chore: update dependencies (#392)

PierreDemailly · web-flow · commit 63209ed5cacc · 2024-07-01T21:37:24.000+02:00
* chore: update dependencies

- Replace 404 wiki image
- Omit report logo

* chore: update @nodesecure/eslint-config
diff --git a/.eslintignore b/.eslintignore
diff --git a/.eslintrc b/.eslintrc
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -41,16 +41,16 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
       - name: Checkout repository
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
+        uses: github/codeql-action/init@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -63,7 +63,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
+        uses: github/codeql-action/autobuild@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -76,6 +76,6 @@ jobs:
       #   ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
+        uses: github/codeql-action/analyze@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
         with:
           category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
@@ -18,11 +18,11 @@ jobs:
       fail-fast: false
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
@@ -34,4 +34,4 @@ jobs:
       - name: Run tests
         run: npm run coverage
       - name: Send coverage report to Codecov
-        uses: codecov/codecov-action@84508663e988701840491b86de86b666e8a86bed # v4.3.0
+        uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
diff --git a/.github/workflows/npm-provenance.yml b/.github/workflows/npm-provenance.yml
@@ -14,7 +14,7 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
           node-version: '20.x'
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -32,17 +32,17 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
       - name: "Checkout code"
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
+        uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
         with:
           results_file: results.sarif
           results_format: sarif
@@ -72,6 +72,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
+        uses: github/codeql-action/upload-sarif@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/size-satisfies.yml b/.github/workflows/size-satisfies.yml
@@ -21,11 +21,11 @@ jobs:
       fail-fast: false
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
diff --git a/.github/workflows/vis-network.yml b/.github/workflows/vis-network.yml
@@ -22,11 +22,11 @@ jobs:
       fail-fast: false
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
diff --git a/eslint.config.mjs b/eslint.config.mjs
@@ -0,0 +1,33 @@
+// Import Node.js Dependencies
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+// Import Third-party Dependencies
+import { FlatCompat } from "@eslint/eslintrc";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const compat = new FlatCompat({
+  baseDirectory: __dirname
+});
+
+export default [{
+  ignores: ["**/node_modules/", "**/tmp/", "**/dist/", "**/coverage/", "**/fixtures/"]
+}, ...compat.extends("@nodesecure/eslint-config"), {
+  languageOptions: {
+    ecmaVersion: 2015,
+    sourceType: "module",
+
+    parserOptions: {
+      requireConfigFile: false
+    }
+  },
+
+  rules: {
+    "func-style": "off",
+    "no-invalid-this": "off",
+    "no-inner-declarations": "off",
+    "no-case-declarations": "off"
+  }
+}];
diff --git a/package.json b/package.json
@@ -12,7 +12,7 @@
     "node": ">=18"
   },
   "scripts": {
-    "eslint": "eslint bin src test",
+    "eslint": "eslint bin src test workspaces",
     "eslint-fix": "npm run eslint -- --fix",
     "prepublishOnly": "rimraf ./dist && npm run build && pkg-ok",
     "build": "node ./esbuild.config.js",
@@ -61,51 +61,51 @@
   },
   "homepage": "https://github.com/NodeSecure/cli#readme",
   "devDependencies": {
-    "@myunisoft/httpie": "^4.0.1",
-    "@nodesecure/eslint-config": "^1.9.0",
+    "@myunisoft/httpie": "^5.0.0",
+    "@nodesecure/eslint-config": "2.0.0-beta.0",
     "@nodesecure/size-satisfies": "^1.1.0",
     "@nodesecure/vis-network": "^1.4.0",
-    "@types/node": "^20.11.19",
-    "c8": "^9.1.0",
+    "@types/node": "^20.14.9",
+    "c8": "^10.1.2",
     "cross-env": "^7.0.3",
-    "esbuild": "^0.20.0",
-    "eslint": "^8.56.0",
-    "esmock": "^2.6.3",
-    "glob": "^10.3.10",
+    "esbuild": "^0.22.0",
+    "eslint": "^9.6.0",
+    "esmock": "^2.6.6",
+    "glob": "^10.4.2",
     "http-server": "^14.1.1",
     "pkg-ok": "^3.0.0",
     "pretty-bytes": "^6.1.1",
-    "rimraf": "^5.0.5",
+    "rimraf": "^5.0.7",
     "strip-ansi": "^7.1.0"
   },
   "dependencies": {
     "@nodesecure/documentation-ui": "^1.3.0",
     "@nodesecure/flags": "^2.4.0",
-    "@nodesecure/i18n": "^4.0.0",
+    "@nodesecure/i18n": "^4.0.1",
     "@nodesecure/licenses-conformance": "^2.1.0",
-    "@nodesecure/npm-registry-sdk": "^2.1.0",
-    "@nodesecure/ossf-scorecard-sdk": "^3.1.0",
-    "@nodesecure/rc": "^1.5.0",
-    "@nodesecure/report": "^1.1.1",
+    "@nodesecure/npm-registry-sdk": "^2.1.1",
+    "@nodesecure/ossf-scorecard-sdk": "^3.2.1",
+    "@nodesecure/rc": "^2.1.0",
+    "@nodesecure/report": "^1.2.1",
     "@nodesecure/scanner": "^5.3.0",
-    "@nodesecure/utils": "^2.1.0",
+    "@nodesecure/utils": "^2.2.0",
     "@nodesecure/vuln": "^1.7.0",
-    "@openally/result": "^1.2.0",
+    "@openally/result": "^1.2.1",
     "@polka/send-type": "^0.5.2",
     "@topcli/cliui": "^1.1.0",
-    "@topcli/prompts": "^1.9.0",
+    "@topcli/prompts": "^1.10.1",
     "@topcli/spinner": "^2.1.2",
-    "cacache": "^18.0.2",
-    "dotenv": "^16.4.4",
+    "cacache": "^18.0.3",
+    "dotenv": "^16.4.5",
     "filenamify": "^6.0.0",
     "highlightjs-line-numbers.js": "^2.8.0",
-    "ini": "^4.1.1",
+    "ini": "^4.1.3",
     "kleur": "^4.1.5",
     "ms": "^2.1.3",
-    "open": "^10.0.3",
+    "open": "^10.1.0",
     "polka": "^0.5.2",
     "sade": "^1.8.1",
-    "semver": "^7.6.0",
+    "semver": "^7.6.2",
     "server-destroy": "^1.0.1",
     "sirv": "^2.0.4",
     "zup": "0.0.2"
diff --git a/public/common/utils.js b/public/common/utils.js
@@ -1,4 +1,3 @@
-/* eslint-disable no-invalid-this */
 // Import static
 import avatarURL from "../img/avatar-default.png";
 
