Merge pull request #769 from OpenFn/release/next

Release/next
OpenFn · Sep 6, 2024 · 4da3887 · 4da3887
2 parents db48969 + db08823
commit 4da3887
Show file tree

Hide file tree

Showing 42 changed files with 526 additions and 1,354 deletions.
diff --git a/examples/dts-inspector/CHANGELOG.md b/examples/dts-inspector/CHANGELOG.md
@@ -1,5 +1,20 @@
 # dts-inspector
 
+## 1.0.19
+
+### Patch Changes
+
+- 24534e1: Upgrade vulnerable version of ws.
+- 2c69d90: Remove live-server as it was preventing an update of a vulnerable version of braces.
+- 3a5277b: Update vulnerable version of word-wrap.
+- ac5c373: Update vulnerable version of postcss.
+- 03ad493: Update @slack/web-api to remove dependency on vulnerable axios.
+- 1f340fa: Update typesync to remove dependency on ip, which has a vulnerability without a patch.
+- 6370e76: Update vulnerable version of micromatch.
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
+- Updated dependencies [c3df1e5]
+  - @openfn/describe-package@0.1.1
+
 ## 1.0.18
 
 ### Patch Changes

diff --git a/examples/dts-inspector/package.json b/examples/dts-inspector/package.json
@@ -1,6 +1,6 @@
 {
   "name": "dts-inspector",
-  "version": "1.0.18",
+  "version": "1.0.19",
   "description": "",
   "main": "index.js",
   "type": "module",
@@ -16,13 +16,11 @@
   },
   "devDependencies": {
     "@tailwindcss/forms": "^0.5.2",
-    "@types/live-server": "^1.2.1",
     "@types/react": "^18.0.8",
     "@types/react-dom": "^18.0.3",
     "esbuild": "^0.18.14",
     "esbuild-postcss": "^0.0.4",
-    "live-server": "^1.2.2",
-    "postcss": "^8.4.13",
+    "postcss": "^8.4.45",
     "react": "^18.1.0",
     "react-dom": "^18.1.0",
     "tailwindcss": "^3.0.24"

diff --git a/integration-tests/cli/CHANGELOG.md b/integration-tests/cli/CHANGELOG.md
@@ -0,0 +1,13 @@
+# @openfn/integration-tests-cli
+
+## 1.0.1
+
+### Patch Changes
+
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
+
+## 1.0.1
+
+### Patch Changes
+
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
diff --git a/integration-tests/cli/modules/test/package.json b/integration-tests/cli/modules/test/package.json
@@ -3,5 +3,6 @@
   "version": "0.0.1",
   "type": "module",
   "module": "index.js",
-  "private": true
+  "private": true,
+  "devDependencies": {}
 }
diff --git a/integration-tests/cli/package.json b/integration-tests/cli/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@openfn/integration-tests-cli",
   "private": true,
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "CLI integration tests",
   "author": "Open Function Group <[email protected]>",
   "license": "ISC",

diff --git a/integration-tests/execute/CHANGELOG.md b/integration-tests/execute/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @openfn/integration-tests-execute
 
+## 1.0.3
+
+### Patch Changes
+
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
+- Updated dependencies [c3df1e5]
+  - @openfn/compiler@0.3.1
+  - @openfn/runtime@1.4.2
+
 ## 1.0.2
 
 ### Patch Changes

diff --git a/integration-tests/execute/package.json b/integration-tests/execute/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@openfn/integration-tests-execute",
   "private": true,
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Job execution tests",
   "author": "Open Function Group <[email protected]>",
   "license": "ISC",

diff --git a/integration-tests/worker/CHANGELOG.md b/integration-tests/worker/CHANGELOG.md
@@ -1,5 +1,24 @@
 # @openfn/integration-tests-worker
 
+## 1.0.57
+
+### Patch Changes
+
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
+- Updated dependencies [24534e1]
+- Updated dependencies [7977220]
+- Updated dependencies [3a5277b]
+- Updated dependencies [ac5c373]
+- Updated dependencies [03ad493]
+- Updated dependencies [a223975]
+- Updated dependencies [1f340fa]
+- Updated dependencies [6370e76]
+- Updated dependencies [c3df1e5]
+  - @openfn/lightning-mock@2.0.17
+  - @openfn/ws-worker@1.6.2
+  - @openfn/engine-multi@1.2.3
+  - @openfn/logger@1.0.2
+
 ## 1.0.56
 
 ### Patch Changes

diff --git a/integration-tests/worker/dummy-repo/package.json b/integration-tests/worker/dummy-repo/package.json
@@ -6,5 +6,6 @@
     "@openfn/language-common_latest": "npm:@openfn/language-common@^1.12.0",
     "@openfn/stateful-test_1.0.0": "@npm:@openfn/[email protected]",
     "@openfn/test-adaptor_1.0.0": "@npm:@openfn/[email protected]"
-  }
+  },
+  "devDependencies": {}
 }
diff --git a/integration-tests/worker/package.json b/integration-tests/worker/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@openfn/integration-tests-worker",
   "private": true,
-  "version": "1.0.56",
+  "version": "1.0.57",
   "description": "Lightning WOrker integration tests",
   "author": "Open Function Group <[email protected]>",
   "license": "ISC",

diff --git a/package.json b/package.json
@@ -26,14 +26,14 @@
   "license": "ISC",
   "devDependencies": {
     "@changesets/cli": "^2.27.1",
-    "@slack/web-api": "^6.8.1",
+    "@slack/web-api": "^6.12.1",
     "@types/gunzip-maybe": "^1.4.0",
     "@types/rimraf": "^3.0.2",
     "@types/tar-stream": "^2.2.2",
     "gunzip-maybe": "^1.4.2",
     "prettier": "^2.8.8",
     "rimraf": "^3.0.2",
     "tar-stream": "^3.0.0",
-    "typesync": "^0.11.1"
+    "typesync": "^0.13.0"
   }
 }
diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @openfn/cli
 
+## 1.8.2
+
+### Patch Changes
+
+Security updates
+
 ## 1.8.1
 
 ### Patch Changes

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/cli",
-  "version": "1.8.1",
+  "version": "1.8.2",
   "description": "CLI devtools for the openfn toolchain.",
   "engines": {
     "node": ">=18",
@@ -59,7 +59,7 @@
     "figures": "^5.0.0",
     "rimraf": "^3.0.2",
     "treeify": "^1.1.0",
-    "ws": "^8.14.1",
+    "ws": "^8.18.0",
     "yargs": "^17.7.2"
   },
   "files": [

diff --git a/packages/cli/test/__modules__/@openfn/language-common/package.json b/packages/cli/test/__modules__/@openfn/language-common/package.json
@@ -5,5 +5,6 @@
   "module": "index.js",
   "main": "index.js",
   "types": "types.d.ts",
-  "private": true
+  "private": true,
+  "devDependencies": {}
 }
diff --git a/packages/cli/test/__modules__/@openfn/language-postgres/package.json b/packages/cli/test/__modules__/@openfn/language-postgres/package.json
@@ -4,5 +4,6 @@
   "type": "module",
   "module": "index.js",
   "types": "types.d.ts",
-  "private": true
+  "private": true,
+  "devDependencies": {}
 }
diff --git a/packages/cli/test/__modules__/times-two/package.json b/packages/cli/test/__modules__/times-two/package.json
@@ -4,5 +4,6 @@
   "type": "module",
   "module": "index.js",
   "types": "types.d.ts",
-  "private": true
+  "private": true,
+  "devDependencies": {}
 }
diff --git a/packages/cli/test/__monorepo__/package.json b/packages/cli/test/__monorepo__/package.json
@@ -1,3 +1,4 @@
 {
-  "name": "adaptors"
+  "name": "adaptors",
+  "devDependencies": {}
 }
diff --git a/packages/cli/test/__monorepo__/packages/common/package.json b/packages/cli/test/__monorepo__/packages/common/package.json
@@ -4,5 +4,6 @@
   "type": "module",
   "module": "index.js",
   "types": "types.d.ts",
-  "private": true
+  "private": true,
+  "devDependencies": {}
 }
diff --git a/packages/cli/test/__repo__/package.json b/packages/cli/test/__repo__/package.json
@@ -4,5 +4,6 @@
     "times-two_0.0.1": "npm:[email protected]",
     "@openfn/language-common_0.0.1": "npm:@openfn/language-common0.0.1",
     "@openfn/language-postgres_0.0.1": "npm:@openfn/[email protected]"
-  }
+  },
+  "devDependencies": {}
 }
diff --git a/packages/compiler/CHANGELOG.md b/packages/compiler/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @openfn/compiler
 
+## 0.3.1
+
+### Patch Changes
+
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
+- Updated dependencies [c3df1e5]
+  - @openfn/describe-package@0.1.1
+  - @openfn/logger@1.0.2
+
 ## 0.3.0
 
