diff --git a/packages/app/.snyk b/packages/app/.snyk new file mode 100644 index 00000000000..d8e7d4faee1 --- /dev/null +++ b/packages/app/.snyk @@ -0,0 +1,15 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - graphql-cli > graphql-cli-prepare > lodash: + patched: '2022-08-24T18:50:15.450Z' + 'npm:minimatch:20160620': + - gulp > vinyl-fs > glob-stream > minimatch: + patched: '2022-08-24T18:50:15.450Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > minimatch: + patched: '2022-08-24T18:50:15.450Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch: + patched: '2022-08-24T18:50:15.450Z' diff --git a/packages/app/package.json b/packages/app/package.json index add4a547c52..124adcd6720 100644 --- a/packages/app/package.json +++ b/packages/app/package.json @@ -33,7 +33,9 @@ "test": "jest --env=jsdom", "test:integrations": "jest --config integration-tests/jest.config.json --maxWorkers=2", "test:watch": "jest --watch --env=jsdom", - "typecheck": "tsc --noEmit -p tsconfig.check.json && tsc --noEmit -p tsconfig.strictNullChecks.json" + "typecheck": "tsc --noEmit -p tsconfig.check.json && tsc --noEmit -p tsconfig.strictNullChecks.json", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "jest": { "moduleDirectories": [ @@ -81,17 +83,17 @@ "@emmetio/codemirror-plugin": "^0.3.5", "@sentry/webpack-plugin": "^1.8.0", "@styled-system/css": "^5.0.23", - "@svgr/core": "^2.4.1", + "@svgr/core": "^4.0.0", "@typeform/embed": "^0.12.0", "@types/rc-slider": "^8.6.5", "@types/socket.io-client": "^1.4.32", "@vue/babel-preset-app": "^3.2.0", - "airtable": "^0.5.8", + "airtable": "^0.10.1", "apollo-boost": "^0.4.4", "apollo-link-batch-http": "^1.2.12", "apollo-link-context": "^1.0.18", "astring": "^1.4.3", - "axios": "^0.19.0", + "axios": "^0.21.3", "babel-code-frame": "^6.26.0", "babel-macros": "^2.0.0", "babel-plugin-jsx-pragmatic": "^1.0.2", @@ -108,7 +110,7 @@ "codemirror": "^5.27.4", "codesandbox-api": "0.0.24", "codesandbox-import-utils": "^2.1.14", - "color": "^0.11.4", + "color": "^1.0.0", "compare-versions": "^3.1.0", "console": "^0.7.2", "console-feed": "^2.8.11", @@ -116,7 +118,7 @@ "date-fns": "^2.4.1", "date-fns-tz": "^1.0.7", "debug": "^2.6.8", - "dot-object": "^1.9.0", + "dot-object": "^2.1.3", "downshift": "^5.0.0", "eslint-plugin-react-hooks": "1.6.0", "eslint-plugin-vue": "^4.2.2", @@ -129,22 +131,22 @@ "graphql": "^14.6.0", "graphql-subscriptions-client": "^0.12.0", "graphql-tag": "^2.10.1", - "gsap": "^1.20.3", - "gulp": "^3.9.1", + "gsap": "^3.6.0", + "gulp": "^4.0.0", "gulp-filter": "^5.0.0", - "gulp-postcss": "^6.4.0", + "gulp-postcss": "^8.0.0", "gulp-rev": "^7.1.2", "hash-sum": "^1.0.2", "http-browserify": "^1.7.0", - "http-proxy-middleware": "^1.0.0", + "http-proxy-middleware": "^0.18.0", "https-browserify": "^1.0.0", "humps": "CompuIves/humps", "ignore": "^5.1.4", - "immer": "^3.2.0", + "immer": "^9.0.6", "immutability-helper": "^2.6.6", "instantsearch.css": "^7.1.0", "is-url": "^1.2.2", - "jest-circus": "^22.1.4", + "jest-circus": "^23.0.0", "jest-each": "^24.8.0", "jest-matchers": "20.0.3", "jest-snapshot": "^22.1.2", @@ -168,8 +170,8 @@ "onigasm": "^2.2.1", "ot": "^0.0.15", "overmind": "^23.0.2-1583315924305", - "overmind-devtools": "^19.0.0", - "overmind-graphql": "^3.1.0-1583324447920", + "overmind-devtools": "^29.0.0", + "overmind-graphql": "^7.0.0", "overmind-react": "^24.0.2-1583315924305", "phoenix": "^1.4.11", "postcss": "^7.0.26", @@ -193,12 +195,12 @@ "react-dnd": "^9.4.0", "react-dnd-html5-backend": "^9.4.0", "react-dom": "^16.9.0", - "react-error-overlay": "^1.0.10", + "react-error-overlay": "^2.0.0", "react-icons": "^2.2.7", "react-input-autosize": "^2.2.1", - "react-instantsearch": "^5.7.0", + "react-instantsearch": "^6.0.0", "react-loadable": "^3.3.1", - "react-markdown": "^4.3.1", + "react-markdown": "^5.0.0", "react-media": "^1.9.2", "react-modal": "^3.6.1", "react-motion": "^0.5.0", @@ -215,7 +217,7 @@ "reakit": "^1.0.0-beta.4", "resize-observer-polyfill": "^1.5.1", "sha1": "^1.1.1", - "shelljs": "^0.7.8", + "shelljs": "^0.8.5", "store": "^2.0.12", "string-replace-loader": "^2.1.1", "styled-components": "^4.3.2", @@ -230,7 +232,8 @@ "vue-hot-reload-api": "^2.3.3", "vue-template-compiler": "^2.6.10", "vue-template-es2015-compiler": "^1.9.1", - "xterm": "3.7.0" + "xterm": "3.7.0", + "@snyk/protect": "latest" }, "devDependencies": { "@babel/cli": "^7.5.5", @@ -250,12 +253,12 @@ "@babel/preset-react": "^7.0.0", "@babel/preset-typescript": "^7.3.3", "@divyenduz/ts-graphql-plugin": "^0.1.0", - "@graphql-codegen/cli": "^1.8.2", + "@graphql-codegen/cli": "^2.6.3", "@graphql-codegen/fragment-matcher": "^1.8.2", "@graphql-codegen/typescript": "^1.8.2", "@graphql-codegen/typescript-graphql-files-modules": "^1.8.2", "@graphql-codegen/typescript-operations": "^1.8.2", - "@sentry/cli": "^1.47.1", + "@sentry/cli": "^2.0.0", "@types/codemirror": "^0.0.72", "@types/debug": "^4.1.1", "@types/gsap": "^1.20.1", @@ -287,11 +290,11 @@ "babel-plugin-transform-react-constant-elements": "^6.23.0", "buffer-loader": "^0.0.1", "case-sensitive-paths-webpack-plugin": "^2.0.0", - "chalk": "1.1.3", + "chalk": "2.0.0", "codesandbox": "^2.1.10", "codesandbox-deps": "^0.1.1", "connect-history-api-fallback": "1.3.0", - "copy-webpack-plugin": "^5.0.3", + "copy-webpack-plugin": "^6.0.0", "cors": "^2.8.4", "cross-env": "^5.0.5", "cross-spawn": "^5.0.1", @@ -301,14 +304,14 @@ "file-loader": "^1.1.11", "filesize": "^3.5.6", "fs-extra": "^8.0.1", - "graphql-cli": "^3.0.14", + "graphql-cli": "^4.0.0", "gulp-replace": "^0.5.4", "gzip-size": "3.0.0", - "html-loader": "^0.5.5", - "html-webpack-plugin": "^4.0.0-beta.1", - "http-proxy-middleware": "^0.17.3", + "html-loader": "^1.0.0", + "html-webpack-plugin": "^5.5.0", + "http-proxy-middleware": "^0.18.0", "imagemin-webpack-plugin": "^2.4.2", - "jest": "^24.9.0", + "jest": "^25.0.0", "jest-image-snapshot": "^1.0.1", "jest-junit": "^3.4.1", "jest-styled-components": "6.3.4", @@ -333,9 +336,9 @@ "sass-loader": "^7.1.0", "script-ext-html-webpack-plugin": "^2.1.4", "selenium-webdriver": "^4.0.0-alpha.1", - "strip-ansi": "3.0.1", + "strip-ansi": "4.0.0", "style-loader": "^0.21.0", - "svgo": "^1.3.0", + "svgo": "^2.0.0", "svgo-loader": "^2.2.1", "sw-precache-webpack-plugin": "^0.11.5", "terser": "^4.1.4", @@ -344,14 +347,15 @@ "typescript": "3.7.4", "url-loader": "1.0.1", "webpack": "^4.36.1", - "webpack-bundle-analyzer": "^2.13.1", + "webpack-bundle-analyzer": "^4.0.0", "webpack-cli": "^3.1.2", - "webpack-dev-server": "^3.7.2", + "webpack-dev-server": "^4.7.3", "webpack-manifest-plugin": "^2.0.3", "webpack-merge": "^4.1.0", "webpackbar": "^3.2.0", "whatwg-fetch": "^2.0.3", "workbox-webpack-plugin": "^3.6.3", "worker-loader": "2.0.0" - } + }, + "snyk": true }