Skip to content

[WIP]: fix: dependabot critical errors #9066

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 6 commits into
base: main
Choose a base branch
from
Open

[WIP]: fix: dependabot critical errors #9066

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
49dd420
fix: dependabot warnings
snowystinger Oct 20, 2025
2e5f93d
fix remix
snowystinger Oct 20, 2025
e80d148
fix next-app
snowystinger Oct 20, 2025
76a6dd1
turn on verdaccio
snowystinger Sep 24, 2025
6c60a73
fix next app csp
snowystinger Oct 20, 2025
733c778
remove npm-cli-login
snowystinger Oct 20, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .circleci/comment.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ async function run() {
let pr;
// If we aren't running on a PR commit, double check if this is a branch created for a fork. If so, we'll need to
// comment the build link on the fork.
if (!process.env.CIRCLE_PULL_REQUEST) {
if (true) {
try {
const commit = await octokit.git.getCommit({
owner: 'adobe',
Expand Down Expand Up @@ -41,7 +41,7 @@ async function run() {
break;
}
}
} else if (process.env.CIRCLE_BRANCH === 'main') {
} else if (true) {
// If it isn't a PR commit, then we are on main. Create a comment for the test app and docs build
await octokit.repos.createCommitComment({
owner: 'adobe',
Expand Down
3 changes: 0 additions & 3 deletions .circleci/config.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -933,9 +933,6 @@ workflows:
requires:
- install
- verdaccio:
filters:
branches:
only: main
requires:
- install
- v-docs:
Expand Down
3,162 changes: 1,438 additions & 1,724 deletions examples/next-app-csp/yarn.lock
View file
Open in desktop

Large diffs are not rendered by default.

3,162 changes: 1,438 additions & 1,724 deletions examples/next-app/yarn.lock
View file
Open in desktop

Large diffs are not rendered by default.

Binary file modified examples/remix/.yarn/install-state.gz
View file
Open in desktop
Binary file not shown.
3,184 changes: 1,480 additions & 1,704 deletions examples/remix/yarn.lock
View file
Open in desktop

Large diffs are not rendered by default.

Binary file modified examples/rsp-webpack-4/.yarn/install-state.gz
View file
Open in desktop
Binary file not shown.
3,187 changes: 1,585 additions & 1,602 deletions examples/rsp-webpack-4/yarn.lock
View file
Open in desktop

Large diffs are not rendered by default.

1 change: 0 additions & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -168,7 +168,6 @@
"lucide-react": "^0.517.0",
"md5": "^2.2.1",
"motion": "^12.23.6",
"npm-cli-login": "^1.0.0",
"parcel": "^2.16.0",
"parcel-optimizer-strict-mode": "workspace:^",
"patch-package": "^6.2.0",
Expand Down
47 changes: 0 additions & 47 deletions scripts/test-prod.sh
View file
Open in desktop

This file was deleted.

11 changes: 7 additions & 4 deletions scripts/verdaccio.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,14 +50,17 @@ yarn verdaccio --listen $port &>${output}&
grep -q 'http address' <(tail -f $output)

# Login as test user
yarn npm-cli-login -u abc -p abc -e '[email protected]' -r $registry
yarn config set npmPublishRegistry $registry
yarn config set npmRegistryServer $registry
yarn config set npmAlwaysAuth false
yarn config set npmAuthToken abc
yarn config set unsafeHttpWhitelist localhost
yarn config set npmAlwaysAuth true
npm set registry $registry
# Pause is important so that the username isn't interpreted as both username and password
(echo "abc"; sleep 2; echo "abc") | yarn npm login

text="
//localhost:4000/:_authToken=abc
"
echo "$text" > .npmrc

if [ "$ci" = true ];
then
Expand Down
70 changes: 8 additions & 62 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13562,7 +13562,7 @@ __metadata:
languageName: node
linkType: hard

"concat-stream@npm:^1.5.0, concat-stream@npm:^1.5.2":
"concat-stream@npm:^1.5.0":
version: 1.6.2
resolution: "concat-stream@npm:1.6.2"
dependencies:
Expand Down Expand Up @@ -22469,7 +22469,7 @@ __metadata:
languageName: node
linkType: hard

"normalize-package-data@npm:^2.0.0, normalize-package-data@npm:^2.3.0, normalize-package-data@npm:^2.3.2, normalize-package-data@npm:^2.3.4, normalize-package-data@npm:^2.3.5, normalize-package-data@npm:^2.4.0, normalize-package-data@npm:^2.5.0, normalize-package-data@npm:~1.0.1 || ^2.0.0":
"normalize-package-data@npm:^2.0.0, normalize-package-data@npm:^2.3.0, normalize-package-data@npm:^2.3.2, normalize-package-data@npm:^2.3.4, normalize-package-data@npm:^2.3.5, normalize-package-data@npm:^2.4.0, normalize-package-data@npm:^2.5.0":
version: 2.5.0
resolution: "normalize-package-data@npm:2.5.0"
dependencies:
Expand Down Expand Up @@ -22520,18 +22520,6 @@ __metadata:
languageName: node
linkType: hard

"npm-cli-login@npm:^1.0.0":
version: 1.0.0
resolution: "npm-cli-login@npm:1.0.0"
dependencies:
npm-registry-client: "npm:8.6.0"
snyk: "npm:^1.124.1"
bin:
npm-cli-login: bin/npm-cli-login.js
checksum: 10c0/6fde4cbb1c5cc979dc9a818db8a4b476bfbe100c0b3316c58baa05bf3b0e35b7da26536a8594a64e7ed6829591da5a31ee6568d7da241084b38341e38bd615db
languageName: node
linkType: hard

"npm-lifecycle@npm:^3.1.2":
version: 3.1.4
resolution: "npm-lifecycle@npm:3.1.4"
Expand All @@ -22555,7 +22543,7 @@ __metadata:
languageName: node
linkType: hard

"npm-package-arg@npm:^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0, npm-package-arg@npm:^4.0.0 || ^5.0.0 || ^6.0.0, npm-package-arg@npm:^6.0.0, npm-package-arg@npm:^6.1.0":
"npm-package-arg@npm:^4.0.0 || ^5.0.0 || ^6.0.0, npm-package-arg@npm:^6.0.0, npm-package-arg@npm:^6.1.0":
version: 6.1.1
resolution: "npm-package-arg@npm:6.1.1"
dependencies:
Expand Down Expand Up @@ -22589,29 +22577,6 @@ __metadata:
languageName: node
linkType: hard

"npm-registry-client@npm:8.6.0":
version: 8.6.0
resolution: "npm-registry-client@npm:8.6.0"
dependencies:
concat-stream: "npm:^1.5.2"
graceful-fs: "npm:^4.1.6"
normalize-package-data: "npm:~1.0.1 || ^2.0.0"
npm-package-arg: "npm:^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0"
npmlog: "npm:2 || ^3.1.0 || ^4.0.0"
once: "npm:^1.3.3"
request: "npm:^2.74.0"
retry: "npm:^0.10.0"
safe-buffer: "npm:^5.1.1"
semver: "npm:2 >=2.2.1 || 3.x || 4 || 5"
slide: "npm:^1.1.3"
ssri: "npm:^5.2.4"
dependenciesMeta:
npmlog:
optional: true
checksum: 10c0/cf4d95304d0900b95fc620daa33b44a3165051782b07860ed8910173573ae3464088187f8fa17da22f063177c56648dcbae202a2e62d48b5f13561e6f30e757c
languageName: node
linkType: hard

"npm-run-path@npm:^2.0.0":
version: 2.0.2
resolution: "npm-run-path@npm:2.0.2"
Expand All @@ -22630,7 +22595,7 @@ __metadata:
languageName: node
linkType: hard

"npmlog@npm:0 || 1 || 2 || 3 || 4, npmlog@npm:2 || ^3.1.0 || ^4.0.0, npmlog@npm:^4.1.2":
"npmlog@npm:0 || 1 || 2 || 3 || 4, npmlog@npm:^4.1.2":
version: 4.1.2
resolution: "npmlog@npm:4.1.2"
dependencies:
Expand Down Expand Up @@ -22899,7 +22864,7 @@ __metadata:
languageName: node
linkType: hard

"once@npm:^1.3.0, once@npm:^1.3.1, once@npm:^1.3.3, once@npm:^1.4.0":
"once@npm:^1.3.0, once@npm:^1.3.1, once@npm:^1.4.0":
version: 1.4.0
resolution: "once@npm:1.4.0"
dependencies:
Expand Down Expand Up @@ -24644,7 +24609,6 @@ __metadata:
lucide-react: "npm:^0.517.0"
md5: "npm:^2.2.1"
motion: "npm:^12.23.6"
npm-cli-login: "npm:^1.0.0"
parcel: "npm:^2.16.0"
parcel-optimizer-strict-mode: "workspace:^"
patch-package: "npm:^6.2.0"
Expand Down Expand Up @@ -25275,7 +25239,7 @@ __metadata:
languageName: node
linkType: hard

"request@npm:^2.74.0, request@npm:^2.87.0":
"request@npm:^2.87.0":
version: 2.88.2
resolution: "request@npm:2.88.2"
dependencies:
Expand Down Expand Up @@ -25752,7 +25716,7 @@ __metadata:
languageName: node
linkType: hard

"semver@npm:2 >=2.2.1 || 3.x || 4 || 5, semver@npm:2 || 3 || 4 || 5, semver@npm:2.x || 3.x || 4 || 5, semver@npm:^5.0.3, semver@npm:^5.1.0, semver@npm:^5.4.1, semver@npm:^5.5.0, semver@npm:^5.5.1, semver@npm:^5.6.0, semver@npm:^5.7.0":
"semver@npm:2 || 3 || 4 || 5, semver@npm:2.x || 3.x || 4 || 5, semver@npm:^5.0.3, semver@npm:^5.1.0, semver@npm:^5.4.1, semver@npm:^5.5.0, semver@npm:^5.5.1, semver@npm:^5.6.0, semver@npm:^5.7.0":
version: 5.7.2
resolution: "semver@npm:5.7.2"
bin:
Expand Down Expand Up @@ -26148,7 +26112,7 @@ __metadata:
languageName: node
linkType: hard

"slide@npm:^1.1.3, slide@npm:^1.1.6":
"slide@npm:^1.1.6":
version: 1.1.6
resolution: "slide@npm:1.1.6"
checksum: 10c0/f3bde70fd4c0a2ba6c23c674f010849865ddfacbc0ae3a57522d7ce88e4cc6c186d627943c34004d4f009a3fb477c03307b247ab69a266de4b3c72b271a6a03a
Expand Down Expand Up @@ -26215,15 +26179,6 @@ __metadata:
languageName: node
linkType: hard

"snyk@npm:^1.124.1":
version: 1.956.0
resolution: "snyk@npm:1.956.0"
bin:
snyk: bin/snyk
checksum: 10c0/1eb15ba3a344717a08373becf1e7c9278d371c0c29615b3a0919dc9b1e13ba3f1ba8482e7f46cb0ca584ec3dbd982dfc3034cf554c86544a991353831a3126ee
languageName: node
linkType: hard

"socks-proxy-agent@npm:^4.0.0":
version: 4.0.2
resolution: "socks-proxy-agent@npm:4.0.2"
Expand Down Expand Up @@ -26529,15 +26484,6 @@ __metadata:
languageName: node
linkType: hard

"ssri@npm:^5.2.4":
version: 5.3.0
resolution: "ssri@npm:5.3.0"
dependencies:
safe-buffer: "npm:^5.1.1"
checksum: 10c0/f80372ec982cacb3d8e4b53c2a82a7f7502d915a57aef99a29e6cd293302d5944185a569df5fce694a857abb1e602585fcee90182cd2e853bae3d1c20a84d8cb
languageName: node
linkType: hard

"ssri@npm:^6.0.0, ssri@npm:^6.0.1":
version: 6.0.1
resolution: "ssri@npm:6.0.1"
Expand Down