Skip to content

chore(deps): bump 1st party deps to versions with available CodeQL scans #1989

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
May 14, 2024
Merged

chore(deps): bump 1st party deps to versions with available CodeQL scans #1989

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
27f7a97
chore(deps): bump 1st party deps to versions with available CodeQL scans
addaleax May 10, 2024
de6959f
fixup: more bumps
addaleax May 13, 2024
c8ce221
Merge branch 'main' into update-deps-to-codeql-scanned-versions
addaleax May 13, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
409 changes: 223 additions & 186 deletions package-lock.json
View file
Open in desktop

Large diffs are not rendered by default.

4 changes: 2 additions & 2 deletions packages/arg-parser/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,10 +37,10 @@
"dependencies": {
"@mongosh/errors": "0.0.0-dev.0",
"@mongosh/i18n": "0.0.0-dev.0",
"mongodb-connection-string-url": "^3.0.0"
"mongodb-connection-string-url": "^3.0.1"
},
"devDependencies": {
"@mongodb-js/devtools-connect": "^2.6.1",
"@mongodb-js/devtools-connect": "^2.6.2",
"@mongodb-js/eslint-config-mongosh": "^1.0.0",
"@mongodb-js/prettier-config-devtools": "^1.0.1",
"@mongodb-js/tsconfig-mongosh": "^1.0.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/autocomplete/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@
"prettier": "^2.8.8"
},
"dependencies": {
"@mongodb-js/mongodb-constants": "^0.8.10",
"@mongodb-js/mongodb-constants": "^0.10.1",
"@mongosh/shell-api": "0.0.0-dev.0",
"semver": "^7.5.4"
}
Expand Down
16 changes: 8 additions & 8 deletions packages/cli-repl/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -78,15 +78,15 @@
"@mongosh/types": "0.0.0-dev.0",
"@segment/analytics-node": "^1.3.0",
"ansi-escape-sequences": "^5.1.2",
"askcharacter": "^1.0.0",
"askpassword": "^1.2.4",
"askcharacter": "^2.0.4",
"askpassword": "^2.0.2",
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Major version bumps because these included changes to the tested (= supported) Node.js versions. I stopped doing these after a bit because it turned out lots of packages needed updates 🙂

"escape-string-regexp": "^4.0.0",
"is-recoverable-error": "^1.0.3",
"js-yaml": "^4.1.0",
"mongodb-connection-string-url": "^3.0.0",
"mongodb-log-writer": "^1.4.0",
"mongodb-connection-string-url": "^3.0.1",
"mongodb-log-writer": "^1.4.2",
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some of these versions got bumped twice because it turns out that CodeQL jobs with cron workflow triggers get disabled after 60 days of no activity in a repo and I didn't know that when doing the first set of releases 😕

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

activity in the repo means commits to the main branch?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't know, this is basically all the information available to me:

Screenshot 2024-05-10 at 21 12 42

"numeral": "^2.0.6",
"pretty-repl": "^4.0.0",
"pretty-repl": "^4.0.1",
"semver": "^7.5.4",
"strip-ansi": "^6.0.0",
"text-table": "^0.2.0",
Expand Down Expand Up @@ -115,8 +115,8 @@
"optionalDependencies": {
"get-console-process-list": "^1.0.4",
"glibc-version": "^1.0.0",
"macos-export-certificate-and-key": "^1.1.1",
"mongodb-crypt-library-version": "^1.0.3",
"win-export-certificate-and-key": "^1.1.1"
"macos-export-certificate-and-key": "^1.1.2",
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Was almost driven insane by the "fact" that this bump of the library made CI fail even though no code changed (it surely can't be a coincidence, right, this PR bumps the package that provides the error message that's leading to the CI errors??), then finally thought to check other runs on main, turns out the CI redness happens completely independently of this PR without any code changes at all: #1991 🫠

