mediawiki/extensions/SearchVue: main (log #1044503)

sourcepatches

This run took 54 seconds.

From 05fb001c4171bc87eb02e4ea9262d102aabb579f Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Tue, 30 May 2023 01:05:35 +0000
Subject: [PATCH] [DNM] there are no updates

Change-Id: I89c8511bcddcc261c36ed95a61ecd1b113466e59
---
 package-lock.json | 36 ++++++++++++------------------------
 1 file changed, 12 insertions(+), 24 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 3b56cc0..f5d09c3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13585,8 +13585,7 @@
 			"version": "2.2.0",
 			"resolved": "https://registry.npmjs.org/@csstools/selector-specificity/-/selector-specificity-2.2.0.tgz",
 			"integrity": "sha512-+OJ9konv95ClSTOJCmMZqpd5+YGsB2S+x6w3E1oaM8UuR5j8nTNHYSz8c9BEPGDOCMQYIEEGlVPj/VY64iTbGw==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"@es-joy/jsdoccomment": {
 			"version": "0.23.6",
@@ -14486,8 +14485,7 @@
 			"version": "3.2.37",
 			"resolved": "https://registry.npmjs.org/@vue/compat/-/compat-3.2.37.tgz",
 			"integrity": "sha512-MIYkFAz3Fur1mtZBqrNMYTymlohCQ0ol6vtNb58cqExLSCt63xZaXyiZZYPvS6WaMXfbNBDPXMvU9tO922eFCA==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"@vue/compiler-core": {
 			"version": "3.2.37",
@@ -14680,8 +14678,7 @@
 			"version": "5.3.2",
 			"resolved": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz",
 			"integrity": "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"acorn-walk": {
 			"version": "7.2.0",
@@ -16438,8 +16435,7 @@
 			"version": "2.7.0",
 			"resolved": "https://registry.npmjs.org/eslint-plugin-no-jquery/-/eslint-plugin-no-jquery-2.7.0.tgz",
 			"integrity": "sha512-Aeg7dA6GTH1AcWLlBtWNzOU9efK5KpNi7b0EhBO0o0M+awyzguUUo8gF6hXGjQ9n5h8/uRtYv9zOqQkeC5CG0w==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"eslint-plugin-node": {
 			"version": "11.1.0",
@@ -17855,8 +17851,7 @@
 			}
 		},
 		"jest": {
-			"version": "27.5.1",
-			"resolved": "https://registry.npmjs.org/jest/-/jest-27.5.1.tgz",
+			"version": "https://registry.npmjs.org/jest/-/jest-27.5.1.tgz",
 			"integrity": "sha512-Yn0mADZB89zTtjkPJEXwrac3LHudkQMR+Paqa8uxJHCBr9agxztUifWCyiYrjhMPBoUVBjyny0I7XH6ozDr7QQ==",
 			"dev": true,
 			"peer": true,
@@ -18618,8 +18613,7 @@
 			"resolved": "https://registry.npmjs.org/jest-pnp-resolver/-/jest-pnp-resolver-1.2.3.tgz",
 			"integrity": "sha512-+3NpwQEnRoIBtx4fyhblQDPgJI0H1IEIkX7ShLUjPGA7TtUTvI1oiKi3SR4oBR0hQhQR80l4WAe5RrXBwWMA8w==",
 			"dev": true,
-			"peer": true,
-			"requires": {}
+			"peer": true
 		},
 		"jest-regex-util": {
 			"version": "27.5.1",
@@ -19253,8 +19247,7 @@
 			"version": "3.5.1",
 			"resolved": "https://registry.npmjs.org/jest-when/-/jest-when-3.5.1.tgz",
 			"integrity": "sha512-o+HiaIVCg1IC95sMDKHU9G5v5N5l3UHqXvJpf0PgAMThZeQo4Hf5Sgoj+wpCBRGg4/KtzSAZZZEKNiLqE0i4eQ==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"jest-worker": {
 			"version": "27.5.1",
@@ -20164,8 +20157,7 @@
 					"version": "0.14.0",
 					"resolved": "https://registry.npmjs.org/vue-demi/-/vue-demi-0.14.0.tgz",
 					"integrity": "sha512-gt58r2ogsNQeVoQ3EhoUAvUsH9xviydl0dWJj7dabBC/2L4uBId7ujtCwDRD0JhkGsV1i0CtfLAeyYKBht9oWg==",
-					"dev": true,
-					"requires": {}
+					"dev": true
 				}
 			}
 		},
@@ -20227,8 +20219,7 @@
 			"version": "6.0.0",
 			"resolved": "https://registry.npmjs.org/postcss-less/-/postcss-less-6.0.0.tgz",
 			"integrity": "sha512-FPX16mQLyEjLzEuuJtxA8X3ejDLNGGEG503d2YGZR5Ask1SpDN8KmZUMpzCvyalWRywAn1n1VOA5dcqfCLo5rg==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"postcss-media-query-parser": {
 			"version": "0.2.3",
@@ -20246,8 +20237,7 @@
 			"version": "6.0.0",
 			"resolved": "https://registry.npmjs.org/postcss-safe-parser/-/postcss-safe-parser-6.0.0.tgz",
 			"integrity": "sha512-FARHN8pwH+WiS2OPCxJI8FuRJpTVnn6ZNFiqAM2aeW2LwTHWWmWgIyKC6cUo0L8aeKiF/14MNvnpls6R2PBeMQ==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"postcss-selector-parser": {
 			"version": "6.0.11",
@@ -21062,8 +21052,7 @@
 			"version": "9.0.0",
 			"resolved": "https://registry.npmjs.org/stylelint-config-recommended/-/stylelint-config-recommended-9.0.0.tgz",
 			"integrity": "sha512-9YQSrJq4NvvRuTbzDsWX3rrFOzOlYBmZP+o513BJN/yfEmGSr0AxdvrWs0P/ilSpVV/wisamAHu5XSk8Rcf4CQ==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"stylelint-config-wikimedia": {
 			"version": "0.14.0",
@@ -21710,8 +21699,7 @@
 			"resolved": "https://registry.npmjs.org/ws/-/ws-7.5.9.tgz",
 			"integrity": "sha512-F+P9Jil7UiSKSkppIiD94dN07AwvFixvLIj1Og1Rl9GGMuNipJnV9JzjD6XuqmAeiswGvUmNLjr5cFuXwNS77Q==",
 			"dev": true,
-			"peer": true,
-			"requires": {}
+			"peer": true
 		},
 		"xml-name-validator": {
 			"version": "3.0.0",
-- 
2.30.2

