From 0e4b92b7928da43a2e2bca6af8d7fe78e97c16e0 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 27 Jul 2026 03:58:29 +0000 Subject: [PATCH 1/2] fix: packages/pluggable-widgets-tools/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-JSYAML-18313070 - https://snyk.io/vuln/SNYK-JS-POSTCSS-18313038 --- packages/pluggable-widgets-tools/package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/pluggable-widgets-tools/package.json b/packages/pluggable-widgets-tools/package.json index 0d700d63..3fcda548 100644 --- a/packages/pluggable-widgets-tools/package.json +++ b/packages/pluggable-widgets-tools/package.json @@ -62,7 +62,7 @@ "big.js": "^6.0.2", "core-js": "^3.6.5", "dotenv": "^17.4.2", - "eslint": "^9.39.4", + "eslint": "^10.0.0", "eslint-config-prettier": "^8.0.0", "eslint-plugin-jest": "^29.15.2", "eslint-plugin-prettier": "^3.3.1", @@ -81,7 +81,7 @@ "make-dir": "^5.1.0", "mendix": "^10.24.73019", "mime": "^4.1.0", - "postcss": "^8.5.10", + "postcss": "^8.5.18", "postcss-import": "^14.0.2", "postcss-url": "^10.1.4", "prettier": "^2.5.1", From 2ef32246558a7c9c33807797a225927452cdfb5c Mon Sep 17 00:00:00 2001 From: Arjo Bruijnes Date: Mon, 27 Jul 2026 15:50:17 +0200 Subject: [PATCH 2/2] Revert eslint update, update pnpm lockfile We need to migrate to the new eslint flatconfig before upgrading to version 10 --- packages/pluggable-widgets-tools/package.json | 2 +- pnpm-lock.yaml | 290 +++++++++--------- 2 files changed, 146 insertions(+), 146 deletions(-) diff --git a/packages/pluggable-widgets-tools/package.json b/packages/pluggable-widgets-tools/package.json index 3fcda548..ebe79611 100644 --- a/packages/pluggable-widgets-tools/package.json +++ b/packages/pluggable-widgets-tools/package.json @@ -62,7 +62,7 @@ "big.js": "^6.0.2", "core-js": "^3.6.5", "dotenv": "^17.4.2", - "eslint": "^10.0.0", + "eslint": "^9.39.4", "eslint-config-prettier": "^8.0.0", "eslint-plugin-jest": "^29.15.2", "eslint-plugin-prettier": "^3.3.1", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 246c742e..1c7ffdd8 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -307,14 +307,14 @@ importers: specifier: ^4.1.0 version: 4.1.0 postcss: - specifier: ^8.5.10 - version: 8.5.14 + specifier: ^8.5.18 + version: 8.5.23 postcss-import: specifier: ^14.0.2 - version: 14.1.0(postcss@8.5.14) + version: 14.1.0(postcss@8.5.23) postcss-url: specifier: ^10.1.4 - version: 10.1.4(postcss@8.5.14) + version: 10.1.4(postcss@8.5.23) prettier: specifier: ^2.5.1 version: 2.8.8 @@ -353,7 +353,7 @@ importers: version: 2.0.5 rollup-plugin-postcss: specifier: ^4.0.2 - version: 4.0.2(postcss@8.5.14)(ts-node@10.9.2(@swc/core@1.15.41)(@types/node@22.20.1)(typescript@5.9.3)) + version: 4.0.2(postcss@8.5.23)(ts-node@10.9.2(@swc/core@1.15.41)(@types/node@22.20.1)(typescript@5.9.3)) rollup-plugin-re: specifier: ^1.0.7 version: 1.0.7 @@ -5180,8 +5180,8 @@ packages: resolution: {integrity: sha512-dkEJPVvun4FryqBmZ5KhDo0K9iDXAwn08tMLDinNdRBNPcYEDiWYysLcc6k3mjTMlbP9KyylvRpd4wFtwrT9rw==} engines: {node: ^20.17.0 || >=22.9.0} - nanoid@3.3.12: - resolution: {integrity: sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==} + nanoid@3.3.16: + resolution: {integrity: sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==} engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true @@ -5802,8 +5802,8 @@ packages: postcss-value-parser@4.2.0: resolution: {integrity: sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==} - postcss@8.5.14: - resolution: {integrity: sha512-SoSL4+OSEtR99LHFZQiJLkT59C5B1amGO1NzTwj7TT1qCUgUO6hxOvzkOYxD+vMrXBM3XJIKzokoERdqQq/Zmg==} + postcss@8.5.23: + resolution: {integrity: sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==} engines: {node: ^10 || ^12 || >=14} prelude-ls@1.2.1: @@ -10472,9 +10472,9 @@ snapshots: shebang-command: 2.0.0 which: 2.0.2 - css-declaration-sorter@6.4.1(postcss@8.5.14): + css-declaration-sorter@6.4.1(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 css-select@4.3.0: dependencies: @@ -10495,48 +10495,48 @@ snapshots: cssesc@3.0.0: {} - cssnano-preset-default@5.2.14(postcss@8.5.14): - dependencies: - css-declaration-sorter: 6.4.1(postcss@8.5.14) - cssnano-utils: 3.1.0(postcss@8.5.14) - postcss: 8.5.14 - postcss-calc: 8.2.4(postcss@8.5.14) - postcss-colormin: 5.3.1(postcss@8.5.14) - postcss-convert-values: 5.1.3(postcss@8.5.14) - postcss-discard-comments: 5.1.2(postcss@8.5.14) - postcss-discard-duplicates: 5.1.0(postcss@8.5.14) - postcss-discard-empty: 5.1.1(postcss@8.5.14) - postcss-discard-overridden: 5.1.0(postcss@8.5.14) - postcss-merge-longhand: 5.1.7(postcss@8.5.14) - postcss-merge-rules: 5.1.4(postcss@8.5.14) - postcss-minify-font-values: 5.1.0(postcss@8.5.14) - postcss-minify-gradients: 5.1.1(postcss@8.5.14) - postcss-minify-params: 5.1.4(postcss@8.5.14) - postcss-minify-selectors: 5.2.1(postcss@8.5.14) - postcss-normalize-charset: 5.1.0(postcss@8.5.14) - postcss-normalize-display-values: 5.1.0(postcss@8.5.14) - postcss-normalize-positions: 5.1.1(postcss@8.5.14) - postcss-normalize-repeat-style: 5.1.1(postcss@8.5.14) - postcss-normalize-string: 5.1.0(postcss@8.5.14) - postcss-normalize-timing-functions: 5.1.0(postcss@8.5.14) - postcss-normalize-unicode: 5.1.1(postcss@8.5.14) - postcss-normalize-url: 5.1.0(postcss@8.5.14) - postcss-normalize-whitespace: 5.1.1(postcss@8.5.14) - postcss-ordered-values: 5.1.3(postcss@8.5.14) - postcss-reduce-initial: 5.1.2(postcss@8.5.14) - postcss-reduce-transforms: 5.1.0(postcss@8.5.14) - postcss-svgo: 5.1.0(postcss@8.5.14) - postcss-unique-selectors: 5.1.1(postcss@8.5.14) - - cssnano-utils@3.1.0(postcss@8.5.14): - dependencies: - postcss: 8.5.14 - - cssnano@5.1.15(postcss@8.5.14): - dependencies: - cssnano-preset-default: 5.2.14(postcss@8.5.14) + cssnano-preset-default@5.2.14(postcss@8.5.23): + dependencies: + css-declaration-sorter: 6.4.1(postcss@8.5.23) + cssnano-utils: 3.1.0(postcss@8.5.23) + postcss: 8.5.23 + postcss-calc: 8.2.4(postcss@8.5.23) + postcss-colormin: 5.3.1(postcss@8.5.23) + postcss-convert-values: 5.1.3(postcss@8.5.23) + postcss-discard-comments: 5.1.2(postcss@8.5.23) + postcss-discard-duplicates: 5.1.0(postcss@8.5.23) + postcss-discard-empty: 5.1.1(postcss@8.5.23) + postcss-discard-overridden: 5.1.0(postcss@8.5.23) + postcss-merge-longhand: 5.1.7(postcss@8.5.23) + postcss-merge-rules: 5.1.4(postcss@8.5.23) + postcss-minify-font-values: 5.1.0(postcss@8.5.23) + postcss-minify-gradients: 5.1.1(postcss@8.5.23) + postcss-minify-params: 