diff --git a/package-lock.json b/package-lock.json index 926fb311eb..c2efab42fa 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,10 +16,10 @@ "@sentry/node": "^7.120.4", "@snyk/cli-interface": "2.15.0", "@snyk/cloud-config-parser": "^1.14.5", - "@snyk/code-client": "^4.23.5", + "@snyk/code-client": "^4.26.2", "@snyk/dep-graph": "^2.16.3", "@snyk/docker-registry-v2-client": "^4.0.2", - "@snyk/error-catalog-nodejs-public": "^5.79.0", + "@snyk/error-catalog-nodejs-public": "^5.82.0", "@snyk/fix": "file:packages/snyk-fix", "@snyk/gemfile": "1.2.0", "@snyk/snyk-cocoapods-plugin": "3.1.1", @@ -83,7 +83,7 @@ "snyk-swiftpm-plugin": "1.5.1", "strip-ansi": "^6.0.1", "tar": "^7.5.8", - "uuid": "^8.3.2", + "uuid": "^11.1.1", "wrap-ansi": "^5.1.0" }, "bin": { @@ -3183,26 +3183,119 @@ } }, "node_modules/@snyk/code-client": { - "version": "4.23.5", + "version": "4.26.2", + "resolved": "https://registry.npmjs.org/@snyk/code-client/-/code-client-4.26.2.tgz", + "integrity": "sha512-f61jKAxcVp82ILD3JCHEVONK9ppna3DRmjGRQBlkBieN85bi9u5/TpEb1DwmNw6/uvi7PSe12dc/wDv6QwJysA==", "license": "MIT", "dependencies": { "@deepcode/dcignore": "^1.0.4", - "@types/flat-cache": "^2.0.1", "@types/lodash.omit": "^4.5.7", - "@types/lodash.pick": "^4.4.8", "@types/lodash.union": "^4.6.7", "@types/sarif": "^2.1.6", - "@types/uuid": "^8.3.4", - "fast-glob": "3.3.1", - "ignore": "^5.2.4", + "fast-glob": "^3.3.2", "lodash.omit": "^4.5.0", - "lodash.pick": "^4.4.0", "lodash.union": "^4.6.0", - "multimatch": "^5.0.0", - "needle": "^3.3.0", + "minimatch": "^10.2.5", + "needle": "^3.5.0", "p-map": "^3.0.0", - "uuid": "^8.3.2", - "yaml": "^1.10.2" + "uuid": "^11.1.0", + "yaml": "^2.8.3" + }, + "engines": { + "node": ">=20.17.0", + "npm": "^11.12.1" + } + }, + "node_modules/@snyk/code-client/node_modules/balanced-match": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz", + "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==", + "license": "MIT", + "engines": { + "node": "18 || 20 || >=22" + } + }, + "node_modules/@snyk/code-client/node_modules/brace-expansion": { + "version": "5.0.7", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz", + "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==", + "license": "MIT", + "dependencies": { + "balanced-match": "^4.0.2" + }, + "engines": { + "node": "18 || 20 || >=22" + } + }, + "node_modules/@snyk/code-client/node_modules/fast-glob": { + "version": "3.3.3", + "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz", + "integrity": "sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==", + "license": "MIT", + "dependencies": { + "@nodelib/fs.stat": "^2.0.2", + "@nodelib/fs.walk": "^1.2.3", + "glob-parent": "^5.1.2", + "merge2": "^1.3.0", + "micromatch": "^4.0.8" + }, + "engines": { + "node": ">=8.6.0" + } + }, + "node_modules/@snyk/code-client/node_modules/glob-parent": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz", + "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==", + "license": "ISC", + "dependencies": { + "is-glob": "^4.0.1" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/@snyk/code-client/node_modules/iconv-lite": { + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz", + "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==", + "license": "MIT", + "dependencies": { + "safer-buffer": ">= 2.1.2 < 3.0.0" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/@snyk/code-client/node_modules/minimatch": { + "version": "10.2.5", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz", + "integrity": "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==", + "license": "BlueOak-1.0.0", + "dependencies": { + "brace-expansion": "^5.0.5" + }, + "engines": { + "node": "18 || 20 || >=22" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/@snyk/code-client/node_modules/needle": { + "version": "3.5.0", + "resolved": "https://registry.npmjs.org/needle/-/needle-3.5.0.tgz", + "integrity": "sha512-jaQyPKKk2YokHrEg+vFDYxXIHTCBgiZwSHOoVx/8V3GIBS8/VN6NdVRmg8q1ERtPkMvmOvebsgga4sAj5hls/w==", + "license": "MIT", + "dependencies": { + "iconv-lite": "^0.6.3", + "sax": "^1.2.4" + }, + "bin": { + "needle": "bin/needle" + }, + "engines": { + "node": ">= 4.4.x" } }, "node_modules/@snyk/code-client/node_modules/p-map": { @@ -3215,6 +3308,21 @@ "node": ">=8" } }, + "node_modules/@snyk/code-client/node_modules/yaml": { + "version": "2.9.0", + "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz", + "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==", + "license": "ISC", + "bin": { + "yaml": "bin.mjs" + }, + "engines": { + "node": ">= 14.6" + }, + "funding": { + "url": "https://github.com/sponsors/eemeli" + } + }, "node_modules/@snyk/composer-lockfile-parser": { "version": "1.4.1", "license": "Apache-2.0", @@ -3333,9 +3441,9 @@ } }, "node_modules/@snyk/error-catalog-nodejs-public": { - "version": "5.79.0", - "resolved": "https://registry.npmjs.org/@snyk/error-catalog-nodejs-public/-/error-catalog-nodejs-public-5.79.0.tgz", - "integrity": "sha512-kBmouDmOgwgGsTnicVdBShVuN7QaWoauzZ0HEHUKP82X5XUWpbir2rSM3T/ta+3PO98a5nKpMTB3zU2OumagFw==", + "version": "5.82.0", + "resolved": "https://registry.npmjs.org/@snyk/error-catalog-nodejs-public/-/error-catalog-nodejs-public-5.82.0.tgz", + "integrity": "sha512-nBhOvDHTeRMQ3ARYDxtAf7CLEs+c50cT86SaWaADmsdxOcMdzHF13pNjiYxN6hiKhuffyKLPdK+6VF3UQze7hg==", "license": "Apache-2.0", "dependencies": { "tslib": "^2.8.1", @@ -3346,17 +3454,6 @@ "version": "2.8.1", "license": "0BSD" }, - "node_modules/@snyk/error-catalog-nodejs-public/node_modules/uuid": { - "version": "11.1.0", - "funding": [ - "https://github.com/sponsors/broofa", - "https://github.com/sponsors/ctavan" - ], - "license": "MIT", - "bin": { - "uuid": "dist/esm/bin/uuid" - } - }, "node_modules/@snyk/fix": { "resolved": "packages/snyk-fix", "link": true @@ -4969,10 +5066,6 @@ "@types/range-parser": "*" } }, - "node_modules/@types/flat-cache": { - "version": "2.0.2", - "license": "MIT" - }, "node_modules/@types/fs-extra": { "version": "9.0.12", "dev": true, @@ -5117,13 +5210,6 @@ "@types/lodash": "*" } }, - "node_modules/@types/lodash.pick": { - "version": "4.4.9", - "license": "MIT", - "dependencies": { - "@types/lodash": "*" - } - }, "node_modules/@types/lodash.union": { "version": "4.6.7", "license": "MIT", @@ -6961,6 +7047,7 @@ }, "node_modules/array-differ": { "version": "3.0.0", + "dev": true, "license": "MIT", "engines": { "node": ">=8" @@ -6983,6 +7070,7 @@ }, "node_modules/array-union": { "version": "2.1.0", + "dev": true, "license": "MIT", "engines": { "node": ">=8" @@ -9485,17 +9573,6 @@ "version": "2.8.1", "license": "0BSD" }, - "node_modules/dotnet-deps-parser/node_modules/uuid": { - "version": "9.0.1", - "funding": [ - "https://github.com/sponsors/broofa", - "https://github.com/sponsors/ctavan" - ], - "license": "MIT", - "bin": { - "uuid": "dist/bin/uuid" - } - }, "node_modules/dunder-proto": { "version": "1.0.1", "dev": true, @@ -11925,6 +12002,7 @@ }, "node_modules/ignore": { "version": "5.2.4", + "dev": true, "license": "MIT", "engines": { "node": ">= 4" @@ -16219,6 +16297,7 @@ }, "node_modules/multimatch": { "version": "5.0.0", + "dev": true, "license": "MIT", "dependencies": { "@types/minimatch": "^3.0.3", @@ -16236,6 +16315,7 @@ }, "node_modules/multimatch/node_modules/arrify": { "version": "2.0.1", + "dev": true, "license": "MIT", "engines": { "node": ">=8" @@ -19738,17 +19818,6 @@ "version": "2.3.1", "license": "0BSD" }, - "node_modules/snyk-cpp-plugin/node_modules/uuid": { - "version": "11.1.0", - "funding": [ - "https://github.com/sponsors/broofa", - "https://github.com/sponsors/ctavan" - ], - "license": "MIT", - "bin": { - "uuid": "dist/esm/bin/uuid" - } - }, "node_modules/snyk-cpp-plugin/node_modules/yallist": { "version": "4.0.0", "license": "ISC" @@ -20420,19 +20489,6 @@ "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==", "license": "0BSD" }, - "node_modules/snyk-poetry-lockfile-parser/node_modules/uuid": { - "version": "9.0.1", - "resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.1.tgz", - "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA==", - "funding": [ - "https://github.com/sponsors/broofa", - "https://github.com/sponsors/ctavan" - ], - "license": "MIT", - "bin": { - "uuid": "dist/bin/uuid" - } - }, "node_modules/snyk-policy": { "version": "4.1.6", "license": "Apache-2.0", @@ -22656,10 +22712,16 @@ } }, "node_modules/uuid": { - "version": "8.3.2", + "version": "11.1.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz", + "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==", + "funding": [ + "https://github.com/sponsors/broofa", + "https://github.com/sponsors/ctavan" + ], "license": "MIT", "bin": { - "uuid": "dist/bin/uuid" + "uuid": "dist/esm/bin/uuid" } }, "node_modules/v8-compile-cache": { diff --git a/package.json b/package.json index 598ef0b1f1..ac715a765b 100644 --- a/package.json +++ b/package.json @@ -65,10 +65,10 @@ "@sentry/node": "^7.120.4", "@snyk/cli-interface": "2.15.0", "@snyk/cloud-config-parser": "^1.14.5", - "@snyk/code-client": "^4.23.5", + "@snyk/code-client": "^4.26.2", "@snyk/dep-graph": "^2.16.3", "@snyk/docker-registry-v2-client": "^4.0.2", - "@snyk/error-catalog-nodejs-public": "^5.79.0", + "@snyk/error-catalog-nodejs-public": "^5.82.0", "@snyk/fix": "file:packages/snyk-fix", "@snyk/gemfile": "1.2.0", "@snyk/snyk-cocoapods-plugin": "3.1.1", @@ -132,7 +132,7 @@ "snyk-swiftpm-plugin": "1.5.1", "strip-ansi": "^6.0.1", "tar": "^7.5.8", - "uuid": "^8.3.2", + "uuid": "^11.1.1", "wrap-ansi": "^5.1.0" }, "devDependencies": { @@ -200,7 +200,19 @@ "@types/jest-json-schema@^6.1.5": { "ajv@6.10.2": "8.18.0" }, - "axios": "^1.15.0" + "axios": "^1.15.0", + "@snyk/error-catalog-nodejs-public@4.0.4": { + "uuid@<11.1.1": "^11.1.1" + }, + "snyk-nodejs-lockfile-parser": { + "uuid@<11.1.1": "^11.1.1" + }, + "jest-junit": { + "uuid@<11.1.1": "^11.1.1" + }, + "@tapjs/processinfo": { + "uuid@<11.1.1": "^11.1.1" + } }, "repository": { "type": "git", diff --git a/scripts/windows/install-node.ps1 b/scripts/windows/install-node.ps1 index d844c7a8b9..206f494a95 100644 --- a/scripts/windows/install-node.ps1 +++ b/scripts/windows/install-node.ps1 @@ -65,8 +65,8 @@ try { # Node 22 bundles npm ~10.9, below package.json "engines" (>=11.10). Upgrade the # active Node's npm so engine-strict (.npmrc) doesn't fail the build. $npmCmd = "C:\Program Files\nodejs\npm.cmd" - Write-Host "Upgrading npm to npm@^11.10 ..." - & $npmCmd install -g "npm@^11.10" + Write-Host "Upgrading npm to npm@^11.12.1 ..." + & $npmCmd install -g "npm@^11.12.1" if ($LASTEXITCODE -ne 0) { throw "npm upgrade failed with exit code $LASTEXITCODE" } Write-Host "npm $((& $npmCmd -v).Trim()) active"