$ date
--- stdout ---
Tue May 30 01:04:51 UTC 2023

--- end ---
$ git clone file:///srv/git/mediawiki-extensions-SearchVue.git repo --depth=1 -b master
--- stderr ---
Cloning into 'repo'...
--- stdout ---

--- end ---
$ git config user.name libraryupgrader
--- stdout ---

--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---

--- end ---
$ git submodule update --init
--- stdout ---

--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.

--- end ---
$ git show-ref refs/heads/master
--- stdout ---
7e12ac4104fc01b296f55b2202eb891a3f674bda refs/heads/master

--- end ---
$ /usr/bin/npm audit --json --legacy-peer-deps
--- stdout ---
{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "babel-core": {
      "name": "babel-core",
      "severity": "high",
      "isDirect": true,
      "via": [
        "babel-register",
        "json5"
      ],
      "effects": [
        "babel-register"
      ],
      "range": "5.8.20 - 7.0.0-beta.3",
      "nodes": [
        "node_modules/babel-core"
      ],
      "fixAvailable": {
        "name": "babel-core",
        "version": "4.7.16",
        "isSemVerMajor": true
      }
    },
    "babel-register": {
      "name": "babel-register",
      "severity": "high",
      "isDirect": false,
      "via": [
        "babel-core"
      ],
      "effects": [
        "babel-core"
      ],
      "range": "*",
      "nodes": [
        "node_modules/babel-register"
      ],
      "fixAvailable": {
        "name": "babel-core",
        "version": "4.7.16",
        "isSemVerMajor": true
      }
    },
    "json5": {
      "name": "json5",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1091147,
          "name": "json5",
          "dependency": "json5",
          "title": "Prototype Pollution in JSON5 via Parse Method",
          "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h",
          "severity": "high",
          "cwe": [
            "CWE-1321"
          ],
          "cvss": {
            "score": 7.1,
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H"
          },
          "range": "<1.0.2"
        }
      ],
      "effects": [
        "babel-core"
      ],
      "range": "<1.0.2",
      "nodes": [
        "node_modules/babel-core/node_modules/json5"
      ],
      "fixAvailable": {
        "name": "babel-core",
        "version": "4.7.16",
        "isSemVerMajor": true
      }
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 3,
      "critical": 0,
      "total": 3
    },
    "dependencies": {
      "prod": 1,
      "dev": 996,
      "optional": 1,
      "peer": 331,
      "peerOptional": 0,
      "total": 996
    }
  }
}