5.1.4(postcss@8.5.23) + postcss-minify-selectors: 5.2.1(postcss@8.5.23) + postcss-normalize-charset: 5.1.0(postcss@8.5.23) + postcss-normalize-display-values: 5.1.0(postcss@8.5.23) + postcss-normalize-positions: 5.1.1(postcss@8.5.23) + postcss-normalize-repeat-style: 5.1.1(postcss@8.5.23) + postcss-normalize-string: 5.1.0(postcss@8.5.23) + postcss-normalize-timing-functions: 5.1.0(postcss@8.5.23) + postcss-normalize-unicode: 5.1.1(postcss@8.5.23) + postcss-normalize-url: 5.1.0(postcss@8.5.23) + postcss-normalize-whitespace: 5.1.1(postcss@8.5.23) + postcss-ordered-values: 5.1.3(postcss@8.5.23) + postcss-reduce-initial: 5.1.2(postcss@8.5.23) + postcss-reduce-transforms: 5.1.0(postcss@8.5.23) + postcss-svgo: 5.1.0(postcss@8.5.23) + postcss-unique-selectors: 5.1.1(postcss@8.5.23) + + cssnano-utils@3.1.0(postcss@8.5.23): + dependencies: + postcss: 8.5.23 + + cssnano@5.1.15(postcss@8.5.23): + dependencies: + cssnano-preset-default: 5.2.14(postcss@8.5.23) lilconfig: 2.1.0 - postcss: 8.5.14 + postcss: 8.5.23 yaml: 1.10.3 csso@4.2.0: @@ -11462,9 +11462,9 @@ snapshots: icss-replace-symbols@1.1.0: {} - icss-utils@5.1.0(postcss@8.5.14): + icss-utils@5.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 identity-obj-proxy@3.0.0: dependencies: @@ -13097,7 +13097,7 @@ snapshots: mute-stream@3.0.0: {} - nanoid@3.3.12: {} + nanoid@3.3.16: {} napi-postinstall@0.3.4: {} @@ -13503,189 +13503,189 @@ snapshots: possible-typed-array-names@1.1.0: {} - postcss-calc@8.2.4(postcss@8.5.14): + postcss-calc@8.2.4(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-selector-parser: 6.1.2 postcss-value-parser: 4.2.0 - postcss-colormin@5.3.1(postcss@8.5.14): + postcss-colormin@5.3.1(postcss@8.5.23): dependencies: browserslist: 4.28.2 caniuse-api: 3.0.0 colord: 2.9.3 - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-convert-values@5.1.3(postcss@8.5.14): + postcss-convert-values@5.1.3(postcss@8.5.23): dependencies: browserslist: 4.28.2 - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-discard-comments@5.1.2(postcss@8.5.14): + postcss-discard-comments@5.1.2(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 - postcss-discard-duplicates@5.1.0(postcss@8.5.14): + postcss-discard-duplicates@5.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 - postcss-discard-empty@5.1.1(postcss@8.5.14): + postcss-discard-empty@5.1.1(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 - postcss-discard-overridden@5.1.0(postcss@8.5.14): + postcss-discard-overridden@5.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 - postcss-import@14.1.0(postcss@8.5.14): + postcss-import@14.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 read-cache: 1.0.0 resolve: 1.22.12 - postcss-load-config@3.1.4(postcss@8.5.14)(ts-node@10.9.2(@swc/core@1.15.41)(@types/node@22.20.1)(typescript@5.9.3)): + postcss-load-config@3.1.4(postcss@8.5.23)(ts-node@10.9.2(@swc/core@1.15.41)(@types/node@22.20.1)(typescript@5.9.3)): dependencies: lilconfig: 2.1.0 yaml: 1.10.3 optionalDependencies: - postcss: 8.5.14 + postcss: 8.5.23 ts-node: 10.9.2(@swc/core@1.15.41)(@types/node@22.20.1)(typescript@5.9.3) - postcss-merge-longhand@5.1.7(postcss@8.5.14): + postcss-merge-longhand@5.1.7(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - stylehacks: 5.1.1(postcss@8.5.14) + stylehacks: 5.1.1(postcss@8.5.23) - postcss-merge-rules@5.1.4(postcss@8.5.14): + postcss-merge-rules@5.1.4(postcss@8.5.23): dependencies: browserslist: 4.28.2 caniuse-api: 3.0.0 - cssnano-utils: 3.1.0(postcss@8.5.14) - postcss: 8.5.14 + cssnano-utils: 3.1.0(postcss@8.5.23) + postcss: 8.5.23 postcss-selector-parser: 6.1.2 - postcss-minify-font-values@5.1.0(postcss@8.5.14): + postcss-minify-font-values@5.