stylelint-config-recess-order: specifier: 6.0.0 - version: 6.0.0(stylelint@16.18.0(typescript@5.8.3)) + version: 6.0.0(stylelint@16.19.1(typescript@5.8.3)) stylelint-config-standard-scss: specifier: 14.0.0 - version: 14.0.0(postcss@8.5.3)(stylelint@16.18.0(typescript@5.8.3)) + version: 14.0.0(postcss@8.5.3)(stylelint@16.19.1(typescript@5.8.3)) tsx: specifier: 4.19.3 version: 4.19.3 @@ -1023,11 +1023,11 @@ packages: '@popperjs/core@2.11.8': resolution: {integrity: sha512-P1st0aksCrn9sGZhp8GMYwBnQsbvAWsZAX44oXNNvLHGqAOcoVxmjZiohstwQ7SqKnbR47akdNi+uleWD8+g6A==} - '@shopify/liquid-html-parser@2.8.1': - resolution: {integrity: sha512-+uXoVsxcry7w77Er/spothOfhzodvbvSGdULl/l2bdgvQwn/6FhomJn1D6vuPzdyuYfOBUmVMyvt1cgooqzgYg==} + '@shopify/liquid-html-parser@2.8.2': + resolution: {integrity: sha512-g8DRcz4wUj4Ttxm+rK1qPuvIV2/ZqlyGRcVytVMbUkrr/+eVL2yQI/jRGDMeOamkRqB3InuoOjF7nARH+o9UYQ==} - '@shopify/prettier-plugin-liquid@1.9.2': - resolution: {integrity: sha512-T9XVzAUqBUFgPIzGpDJzwJMsoneA+3twKWNy2HMdcHHhZ/Ok1O+GSsci8nlkoPlcfPcFEjJQH1kEuoL6DIDR/w==} + '@shopify/prettier-plugin-liquid@1.9.3': + resolution: {integrity: sha512-XRRnwfONrzjW8AY/l39szH9OgCCg5Xx61QxxdrC3BT2RAqo229jomjhCEszGIUJ5YZYq1ewdyBwbvUVTUSTcTg==} peerDependencies: prettier: ^2.0.0 || ^3.0.0 @@ -1113,8 +1113,8 @@ packages: '@types/nlcst@2.0.3': resolution: {integrity: sha512-vSYNSDe6Ix3q+6Z7ri9lyWqgGhJTmzRjZRqyq15N0Z/1/UnVsno9G/N40NBijoYx2seFDIl0+B2mgAb9mezUCA==} - '@types/node@22.14.1': - resolution: {integrity: sha512-u0HuPQwe/dHrItgHHpmw3N2fYCR6x4ivMNbPHRkBVP4CvN+kiRrKHWk3i8tXiO/joPwXLMYvF9TTF0eqgHIuOw==} + '@types/node@22.15.3': + resolution: {integrity: sha512-lX7HFZeHf4QG/J7tBZqrCAXwz9J5RD56Y6MpP0eJkka8p+K0RY/yBTW7CYFJ4VGCclxqOLKmiGP5juQc6MKgcw==} '@types/picomatch@3.0.2': resolution: {integrity: sha512-n0i8TD3UDB7paoMMxA3Y65vUncFJXjcUf7lQY7YyKGl6031FNjfsLs6pdLFCy2GNFxItPJG8GvvpbZc2skH7WA==} @@ -2094,8 +2094,8 @@ packages: picomatch: optional: true - file-entry-cache@10.0.7: - resolution: {integrity: sha512-txsf5fu3anp2ff3+gOJJzRImtrtm/oa9tYLN0iTuINZ++EyVR/nRrg2fKYwvG/pXDofcrvvb0scEbX3NyW/COw==} + file-entry-cache@10.0.8: + resolution: {integrity: sha512-FGXHpfmI4XyzbLd3HQ8cbUcsFGohJpZtmQRHr8z8FxxtCe2PcpgIlVLwIgunqjvRmXypBETvwhV4ptJizA+Y1Q==} file-entry-cache@9.1.0: resolution: {integrity: sha512-/pqPFG+FdxWQj+/WSuzXSDaNzxgTLr/OrR1QuqfEZzDakpdYE70PwUxL7BPUa8hpjbvY1+qvCl8k+8Tq34xJgg==} @@ -2141,8 +2141,8 @@ packages: resolution: {integrity: sha512-JrqFmyUl2PnPi1OvLyTVHnQvwQ0S+e6lGSwu8OkAZlSaNIZciTY2H/cOOROxsBA1m/LZNHDsqAgDZt6akWcjsQ==} engines: {node: '>=18'} - flat-cache@6.1.7: - resolution: {integrity: sha512-qwZ4xf1v1m7Rc9XiORly31YaChvKt6oNVHuqqZcoED/7O+ToyNVGobKsIAopY9ODcWpEDKEBAbrSOCBHtNQvew==} + flat-cache@6.1.8: + resolution: {integrity: sha512-R6MaD3nrJAtO7C3QOuS79ficm2pEAy++TgEUD8ii1LVlbcgZ9DtASLkt9B+RZSFCzm7QHDMlXPsqqB6W2Pfr1Q==} flatted@3.3.3: resolution: {integrity: sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg==} @@ -2647,6 +2647,9 @@ packages: known-css-properties@0.35.0: resolution: {integrity: sha512-a/RAk2BfKk+WFGhhOCAYqSiFLc34k8Mt/6NWRI4joER0EYUzXIcFivjjnoD3+XU1DggLn/tZc3DOAgke7l8a4A==} + known-css-properties@0.36.0: + resolution: {integrity: sha512-A+9jP+IUmuQsNdsLdcg6Yt7voiMF/D4K83ew0OpJtpu+l34ef7LaohWV0Rc6KNvzw6ZDizkqfyB5JznZnzuKQA==} + last-run@2.0.0: resolution: {integrity: sha512-j+y6WhTLN4Itnf9j5ZQos1BGPCS8DAwmgMroR3OzfxAsBxam0hMw7J8M3KqZl0pLQJ1jNnwIexg5DYpC/ctwEQ==} engines: {node: '>= 10.13.0'} @@ -4297,8 +4300,8 @@ packages: peerDependencies: stylelint: ^16.0.2 - stylelint@16.18.0: - resolution: {integrity: sha512-OXb68qzesv7J70BSbFwfK3yTVLEVXiQ/ro6wUE4UrSbKCMjLLA02S8Qq3LC01DxKyVjk7z8xh35aB4JzO3/sNA==} + stylelint@16.19.1: + resolution: {integrity: sha512-C1SlPZNMKl+d/C867ZdCRthrS+6KuZ3AoGW113RZCOL0M8xOGpgx7G70wq7lFvqvm4dcfdGFVLB/mNaLFChRKw==} engines: {node: '>=18.12.0'} hasBin: true @@ -5487,14 +5490,14 @@ snapshots: '@popperjs/core@2.11.8': {} - '@shopify/liquid-html-parser@2.8.1': + '@shopify/liquid-html-parser@2.8.2': dependencies: line-column: 1.0.2 ohm-js: 16.6.0 - '@shopify/prettier-plugin-liquid@1.9.2(prettier@3.5.3)': + '@shopify/prettier-plugin-liquid@1.9.3(prettier@3.5.3)': dependencies: - '@shopify/liquid-html-parser': 2.8.1 + '@shopify/liquid-html-parser': 2.8.2 html-styles: 1.0.0 prettier: 3.5.3 @@ -5517,13 +5520,13 @@ snapshots: '@types/concat-stream@2.0.3': dependencies: - '@types/node': 22.14.1 + '@types/node': 22.15.3 '@types/console-log-level@1.4.5': {} '@types/cors@2.8.17': dependencies: - '@types/node': 22.14.1 + '@types/node': 22.15.3 '@types/debug@4.1.12': dependencies: @@ -5539,13 +5542,13 @@ snapshots: '@types/glob-stream@8.0.2': dependencies: - '@types/node': 22.14.1 + '@types/node': 22.15.3 '@types/picomatch': 3.0.2 '@types/streamx': 2.9.5 '@types/gulp@4.0.17': dependencies: - '@types/node': 22.14.1 + '@types/node': 22.15.3 '@types/undertaker': 1.2.11 '@types/vinyl-fs': 3.0.5 chokidar: 3.6.0 @@ -5581,7 +5584,7 @@ snapshots: dependencies: '@types/unist': 3.0.3 - '@types/node@22.14.1': + '@types/node@22.15.3': dependencies: undici-types: 6.21.0 @@ -5591,7 +5594,7 @@ snapshots: '@types/streamx@2.9.5': dependencies: - '@types/node': 22.14.1 + '@types/node': 22.15.3 '@types/supports-color@8.1.3': {} @@ -5601,7 +5604,7 @@ snapshots: '@types/undertaker@1.2.11': dependencies: - '@types/node': 22.14.1 + '@types/node': 22.15.3 '@types/undertaker-registry': 1.0.4 async-done: 1.3.2 @@ -5612,13 +5615,13 @@ snapshots: '@types/vinyl-fs@3.0.5': dependencies: '@types/glob-stream': 8.0.2 - '@types/node': 22.14.1 + '@types/node': 22.15.3 '@types/vinyl': 2.0.12 '@types/vinyl@2.0.12': dependencies: '@types/expect': 1.20.4 - '@types/node': 22.14.1 + '@types/node': 22.15.3 '@ungap/structured-clone@1.3.0': {} @@ -6473,7 +6476,7 @@ snapshots: engine.io@6.6.4: dependencies: '@types/cors': 2.8.17 - '@types/node': 22.14.1 + '@types/node': 22.15.3 accepts: 1.3.8 base64id: 2.0.0 cookie: 0.7.2 @@ -6662,9 +6665,9 @@ snapshots: optionalDependencies: picomatch: 4.0.2 - file-entry-cache@10.0.7: + file-entry-cache@10.0.8: dependencies: - flat-cache: 6.1.7 + flat-cache: 6.1.8 file-entry-cache@9.1.0: dependencies: @@ -6730,7 +6733,7 @@ snapshots: flatted: 3.3.3 keyv: 4.5.4 - flat-cache@6.1.7: + flat-cache@6.1.8: dependencies: cacheable: 1.8.9 flatted: 3.3.3 @@ -7236,6 +7239,8 @@ snapshots: known-css-properties@0.35.0: {} + known-css-properties@0.36.0: {} + last-run@2.0.0: {} lead@4.0.0: {} @@ -9704,44 +9709,44 @@ snapshots: postcss: 8.5.3 postcss-selector-parser: 6.1.2 - stylelint-config-recess-order@6.0.0(stylelint@16.18.0(typescript@5.8.3)): + stylelint-config-recess-order@6.0.0(stylelint@16.19.1(typescript@5.8.3)): dependencies: - stylelint: 16.18.0(typescript@5.8.3) - stylelint-order: 6.0.4(stylelint@16.18.0(typescript@5.8.3)) + stylelint: 16.19.1(typescript@5.8.3) + stylelint-order: 6.0.4(stylelint@16.19.1(typescript@5.8.3)) - stylelint-config-recommended-scss@14.1.0(postcss@8.5.3)(stylelint@16.18.0(typescript@5.8.3)): + stylelint-config-recommended-scss@14.1.0(postcss@8.5.3)(stylelint@16.19.1(typescript@5.8.3)): dependencies: postcss-scss: 4.0.9(postcss@8.5.3) - stylelint: 16.18.0(typescript@5.8.3) - stylelint-config-recommended: 14.0.1(stylelint@16.18.0(typescript@5.8.3)) - stylelint-scss: 6.11.1(stylelint@16.18.0(typescript@5.8.3)) + stylelint: 16.19.1(typescript@5.8.3) + stylelint-config-recommended: 14.0.1(stylelint@16.19.1(typescript@5.8.3)) + stylelint-scss: 6.11.1(stylelint@16.19.1(typescript@5.8.3)) optionalDependencies: postcss: 8.5.3 - stylelint-config-recommended@14.0.1(stylelint@16.18.0(typescript@5.8.3)): + stylelint-config-recommended@14.0.1(stylelint@16.19.1(typescript@5.8.3)): dependencies: - stylelint: 16.18.0(typescript@5.8.3) + stylelint: 