Chore/bump dependencies (#5146)

We're getting security advisories against the node version we're using.
This PR bumps everything to 18.18.2/18.x again. And we'll trust our
excellent monitoring on detecting performance regressions again

.github/workflows/build_coverage.yaml

@@ -37,7 +37,7 @@ jobs:
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v3
         with:
-          node-version: 18.17
+          node-version: 18.x
           cache: 'yarn'
       - run: yarn
       - run: yarn build:frontend:if-needed

.github/workflows/build_prs.yaml

@@ -18,7 +18,7 @@ jobs:
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v3
         with:
-          node-version: 18.17
+          node-version: 18.x
           cache: 'yarn'
       - run: yarn install --frozen-lockfile --ignore-scripts
       - run: yarn lint

.github/workflows/build_prs_jest_report.yaml

@@ -35,7 +35,7 @@ jobs:
       - name: Use Node.js 18.x
         uses: actions/setup-node@v3
         with:
-          node-version: 18.17
+          node-version: 18.x
           cache: 'yarn'
       - name: Tests on 18.x
         id: coverage

.github/workflows/build_prs_test_report.yaml

@@ -29,7 +29,7 @@ jobs:
       - name: Use Node.js 18
         uses: actions/setup-node@v3
         with:
-          node-version: 18.17
+          node-version: 18.x
           cache: 'yarn'
       - run: yarn install --frozen-lockfile --ignore-scripts
       - run: yarn build:backend

.github/workflows/docker_publish.yaml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        version: [18.17.1-alpine]
+        version: [18.18.2-alpine]
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/gradual-strict-null-checks.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v3
         with:
-          node-version: 18.17
+          node-version: 18.x
           cache: 'yarn'
           cache-dependency-path: |
             current/yarn.lock

.github/workflows/release.yaml

@@ -17,7 +17,7 @@ jobs:
       - name: Setup to npm
         uses: actions/setup-node@v3
         with:
-          node-version: 18.17
+          node-version: 18.x
           registry-url: 'https://registry.npmjs.org'
           cache: 'yarn'
       - name: Build

Dockerfile

@@ -1,4 +1,4 @@
-ARG NODE_VERSION=18.17.1-alpine
+ARG NODE_VERSION=18.18.2-alpine
 
 FROM node:$NODE_VERSION as builder
 

package.json

@@ -90,13 +90,13 @@
   "dependencies": {
     "@slack/web-api": "^6.9.0",
     "@unleash/express-openapi": "^0.3.0",
-    "ajv": "^8.11.0",
+    "ajv": "^8.12.0",
     "ajv-formats": "^2.1.1",
     "async": "^3.2.4",
     "bcryptjs": "^2.4.3",
     "compression": "^1.7.4",
     "connect-session-knex": "^3.0.0",
-    "cookie-parser": "^1.4.5",
+    "cookie-parser": "^1.4.6",
     "cookie-session": "^2.0.0-rc.1",
     "cors": "^2.8.5",
     "date-fns": "^2.25.0",
@@ -104,11 +104,11 @@
     "db-migrate-pg": "1.5.2",
     "db-migrate-shared": "1.2.0",
     "deep-object-diff": "^1.1.9",
-    "deepmerge": "^4.2.2",
+    "deepmerge": "^4.3.1",
     "errorhandler": "^1.5.1",
     "express": "^4.18.2",
-    "express-rate-limit": "^6.6.0",
+    "express-rate-limit": "^7.1.2",
-    "express-session": "^1.17.1",
+    "express-session": "^1.17.3",
     "fast-json-patch": "^3.1.0",
     "hash-sum": "^2.0.0",
     "helmet": "^6.0.0",
@@ -119,7 +119,7 @@
     "js-yaml": "^4.1.0",
     "json-schema-to-ts": "2.9.2",
     "json2csv": "^5.0.7",
-    "knex": "^2.4.2",
+    "knex": "^2.5.1",
     "lodash.get": "^4.4.2",
     "lodash.groupby": "^4.6.0",
     "lodash.isequal": "^4.5.0",
@@ -141,12 +141,12 @@
     "prom-client": "^14.0.0",
     "response-time": "^2.3.2",
     "sanitize-filename": "^1.6.3",
-    "semver": "^7.5.3",
+    "semver": "^7.5.4",
     "serve-favicon": "^2.5.0",
     "stoppable": "^1.1.0",
     "ts-toolbelt": "^9.6.0",
     "type-is": "^1.6.18",
-    "unleash-client": "4.2.0",
+    "unleash-client": "4.2.1",
     "uuid": "^9.0.0"
   },
   "devDependencies": {

yarn.lock

@@ -1626,7 +1626,7 @@ ajv@^6.10.2, ajv@^6.12.3:
     json-schema-traverse "^0.4.1"
     uri-js "^4.2.2"
 
-ajv@^8.0.0, ajv@^8.11.0, ajv@^8.6.3:
+ajv@^8.0.0, ajv@^8.12.0, ajv@^8.6.3:
   version "8.12.0"
   resolved "https://registry.yarnpkg.com/ajv/-/ajv-8.12.0.tgz#d1a0527323e22f53562c567c00991577dfbe19d1"
   integrity sha512-sRu1kpcO9yLtYxBKvqfTeh9KzZEwO3STyX1HT+4CaDzC6HpTGYhIhPIzj9XuKU7KYDwnaeh5hcOwjy1QuJzBPA==
@@ -2311,7 +2311,7 @@ convert-source-map@^2.0.0:
   resolved "https://registry.yarnpkg.com/convert-source-map/-/convert-source-map-2.0.0.tgz#4b560f649fc4e918dd0ab75cf4961e8bc882d82a"
   integrity sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==
 
-cookie-parser@^1.4.5:
+cookie-parser@^1.4.6:
   version "1.4.6"
   resolved "https://registry.yarnpkg.com/cookie-parser/-/cookie-parser-1.4.6.tgz#3ac3a7d35a7a03bbc7e365073a26074824214594"
   integrity sha512-z3IzaNjdwUC2olLIB5/ITd0/setiaFMLYiZJle7xg5Fe9KWAceil7xszYfHHBtDFYLSgJduS2Ty0P1uJdPDJeA==
@@ -2573,7 +2573,7 @@ deep-object-diff@^1.1.9:
   resolved "https://registry.yarnpkg.com/deep-object-diff/-/deep-object-diff-1.1.9.tgz#6df7ef035ad6a0caa44479c536ed7b02570f4595"
   integrity sha512-Rn+RuwkmkDwCi2/oXOFS9Gsr5lJZu/yTGpK7wAaAIE75CC+LCGEZHpY6VQJa/RoJcrmaA/docWJZvYohlNkWPA==
 
-deepmerge@^4.2.2:
+deepmerge@^4.2.2, deepmerge@^4.3.1:
   version "4.3.1"
   resolved "https://registry.yarnpkg.com/deepmerge/-/deepmerge-4.3.1.tgz#44b5f2147cd3b00d4b56137685966f26fd25dd4a"
   integrity sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==
@@ -2909,12 +2909,12 @@ expect@^29.7.0:
     jest-message-util "^29.7.0"
     jest-util "^29.7.0"
 
-express-rate-limit@^6.6.0:
+express-rate-limit@^7.1.2:
-  version "6.11.2"
+  version "7.1.2"
-  resolved "https://registry.yarnpkg.com/express-rate-limit/-/express-rate-limit-6.11.2.tgz#6c42035603d3b52e4e2fb59f6ebaa89e628ef980"
+  resolved "https://registry.yarnpkg.com/express-rate-limit/-/express-rate-limit-7.1.2.tgz#42156c9135ca7b77d4e0d74b06162bfe02cd45f7"
-  integrity sha512-a7uwwfNTh1U60ssiIkuLFWHt4hAC5yxlLGU2VP0X4YNlyEDZAqF4tK3GD3NSitVBrCQmQ0++0uOyFOgC2y4DDw==
+  integrity sha512-uvkFt5JooXDhUhrfgqXLyIsAMRCtU1o8W/p0Q2p5U2ude7fEOfFaP0kSYbHOHmPbA9ZEm1JqrRne3vL9pVCBXA==
 
-express-session@^1.17.1:
+express-session@^1.17.3:
   version "1.17.3"
   resolved "https://registry.yarnpkg.com/express-session/-/express-session-1.17.3.tgz#14b997a15ed43e5949cb1d073725675dd2777f36"
   integrity sha512-4+otWXlShYlG1Ma+2Jnn+xgKUZTMJ5QD3YvfilX3AcocOAbIkVylSWEklzALe/+Pu4qV6TYBj5GwOBFfdKqLBw==
@@ -4410,7 +4410,7 @@ kleur@^3.0.3:
   resolved "https://registry.yarnpkg.com/kleur/-/kleur-3.0.3.tgz#a79c9ecc86ee1ce3fa6206d1216c501f147fc07e"
   integrity sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==
 
-knex@^2.3.0, knex@^2.4.2:
+knex@^2.3.0, knex@^2.5.1:
   version "2.5.1"
   resolved "https://registry.yarnpkg.com/knex/-/knex-2.5.1.tgz#a6c6b449866cf4229f070c17411f23871ba52ef9"
   integrity sha512-z78DgGKUr4SE/6cm7ku+jHvFT0X97aERh/f0MUKAKgFnwCYBEW4TFBqtHWFYiJFid7fMrtpZ/gxJthvz5mEByA==
@@ -6689,10 +6689,10 @@ universalify@^0.2.0:
   resolved "https://registry.yarnpkg.com/universalify/-/universalify-0.2.0.tgz#6451760566fa857534745ab1dde952d1b1761be0"
   integrity sha512-CJ1QgKmNg3CwvAv/kOFmtnEN05f0D/cn9QntgNOQlQF9dgvVTHj3t+8JPdjqawCHk7V/KA+fbUqzZ9XWhcqPUg==
 
-unleash-client@4.2.0:
+unleash-client@4.2.1:
-  version "4.2.0"
+  version "4.2.1"
-  resolved "https://registry.yarnpkg.com/unleash-client/-/unleash-client-4.2.0.tgz#18fe74baa3d369c7450a9d52f98a14cb3aab50d8"
+  resolved "https://registry.yarnpkg.com/unleash-client/-/unleash-client-4.2.1.tgz#464c96c514887f46bcf944a12e425904ca0d122f"
-  integrity sha512-HFkJhZ4EkljbF5t+xyWAcC/s7TstM2g5N0EkCbzFp1hWEhym1PV2JhhIk8sbdYQ99d/e9tPWQkAv6a1K6miTnA==
+  integrity sha512-+fc+iht9e5NBxN7zUtEL3gSshlMhLcgoGIA1hAMpyH+gcTiWQWLviF0skjc1oElcAh+JGxdXrFAX0lEZWejXpA==
   dependencies:
     ip "^1.1.8"
     make-fetch-happen "^10.2.1"