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-minify-gradients@5.1.1(postcss@8.5.14): + postcss-minify-gradients@5.1.1(postcss@8.5.23): dependencies: colord: 2.9.3 - cssnano-utils: 3.1.0(postcss@8.5.14) - postcss: 8.5.14 + cssnano-utils: 3.1.0(postcss@8.5.23) + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-minify-params@5.1.4(postcss@8.5.14): + postcss-minify-params@5.1.4(postcss@8.5.23): dependencies: browserslist: 4.28.2 - cssnano-utils: 3.1.0(postcss@8.5.14) - postcss: 8.5.14 + cssnano-utils: 3.1.0(postcss@8.5.23) + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-minify-selectors@5.2.1(postcss@8.5.14): + postcss-minify-selectors@5.2.1(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-selector-parser: 6.1.2 - postcss-modules-extract-imports@3.1.0(postcss@8.5.14): + postcss-modules-extract-imports@3.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 - postcss-modules-local-by-default@4.2.0(postcss@8.5.14): + postcss-modules-local-by-default@4.2.0(postcss@8.5.23): dependencies: - icss-utils: 5.1.0(postcss@8.5.14) - postcss: 8.5.14 + icss-utils: 5.1.0(postcss@8.5.23) + postcss: 8.5.23 postcss-selector-parser: 7.1.1 postcss-value-parser: 4.2.0 - postcss-modules-scope@3.2.1(postcss@8.5.14): + postcss-modules-scope@3.2.1(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-selector-parser: 7.1.1 - postcss-modules-values@4.0.0(postcss@8.5.14): + postcss-modules-values@4.0.0(postcss@8.5.23): dependencies: - icss-utils: 5.1.0(postcss@8.5.14) - postcss: 8.5.14 + icss-utils: 5.1.0(postcss@8.5.23) + postcss: 8.5.23 - postcss-modules@4.3.1(postcss@8.5.14): + postcss-modules@4.3.1(postcss@8.5.23): dependencies: generic-names: 4.0.0 icss-replace-symbols: 1.1.0 lodash.camelcase: 4.3.0 - postcss: 8.5.14 - postcss-modules-extract-imports: 3.1.0(postcss@8.5.14) - postcss-modules-local-by-default: 4.2.0(postcss@8.5.14) - postcss-modules-scope: 3.2.1(postcss@8.5.14) - postcss-modules-values: 4.0.0(postcss@8.5.14) + postcss: 8.5.23 + postcss-modules-extract-imports: 3.1.0(postcss@8.5.23) + postcss-modules-local-by-default: 4.2.0(postcss@8.5.23) + postcss-modules-scope: 3.2.1(postcss@8.5.23) + postcss-modules-values: 4.0.0(postcss@8.5.23) string-hash: 1.1.3 - postcss-normalize-charset@5.1.0(postcss@8.5.14): + postcss-normalize-charset@5.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 - postcss-normalize-display-values@5.1.0(postcss@8.5.14): + postcss-normalize-display-values@5.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-normalize-positions@5.1.1(postcss@8.5.14): + postcss-normalize-positions@5.1.1(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-normalize-repeat-style@5.1.1(postcss@8.5.14): + postcss-normalize-repeat-style@5.1.1(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-normalize-string@5.1.0(postcss@8.5.14): + postcss-normalize-string@5.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-normalize-timing-functions@5.1.0(postcss@8.5.14): + postcss-normalize-timing-functions@5.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-normalize-unicode@5.1.1(postcss@8.5.14): + postcss-normalize-unicode@5.1.1(postcss@8.5.23): dependencies: browserslist: 4.28.2 - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-normalize-url@5.1.0(postcss@8.5.14): + postcss-normalize-url@5.1.0(postcss@8.5.23): dependencies: normalize-url: 6.1.0 - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-normalize-whitespace@5.1.1(postcss@8.5.14): + postcss-normalize-whitespace@5.1.1(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-ordered-values@5.1.3(postcss@8.5.14): + postcss-ordered-values@5.1.3(postcss@8.5.23): dependencies: - cssnano-utils: 3.1.0(postcss@8.5.14) - postcss: 8.5.14 + cssnano-utils: 3.1.0(postcss@8.5.23) + postcss: 8.5.23 postcss-value-parser: 4.2.0 - postcss-reduce-initial@5.1.2(postcss@8.5.14): + postcss-reduce-initial@5.1.2(postcss@8.5.23): dependencies: browserslist: 4.28.2 caniuse-api: 3.0.0 - postcss: 8.5.14 + postcss: 8.5.23 - postcss-reduce-transforms@5.1.0(postcss@8.5.14): + postcss-reduce-transforms@5.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 postcss-selector-parser@6.1.2: @@ -13698,30 +13698,30 @@ snapshots: cssesc: 3.0.0 util-deprecate: 1.0.2 - postcss-svgo@5.1.0(postcss@8.5.14): + postcss-svgo@5.1.0(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-value-parser: 4.2.0 svgo: 2.8.2 - postcss-unique-selectors@5.1.1(postcss@8.5.14): + postcss-unique-selectors@5.1.1(postcss@8.5.23): dependencies: - postcss: 8.5.14 + postcss: 8.5.23 postcss-selector-parser: 6.1.2 - postcss-url@10.1.4(postcss@8.5.14): + postcss-url@10.1.4(postcss@8.5.23): dependencies: make-dir: 3.1.0 mime: 2.5.2 minimatch: 3.1.5 - postcss: 8.5.14 + postcss: 8.5.23 xxhashjs: 0.2.2 postcss-value-parser@4.2.0: {} - postcss@8.5.14: + postcss@8.5.23: dependencies: - nanoid: 3.3.12 + nanoid: 3.3.16 picocolors: 1.1.1 source-map-js: 1.2.1 @@ -14098,17 +14098,17 @@ snapshots: - bufferutil - utf-8-validate - rollup-plugin-postcss@4.0.2(postcss@8.5.14)(ts-node@10.9.2(@swc/core@1.15.41)(@types/node@22.20.1)(typescript@5.9.3)): + rollup-plugin-postcss@4.0.2(postcss@8.5.23)(ts-node@10.9.2(@swc/core@1.15.41)(@types/node@22.20.1)(typescript@5.9.3)): dependencies: chalk: 4.1.2 concat-with-sourcemaps: 1.1.0 - cssnano: 5.1.15(postcss@8.5.14) + cssnano: 5.1.15(postcss@8.5.23) import-cwd: 3.0.0 p-queue: 6.6.2 pify: 5.0.0 - postcss: 8.5.14 - postcss-load-config: 3.1.4(postcss@8.5.14)(ts-node@10.9.2(@swc/core@1.15.41)(@types/node@22.20.1)(typescript@5.9.3)) - postcss-modules: 4.3.1(postcss@8.5.14) + postcss: 8.5.23 + postcss-load-config: 3.1.4(postcss@8.5.23)(ts-node@10.9.2(@swc/core@1.15.41)(@types/node@22.20.1)(typescript@5.9.3)) + postcss-modules: 4.3.1(postcss@8.5.23) promise.series: 0.2.0 resolve: 1.22.12 rollup-pluginutils: 2.8.2 @@ -14595,10 +14595,10 @@ snapshots: style-inject@0.3.0: {} - stylehacks@5.1.1(postcss@8.5.14): + stylehacks@5.1.1(postcss@8.5.23): dependencies: browserslist: 4.28.2 - postcss: 8.5.14 + postcss: 8.5.23 postcss-selector-parser: 6.1.2 supports-color@7.2.0: