fix: LEAP-306: Fix security vulnerabilities (#1603)

* fix: LEAP-306: Fix github vulnerabilities * change ls-frontend-test hash * change the ls-frontend-test hash * change import
HumanSignal · Oct 25, 2023 · b0fec91 · b0fec91
1 parent 732da9d
commit b0fec91
Show file tree

Hide file tree

Showing 7 changed files with 1,633 additions and 1,046 deletions.
diff --git a/e2e/package.json b/e2e/package.json
@@ -45,5 +45,9 @@
     "v8-to-istanbul": "^9.0.0",
     "xml2js": "^0.4.23",
     "xmlbuilder": "^15.1.1"
+  },
+  "resolutions": {
+    "debug": "^4.3.1",
+    "electron": "^22.3.25"
   }
 }
diff --git a/e2e/yarn.lock b/e2e/yarn.lock
diff --git a/package.json b/package.json
@@ -85,6 +85,7 @@
     "text-annotation"
   ],
   "dependencies": {
+    "@babel/plugin-proposal-private-methods": "^7.18.6",
     "@martel/audio-file-decoder": "2.3.15",
     "@thi.ng/rle-pack": "^2.1.6",
     "@types/react-beautiful-dnd": "^13.1.3",
@@ -102,15 +103,15 @@
     "react-window": "^1.8.6"
   },
   "devDependencies": {
-    "@babel/core": "7.18.6",
+    "@babel/core": "7.23.2",
     "@babel/plugin-proposal-class-properties": "7.18.6",
     "@babel/plugin-proposal-nullish-coalescing-operator": "7.18.6",
     "@babel/plugin-proposal-optional-chaining": "7.18.6",
     "@babel/plugin-transform-modules-commonjs": "7.18.6",
     "@babel/plugin-transform-react-jsx": "7.18.6",
-    "@babel/plugin-transform-runtime": "7.18.6",
+    "@babel/plugin-transform-runtime": "7.23.2",
     "@babel/plugin-transform-typescript": "7.18.6",
-    "@babel/preset-env": "7.18.6",
+    "@babel/preset-env": "7.23.2",
     "@babel/preset-react": "7.18.6",
     "@babel/preset-typescript": "7.18.6",
     "@babel/runtime": "7.18.6",
@@ -170,9 +171,9 @@
     "nanoid": "^3.3.0",
     "node-fetch": "^2.6.1",
     "pleasejs": "^0.4.2",
-    "postcss": "^8.4.6",
-    "postcss-loader": "^6.2.1",
-    "postcss-preset-env": "^7.4.1",
+    "postcss": "^8.4.31",
+    "postcss-loader": "^7.3.3",
+    "postcss-preset-env": "^9.2.0",
     "prettier": "^1.19.1",
     "raw-loader": "^4.0.2",
     "react": "^17.0.2",
@@ -205,7 +206,8 @@
   },
   "resolutions": {
     "d3-color": "3.1.0",
-    "loader-utils": "2.0.4"
+    "loader-utils": "2.0.4",
+    "@babel/traverse": "7.23.2"
   },
   "nohoist": [
     "**/babel-preset-react-app/@babel/runtime"

diff --git a/tests/functional/package.json b/tests/functional/package.json
@@ -18,7 +18,7 @@
     "cvg:summary": "nyc report --temp-dir=.nyc_output --reporter=text-summary --cwd=. --exclude-after-remap false"
   },
   "dependencies": {
-    "@heartexlabs/ls-test": "git+ssh://[email protected]/heartexlabs/ls-frontend-test#b4c8edbe8f15ac1d6ad0d8bb7bd9aede14dc8e06"
+    "@heartexlabs/ls-test": "git+ssh://[email protected]/heartexlabs/ls-frontend-test#92d2d556d2d4499b321b575359026267da19a9fb"
   },
   "devDependencies": {
     "ts-loader": "^9.4.2",
@@ -27,6 +27,8 @@
     "webpack-cli": "^5.0.1"
   },
   "resolutions": {
-    "@cypress/code-coverage/istanbul-lib-coverage": "^3.2.0"
+    "@cypress/code-coverage/istanbul-lib-coverage": "^3.2.0",
+    "debug": "^4.3.4",
+    "get-func-name": "^2.0.1"
   }
 }
diff --git a/tests/functional/specs/audio/audio_paragraphs.cy.ts b/tests/functional/specs/audio/audio_paragraphs.cy.ts
@@ -1,4 +1,4 @@
-import { AudioView, LabelStudio, Sidebar } from '@heartexlabs/ls-test/helpers/LSF/index';
+import { AudioView, LabelStudio, Sidebar } from '@heartexlabs/ls-test/helpers/LSF';
 import * as audioFixtures from 'data/audio/audio_paragraphs';
 import { FF_LSDV_E_278 } from '../../../../src/utils/feature-flags';
 

diff --git a/tests/functional/yarn.lock b/tests/functional/yarn.lock
@@ -264,9 +264,9 @@
   resolved "https://registry.yarnpkg.com/@discoveryjs/json-ext/-/json-ext-0.5.7.tgz#1d572bfbbe14b7704e0ba0f39b74815b84870d70"
   integrity sha512-dBVuXR082gk3jsFp7Rd/JI4kytwGHecnCoTtXFb7DB6CNHp4rg5k1bhg0nWdLGLnOV71lmDzGQaLMy8iPLY0pw==
 