 ### Minor Changes

diff --git a/packages/compiler/package.json b/packages/compiler/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/compiler",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Compiler and language tooling for openfn jobs.",
   "author": "Open Function Group <[email protected]>",
   "license": "ISC",

diff --git a/packages/compiler/test/__modules__/adaptor/package.json b/packages/compiler/test/__modules__/adaptor/package.json
@@ -3,5 +3,6 @@
   "version": "0.0.1",
   "type": "module",
   "types": "adaptor.d.ts",
-  "private": "true"
+  "private": "true",
+  "devDependencies": {}
 }
diff --git a/packages/deploy/CHANGELOG.md b/packages/deploy/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @openfn/deploy
 
+## 0.7.1
+
+### Patch Changes
+
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
+- Updated dependencies [c3df1e5]
+  - @openfn/logger@1.0.2
+
 ## 0.7.0
 
 ### Minor Changes

diff --git a/packages/deploy/package.json b/packages/deploy/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/deploy",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Deploy projects to Lightning instances",
   "type": "module",
   "exports": {

diff --git a/packages/describe-package/CHANGELOG.md b/packages/describe-package/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @openfn/describe-package
 
+## 0.1.1
+
+### Patch Changes
+
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
+
 ## 0.1.0
 
 ### Minor Changes

diff --git a/packages/describe-package/package.json b/packages/describe-package/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/describe-package",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Utilities to inspect an npm package.",
   "author": "Open Function Group <[email protected]>",
   "license": "ISC",

diff --git a/packages/engine-multi/CHANGELOG.md b/packages/engine-multi/CHANGELOG.md
@@ -1,5 +1,16 @@
 # engine-multi
 
+## 1.2.3
+
+### Patch Changes
+
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
+- Updated dependencies [c3df1e5]
+  - @openfn/compiler@0.3.1
+  - @openfn/logger@1.0.2
+  - @openfn/runtime@1.4.2
+  - @openfn/lexicon@1.1.0
+
 ## 1.2.2
 
 ### Patch Changes

diff --git a/packages/engine-multi/package.json b/packages/engine-multi/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/engine-multi",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "Multi-process runtime engine",
   "main": "dist/index.js",
   "type": "module",

diff --git a/packages/engine-multi/test/__repo__/package.json b/packages/engine-multi/test/__repo__/package.json
@@ -4,5 +4,6 @@
   "version": "1.0.0",
   "dependencies": {
     "@openfn/helper_1.0.0": "@npm:@openfn/[email protected]"
-  }
+  },
+  "devDependencies": {}
 }
diff --git a/packages/lightning-mock/CHANGELOG.md b/packages/lightning-mock/CHANGELOG.md
@@ -1,5 +1,23 @@
 # @openfn/lightning-mock
 
+## 2.0.17
+
+### Patch Changes
+
+- 24534e1: Upgrade vulnerable version of ws.
+- 3a5277b: Update vulnerable version of word-wrap.
+- ac5c373: Update vulnerable version of postcss.
+- 03ad493: Update @slack/web-api to remove dependency on vulnerable axios.
+- a223975: Update vulnerable version of jose
+- 1f340fa: Update typesync to remove dependency on ip, which has a vulnerability without a patch.
+- 6370e76: Update vulnerable version of micromatch.
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
+- Updated dependencies [c3df1e5]
+  - @openfn/engine-multi@1.2.3
+  - @openfn/logger@1.0.2
+  - @openfn/runtime@1.4.2
+  - @openfn/lexicon@1.1.0
+
 ## 2.0.16
 
 ### Patch Changes

diff --git a/packages/lightning-mock/package.json b/packages/lightning-mock/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/lightning-mock",
-  "version": "2.0.16",
+  "version": "2.0.17",
   "private": true,
   "description": "A mock Lightning server",
   "main": "dist/index.js",
@@ -24,12 +24,12 @@
     "@types/koa-logger": "^3.1.2",
     "@types/ws": "^8.5.6",
     "fast-safe-stringify": "^2.1.1",
-    "jose": "^4.14.6",
+    "jose": "^4.15.9",
     "koa": "^2.13.4",
     "koa-bodyparser": "^4.4.0",
     "koa-logger": "^3.2.1",
     "phoenix": "^1.7.7",
-    "ws": "^8.14.1"
+    "ws": "^8.18.0"
   },
   "devDependencies": {
     "@types/koa": "^2.13.5",

diff --git a/packages/logger/CHANGELOG.md b/packages/logger/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @openfn/logger
 
+## 1.0.2
+
+### Patch Changes
+
+- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available.
+
 ## 1.0.1
 
 ### Patch Changes