From 4c8a251d08b89c4da78f6de46779ab1d0dcc4afa Mon Sep 17 00:00:00 2001 From: Juan Correa Date: Fri, 5 Dec 2025 00:05:19 -0500 Subject: [PATCH 1/3] chore: update dependencies and apply security patches MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Updated CircleCI orb: 1.1.6 → 1.1.9 - Confidence score: 100% 🤖 Generated with ml-repo-maintenance Co-Authored-By: ml-repo-maintenance --- .circleci/config.yml | 2 +- package-lock.json | 155 +++++++++++++++++++++---------------------- package.json | 6 +- 3 files changed, 80 insertions(+), 83 deletions(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index f10cc98..9dc891c 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -1,7 +1,7 @@ version: 2.1 setup: true orbs: - build: mojaloop/build@1.1.6 + build: mojaloop/build@1.1.9 workflows: setup: jobs: diff --git a/package-lock.json b/package-lock.json index 7043064..a4b4fc3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,7 +9,7 @@ "version": "14.3.1", "license": "Apache-2.0", "dependencies": { - "@apidevtools/json-schema-ref-parser": "14.2.1", + "@apidevtools/json-schema-ref-parser": "15.1.3", "@faker-js/faker": "10.1.0", "ajv": "8.17.1", "json-schema-faker": "0.5.9", @@ -17,8 +17,8 @@ "node-dir": "0.1.17" }, "devDependencies": { - "@commitlint/cli": "^20.1.0", - "@commitlint/config-conventional": "^20.0.0", + "@commitlint/cli": "^20.2.0", + "@commitlint/config-conventional": "^20.2.0", "@types/jest": "30.0.0", "audit-ci": "^7.1.0", "jest": "30.2.0", @@ -31,18 +31,15 @@ } }, "node_modules/@apidevtools/json-schema-ref-parser": { - "version": "14.2.1", - "resolved": "https://registry.npmjs.org/@apidevtools/json-schema-ref-parser/-/json-schema-ref-parser-14.2.1.tgz", - "integrity": "sha512-HmdFw9CDYqM6B25pqGBpNeLCKvGPlIx1EbLrVL0zPvj50CJQUHyBNBw45Muk0kEIkogo1VZvOKHajdMuAzSxRg==", + "version": "15.1.3", + "resolved": "https://registry.npmjs.org/@apidevtools/json-schema-ref-parser/-/json-schema-ref-parser-15.1.3.tgz", + "integrity": "sha512-XvEitlOaU8S+hOrMPuGyCjp6vC51K+syUN4HHrSUdSDLLWRWQJYjInU6xlSoRGCVBCfcoHxbRm+yiaYq2yFR5w==", "license": "MIT", "dependencies": { - "js-yaml": "^4.1.0" + "js-yaml": "^4.1.1" }, "engines": { - "node": ">= 20" - }, - "funding": { - "url": "https://github.com/sponsors/philsturgeon" + "node": ">=20" }, "peerDependencies": { "@types/json-schema": "^7.0.15" @@ -565,17 +562,17 @@ "license": "MIT" }, "node_modules/@commitlint/cli": { - "version": "20.1.0", - "resolved": "https://registry.npmjs.org/@commitlint/cli/-/cli-20.1.0.tgz", - "integrity": "sha512-pW5ujjrOovhq5RcYv5xCpb4GkZxkO2+GtOdBW2/qrr0Ll9tl3PX0aBBobGQl3mdZUbOBgwAexEQLeH6uxL0VYg==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/cli/-/cli-20.2.0.tgz", + "integrity": "sha512-l37HkrPZ2DZy26rKiTUvdq/LZtlMcxz+PeLv9dzK9NzoFGuJdOQyYU7IEkEQj0pO++uYue89wzOpZ0hcTtoqUA==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/format": "^20.0.0", - "@commitlint/lint": "^20.0.0", - "@commitlint/load": "^20.1.0", - "@commitlint/read": "^20.0.0", - "@commitlint/types": "^20.0.0", + "@commitlint/format": "^20.2.0", + "@commitlint/lint": "^20.2.0", + "@commitlint/load": "^20.2.0", + "@commitlint/read": "^20.2.0", + "@commitlint/types": "^20.2.0", "tinyexec": "^1.0.0", "yargs": "^17.0.0" }, @@ -587,13 +584,13 @@ } }, "node_modules/@commitlint/config-conventional": { - "version": "20.0.0", - "resolved": "https://registry.npmjs.org/@commitlint/config-conventional/-/config-conventional-20.0.0.tgz", - "integrity": "sha512-q7JroPIkDBtyOkVe9Bca0p7kAUYxZMxkrBArCfuD3yN4KjRAenP9PmYwnn7rsw8Q+hHq1QB2BRmBh0/Z19ZoJw==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/config-conventional/-/config-conventional-20.2.0.tgz", + "integrity": "sha512-MsRac+yNIbTB4Q/psstKK4/ciVzACHicSwz+04Sxve+4DW+PiJeTjU0JnS4m/oOnulrXYN+yBPlKaBSGemRfgQ==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/types": "^20.0.0", + "@commitlint/types": "^20.2.0", "conventional-changelog-conventionalcommits": "^7.0.2" }, "engines": { @@ -601,13 +598,13 @@ } }, "node_modules/@commitlint/config-validator": { - "version": "20.0.0", - "resolved": "https://registry.npmjs.org/@commitlint/config-validator/-/config-validator-20.0.0.tgz", - "integrity": "sha512-BeyLMaRIJDdroJuYM2EGhDMGwVBMZna9UiIqV9hxj+J551Ctc6yoGuGSmghOy/qPhBSuhA6oMtbEiTmxECafsg==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/config-validator/-/config-validator-20.2.0.tgz", + "integrity": "sha512-SQCBGsL9MFk8utWNSthdxd9iOD1pIVZSHxGBwYIGfd67RTjxqzFOSAYeQVXOu3IxRC3YrTOH37ThnTLjUlyF2w==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/types": "^20.0.0", + "@commitlint/types": "^20.2.0", "ajv": "^8.11.0" }, "engines": { @@ -615,13 +612,13 @@ } }, "node_modules/@commitlint/ensure": { - "version": "20.0.0", - "resolved": "https://registry.npmjs.org/@commitlint/ensure/-/ensure-20.0.0.tgz", - "integrity": "sha512-WBV47Fffvabe68n+13HJNFBqiMH5U1Ryls4W3ieGwPC0C7kJqp3OVQQzG2GXqOALmzrgAB+7GXmyy8N9ct8/Fg==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/ensure/-/ensure-20.2.0.tgz", + "integrity": "sha512-+8TgIGv89rOWyt3eC6lcR1H7hqChAKkpawytlq9P1i/HYugFRVqgoKJ8dhd89fMnlrQTLjA5E97/4sF09QwdoA==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/types": "^20.0.0", + "@commitlint/types": "^20.2.0", "lodash.camelcase": "^4.3.0", "lodash.kebabcase": "^4.1.1", "lodash.snakecase": "^4.1.1", @@ -643,13 +640,13 @@ } }, "node_modules/@commitlint/format": { - "version": "20.0.0", - "resolved": "https://registry.npmjs.org/@commitlint/format/-/format-20.0.0.tgz", - "integrity": "sha512-zrZQXUcSDmQ4eGGrd+gFESiX0Rw+WFJk7nW4VFOmxub4mAATNKBQ4vNw5FgMCVehLUKG2OT2LjOqD0Hk8HvcRg==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/format/-/format-20.2.0.tgz", + "integrity": "sha512-PhNoLNhxpfIBlW/i90uZ3yG3hwSSYx7n4d9Yc+2FAorAHS0D9btYRK4ZZXX+Gm3W5tDtu911ow/eWRfcRVgNWg==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/types": "^20.0.0", + "@commitlint/types": "^20.2.0", "chalk": "^5.3.0" }, "engines": { @@ -657,13 +654,13 @@ } }, "node_modules/@commitlint/is-ignored": { - "version": "20.0.0", - "resolved": "https://registry.npmjs.org/@commitlint/is-ignored/-/is-ignored-20.0.0.tgz", - "integrity": "sha512-ayPLicsqqGAphYIQwh9LdAYOVAQ9Oe5QCgTNTj+BfxZb9b/JW222V5taPoIBzYnAP0z9EfUtljgBk+0BN4T4Cw==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/is-ignored/-/is-ignored-20.2.0.tgz", + "integrity": "sha512-Lz0OGeZCo/QHUDLx5LmZc0EocwanneYJUM8z0bfWexArk62HKMLfLIodwXuKTO5y0s6ddXaTexrYHs7v96EOmw==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/types": "^20.0.0", + "@commitlint/types": "^20.2.0", "semver": "^7.6.0" }, "engines": { @@ -671,32 +668,32 @@ } }, "node_modules/@commitlint/lint": { - "version": "20.0.0", - "resolved": "https://registry.npmjs.org/@commitlint/lint/-/lint-20.0.0.tgz", - "integrity": "sha512-kWrX8SfWk4+4nCexfLaQT3f3EcNjJwJBsSZ5rMBw6JCd6OzXufFHgel2Curos4LKIxwec9WSvs2YUD87rXlxNQ==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/lint/-/lint-20.2.0.tgz", + "integrity": "sha512-cQEEB+jlmyQbyiji/kmh8pUJSDeUmPiWq23kFV0EtW3eM+uAaMLMuoTMajbrtWYWQpPzOMDjYltQ8jxHeHgITg==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/is-ignored": "^20.0.0", - "@commitlint/parse": "^20.0.0", - "@commitlint/rules": "^20.0.0", - "@commitlint/types": "^20.0.0" + "@commitlint/is-ignored": "^20.2.0", + "@commitlint/parse": "^20.2.0", + "@commitlint/rules": "^20.2.0", + "@commitlint/types": "^20.2.0" }, "engines": { "node": ">=v18" } }, "node_modules/@commitlint/load": { - "version": "20.1.0", - "resolved": "https://registry.npmjs.org/@commitlint/load/-/load-20.1.0.tgz", - "integrity": "sha512-qo9ER0XiAimATQR5QhvvzePfeDfApi/AFlC1G+YN+ZAY8/Ua6IRrDrxRvQAr+YXUKAxUsTDSp9KXeXLBPsNRWg==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/load/-/load-20.2.0.tgz", + "integrity": "sha512-iAK2GaBM8sPFTSwtagI67HrLKHIUxQc2BgpgNc/UMNme6LfmtHpIxQoN1TbP+X1iz58jq32HL1GbrFTCzcMi6g==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/config-validator": "^20.0.0", + "@commitlint/config-validator": "^20.2.0", "@commitlint/execute-rule": "^20.0.0", - "@commitlint/resolve-extends": "^20.1.0", - "@commitlint/types": "^20.0.0", + "@commitlint/resolve-extends": "^20.2.0", + "@commitlint/types": "^20.2.0", "chalk": "^5.3.0", "cosmiconfig": "^9.0.0", "cosmiconfig-typescript-loader": "^6.1.0", @@ -719,13 +716,13 @@ } }, "node_modules/@commitlint/parse": { - "version": "20.0.0", - "resolved": "https://registry.npmjs.org/@commitlint/parse/-/parse-20.0.0.tgz", - "integrity": "sha512-j/PHCDX2bGM5xGcWObOvpOc54cXjn9g6xScXzAeOLwTsScaL4Y+qd0pFC6HBwTtrH92NvJQc+2Lx9HFkVi48cg==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/parse/-/parse-20.2.0.tgz", + "integrity": "sha512-LXStagGU1ivh07X7sM+hnEr4BvzFYn1iBJ6DRg2QsIN8lBfSzyvkUcVCDwok9Ia4PWiEgei5HQjju6xfJ1YaSQ==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/types": "^20.0.0", + "@commitlint/types": "^20.2.0", "conventional-changelog-angular": "^7.0.0", "conventional-commits-parser": "^5.0.0" }, @@ -734,14 +731,14 @@ } }, "node_modules/@commitlint/read": { - "version": "20.0.0", - "resolved": "https://registry.npmjs.org/@commitlint/read/-/read-20.0.0.tgz", - "integrity": "sha512-Ti7Y7aEgxsM1nkwA4ZIJczkTFRX/+USMjNrL9NXwWQHqNqrBX2iMi+zfuzZXqfZ327WXBjdkRaytJ+z5vNqTOA==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/read/-/read-20.2.0.tgz", + "integrity": "sha512-+SjF9mxm5JCbe+8grOpXCXMMRzAnE0WWijhhtasdrpJoAFJYd5UgRTj/oCq5W3HJTwbvTOsijEJ0SUGImECD7Q==", "dev": true, "license": "MIT", "dependencies": { "@commitlint/top-level": "^20.0.0", - "@commitlint/types": "^20.0.0", + "@commitlint/types": "^20.2.0", "git-raw-commits": "^4.0.0", "minimist": "^1.2.8", "tinyexec": "^1.0.0" @@ -751,14 +748,14 @@ } }, "node_modules/@commitlint/resolve-extends": { - "version": "20.1.0", - "resolved": "https://registry.npmjs.org/@commitlint/resolve-extends/-/resolve-extends-20.1.0.tgz", - "integrity": "sha512-cxKXQrqHjZT3o+XPdqDCwOWVFQiae++uwd9dUBC7f2MdV58ons3uUvASdW7m55eat5sRiQ6xUHyMWMRm6atZWw==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/resolve-extends/-/resolve-extends-20.2.0.tgz", + "integrity": "sha512-KVoLDi9BEuqeq+G0wRABn4azLRiCC22/YHR2aCquwx6bzCHAIN8hMt3Nuf1VFxq/c8ai6s8qBxE8+ZD4HeFTlQ==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/config-validator": "^20.0.0", - "@commitlint/types": "^20.0.0", + "@commitlint/config-validator": "^20.2.0", + "@commitlint/types": "^20.2.0", "global-directory": "^4.0.1", "import-meta-resolve": "^4.0.0", "lodash.mergewith": "^4.6.2", @@ -769,16 +766,16 @@ } }, "node_modules/@commitlint/rules": { - "version": "20.0.0", - "resolved": "https://registry.npmjs.org/@commitlint/rules/-/rules-20.0.0.tgz", - "integrity": "sha512-gvg2k10I/RfvHn5I5sxvVZKM1fl72Sqrv2YY/BnM7lMHcYqO0E2jnRWoYguvBfEcZ39t+rbATlciggVe77E4zA==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/rules/-/rules-20.2.0.tgz", + "integrity": "sha512-27rHGpeAjnYl/A+qUUiYDa7Yn1WIjof/dFJjYW4gA1Ug+LUGa1P0AexzGZ5NBxTbAlmDgaxSZkLLxtLVqtg8PQ==", "dev": true, "license": "MIT", "dependencies": { - "@commitlint/ensure": "^20.0.0", + "@commitlint/ensure": "^20.2.0", "@commitlint/message": "^20.0.0", "@commitlint/to-lines": "^20.0.0", - "@commitlint/types": "^20.0.0" + "@commitlint/types": "^20.2.0" }, "engines": { "node": ">=v18" @@ -808,9 +805,9 @@ } }, "node_modules/@commitlint/types": { - "version": "20.0.0", - "resolved": "https://registry.npmjs.org/@commitlint/types/-/types-20.0.0.tgz", - "integrity": "sha512-bVUNBqG6aznYcYjTjnc3+Cat/iBgbgpflxbIBTnsHTX0YVpnmINPEkSRWymT2Q8aSH3Y7aKnEbunilkYe8TybA==", + "version": "20.2.0", + "resolved": "https://registry.npmjs.org/@commitlint/types/-/types-20.2.0.tgz", + "integrity": "sha512-KTy0OqRDLR5y/zZMnizyx09z/rPlPC/zKhYgH8o/q6PuAjoQAKlRfY4zzv0M64yybQ//6//4H1n14pxaLZfUnA==", "dev": true, "license": "MIT", "dependencies": { @@ -8501,9 +8498,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz", + "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==", "license": "MIT", "dependencies": { "argparse": "^2.0.1" @@ -9485,9 +9482,9 @@ } }, "node_modules/p-locate/node_modules/yocto-queue": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-1.2.1.tgz", - "integrity": "sha512-AyeEbWOu/TAXdxlV9wmGcR0+yh2j3vYPGOECcIj2S7MkrLyC7ne+oye2BKTItt0ii2PHk4cDy+95+LshzbXnGg==", + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-1.2.2.tgz", + "integrity": "sha512-4LCcse/U2MHZ63HAJVE+v71o7yOdIe4cZ70Wpf8D/IyjDKYQLV5GD46B+hSTjJsvV5PztjvHoU580EftxjDZFQ==", "dev": true, "license": "MIT", "engines": { diff --git a/package.json b/package.json index 0ecfcb2..f5a3228 100644 --- a/package.json +++ b/package.json @@ -48,7 +48,7 @@ "snapshot": "npx standard-version --no-verify --skip.changelog --prerelease snapshot --releaseCommitMessageFormat 'chore(snapshot): {{currentTag}}'" }, "dependencies": { - "@apidevtools/json-schema-ref-parser": "14.2.1", + "@apidevtools/json-schema-ref-parser": "15.1.3", "@faker-js/faker": "10.1.0", "ajv": "8.17.1", "json-schema-faker": "0.5.9", @@ -56,8 +56,8 @@ "node-dir": "0.1.17" }, "devDependencies": { - "@commitlint/cli": "^20.1.0", - "@commitlint/config-conventional": "^20.0.0", + "@commitlint/cli": "^20.2.0", + "@commitlint/config-conventional": "^20.2.0", "@types/jest": "30.0.0", "audit-ci": "^7.1.0", "jest": "30.2.0", From 968aa045a5a84586e25a5d88ab5dfedbe0910cd7 Mon Sep 17 00:00:00 2001 From: Juan Correa Date: Fri, 5 Dec 2025 00:19:06 -0500 Subject: [PATCH 2/3] chore: fix js-yaml vul --- package-lock.json | 65 ----------------------------------------------- package.json | 3 ++- 2 files changed, 2 insertions(+), 66 deletions(-) diff --git a/package-lock.json b/package-lock.json index a4b4fc3..f3d898b 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1075,16 +1075,6 @@ "node": ">=8" } }, - "node_modules/@istanbuljs/load-nyc-config/node_modules/argparse": { - "version": "1.0.10", - "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", - "integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==", - "dev": true, - "license": "MIT", - "dependencies": { - "sprintf-js": "~1.0.2" - } - }, "node_modules/@istanbuljs/load-nyc-config/node_modules/find-up": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz", @@ -1099,20 +1089,6 @@ "node": ">=8" } }, - "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.14.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", - "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==", - "dev": true, - "license": "MIT", - "dependencies": { - "argparse": "^1.0.7", - "esprima": "^4.0.0" - }, - "bin": { - "js-yaml": "bin/js-yaml.js" - } - }, "node_modules/@istanbuljs/load-nyc-config/node_modules/locate-path": { "version": "5.0.0", "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz", @@ -5601,19 +5577,6 @@ "url": "https://opencollective.com/eslint" } }, - "node_modules/esprima": { - "version": "4.0.1", - "resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", - "integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==", - "license": "BSD-2-Clause", - "bin": { - "esparse": "bin/esparse.js", - "esvalidate": "bin/esvalidate.js" - }, - "engines": { - "node": ">=4" - } - }, "node_modules/esquery": { "version": "1.6.0", "resolved": "https://registry.npmjs.org/esquery/-/esquery-1.6.0.tgz", @@ -8577,28 +8540,6 @@ "ono": "^4.0.11" } }, - "node_modules/json-schema-ref-parser/node_modules/argparse": { - "version": "1.0.10", - "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", - "integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==", - "license": "MIT", - "dependencies": { - "sprintf-js": "~1.0.2" - } - }, - "node_modules/json-schema-ref-parser/node_modules/js-yaml": { - "version": "3.14.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", - "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==", - "license": "MIT", - "dependencies": { - "argparse": "^1.0.7", - "esprima": "^4.0.0" - }, - "bin": { - "js-yaml": "bin/js-yaml.js" - } - }, "node_modules/json-schema-traverse": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", @@ -11032,12 +10973,6 @@ "node": ">= 