mirror of
https://github.com/Unleash/unleash.git
synced 2025-02-23 00:22:19 +01:00
c1fc07f402
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [jsonpath-plus](https://redirect.github.com/s3u/JSONPath) | [`10.2.0` -> `10.3.0`](https://renovatebot.com/diffs/npm/jsonpath-plus/10.2.0/10.3.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2025-1302](https://nvd.nist.gov/vuln/detail/CVE-2025-1302) Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. **Note:** This is caused by an incomplete fix for CVE-2024-21534. --- ### Release Notes <details> <summary>s3u/JSONPath (jsonpath-plus)</summary> ### [`v10.3.0`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1030) [Compare Source](https://redirect.github.com/s3u/JSONPath/compare/v10.2.0...v10.3.0) - fix(eval): rce using non-string prop names ([#​237](https://redirect.github.com/s3u/JSONPath/issues/237)) - feat(demo): make demo link shareable ([#​238](https://redirect.github.com/s3u/JSONPath/issues/238)) - chore: update deps. and devDeps. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjcuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE2Ny4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
164 lines
6.2 KiB
JSON
164 lines
6.2 KiB
JSON
{
|
|
"name": "unleash-frontend-local",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"files": [
|
|
"index.js",
|
|
"build"
|
|
],
|
|
"engines": {
|
|
"node": ">=18"
|
|
},
|
|
"scripts": {
|
|
"build": "yarn run lint:material:icons && vite build",
|
|
"dev": "vite",
|
|
"start": "vite",
|
|
"start:prod": "vite build && vite preview",
|
|
"start:sandbox": "UNLEASH_API=https://sandbox.getunleash.io/ VITE_TEST_REDIRECT=true UNLEASH_BASE_PATH=/pro/ yarn run start",
|
|
"start:sandbox:enterprise": "UNLEASH_API=https://sandbox.getunleash.io/ VITE_TEST_REDIRECT=true UNLEASH_BASE_PATH=/enterprise/ yarn run start",
|
|
"start:demo2": "UNLEASH_API=https://sandbox.getunleash.io/ UNLEASH_BASE_PATH=/demo2/ yarn run start",
|
|
"start:enterprise": "UNLEASH_API=https://unleash.herokuapp.com VITE_TEST_REDIRECT=true yarn run start",
|
|
"start:demo": "UNLEASH_BASE_PATH=/demo/ UNLEASH_API=https://app.unleash-hosted.com/ yarn run start",
|
|
"test": "NODE_OPTIONS=\"${NODE_OPTIONS:-0} --no-experimental-fetch\" vitest run",
|
|
"test:snapshot": "NODE_OPTIONS=\"${NODE_OPTIONS:-0} --no-experimental-fetch\" yarn test -u",
|
|
"test:watch": "NODE_OPTIONS=\"${NODE_OPTIONS:-0} --no-experimental-fetch\" vitest watch",
|
|
"lint:material:icons": "./check-imports.rc",
|
|
"lint": "biome lint src --write",
|
|
"lint:check": "biome check src",
|
|
"fmt": "biome format src --write",
|
|
"fmt:check": "biome check src",
|
|
"ts:check": "tsc",
|
|
"e2e": "NODE_OPTIONS=\"${NODE_OPTIONS:-} --no-experimental-fetch\" yarn run cypress open --config baseUrl='http://localhost:3000' --env AUTH_USER=admin,AUTH_PASSWORD=unleash4all",
|
|
"e2e:oss": "yarn --cwd frontend run cypress run --spec \"cypress/oss/**/*.spec.ts\" --config baseUrl=\"http://localhost:${EXPOSED_PORT:-4242}\" --env AUTH_USER=admin,AUTH_PASSWORD=unleash4all",
|
|
"e2e:heroku": "NODE_OPTIONS=\"${NODE_OPTIONS:-} --no-experimental-fetch\" yarn run cypress open --config baseUrl='https://unleash.herokuapp.com' --env AUTH_USER=admin,AUTH_PASSWORD=unleash4all",
|
|
"gen:api": "NODE_OPTIONS=\"${NODE_OPTIONS:-} --no-experimental-fetch\" orval --config orval.config.js",
|
|
"gen:api:demo": "NODE_OPTIONS=\"${NODE_OPTIONS:-} --no-experimental-fetch\" UNLEASH_OPENAPI_URL=https://app.unleash-hosted.com/demo/docs/openapi.json yarn run gen:api",
|
|
"gen:api:sandbox": "NODE_OPTIONS=\"${NODE_OPTIONS:-} --no-experimental-fetch\" UNLEASH_OPENAPI_URL=https://sandbox.getunleash.io/demo2/docs/openapi.json yarn run gen:api",
|
|
"gen:api:clean": "yarn gen:api && rm -rf src/openapi/apis && sed -i.bak '1q' src/openapi/index.ts && rm src/openapi/index.ts.bak"
|
|
},
|
|
"devDependencies": {
|
|
"@biomejs/biome": "1.9.4",
|
|
"@codemirror/lang-json": "6.0.1",
|
|
"@emotion/react": "11.11.4",
|
|
"@emotion/styled": "11.11.5",
|
|
"@mui/icons-material": "5.15.3",
|
|
"@mui/lab": "5.0.0-alpha.159",
|
|
"@mui/material": "5.15.3",
|
|
"@mui/x-date-pickers": "^7.0.0",
|
|
"@tanstack/react-table": "^8.10.7",
|
|
"@tanstack/react-virtual": "^3.11.3",
|
|
"@testing-library/dom": "10.4.0",
|
|
"@testing-library/jest-dom": "6.6.3",
|
|
"@testing-library/react": "16.2.0",
|
|
"@testing-library/user-event": "14.6.1",
|
|
"@types/css-mediaquery": "^0.1.4",
|
|
"@types/debounce": "1.2.4",
|
|
"@types/deep-diff": "1.0.5",
|
|
"@types/jest": "29.5.14",
|
|
"@types/lodash.clonedeep": "4.5.9",
|
|
"@types/lodash.isequal": "^4.5.8",
|
|
"@types/lodash.mapvalues": "^4.6.9",
|
|
"@types/lodash.omit": "4.5.9",
|
|
"@types/node": "^20.12.12",
|
|
"@types/react": "18.3.18",
|
|
"@types/react-dom": "18.3.5",
|
|
"@types/react-router-dom": "5.3.3",
|
|
"@types/react-table": "7.7.20",
|
|
"@types/react-test-renderer": "18.3.1",
|
|
"@types/semver": "7.5.8",
|
|
"@types/uuid": "^9.0.0",
|
|
"@uiw/codemirror-theme-duotone": "4.23.7",
|
|
"@uiw/react-codemirror": "4.23.7",
|
|
"@vitejs/plugin-react": "4.3.4",
|
|
"cartesian": "^1.0.1",
|
|
"chart.js": "3.9.1",
|
|
"chartjs-adapter-date-fns": "3.0.0",
|
|
"chartjs-plugin-annotation": "2.2.1",
|
|
"classnames": "2.5.1",
|
|
"copy-to-clipboard": "3.3.3",
|
|
"countries-and-timezones": "^3.4.0",
|
|
"css-mediaquery": "^0.1.2",
|
|
"cypress": "13.17.0",
|
|
"cypress-vite": "^1.4.0",
|
|
"date-fns": "2.30.0",
|
|
"date-fns-tz": "^2.0.0",
|
|
"debounce": "2.2.0",
|
|
"deep-diff": "1.0.2",
|
|
"dequal": "2.0.3",
|
|
"fast-json-patch": "3.1.1",
|
|
"http-proxy-middleware": "2.0.7",
|
|
"immer": "9.0.21",
|
|
"jsdom": "25.0.1",
|
|
"lodash.clonedeep": "4.5.0",
|
|
"lodash.isequal": "^4.5.0",
|
|
"lodash.mapvalues": "^4.6.0",
|
|
"lodash.omit": "4.5.0",
|
|
"millify": "^6.0.0",
|
|
"msw": "2.7.0",
|
|
"orval": "^6.31.0",
|
|
"pkginfo": "0.4.1",
|
|
"plausible-tracker": "0.3.9",
|
|
"prop-types": "15.8.1",
|
|
"react": "18.3.1",
|
|
"react-archer": "4.4.0",
|
|
"react-chartjs-2": "4.3.1",
|
|
"react-confetti": "^6.1.0",
|
|
"react-dom": "18.3.1",
|
|
"react-dropzone": "14.3.5",
|
|
"react-error-boundary": "3.1.4",
|
|
"react-github-calendar": "^4.5.1",
|
|
"react-hooks-global-state": "2.1.0",
|
|
"react-joyride": "^2.5.3",
|
|
"react-markdown": "^8.0.4",
|
|
"react-router-dom": "6.16.0",
|
|
"react-table": "7.8.0",
|
|
"react-test-renderer": "18.3.1",
|
|
"sass": "1.83.4",
|
|
"semver": "7.7.0",
|
|
"swr": "2.3.0",
|
|
"tss-react": "4.9.15",
|
|
"typescript": "5.4.5",
|
|
"use-query-params": "^2.2.1",
|
|
"vanilla-jsoneditor": "^0.23.0",
|
|
"vite": "5.4.14",
|
|
"vite-plugin-env-compatible": "2.0.1",
|
|
"vite-plugin-svgr": "3.3.0",
|
|
"vite-tsconfig-paths": "4.3.2",
|
|
"vitest": "1.4.0",
|
|
"whatwg-fetch": "3.6.20"
|
|
},
|
|
"resolutions": {
|
|
"@codemirror/state": "6.5.2",
|
|
"@xmldom/xmldom": "^0.9.0",
|
|
"jsonpath-plus": "10.3.0",
|
|
"json5": "^2.2.2",
|
|
"vite": "5.4.14",
|
|
"semver": "7.7.0",
|
|
"ws": "^8.18.0",
|
|
"@types/react": "18.3.18"
|
|
},
|
|
"jest": {
|
|
"moduleNameMapper": {
|
|
"\\.(jpg|jpeg|png|gif|eot|otf|webp|ttf|woff|woff2|mp4|webm|wav|mp3|m4a|aac|oga)$": "<rootDir>/src/__mocks__/fileMock.js",
|
|
"\\.svg": "<rootDir>/src/__mocks__/svgMock.js",
|
|
"\\.(css|scss)$": "identity-obj-proxy"
|
|
}
|
|
},
|
|
"browserslist": {
|
|
"production": [
|
|
">0.2%",
|
|
"not dead",
|
|
"not op_mini all"
|
|
],
|
|
"development": [
|
|
"last 1 chrome version",
|
|
"last 1 firefox version",
|
|
"last 1 safari version"
|
|
]
|
|
},
|
|
"packageManager": "yarn@4.6.0",
|
|
"dependencies": {
|
|
"json-2-csv": "^5.5.5"
|
|
}
|
|
}
|