--- end ---
$ /usr/bin/composer install
--- stderr ---
No lock file found. Updating dependencies instead of installing from lock file. Use composer update over composer install if you do not have a lock file.
Loading composer repositories with package information
Info from https://repo.packagist.org: #StandWithUkraine
Updating dependencies
Lock file operations: 36 installs, 0 updates, 0 removals
  - Locking composer/pcre (3.1.0)
  - Locking composer/semver (3.3.2)
  - Locking composer/spdx-licenses (1.5.7)
  - Locking composer/xdebug-handler (3.0.3)
  - Locking doctrine/deprecations (v1.1.0)
  - Locking felixfbecker/advanced-json-rpc (v3.2.1)
  - Locking mediawiki/mediawiki-codesniffer (v41.0.0)
  - Locking mediawiki/mediawiki-phan-config (0.12.1)
  - Locking mediawiki/minus-x (1.1.1)
  - Locking mediawiki/phan-taint-check-plugin (4.0.0)
  - Locking microsoft/tolerant-php-parser (v0.1.1)
  - Locking netresearch/jsonmapper (v4.2.0)
  - Locking phan/phan (5.4.1)
  - Locking php-parallel-lint/php-console-color (v1.0.1)
  - Locking php-parallel-lint/php-console-highlighter (v1.0.0)
  - Locking php-parallel-lint/php-parallel-lint (v1.3.2)
  - Locking phpdocumentor/reflection-common (2.2.0)
  - Locking phpdocumentor/reflection-docblock (5.3.0)
  - Locking phpdocumentor/type-resolver (1.7.1)
  - Locking phpstan/phpdoc-parser (1.21.3)
  - Locking psr/container (1.1.2)
  - Locking psr/log (1.1.4)
  - Locking sabre/event (5.1.4)
  - Locking squizlabs/php_codesniffer (3.7.2)
  - Locking symfony/console (v5.4.24)
  - Locking symfony/deprecation-contracts (v2.5.2)
  - Locking symfony/polyfill-ctype (v1.27.0)
  - Locking symfony/polyfill-intl-grapheme (v1.27.0)
  - Locking symfony/polyfill-intl-normalizer (v1.27.0)
  - Locking symfony/polyfill-mbstring (v1.27.0)
  - Locking symfony/polyfill-php73 (v1.27.0)
  - Locking symfony/polyfill-php80 (v1.27.0)
  - Locking symfony/service-contracts (v2.5.2)
  - Locking symfony/string (v5.4.22)
  - Locking tysonandre/var_representation_polyfill (0.1.3)
  - Locking webmozart/assert (1.11.0)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 36 installs, 0 updates, 0 removals
    0 [>---------------------------]    0 [->--------------------------]    0 [--->------------------------]  - Installing composer/pcre (3.1.0): Extracting archive
  - Installing symfony/polyfill-php80 (v1.27.0): Extracting archive
  - Installing squizlabs/php_codesniffer (3.7.2): Extracting archive
  - Installing symfony/polyfill-mbstring (v1.27.0): Extracting archive
  - Installing composer/spdx-licenses (1.5.7): Extracting archive
  - Installing composer/semver (3.3.2): Extracting archive
  - Installing mediawiki/mediawiki-codesniffer (v41.0.0): Extracting archive
  - Installing tysonandre/var_representation_polyfill (0.1.3): Extracting archive
  - Installing symfony/polyfill-intl-normalizer (v1.27.0): Extracting archive
  - Installing symfony/polyfill-intl-grapheme (v1.27.0): Extracting archive
  - Installing symfony/polyfill-ctype (v1.27.0): Extracting archive
  - Installing symfony/string (v5.4.22): Extracting archive
  - Installing symfony/deprecation-contracts (v2.5.2): Extracting archive
  - Installing psr/container (1.1.2): Extracting archive
  - Installing symfony/service-contracts (v2.5.2): Extracting archive
  - Installing symfony/polyfill-php73 (v1.27.0): Extracting archive
  - Installing symfony/console (v5.4.24): Extracting archive
  - Installing sabre/event (5.1.4): Extracting archive
  - Installing netresearch/jsonmapper (v4.2.0): Extracting archive
  - Installing microsoft/tolerant-php-parser (v0.1.1): Extracting archive
  - Installing webmozart/assert (1.11.0): Extracting archive
  - Installing phpstan/phpdoc-parser (1.21.3): Extracting archive
  - Installing phpdocumentor/reflection-common (2.2.0): Extracting archive
  - Installing doctrine/deprecations (v1.1.0): Extracting archive
  - Installing phpdocumentor/type-resolver (1.7.1): Extracting archive
  - Installing phpdocumentor/reflection-docblock (5.3.0): Extracting archive
  - Installing felixfbecker/advanced-json-rpc (v3.2.1): Extracting archive
  - Installing psr/log (1.1.4): Extracting archive
  - Installing composer/xdebug-handler (3.0.3): Extracting archive
  - Installing phan/phan (5.4.1): Extracting archive
  - Installing mediawiki/phan-taint-check-plugin (4.0.0): Extracting archive
  - Installing mediawiki/mediawiki-phan-config (0.12.1): Extracting archive
  - Installing mediawiki/minus-x (1.1.1): Extracting archive
  - Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive
  - Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive
  - Installing php-parallel-lint/php-parallel-lint (v1.3.2): Extracting archive
  0/27 [>---------------------------]   0%
  9/27 [=========>------------------]  33%
 19/27 [===================>--------]  70%
 26/27 [==========================>-]  96%
 27/27 [============================] 100%4 package suggestions were added by new dependencies, use `composer suggest` to see details.
Generating autoload files
14 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---

--- end ---
$ /usr/bin/npm audit --json --legacy-peer-deps
--- stdout ---
{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "babel-core": {
      "name": "babel-core",
      "severity": "high",
      "isDirect": true,
      "via": [
        "babel-register",
        "json5"
      ],
      "effects": [
        "babel-register"
      ],
      "range": "5.8.20 - 7.0.0-beta.3",
      "nodes": [
        "node_modules/babel-core"
      ],
      "fixAvailable": {
        "name": "babel-core",
        "version": "4.7.16",
        "isSemVerMajor": true
      }
    },
    "babel-register": {
      "name": "babel-register",
      "severity": "high",
      "isDirect": false,
      "via": [
        "babel-core"
      ],
      "effects": [
        "babel-core"
      ],
      "range": "*",
      "nodes": [
        "node_modules/babel-register"
      ],
      "fixAvailable": {
        "name": "babel-core",
        "version": "4.7.16",
        "isSemVerMajor": true
      }
    },
    "json5": {
      "name": "json5",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 1091147,
          "name": "json5",
          "dependency": "json5",
          "title": "Prototype Pollution in JSON5 via Parse Method",
          "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h",
          "severity": "high",
          "cwe": [
            "CWE-1321"
          ],
          "cvss": {
            "score": 7.1,
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H"
          },
          "range": "<1.0.2"
        }
      ],
      "effects": [
        "babel-core"
      ],
      "range": "<1.0.2",
      "nodes": [
        "node_modules/babel-core/node_modules/json5"
      ],
      "fixAvailable": {
        "name": "babel-core",
        "version": "4.7.16",
        "isSemVerMajor": true
      }
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 3,
      "critical": 0,
      "total": 3
    },
    "dependencies": {
      "prod": 1,
      "dev": 996,
      "optional": 1,
      "peer": 331,
      "peerOptional": 0,
      "total": 996
    }
  }
}

--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json --legacy-peer-deps
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
{
  "added": 996,
  "removed": 0,
  "changed": 0,
  "audited": 997,
  "funding": 77,
  "audit": {
    "auditReportVersion": 2,
    "vulnerabilities": {
      "babel-core": {
        "name": "babel-core",
        "severity": "high",
        "isDirect": true,
        "via": [
          "babel-register",
          "json5"
        ],
        "effects": [
          "babel-register"
        ],
        "range": "5.8.20 - 7.0.0-beta.3",
        "nodes": [
          "node_modules/babel-core"
        ],
        "fixAvailable": {
          "name": "babel-core",
          "version": "4.7.16",
          "isSemVerMajor": true
        }
      },
      "babel-register": {
        "name": "babel-register",
        "severity": "high",
        "isDirect": false,
        "via": [
          "babel-core"
        ],
        "effects": [
          "babel-core"
        ],
        "range": "*",
        "nodes": [
          "node_modules/babel-register"
        ],
        "fixAvailable": {
          "name": "babel-core",
          "version": "4.7.16",
          "isSemVerMajor": true
        }
      },
      "json5": {
        "name": "json5",
        "severity": "high",
        "isDirect": false,
        "via": [
          {
            "source": 1091147,
            "name": "json5",
            "dependency": "json5",
            "title": "Prototype Pollution in JSON5 via Parse Method",
            "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h",
            "severity": "high",
            "cwe": [
              "CWE-1321"
            ],
            "cvss": {
              "score": 7.1,
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H"
            },
            "range": "<1.0.2"
          }
        ],
        "effects": [
          "babel-core"
        ],
        "range": "<1.0.2",
        "nodes": [
          "node_modules/babel-core/node_modules/json5"
        ],
        "fixAvailable": {
          "name": "babel-core",
          "version": "4.7.16",
          "isSemVerMajor": true
        }
      }
    },
    "metadata": {
      "vulnerabilities": {
        "info": 0,
        "low": 0,
        "moderate": 0,
        "high": 3,
        "critical": 0,
        "total": 3
      },
      "dependencies": {
        "prod": 1,
        "dev": 996,
        "optional": 1,
        "peer": 331,
        "peerOptional": 0,
        "total": 996
      }
    }
  }
}

--- end ---
{"added": 996, "removed": 0, "changed": 0, "audited": 997, "funding": 77, "audit": {"auditReportVersion": 2, "vulnerabilities": {"babel-core": {"name": "babel-core", "severity": "high", "isDirect": true, "via": ["babel-register", "json5"], "effects": ["babel-register"], "range": "5.8.20 - 7.0.0-beta.3", "nodes": ["node_modules/babel-core"], "fixAvailable": {"name": "babel-core", "version": "4.7.16", "isSemVerMajor": true}}, "babel-register": {"name": "babel-register", "severity": "high", "isDirect": false, "via": ["babel-core"], "effects": ["babel-core"], "range": "*", "nodes": ["node_modules/babel-register"], "fixAvailable": {"name": "babel-core", "version": "4.7.16", "isSemVerMajor": true}}, "json5": {"name": "json5", "severity": "high", "isDirect": false, "via": [{"source": 1091147, "name": "json5", "dependency": "json5", "title": "Prototype Pollution in JSON5 via Parse Method", "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "severity": "high", "cwe": ["CWE-1321"], "cvss": {"score": 7.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H"}, "range": "<1.0.2"}], "effects": ["babel-core"], "range": "<1.0.2", "nodes": ["node_modules/babel-core/node_modules/json5"], "fixAvailable": {"name": "babel-core", "version": "4.7.16", "isSemVerMajor": true}}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 0, "high": 3, "critical": 0, "total": 3}, "dependencies": {"prod": 1, "dev": 996, "optional": 1, "peer": 331, "peerOptional": 0, "total": 996}}}}
$ /usr/bin/npm audit fix --only=dev --legacy-peer-deps
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN deprecated source-map-url@0.4.1: See https://github.com/lydell/source-map-url#deprecated
npm WARN deprecated urix@0.1.0: Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated source-map-resolve@0.5.3: See https://github.com/lydell/source-map-resolve#deprecated
npm WARN deprecated w3c-hr-time@1.0.2: Use your platform's native performance.now() and performance.timeOrigin.
npm WARN deprecated core-js@2.6.12: core-js@<3.4 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
--- stdout ---

added 995 packages, and audited 996 packages in 9s

77 packages are looking for funding
  run `npm fund` for details

# npm audit report

json5  <1.0.2
Severity: high
Prototype Pollution in JSON5 via Parse Method - https://github.com/advisories/GHSA-9c47-m6qq-7p4h
fix available via `npm audit fix --force`
Will install babel-core@4.7.16, which is a breaking change
node_modules/babel-core/node_modules/json5
  babel-core  5.8.20 - 7.0.0-beta.3
  Depends on vulnerable versions of babel-register
  Depends on vulnerable versions of json5
  node_modules/babel-core
    babel-register  *
    Depends on vulnerable versions of babel-core
    node_modules/babel-register

3 high severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

--- end ---
$ package-lock-lint package-lock.json
--- stdout ---
Checking package-lock.json

--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci --legacy-peer-deps
--- stderr ---
npm WARN deprecated source-map-url@0.4.1: See https://github.com/lydell/source-map-url#deprecated
npm WARN deprecated urix@0.1.0: Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated source-map-resolve@0.5.3: See https://github.com/lydell/source-map-resolve#deprecated
npm WARN deprecated w3c-hr-time@1.0.2: Use your platform's native performance.now() and performance.timeOrigin.
npm WARN deprecated core-js@2.6.12: core-js@<3.4 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
--- stdout ---

added 995 packages, and audited 996 packages in 9s

77 packages are looking for funding
  run `npm fund` for details

3 high severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

Run `npm audit` for details.

--- end ---
$ /usr/bin/npm test
--- stderr ---
PASS tests/jest/store/getters.test.js
PASS tests/jest/store/events.test.js
PASS tests/jest/store/actions.test.js

Test Suites: 3 passed, 3 total
Tests:       77 passed, 77 total
Snapshots:   0 total
Time:        4.09 s
Ran all test suites.
--- stdout ---

> test
> grunt test && npm run test:unit

Running "eslint:all" (eslint) task

/src/repo/resources/components/App.vue
   45:15  warning  'isMobile' is not defined                      vue/no-undef-properties
   87:34  warning  'currentElement' is not defined                vue/no-undef-properties
   88:11  warning  'toggleVisibily' is not defined                vue/no-undef-properties
  100:17  warning  'getSearchResults' is not defined              vue/no-undef-properties
  105:11  warning  'onPageClose' is not defined                   vue/no-undef-properties
  124:10  warning  'closeQuickView' is not defined                vue/no-undef-properties
  168:11  warning  'lastFocusableElement' is not defined          vue/no-undef-properties
  169:11  warning  'firstFocusableElement' is not defined         vue/no-undef-properties
  186:25  warning  'results' is not defined                       vue/no-undef-properties
  200:3   warning  'title' is not defined                         vue/no-undef-properties
  203:11  warning  'setQueryQuickViewTitle' is not defined        vue/no-undef-properties
  208:3   warning  'loading' is not defined                       vue/no-undef-properties
  212:36  warning  'defineFocusableElements' is not defined       vue/no-undef-properties
  219:8   warning  'initEventLoggingSession' is not defined       vue/no-undef-properties
  221:49  warning  'leaving' is not defined                       vue/no-undef-properties
  237:14  warning  'resultHasInfoToDisplay' is not defined        vue/no-undef-properties
  242:10  warning  'generateAndInsertAriaButton' is not defined   vue/no-undef-properties
  252:10  warning  'handleResultEvent' is not defined             vue/no-undef-properties
  260:11  warning  'focusDialog' is not defined                   vue/no-undef-properties
  279:8   warning  'restoreQuickViewOnNavigation' is not defined  vue/no-undef-properties
  282:15  warning  'multimediaViewerIsOpen' is not defined        vue/no-undef-properties
  284:11  warning  'closeAndFocus' is not defined                 vue/no-undef-properties
  287:11  warning  'handleTabTrap' is not defined                 vue/no-undef-properties

/src/repo/resources/components/AppViewDesktop.vue
    6:18  warning  The "close" event has been triggered but not declared on `emits` option  vue/require-explicit-emits
   66:31  warning  'breakpoints' is not defined                                             vue/no-undef-properties
  112:26  warning  'columnWidth' is not defined                                             vue/no-undef-properties
  129:27  warning  'numberToPixel' is not defined                                           vue/no-undef-properties
  129:47  warning  'dynamicTop' is not defined                                              vue/no-undef-properties
  130:50  warning  'dynamicBottom' is not defined                                           vue/no-undef-properties
  131:55  warning  'dynamicRightMargin' is not defined                                      vue/no-undef-properties
  132:49  warning  'dynamicWidth' is not defined                                            vue/no-undef-properties
  156:15  warning  'isMobile' is not defined                                                vue/no-undef-properties
  169:3   warning  'isLargeScreen' is not defined                                           vue/no-undef-properties
  171:31  warning  'title' is not defined                                                   vue/no-undef-properties
  172:10  warning  'closeQuickView' is not defined                                          vue/no-undef-properties

/src/repo/resources/components/AppViewMobile.vue
  16:19  warning  The "close" event has been triggered but not declared on `emits` option  vue/require-explicit-emits
  87:17  warning  'getSearchResults' is not defined                                        vue/no-undef-properties

/src/repo/resources/components/QuickViewTutorialPopup.vue
  13:20  warning  The "close" event has been triggered but not declared on `emits` option  vue/require-explicit-emits
  28:1   warning  This line has a length of 234. Maximum allowed is 100                    max-len

/src/repo/resources/components/Tutorial.vue
   7:1  warning  This line has a length of 116. Maximum allowed is 100  max-len
  25:8  warning  Component name "Tutorial" should always be multi-word  vue/multi-word-component-names
  95:3  warning  'selectedIndex' is not defined                         vue/no-undef-properties

/src/repo/resources/components/generic/ImageWithLoadingBackground.vue
    3:7   warning  'image-container' is defined as ref, but never used                            vue/no-unused-refs
    5:13  warning  Identifier 'ImageWithLoadingBackground__loading' is not in camel case          vue/camelcase
   15:19  warning  The "image-click" event has been triggered but not declared on `emits` option  vue/require-explicit-emits
   80:16  warning  The "load" event has been triggered but not declared on `emits` option         vue/require-explicit-emits
   84:16  warning  The "load" event has been triggered but not declared on `emits` option         vue/require-explicit-emits
  114:1   warning  This line has a length of 173. Maximum allowed is 100                          max-len

/src/repo/resources/components/sections/QuickView.vue
   13:27  warning  The "close" event has been triggered but not declared on `emits` option  vue/require-explicit-emits
   33:1   warning  This line has a length of 219. Maximum allowed is 100                    max-len
  162:17  warning  'currentResult' is not defined                                           vue/no-undef-properties
  184:50  warning  'isMobile' is not defined                                                vue/no-undef-properties
  196:17  warning  'requestStatus' is not defined                                           vue/no-undef-properties
  196:46  warning  'requestStatuses' is not defined                                         vue/no-undef-properties
  199:18  warning  'queryRequestInProgress' is not defined                                  vue/no-undef-properties
  205:18  warning  'mediaRequestInProgress' is not defined                                  vue/no-undef-properties
  213:10  warning  'logQuickViewEvent' is not defined                                       vue/no-undef-properties
  215:26  warning  'selectedIndex' is not defined                                           vue/no-undef-properties
  237:1   warning  This line has a length of 115. Maximum allowed is 100                    max-len

/src/repo/resources/components/sections/QuickViewCommons.vue
    5:4   warning  Identifier 'quickViewCommons__mobile' is not in camel case                   vue/camelcase
  128:11  warning  'hiddenImages' is not defined                                                vue/no-undef-properties
  144:16  warning  The "log-event" event has been triggered but not declared on `emits` option  vue/require-explicit-emits
  158:3   warning  'allImageLoaded' is not defined                                              vue/no-undef-properties
  164:20  warning  'isMobile' is not defined                                                    vue/no-undef-properties

/src/repo/resources/components/sections/QuickViewDescription.vue
   5:4  warning  Identifier 'quickViewDescription__mobile' is not in camel case               vue/camelcase
  74:5  warning  The "log-event" event has been triggered but not declared on `emits` option  vue/require-explicit-emits

/src/repo/resources/components/sections/QuickViewImage.vue
   5:4   warning  Identifier 'QuickViewImage__mobile' is not in camel case                     vue/camelcase
  64:16  warning  The "log-event" event has been triggered but not declared on `emits` option  vue/require-explicit-emits

/src/repo/resources/components/sections/QuickViewLinks.vue
    5:4  warning  Identifier 'QuickViewLinks__mobile' is not in camel case                     vue/camelcase
  102:5  warning  The "log-event" event has been triggered but not declared on `emits` option  vue/require-explicit-emits

/src/repo/resources/components/sections/QuickViewSections.vue
    5:4   warning  Identifier 'quickViewSections__mobile' is not in camel case                          vue/camelcase
   91:11  warning  All possible message keys should be documented. See https://w.wiki/4r9a for details  mediawiki/msg-doc
   92:5   warning  All possible message keys should be documented. See https://w.wiki/4r9a for details  mediawiki/msg-doc
  151:5   warning  The "log-event" event has been triggered but not declared on `emits` option          vue/require-explicit-emits

/src/repo/resources/components/sections/QuickViewSnippet.vue
  36:11  warning  All possible message keys should be documented. See https://w.wiki/4r9a for details  mediawiki/msg-doc
  37:5   warning  All possible message keys should be documented. See https://w.wiki/4r9a for details  mediawiki/msg-doc
  44:5   warning  The "log-event" event has been triggered but not declared on `emits` option          vue/require-explicit-emits

/src/repo/resources/composables/onResizeObserver.js
  22:25  warning  ResizeObserver is not supported in Safari 11  compat/compat

/src/repo/resources/store/actions.js
  154:30  warning  Found non-literal argument to RegExp Constructor                      security/detect-non-literal-regexp
  158:28  warning  Found non-literal argument to RegExp Constructor                      security/detect-non-literal-regexp
  228:32  warning  Found non-literal argument to RegExp Constructor                      security/detect-non-literal-regexp
  260:0   warning  Invalid JSDoc @param "currentResult" type "object"; prefer: "Object"  jsdoc/check-types

/src/repo/tests/jest/store/actions.test.js
  205:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp
  217:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp
  228:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp
  241:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp
  252:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp
  265:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp
  276:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp
  289:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp
  300:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp
  313:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp
  324:28  warning  Found non-literal argument to RegExp Constructor  security/detect-non-literal-regexp

✖ 93 problems (0 errors, 93 warnings)
  0 errors and 1 warning potentially fixable with the `--fix` option.


Running "stylelint:all" (stylelint) task
>> Linted 19 files without errors

Running "banana:0" (banana) task
>> 1 message directory checked.

Running "banana:1" (banana) task
>> 1 message directory checked.

Running "banana:2" (banana) task
>> 1 message directory checked.

Running "banana:3" (banana) task
>> 1 message directory checked.

Running "banana:4" (banana) task
>> 1 message directory checked.

Done.

> test:unit
> jest

-----------------------|---------|----------|---------|---------|-------------------------------------------------------------------
File                   | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s                                                 
-----------------------|---------|----------|---------|---------|-------------------------------------------------------------------
All files              |   61.35 |    66.16 |   45.78 |    61.5 |                                                                   
 resources             |       0 |      100 |       0 |       0 |                                                                   
  init.js              |       0 |      100 |       0 |       0 | 3-30                                                              
 resources/composables |       0 |        0 |       0 |       0 |                                                                   
  onDocumentResize.js  |       0 |        0 |       0 |       0 | 1-60                                                              
  onDocumentScroll.js  |       0 |        0 |       0 |       0 | 1-59                                                              
  onResizeObserver.js  |       0 |      100 |       0 |       0 | 1-32                                                              
 resources/directives  |       0 |      100 |       0 |       0 |                                                                   
  spinner.js           |       0 |      100 |       0 |       0 | 1-3                                                               
 resources/store       |   77.24 |    68.71 |   60.41 |    77.5 |                                                                   
  actions.js           |   86.45 |    79.05 |    87.5 |    86.8 | 93-95,197-201,228-229,284,308,318,361,451-457,519-530,552,655-657 
  getters.js           |   33.33 |    36.36 |      20 |   33.33 | 40-85                                                             
  index.js             |       0 |      100 |     100 |       0 | 3-12                                                              
  mutations.js         |       0 |        0 |       0 |       0 | 3-111                                                             
  state.js             |     100 |      100 |     100 |     100 |                                                                   
 resources/stores      |   96.77 |    83.33 |     100 |   96.77 |                                                                   
  Event.js             |   96.77 |    83.33 |     100 |   96.77 | 146                                                               
-----------------------|---------|----------|---------|---------|-------------------------------------------------------------------

--- end ---
$ package-lock-lint package-lock.json
--- stdout ---
Checking package-lock.json

--- end ---
[DNM] there are no updates
$ git add .
--- stdout ---

--- end ---
$ git commit -F /tmp/tmpod1_pryo
--- stdout ---
[master 05fb001] [DNM] there are no updates
 1 file changed, 12 insertions(+), 24 deletions(-)

--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From 05fb001c4171bc87eb02e4ea9262d102aabb579f Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Tue, 30 May 2023 01:05:35 +0000
Subject: [PATCH] [DNM] there are no updates

Change-Id: I89c8511bcddcc261c36ed95a61ecd1b113466e59
---
 package-lock.json | 36 ++++++++++++------------------------
 1 file changed, 12 insertions(+), 24 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 3b56cc0..f5d09c3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13585,8 +13585,7 @@
 			"version": "2.2.0",
 			"resolved": "https://registry.npmjs.org/@csstools/selector-specificity/-/selector-specificity-2.2.0.tgz",
 			"integrity": "sha512-+OJ9konv95ClSTOJCmMZqpd5+YGsB2S+x6w3E1oaM8UuR5j8nTNHYSz8c9BEPGDOCMQYIEEGlVPj/VY64iTbGw==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"@es-joy/jsdoccomment": {
 			"version": "0.23.6",
@@ -14486,8 +14485,7 @@
 			"version": "3.2.37",
 			"resolved": "https://registry.npmjs.org/@vue/compat/-/compat-3.2.37.tgz",
 			"integrity": "sha512-MIYkFAz3Fur1mtZBqrNMYTymlohCQ0ol6vtNb58cqExLSCt63xZaXyiZZYPvS6WaMXfbNBDPXMvU9tO922eFCA==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"@vue/compiler-core": {
 			"version": "3.2.37",
@@ -14680,8 +14678,7 @@
 			"version": "5.3.2",
 			"resolved": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz",
 			"integrity": "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"acorn-walk": {
 			"version": "7.2.0",
@@ -16438,8 +16435,7 @@
 			"version": "2.7.0",
 			"resolved": "https://registry.npmjs.org/eslint-plugin-no-jquery/-/eslint-plugin-no-jquery-2.7.0.tgz",
 			"integrity": "sha512-Aeg7dA6GTH1AcWLlBtWNzOU9efK5KpNi7b0EhBO0o0M+awyzguUUo8gF6hXGjQ9n5h8/uRtYv9zOqQkeC5CG0w==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"eslint-plugin-node": {
 			"version": "11.1.0",
@@ -17855,8 +17851,7 @@
 			}
 		},
 		"jest": {
-			"version": "27.5.1",
-			"resolved": "https://registry.npmjs.org/jest/-/jest-27.5.1.tgz",
+			"version": "https://registry.npmjs.org/jest/-/jest-27.5.1.tgz",
 			"integrity": "sha512-Yn0mADZB89zTtjkPJEXwrac3LHudkQMR+Paqa8uxJHCBr9agxztUifWCyiYrjhMPBoUVBjyny0I7XH6ozDr7QQ==",
 			"dev": true,
 			"peer": true,
@@ -18618,8 +18613,7 @@
 			"resolved": "https://registry.npmjs.org/jest-pnp-resolver/-/jest-pnp-resolver-1.2.3.tgz",
 			"integrity": "sha512-+3NpwQEnRoIBtx4fyhblQDPgJI0H1IEIkX7ShLUjPGA7TtUTvI1oiKi3SR4oBR0hQhQR80l4WAe5RrXBwWMA8w==",
 			"dev": true,
-			"peer": true,
-			"requires": {}
+			"peer": true
 		},
 		"jest-regex-util": {
 			"version": "27.5.1",
@@ -19253,8 +19247,7 @@
 			"version": "3.5.1",
 			"resolved": "https://registry.npmjs.org/jest-when/-/jest-when-3.5.1.tgz",
 			"integrity": "sha512-o+HiaIVCg1IC95sMDKHU9G5v5N5l3UHqXvJpf0PgAMThZeQo4Hf5Sgoj+wpCBRGg4/KtzSAZZZEKNiLqE0i4eQ==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"jest-worker": {
 			"version": "27.5.1",
@@ -20164,8 +20157,7 @@
 					"version": "0.14.0",
 					"resolved": "https://registry.npmjs.org/vue-demi/-/vue-demi-0.14.0.tgz",
 					"integrity": "sha512-gt58r2ogsNQeVoQ3EhoUAvUsH9xviydl0dWJj7dabBC/2L4uBId7ujtCwDRD0JhkGsV1i0CtfLAeyYKBht9oWg==",
-					"dev": true,
-					"requires": {}
+					"dev": true
 				}
 			}
 		},
@@ -20227,8 +20219,7 @@
 			"version": "6.0.0",
 			"resolved": "https://registry.npmjs.org/postcss-less/-/postcss-less-6.0.0.tgz",
 			"integrity": "sha512-FPX16mQLyEjLzEuuJtxA8X3ejDLNGGEG503d2YGZR5Ask1SpDN8KmZUMpzCvyalWRywAn1n1VOA5dcqfCLo5rg==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"postcss-media-query-parser": {
 			"version": "0.2.3",
@@ -20246,8 +20237,7 @@
 			"version": "6.0.0",
 			"resolved": "https://registry.npmjs.org/postcss-safe-parser/-/postcss-safe-parser-6.0.0.tgz",
 			"integrity": "sha512-FARHN8pwH+WiS2OPCxJI8FuRJpTVnn6ZNFiqAM2aeW2LwTHWWmWgIyKC6cUo0L8aeKiF/14MNvnpls6R2PBeMQ==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"postcss-selector-parser": {
 			"version": "6.0.11",
@@ -21062,8 +21052,7 @@
 			"version": "9.0.0",
 			"resolved": "https://registry.npmjs.org/stylelint-config-recommended/-/stylelint-config-recommended-9.0.0.tgz",
 			"integrity": "sha512-9YQSrJq4NvvRuTbzDsWX3rrFOzOlYBmZP+o513BJN/yfEmGSr0AxdvrWs0P/ilSpVV/wisamAHu5XSk8Rcf4CQ==",
-			"dev": true,
-			"requires": {}
+			"dev": true
 		},
 		"stylelint-config-wikimedia": {
 			"version": "0.14.0",
@@ -21710,8 +21699,7 @@
 			"resolved": "https://registry.npmjs.org/ws/-/ws-7.5.9.tgz",
 			"integrity": "sha512-F+P9Jil7UiSKSkppIiD94dN07AwvFixvLIj1Og1Rl9GGMuNipJnV9JzjD6XuqmAeiswGvUmNLjr5cFuXwNS77Q==",
 			"dev": true,
-			"peer": true,
-			"requires": {}
+			"peer": true
 		},
 		"xml-name-validator": {
 			"version": "3.0.0",
-- 
2.30.2


--- end ---
Source code is licensed under the AGPL.