Update several dependencies, remove a few as well
This commit is contained in:
Scott Nonnenberg
GitHub
parent
5076972c5b
commit
1982d5c8db
6 changed files with 350 additions and 2859 deletions
28
.github/workflows/snyk.yml
vendored
28
.github/workflows/snyk.yml
vendored
|
|
@ -1,28 +0,0 @@
|
|||
# Copyright 2020-2021 Signal Messenger, LLC
|
||||
# SPDX-License-Identifier: AGPL-3.0-only
|
||||
|
||||
name: Snyk
|
||||
on:
|
||||
schedule:
|
||||
- cron: '0 12 * * *'
|
||||
|
||||
jobs:
|
||||
snyk:
|
||||
runs-on: ubuntu-latest
|
||||
if: github.repository != 'signalapp/Signal-Desktop'
|
||||
|
||||
steps:
|
||||
- run: lsb_release -a
|
||||
- run: uname -a
|
||||
- uses: actions/checkout@v2
|
||||
- uses: actions/setup-node@v2
|
||||
with:
|
||||
node-version: '16.5.0'
|
||||
- run: npm install -g yarn@1.22.10
|
||||
- run: npm install -g snyk@1.316.1
|
||||
|
||||
- run: yarn install --frozen-lockfile
|
||||
- run: snyk auth "$SNYK_TOKEN"
|
||||
env:
|
||||
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
||||
- run: snyk test --show-vulnerable-paths=all
|
||||
180
.snyk
180
.snyk
|
|
@ -1,180 +0,0 @@
|
|||
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
||||
version: v1.13.5
|
||||
ignore: {}
|
||||
patch:
|
||||
'npm:moment:20170905':
|
||||
- bunyan > moment:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
'npm:debug:20170905':
|
||||
- websocket > debug:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-template > babel-traverse > debug:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-traverse > debug:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-template > babel-traverse > debug:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- array-index > debug:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
SNYK-JS-LODASH-450202:
|
||||
- babel-template > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-generator > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-template > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-generator > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-template > babel-traverse > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-traverse > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-template > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-generator > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-template > babel-traverse > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-traverse > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-template > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-template > babel-traverse > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/generator > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/generator > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/template > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/generator > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/template > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/generator > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/helper-function-name > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/generator > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/generator > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@emotion/core > @emotion/css > babel-plugin-emotion > @babel/helper-module-imports > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-generator > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
SNYK-JS-LODASH-567746:
|
||||
- babel-template > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-generator > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-template > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-generator > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-template > babel-traverse > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-traverse > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-template > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-generator > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-template > babel-traverse > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-traverse > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-template > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-template > babel-traverse > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/generator > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/generator > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/template > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/generator > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/template > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/generator > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/helper-function-name > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/generator > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/generator > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@emotion/core > @emotion/css > babel-plugin-emotion > @babel/helper-module-imports > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- '@babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash':
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
- babel-generator > lodash:
|
||||
patched: '2020-04-30T19:26:25.236Z'
|
||||
18
package.json
18
package.json
|
|
@ -12,7 +12,7 @@
|
|||
},
|
||||
"main": "app/main.js",
|
||||
"scripts": {
|
||||
"postinstall": "yarn build:acknowledgments && yarn build:fuses && snyk protect && patch-package && electron-builder install-app-deps && rimraf node_modules/dtrace-provider",
|
||||
"postinstall": "yarn build:acknowledgments && yarn build:fuses && patch-package && electron-builder install-app-deps && rimraf node_modules/dtrace-provider",
|
||||
"postuninstall": "yarn build:acknowledgments",
|
||||
"start": "electron .",
|
||||
"grunt": "grunt",
|
||||
|
|
@ -236,7 +236,7 @@
|
|||
"@typescript-eslint/eslint-plugin": "4.30.0",
|
||||
"@typescript-eslint/parser": "4.30.0",
|
||||
"arraybuffer-loader": "1.0.3",
|
||||
"asar": "0.14.0",
|
||||
"asar": "3.1.0",
|
||||
"babel-core": "7.0.0-bridge.0",
|
||||
"babel-loader": "8.0.6",
|
||||
"babel-plugin-lodash": "3.3.4",
|
||||
|
|
@ -257,16 +257,15 @@
|
|||
"eslint-plugin-more": "1.0.0",
|
||||
"eslint-plugin-react": "7.20.6",
|
||||
"file-loader": "4.2.0",
|
||||
"grunt": "1.4.0",
|
||||
"grunt-cli": "1.2.0",
|
||||
"grunt-contrib-concat": "1.0.1",
|
||||
"grunt": "1.4.1",
|
||||
"grunt-cli": "1.4.3",
|
||||
"grunt-contrib-concat": "2.0.0",
|
||||
"grunt-contrib-copy": "1.0.0",
|
||||
"grunt-contrib-watch": "1.0.0",
|
||||
"grunt-contrib-watch": "1.1.0",
|
||||
"grunt-exec": "3.0.0",
|
||||
"grunt-gitinfo": "0.1.7",
|
||||
"grunt-sass": "3.0.1",
|
||||
"grunt-gitinfo": "0.1.9",
|
||||
"grunt-sass": "3.1.0",
|
||||
"html-webpack-plugin": "5.3.1",
|
||||
"jsdoc": "3.6.2",
|
||||
"mocha": "4.1.0",
|
||||
"mocha-testcheck": "1.0.0-rc.0",
|
||||
"node-gyp": "7.1.2",
|
||||
|
|
@ -279,7 +278,6 @@
|
|||
"react-docgen-typescript": "1.2.6",
|
||||
"sass-loader": "10.2.0",
|
||||
"sinon": "11.1.1",
|
||||
"snyk": "1.316.1",
|
||||
"spectron": "5.0.0",
|
||||
"style-loader": "1.0.0",
|
||||
"terser-webpack-plugin": "5.1.1",
|
||||
|
|
|
|||
File diff suppressed because it is too large
Load diff
|
|
@ -132,6 +132,7 @@ const excludedFilesRegexp = RegExp(
|
|||
'^node_modules/chai/.+',
|
||||
'^node_modules/clean-css/.+',
|
||||
'^node_modules/cli-table2/.+',
|
||||
'^node_modules/cliui/.+',
|
||||
'^node_modules/codemirror/.+',
|
||||
'^node_modules/coffee-script/.+',
|
||||
'^node_modules/compression/.+',
|
||||
|
|
@ -185,7 +186,6 @@ const excludedFilesRegexp = RegExp(
|
|||
'^node_modules/istanbul.+',
|
||||
'^node_modules/jimp/.+',
|
||||
'^node_modules/jquery/.+',
|
||||
'^node_modules/jsdoc/.+',
|
||||
'^node_modules/jss-global/.+',
|
||||
'^node_modules/jss/.+',
|
||||
'^node_modules/liftup/.+',
|
||||
|
|
@ -197,6 +197,7 @@ const excludedFilesRegexp = RegExp(
|
|||
'^node_modules/meow/.+',
|
||||
'^node_modules/minimatch/.+',
|
||||
'^node_modules/mocha/.+',
|
||||
'^node_modules/needle/.+',
|
||||
'^node_modules/nise/.+',
|
||||
'^node_modules/node-gyp/.+',
|
||||
'^node_modules/node-sass-import-once/.+',
|
||||
|
|
@ -204,6 +205,7 @@ const excludedFilesRegexp = RegExp(
|
|||
'^node_modules/npm-run-all/.+',
|
||||
'^node_modules/nsp/.+',
|
||||
'^node_modules/nyc/.+',
|
||||
'^node_modules/optionator/.+',
|
||||
'^node_modules/plist/.+',
|
||||
'^node_modules/phantomjs-prebuilt/.+',
|
||||
'^node_modules/postcss.+',
|
||||
|
|
|
|||
Loading…
Reference in a new issue