"mongodb-crypt-library-version": "^1.0.5",
"win-export-certificate-and-key": "^1.1.2"
}
}
8 changes: 4 additions & 4 deletions packages/history/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,17 +35,17 @@
"unitTestsOnly": true
},
"dependencies": {
"mongodb-connection-string-url": "^3.0.0",
"mongodb-redact": "^0.2.2"
"mongodb-connection-string-url": "^3.0.1",
"mongodb-redact": "^0.2.3"
},
"devDependencies": {
"@mongodb-js/eslint-config-mongosh": "^1.0.0",
"@mongodb-js/prettier-config-devtools": "^1.0.1",
"@mongodb-js/tsconfig-mongosh": "^1.0.0",
"depcheck": "^1.4.3",
"eslint": "^7.25.0",
"mongodb-connection-string-url": "^3.0.0",
"mongodb-redact": "^0.2.2",
"mongodb-connection-string-url": "^3.0.1",
"mongodb-redact": "^0.2.3",
"prettier": "^2.8.8"
}
}
6 changes: 3 additions & 3 deletions packages/logging/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,12 +17,12 @@
"node": ">=14.15.1"
},
"dependencies": {
"@mongodb-js/devtools-connect": "^2.6.1",
"@mongodb-js/devtools-connect": "^2.6.2",
"@mongosh/errors": "0.0.0-dev.0",
"@mongosh/history": "0.0.0-dev.0",
"@mongosh/types": "0.0.0-dev.0",
"mongodb-log-writer": "^1.4.0",
"mongodb-redact": "^0.2.2"
"mongodb-log-writer": "^1.4.2",
"mongodb-redact": "^0.2.3"
},
"devDependencies": {
"@mongodb-js/eslint-config-mongosh": "^1.0.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/node-runtime-worker-thread/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,6 +52,6 @@
},
"dependencies": {
"interruptor": "^1.0.1",
"system-ca": "^1.0.2"
"system-ca": "^1.0.3"
}
}
2 changes: 1 addition & 1 deletion packages/service-provider-core/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@
"@mongosh/errors": "0.0.0-dev.0",
"bson": "^6.7.0",
"mongodb": "^6.6.1",
"mongodb-build-info": "^1.7.1"
"mongodb-build-info": "^1.7.2"
},
"optionalDependencies": {
"mongodb-client-encryption": "^6.0.0"
Expand Down
4 changes: 2 additions & 2 deletions packages/service-provider-server/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,14 +47,14 @@
}
},
"dependencies": {
"@mongodb-js/devtools-connect": "^2.6.1",
"@mongodb-js/devtools-connect": "^2.6.2",
"@mongodb-js/oidc-plugin": "^0.4.0",
"@mongosh/errors": "0.0.0-dev.0",
"@mongosh/service-provider-core": "0.0.0-dev.0",
"@mongosh/types": "0.0.0-dev.0",
"aws4": "^1.12.0",
"mongodb": "^6.6.1",
"mongodb-connection-string-url": "^3.0.0",
"mongodb-connection-string-url": "^3.0.1",
"socks": "^2.8.3"
},
"optionalDependencies": {
Expand Down
2 changes: 1 addition & 1 deletion packages/shell-api/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@
"@mongosh/history": "0.0.0-dev.0",
"@mongosh/i18n": "0.0.0-dev.0",
"@mongosh/service-provider-core": "0.0.0-dev.0",
"mongodb-redact": "^0.2.2"
"mongodb-redact": "^0.2.3"
},
"devDependencies": {
"@mongodb-js/eslint-config-mongosh": "^1.0.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/types/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@
"unitTestsOnly": true
},
"dependencies": {
"@mongodb-js/devtools-connect": "^2.6.1"
"@mongodb-js/devtools-connect": "^2.6.2"
},
"devDependencies": {
"@mongodb-js/eslint-config-mongosh": "^1.0.0",
Expand Down
2 changes: 1 addition & 1 deletion scripts/docker/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,6 @@
"node": ">=12.4.0"
},
"dependencies": {
"mongodb-crypt-library-version": "^1.0.3"
"mongodb-crypt-library-version": "^1.0.5"
}
}