-"@heartexlabs/ls-test@git+ssh://[email protected]/heartexlabs/ls-frontend-test#b4c8edbe8f15ac1d6ad0d8bb7bd9aede14dc8e06":
+"@heartexlabs/ls-test@git+ssh://[email protected]/heartexlabs/ls-frontend-test#92d2d556d2d4499b321b575359026267da19a9fb":
   version "1.0.8"
-  resolved "git+ssh://[email protected]/heartexlabs/ls-frontend-test#b4c8edbe8f15ac1d6ad0d8bb7bd9aede14dc8e06"
+  resolved "git+ssh://[email protected]/heartexlabs/ls-frontend-test#92d2d556d2d4499b321b575359026267da19a9fb"
   dependencies:
     "@cypress/code-coverage" "^3.10.0"
     "@cypress/webpack-preprocessor" "^5.17.0"
@@ -1670,41 +1670,13 @@ dayjs@^1.10.4:
   resolved "https://registry.yarnpkg.com/dayjs/-/dayjs-1.11.7.tgz#4b296922642f70999544d1144a2c25730fce63e2"
   integrity sha512-+Yw9U6YO5TQohxLcIkrXBeY73WP3ejHWVvx8XCk3gxvQDCTEmS48ZrSZCKciI7Bhl/uCMyxYtE9UqRILmFphkQ==
 
-[email protected]:
-  version "4.3.3"
-  resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.3.tgz#04266e0b70a98d4462e6e288e38259213332b664"
-  integrity sha512-/zxw5+vh1Tfv+4Qn7a5nsbcJKPaSvCDhojn6FEl9vupwK2VCSDtEiEtqr8DFtzYFOdz63LBkxec7DYuc2jon6Q==
-  dependencies:
-    ms "2.1.2"
-
-[email protected], debug@^4.1.0, debug@^4.1.1, debug@^4.3.4:
+[email protected], [email protected], debug@^3.1.0, debug@^4.1.0, debug@^4.1.1, debug@^4.3.4, debug@~3.1.0, debug@~4.1.0:
   version "4.3.4"
   resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.4.tgz#1319f6579357f2338d3337d2cdd4914bb5dcc865"
   integrity sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==
   dependencies:
     ms "2.1.2"
 
-debug@^3.1.0:
-  version "3.2.7"
-  resolved "https://registry.yarnpkg.com/debug/-/debug-3.2.7.tgz#72580b7e9145fb39b6676f9c5e5fb100b934179a"
-  integrity sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ==
-  dependencies:
-    ms "^2.1.1"
-
-debug@~3.1.0:
-  version "3.1.0"
-  resolved "https://registry.yarnpkg.com/debug/-/debug-3.1.0.tgz#5bb5a0672628b64149566ba16819e61518c67261"
-  integrity sha512-OX8XqP7/1a9cqkxYw2yXss15f26NKWBpDXQd0/uK/KPqdQhxbPa994hnzjcE2VqQpDslf55723cKPUOGSmMY3g==
-  dependencies:
-    ms "2.0.0"
-
-debug@~4.1.0:
-  version "4.1.1"
-  resolved "https://registry.yarnpkg.com/debug/-/debug-4.1.1.tgz#3b72260255109c6b589cee050f1d516139664791"
-  integrity sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==
-  dependencies:
-    ms "^2.1.1"
-
 decamelize@^1.2.0:
   version "1.2.0"
   resolved "https://registry.yarnpkg.com/decamelize/-/decamelize-1.2.0.tgz#f6534d15148269b20352e7bee26f501f9a191290"
@@ -2163,10 +2135,10 @@ get-caller-file@^2.0.1, get-caller-file@^2.0.5:
   resolved "https://registry.yarnpkg.com/get-caller-file/-/get-caller-file-2.0.5.tgz#4f94412a82db32f36e3b0b9741f8a97feb031f7e"
   integrity sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==
 
-get-func-name@^2.0.0:
-  version "2.0.0"
-  resolved "https://registry.yarnpkg.com/get-func-name/-/get-func-name-2.0.0.tgz#ead774abee72e20409433a066366023dd6887a41"
-  integrity sha512-Hm0ixYtaSZ/V7C8FJrtZIuBBI+iSgL+1Aq82zSu8VQNB4S3Gk8e7Qs3VwBDJAhmRZcFqkl3tQu36g/Foh5I5ig==
+get-func-name@^2.0.0, get-func-name@^2.0.1:
+  version "2.0.2"
+  resolved "https://registry.yarnpkg.com/get-func-name/-/get-func-name-2.0.2.tgz#0d7cf20cd13fda808669ffa88f4ffc7a3943fc41"
+  integrity sha512-8vXOvuE167CtIc3OyItco7N/dpRtBbYOsPsXCz7X/PMnlGjYjSGuZJgM1Y7mmew7BKf9BqvLX2tnOVy1BBUsxQ==
 
 get-intrinsic@^1.0.2:
   version "1.2.0"
@@ -3012,17 +2984,12 @@ mocha@~9.2.0:
     yargs-parser "20.2.4"
     yargs-unparser "2.0.0"
 
-[email protected]:
-  version "2.0.0"
-  resolved "https://registry.yarnpkg.com/ms/-/ms-2.0.0.tgz#5608aeadfc00be6c2901df5f9861788de0d597c8"
-  integrity sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==
-
 [email protected]:
   version "2.1.2"
   resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.2.tgz#d09d1f357b443f493382a8eb3ccd183872ae6009"
   integrity sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==
 
-[email protected], ms@^2.1.1:
+[email protected]:
   version "2.1.3"
   resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.3.tgz#574c8138ce1d2b5861f0b44579dbadd60c6615b2"
   integrity sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==