10.x" } }, - "node_modules/sprintf-js": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", - "integrity": "sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==", - "license": "BSD-3-Clause" - }, "node_modules/stack-utils": { "version": "2.0.6", "resolved": "https://registry.npmjs.org/stack-utils/-/stack-utils-2.0.6.tgz", diff --git a/package.json b/package.json index f5a3228..fa4b4a7 100644 --- a/package.json +++ b/package.json @@ -73,7 +73,8 @@ "glob": "9.3.5", "rimraf": "5.0.10", "@babel/helpers": "7.26.10", - "brace-expansion": "1.1.12" + "brace-expansion": "1.1.12", + "js-yaml": "4.1.1" }, "standard-version": { "scripts": { From c7502cf090292f8ba8172e4b42f7b617529c6ca4 Mon Sep 17 00:00:00 2001 From: Juan Correa Date: Fri, 5 Dec 2025 00:42:35 -0500 Subject: [PATCH 3/3] chore: add dep reject --- .ncurc.yaml | 7 ++++++- package-lock.json | 15 +++++++++------ package.json | 2 +- 3 files changed, 16 insertions(+), 8 deletions(-) diff --git a/.ncurc.yaml b/.ncurc.yaml index fc2c373..9a414da 100644 --- a/.ncurc.yaml +++ b/.ncurc.yaml @@ -1,2 +1,7 @@ ## Add a TODO comment indicating the reason for each rejected dependency upgrade added to this list, and what should be done to resolve it (i.e. handle it through a story, etc). -reject: [] +reject: + # @apidevtools/json-schema-ref-parser v15+ is ESM-only ("type": "module"). + # This project uses CommonJS require() in src/lib/openApiMockGenerator.js. + # Upgrading would require migrating the entire project to ESM or using dynamic imports. + # Migrate to ESM when the project is ready for a major version bump. + - '@apidevtools/json-schema-ref-parser' diff --git a/package-lock.json b/package-lock.json index f3d898b..fc38ae5 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,7 +9,7 @@ "version": "14.3.1", "license": "Apache-2.0", "dependencies": { - "@apidevtools/json-schema-ref-parser": "15.1.3", + "@apidevtools/json-schema-ref-parser": "14.2.1", "@faker-js/faker": "10.1.0", "ajv": "8.17.1", "json-schema-faker": "0.5.9", @@ -31,15 +31,18 @@ } }, "node_modules/@apidevtools/json-schema-ref-parser": { - "version": "15.1.3", - "resolved": "https://registry.npmjs.org/@apidevtools/json-schema-ref-parser/-/json-schema-ref-parser-15.1.3.tgz", - "integrity": "sha512-XvEitlOaU8S+hOrMPuGyCjp6vC51K+syUN4HHrSUdSDLLWRWQJYjInU6xlSoRGCVBCfcoHxbRm+yiaYq2yFR5w==", + "version": "14.2.1", + "resolved": "https://registry.npmjs.org/@apidevtools/json-schema-ref-parser/-/json-schema-ref-parser-14.2.1.tgz", + "integrity": "sha512-HmdFw9CDYqM6B25pqGBpNeLCKvGPlIx1EbLrVL0zPvj50CJQUHyBNBw45Muk0kEIkogo1VZvOKHajdMuAzSxRg==", "license": "MIT", "dependencies": { - "js-yaml": "^4.1.1" + "js-yaml": "^4.1.0" }, "engines": { - "node": ">=20" + "node": ">= 20" + }, + "funding": { + "url": "https://github.com/sponsors/philsturgeon" }, "peerDependencies": { "@types/json-schema": "^7.0.15" diff --git a/package.json b/package.json index fa4b4a7..d1f9541 100644 --- a/package.json +++ b/package.json @@ -48,7 +48,7 @@ "snapshot": "npx standard-version --no-verify --skip.changelog --prerelease snapshot --releaseCommitMessageFormat 'chore(snapshot): {{currentTag}}'" }, "dependencies": { - "@apidevtools/json-schema-ref-parser": "15.1.3", + "@apidevtools/json-schema-ref-parser": "14.2.1", "@faker-js/faker": "10.1.0", "ajv": "8.17.1", "json-schema-faker": "0.5.9",