From 5dc88fb28d0d744d1a8cdcb356deef46b1525329 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 3 Dec 2024 07:16:29 +0000 Subject: [PATCH] fix(deps): update dependency mongoose to v8 [security] --- packages/config/package.json | 2 +- packages/metrics/package.json | 2 +- packages/migration/package.json | 2 +- packages/notification/package.json | 2 +- packages/user-mgnt/package.json | 2 +- packages/webhooks/package.json | 2 +- yarn.lock | 75 ++++++++++++++++++++---------- 7 files changed, 56 insertions(+), 31 deletions(-) diff --git a/packages/config/package.json b/packages/config/package.json index 3122adde743..f88513a304a 100644 --- a/packages/config/package.json +++ b/packages/config/package.json @@ -31,7 +31,7 @@ "jsonwebtoken": "^9.0.0", "jwt-decode": "^3.0.0", "lodash": "^4.17.21", - "mongoose": "^6.11.3", + "mongoose": "^8.0.0", "pino": "^7.0.0", "tsconfig-paths": "^3.13.0", "zod": "^3.17.3", diff --git a/packages/metrics/package.json b/packages/metrics/package.json index 98b928453f6..3e35aba46f2 100644 --- a/packages/metrics/package.json +++ b/packages/metrics/package.json @@ -34,7 +34,7 @@ "jwt-decode": "^3.0.0", "lodash": "^4.17.21", "mongodb": "^4.17.1", - "mongoose": "^6.11.3", + "mongoose": "^8.0.0", "node-fetch": "^2.6.7", "pino": "^7.0.0", "tsconfig-paths": "^3.13.0", diff --git a/packages/migration/package.json b/packages/migration/package.json index eb6bc114849..b364f4fecc1 100644 --- a/packages/migration/package.json +++ b/packages/migration/package.json @@ -35,7 +35,7 @@ "lodash-es": "^4.17.21", "migrate-mongo": "^10.0.0", "minio": "^7.0.33", - "mongoose": "^6.11.3", + "mongoose": "^8.0.0", "tsx": "^4.15.7", "uuid": "^3.2.1" }, diff --git a/packages/notification/package.json b/packages/notification/package.json index 0c580606925..63537c3bde7 100644 --- a/packages/notification/package.json +++ b/packages/notification/package.json @@ -31,7 +31,7 @@ "joi": "^17.3.0", "jsonwebtoken": "^9.0.0", "lodash": "^4.17.21", - "mongoose": "^6.11.3", + "mongoose": "^8.0.0", "node-fetch": "^2.6.7", "pino": "^7.0.0", "tsconfig-paths": "^3.13.0", diff --git a/packages/user-mgnt/package.json b/packages/user-mgnt/package.json index 790f0b2e463..3f1a4dfb300 100644 --- a/packages/user-mgnt/package.json +++ b/packages/user-mgnt/package.json @@ -31,7 +31,7 @@ "jsonwebtoken": "^9.0.0", "jwt-decode": "^3.0.0", "lodash": "^4.17.11", - "mongoose": "^6.11.3", + "mongoose": "^8.0.0", "node-fetch": "^2.6.7", "pino": "^7.0.0", "tsconfig-paths": "^3.13.0", diff --git a/packages/webhooks/package.json b/packages/webhooks/package.json index 35bb7ca2aa6..542de659e70 100644 --- a/packages/webhooks/package.json +++ b/packages/webhooks/package.json @@ -29,7 +29,7 @@ "jsonwebtoken": "^9.0.0", "jwt-decode": "^3.0.0", "lodash": "^4.17.11", - "mongoose": "^6.11.3", + "mongoose": "^8.0.0", "node-fetch": "^2.6.7", "pino": "^7.0.0", "redis": "^3.0.2", diff --git a/yarn.lock b/yarn.lock index bd63e49c6fa..f348b98644b 100644 --- a/yarn.lock +++ b/yarn.lock @@ -17962,10 +17962,10 @@ jwt-decode@^3.0.0: resolved "https://registry.yarnpkg.com/jwt-decode/-/jwt-decode-3.1.2.tgz#3fb319f3675a2df0c2895c8f5e9fa4b67b04ed59" integrity sha512-UfpWE/VZn0iP50d8cz9NrZLM9lSWhcJ+0Gt/nm4by88UL+J1SiKN8/5dkjMmbEzwL2CAe+67GsegCbIKtbp75A== -kareem@2.5.1: - version "2.5.1" - resolved "https://registry.npmjs.org/kareem/-/kareem-2.5.1.tgz" - integrity sha512-7jFxRVm+jD+rkq3kY0iZDJfsO2/t4BBPeEb2qKn2lR/9KhuksYk5hxzfRYWMPV8P/x2d0kHD306YyWLzjjH+uA== +kareem@2.6.3: + version "2.6.3" + resolved "https://registry.yarnpkg.com/kareem/-/kareem-2.6.3.tgz#23168ec8ffb6c1abfd31b7169a6fb1dd285992ac" + integrity sha512-C3iHfuGUXK2u8/ipq9LfjFfXFxAZMQJJq7vLS45r3D9Y2xQ/m4S8zaR4zMLFWh9AsNPXmcFfUDhTEO8UIC/V6Q== keyv@^4.0.0, keyv@^4.5.3: version "4.5.4" @@ -19316,7 +19316,7 @@ mongodb@6.9.0: bson "^6.7.0" mongodb-connection-string-url "^3.0.0" -mongodb@^6.9.0: +mongodb@^6.9.0, mongodb@~6.10.0: version "6.10.0" resolved "https://registry.yarnpkg.com/mongodb/-/mongodb-6.10.0.tgz#20a9f1cf3c6829e75fc39e6d8c1c19f164209c2e" integrity sha512-gP9vduuYWb9ZkDM546M+MP2qKVk5ZG2wPF63OvSRuUbqCR+11ZCAE1mOfllhlAG0wcoJY5yDL/rV3OmYEwXIzg== @@ -19325,18 +19325,18 @@ mongodb@^6.9.0: bson "^6.7.0" mongodb-connection-string-url "^3.0.0" -mongoose@^6.11.3: - version "6.13.0" - resolved "https://registry.yarnpkg.com/mongoose/-/mongoose-6.13.0.tgz#465522876237e4112a895fbd1cb4a87c580bc613" - integrity sha512-mieZBTtRIqA2xCGgl9Hlcr6fXU+AKNSOdeKfMYrb/IgdL3M/bDO4kYftsItIy86XyAoT5xV28alfCbMocFG8oA== +mongoose@^8.0.0: + version "8.8.3" + resolved "https://registry.yarnpkg.com/mongoose/-/mongoose-8.8.3.tgz#066953497c116b876178a843c4ba8f7e88c85987" + integrity sha512-/I4n/DcXqXyIiLRfAmUIiTjj3vXfeISke8dt4U4Y8Wfm074Wa6sXnQrXN49NFOFf2mM1kUdOXryoBvkuCnr+Qw== dependencies: - bson "^4.7.2" - kareem "2.5.1" - mongodb "4.17.2" + bson "^6.7.0" + kareem "2.6.3" + mongodb "~6.10.0" mpath "0.9.0" - mquery "4.0.3" + mquery "5.0.0" ms "2.1.3" - sift "16.0.1" + sift "17.1.3" monitor-event-loop-delay@^1.0.0: version "1.0.0" @@ -19353,10 +19353,10 @@ mpath@0.9.0: resolved "https://registry.npmjs.org/mpath/-/mpath-0.9.0.tgz" integrity sha512-ikJRQTk8hw5DEoFVxHG1Gn9T/xcjtdnOKIU1JTmGjZZlg9LST2mBLmcX3/ICIbgJydT2GOc15RnNy5mHmzfSew== -mquery@4.0.3: - version "4.0.3" - resolved "https://registry.npmjs.org/mquery/-/mquery-4.0.3.tgz" - integrity sha512-J5heI+P08I6VJ2Ky3+33IpCdAvlYGTSUjwTPxkAr8i8EoduPMBX2OY/wa3IKZIQl7MU4SbFk8ndgSKyB/cl1zA== +mquery@5.0.0: + version "5.0.0" + resolved "https://registry.yarnpkg.com/mquery/-/mquery-5.0.0.tgz#a95be5dfc610b23862df34a47d3e5d60e110695d" + integrity sha512-iQMncpmEK8R8ncT8HJGsGc9Dsp8xcgYMVSbs5jgnm1lFHTZqMJTUWTDx1LBO8+mK3tPNZWFLBghQEIOULSTHZg== dependencies: debug "4.x" @@ -22794,10 +22794,10 @@ side-channel@^1.0.6: get-intrinsic "^1.2.4" object-inspect "^1.13.1" -sift@16.0.1: - version "16.0.1" - resolved "https://registry.npmjs.org/sift/-/sift-16.0.1.tgz" - integrity