16.19.1(typescript@5.8.3) - stylelint-config-standard-scss@14.0.0(postcss@8.5.3)(stylelint@16.18.0(typescript@5.8.3)): + stylelint-config-standard-scss@14.0.0(postcss@8.5.3)(stylelint@16.19.1(typescript@5.8.3)): dependencies: - stylelint: 16.18.0(typescript@5.8.3) - stylelint-config-recommended-scss: 14.1.0(postcss@8.5.3)(stylelint@16.18.0(typescript@5.8.3)) - stylelint-config-standard: 36.0.1(stylelint@16.18.0(typescript@5.8.3)) + stylelint: 16.19.1(typescript@5.8.3) + stylelint-config-recommended-scss: 14.1.0(postcss@8.5.3)(stylelint@16.19.1(typescript@5.8.3)) + stylelint-config-standard: 36.0.1(stylelint@16.19.1(typescript@5.8.3)) optionalDependencies: postcss: 8.5.3 - stylelint-config-standard@36.0.1(stylelint@16.18.0(typescript@5.8.3)): + stylelint-config-standard@36.0.1(stylelint@16.19.1(typescript@5.8.3)): dependencies: - stylelint: 16.18.0(typescript@5.8.3) - stylelint-config-recommended: 14.0.1(stylelint@16.18.0(typescript@5.8.3)) + stylelint: 16.19.1(typescript@5.8.3) + stylelint-config-recommended: 14.0.1(stylelint@16.19.1(typescript@5.8.3)) - stylelint-order@6.0.4(stylelint@16.18.0(typescript@5.8.3)): + stylelint-order@6.0.4(stylelint@16.19.1(typescript@5.8.3)): dependencies: postcss: 8.5.3 postcss-sorting: 8.0.2(postcss@8.5.3) - stylelint: 16.18.0(typescript@5.8.3) + stylelint: 16.19.1(typescript@5.8.3) - stylelint-scss@6.11.1(stylelint@16.18.0(typescript@5.8.3)): + stylelint-scss@6.11.1(stylelint@16.19.1(typescript@5.8.3)): dependencies: css-tree: 3.1.0 is-plain-object: 5.0.0 @@ -9751,9 +9756,9 @@ snapshots: postcss-resolve-nested-selector: 0.1.6 postcss-selector-parser: 7.1.0 postcss-value-parser: 4.2.0 - stylelint: 16.18.0(typescript@5.8.3) + stylelint: 16.19.1(typescript@5.8.3) - stylelint@16.18.0(typescript@5.8.3): + stylelint@16.19.1(typescript@5.8.3): dependencies: '@csstools/css-parser-algorithms': 3.0.4(@csstools/css-tokenizer@3.0.3) '@csstools/css-tokenizer': 3.0.3 @@ -9768,7 +9773,7 @@ snapshots: debug: 4.4.0 fast-glob: 3.3.3 fastest-levenshtein: 1.0.16 - file-entry-cache: 10.0.7 + file-entry-cache: 10.0.8 global-modules: 2.0.0 globby: 11.1.0 globjoin: 0.1.4 @@ -9776,7 +9781,7 @@ snapshots: ignore: 7.0.3 imurmurhash: 0.1.4 is-plain-object: 5.0.0 - known-css-properties: 0.35.0 + known-css-properties: 0.36.0 mathml-tag-names: 2.1.3 meow: 13.2.0 micromatch: 4.0.8 @@ -9962,7 +9967,7 @@ snapshots: '@types/concat-stream': 2.0.3 '@types/debug': 4.1.12 '@types/is-empty': 1.2.3 - '@types/node': 22.14.1 + '@types/node': 22.15.3 '@types/unist': 3.0.3 concat-stream: 2.0.0 debug: 4.4.0