diff --git a/src/http-server/endpoints/report.js b/src/http-server/endpoints/report.js
@@ -40,8 +40,7 @@ const kReportPayload = {
       type: "horizontalBar",
       interpolation: "d3.interpolateSinebow"
     }
-  ],
-  logoUrl: "https://avatars0.githubusercontent.com/u/29552883?s=200&v=4"
+  ]
 };
 
 export async function post(req, res) {
diff --git a/test/fixtures/httpServer.json b/test/fixtures/httpServer.json
@@ -1,8 +1,8 @@
 {
   "foo": "bar",
-  "rootDependencyName": "@foo/bar",
+  "rootDependencyName": "conf",
   "dependencies": {
-    "@foo/bar": {
+    "conf": {
       "versions": {
         "1.1.1": {
           "flags": [],
diff --git a/workspaces/documentation-ui/src/components/header.js b/workspaces/documentation-ui/src/components/header.js
@@ -16,7 +16,7 @@ export class Header {
       childs: [
         utils.createDOMElement("img", {
           attributes: {
-            src: "https://cdn.discordapp.com/attachments/850363535568928768/962763278663188520/Logo_sans_fond2x.png"
+            src: "https://static.thenounproject.com/png/3946692-200.png"
           }
         }),
         utils.createDOMElement("p", { text: "NodeSecure wiki" })
diff --git a/workspaces/documentation-ui/src/css/header.css b/workspaces/documentation-ui/src/css/header.css
@@ -18,6 +18,7 @@
 .documentation--header>.title>img {
   width: 70px;
   margin-right: 10px;
+  filter: invert(100%) sepia(0%) saturate(7494%) hue-rotate(315deg) brightness(96%) contrast(107%);
 }
 
 .documentation--header>.title>p {
diff --git a/workspaces/vis-network/src/dataset.js b/workspaces/vis-network/src/dataset.js
@@ -72,7 +72,7 @@ export default class NodeSecureDataSet extends EventTarget {
     this.rawNodesData = [];
 
     for (const [packageName, descriptor] of dataEntries) {
-      const contributors = [descriptor.metadata.author, ...descriptor.metadata.maintainers, ...descriptor.metadata.publishers]
+      const contributors = [descriptor.metadata.author, ...descriptor.metadata.maintainers, ...descriptor.metadata.publishers];
       for (const [currVersion, opt] of Object.entries(descriptor.versions)) {
         const { id, usedBy, flags, size, license, author, composition, warnings, links } = opt;
 