sha512-Wv6BjQ5zbhW7VFefWusVP33T/EM0vYikCaQ2qR8yULbsilAT8/wQaXvuQ3ptGLpoKx+lihJE3y2UTgKDyyNHZQ== +sift@17.1.3: + version "17.1.3" + resolved "https://registry.yarnpkg.com/sift/-/sift-17.1.3.tgz#9d2000d4d41586880b0079b5183d839c7a142bf7" + integrity sha512-Rtlj66/b0ICeFzYTuNvX/EF1igRbbnGSvEyT79McoZa/DeGhMyC5pWKOEsZKnpkqtSeovd5FL/bjHWC3CIIvCQ== siginfo@^2.0.0: version "2.0.0" @@ -23343,7 +23343,16 @@ string-similarity@^4.0.1: resolved "https://registry.npmjs.org/string-similarity/-/string-similarity-4.0.4.tgz" integrity sha512-/q/8Q4Bl4ZKAPjj8WerIBJWALKkaPRfrvhfF8k/B23i4nzrlRj2/go1m90In7nG/3XDSbOo0+pu6RvCTM9RGMQ== -"string-width-cjs@npm:string-width@^4.2.0", "string-width@^1.0.2 || 2 || 3 || 4", string-width@^4.1.0, string-width@^4.2.0, string-width@^4.2.3: +"string-width-cjs@npm:string-width@^4.2.0": + version "4.2.3" + resolved "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz" + integrity sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g== + dependencies: + emoji-regex "^8.0.0" + is-fullwidth-code-point "^3.0.0" + strip-ansi "^6.0.1" + +"string-width@^1.0.2 || 2 || 3 || 4", string-width@^4.1.0, string-width@^4.2.0, string-width@^4.2.3: version "4.2.3" resolved "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz" integrity sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g== @@ -23503,7 +23512,7 @@ stringify-object@^3.3.0: is-obj "^1.0.1" is-regexp "^1.0.0" -"strip-ansi-cjs@npm:strip-ansi@^6.0.1", strip-ansi@^6.0.0, strip-ansi@^6.0.1: +"strip-ansi-cjs@npm:strip-ansi@^6.0.1": version "6.0.1" resolved "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz" integrity sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A== @@ -23524,6 +23533,13 @@ strip-ansi@^5.0.0, strip-ansi@^5.1.0, strip-ansi@^5.2.0: dependencies: ansi-regex "^4.1.0" +strip-ansi@^6.0.0, strip-ansi@^6.0.1: + version "6.0.1" + resolved "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz" + integrity sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A== + dependencies: + ansi-regex "^5.0.1" + strip-ansi@^7.0.1, strip-ansi@^7.1.0: version "7.1.0" resolved "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz" @@ -25837,7 +25853,7 @@ workbox-window@7.1.0, workbox-window@^7.1.0: "@types/trusted-types" "^2.0.2" workbox-core "7.1.0" -"wrap-ansi-cjs@npm:wrap-ansi@^7.0.0", wrap-ansi@^7.0.0: +"wrap-ansi-cjs@npm:wrap-ansi@^7.0.0": version "7.0.0" resolved "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz" integrity sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q== @@ -25864,6 +25880,15 @@ wrap-ansi@^6.0.1, wrap-ansi@^6.2.0: string-width "^4.1.0" strip-ansi "^6.0.0" +wrap-ansi@^7.0.0: + version "7.0.0" + resolved "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz" + integrity sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q== + dependencies: + ansi-styles "^4.0.0" + string-width "^4.1.0" + strip-ansi "^6.0.0" + wrap-ansi@^8.0.1, wrap-ansi@^8.1.0: version "8.1.0" resolved "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz"