oojs/router: main (log #1540800)

sourcepatches

This run took 39 seconds.

From d2b4c8dcf014dd1b43b625f25d32c4fd8b1b7de7 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Sat, 5 Oct 2024 04:24:37 +0000
Subject: [PATCH] [DNM] there are no updates

Change-Id: I5390d15d4cbcb85131d21b7ee223c19a5e483bd6
---
 package-lock.json | 68 +++++++++++++++++++++++------------------------
 1 file changed, 34 insertions(+), 34 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 9a5408c..c4595c5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -854,12 +854,12 @@
 			"dev": true
 		},
 		"node_modules/@types/node": {
-			"version": "20.14.7",
-			"resolved": "https://registry.npmjs.org/@types/node/-/node-20.14.7.tgz",
-			"integrity": "sha512-uTr2m2IbJJucF3KUxgnGOZvYbN0QgkGyWxG6973HCpMYFy2KfcgYuIwkJQMQkt1VbBMlvWRbpshFTLxnxCZjKQ==",
+			"version": "22.7.4",
+			"resolved": "https://registry.npmjs.org/@types/node/-/node-22.7.4.tgz",
+			"integrity": "sha512-y+NPi1rFzDs1NdQHHToqeiX2TIS79SWEAw9GYhkkx8bD0ChpfqC+n2j5OXOCpzfojBEBt6DnEnnG9MY0zk1XLg==",
 			"dev": true,
 			"dependencies": {
-				"undici-types": "~5.26.4"
+				"undici-types": "~6.19.2"
 			}
 		},
 		"node_modules/@types/normalize-package-data": {
@@ -1776,9 +1776,9 @@
 			}
 		},
 		"node_modules/engine.io": {
-			"version": "6.5.5",
-			"resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.5.5.tgz",
-			"integrity": "sha512-C5Pn8Wk+1vKBoHghJODM63yk8MvrO9EWZUfkAt5HAqIgPE4/8FF0PEGHXtEd40l223+cE5ABWuPzm38PHFXfMA==",
+			"version": "6.6.1",
+			"resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.1.tgz",
+			"integrity": "sha512-NEpDCw9hrvBW+hVEOK4T7v0jFJ++KgtPl4jKFwsZVfG1XhS0dCrSb3VMb9gPAd7VAdW52VT1EnaNiU2vM8C0og==",
 			"dev": true,
 			"dependencies": {
 				"@types/cookie": "^0.4.1",
@@ -1797,9 +1797,9 @@
 			}
 		},
 		"node_modules/engine.io-parser": {
-			"version": "5.2.2",
-			"resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.2.tgz",
-			"integrity": "sha512-RcyUFKA93/CXH20l4SoVvzZfrSDMOTUS3bWVpTt2FuFP+XYrL8i8oonHP7WInRyVHXh0n/ORtoeiE1os+8qkSw==",
+			"version": "5.2.3",
+			"resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.3.tgz",
+			"integrity": "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==",
 			"dev": true,
 			"engines": {
 				"node": ">=10.0.0"
@@ -5282,16 +5282,16 @@
 			}
 		},
 		"node_modules/socket.io": {
-			"version": "4.7.5",
-			"resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.7.5.tgz",
-			"integrity": "sha512-DmeAkF6cwM9jSfmp6Dr/5/mfMwb5Z5qRrSXLpo3Fq5SqyU8CMF15jIN4ZhfSwu35ksM1qmHZDQ/DK5XTccSTvA==",
+			"version": "4.8.0",
+			"resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.8.0.tgz",
+			"integrity": "sha512-8U6BEgGjQOfGz3HHTYaC/L1GaxDCJ/KM0XTkJly0EhZ5U/du9uNEZy4ZgYzEzIqlx2CMm25CrCqr1ck899eLNA==",
 			"dev": true,
 			"dependencies": {
 				"accepts": "~1.3.4",
 				"base64id": "~2.0.0",
 				"cors": "~2.8.5",
 				"debug": "~4.3.2",
-				"engine.io": "~6.5.2",
+				"engine.io": "~6.6.0",
 				"socket.io-adapter": "~2.5.2",
 				"socket.io-parser": "~4.2.4"
 			},
@@ -5669,9 +5669,9 @@
 			}
 		},
 		"node_modules/undici-types": {
-			"version": "5.26.5",
-			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-5.26.5.tgz",
-			"integrity": "sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA==",
+			"version": "6.19.8",
+			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.19.8.tgz",
+			"integrity": "sha512-ve2KP6f/JnbPBFyobGHuerC9g1FYGn/F8n1LWTwNxCEzd6IfqTwUQcNXgEtmmQ6DlRrC1hrSrBnCZPokRrDHjw==",
 			"dev": true
 		},
 		"node_modules/universalify": {
@@ -6646,12 +6646,12 @@
 			"dev": true
 		},
 		"@types/node": {
-			"version": "20.14.7",
-			"resolved": "https://registry.npmjs.org/@types/node/-/node-20.14.7.tgz",
-			"integrity": "sha512-uTr2m2IbJJucF3KUxgnGOZvYbN0QgkGyWxG6973HCpMYFy2KfcgYuIwkJQMQkt1VbBMlvWRbpshFTLxnxCZjKQ==",
+			"version": "22.7.4",
+			"resolved": "https://registry.npmjs.org/@types/node/-/node-22.7.4.tgz",
+			"integrity": "sha512-y+NPi1rFzDs1NdQHHToqeiX2TIS79SWEAw9GYhkkx8bD0ChpfqC+n2j5OXOCpzfojBEBt6DnEnnG9MY0zk1XLg==",
 			"dev": true,
 			"requires": {
-				"undici-types": "~5.26.4"
+				"undici-types": "~6.19.2"
 			}
 		},
 		"@types/normalize-package-data": {
@@ -7315,9 +7315,9 @@
 			"dev": true
 		},
 		"engine.io": {
-			"version": "6.5.5",
-			"resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.5.5.tgz",
-			"integrity": "sha512-C5Pn8Wk+1vKBoHghJODM63yk8MvrO9EWZUfkAt5HAqIgPE4/8FF0PEGHXtEd40l223+cE5ABWuPzm38PHFXfMA==",
+			"version": "6.6.1",
+			"resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.1.tgz",
+			"integrity": "sha512-NEpDCw9hrvBW+hVEOK4T7v0jFJ++KgtPl4jKFwsZVfG1XhS0dCrSb3VMb9gPAd7VAdW52VT1EnaNiU2vM8C0og==",
 			"dev": true,
 			"requires": {
 				"@types/cookie": "^0.4.1",
@@ -7333,9 +7333,9 @@
 			}
 		},
 		"engine.io-parser": {
-			"version": "5.2.2",
-			"resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.2.tgz",
-			"integrity": "sha512-RcyUFKA93/CXH20l4SoVvzZfrSDMOTUS3bWVpTt2FuFP+XYrL8i8oonHP7WInRyVHXh0n/ORtoeiE1os+8qkSw==",
+			"version": "5.2.3",
+			"resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.3.tgz",
+			"integrity": "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==",
 			"dev": true
 		},
 		"enhanced-resolve": {
@@ -9909,16 +9909,16 @@
 			"dev": true
 		},
 		"socket.io": {
-			"version": "4.7.5",
-			"resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.7.5.tgz",
-			"integrity": "sha512-DmeAkF6cwM9jSfmp6Dr/5/mfMwb5Z5qRrSXLpo3Fq5SqyU8CMF15jIN4ZhfSwu35ksM1qmHZDQ/DK5XTccSTvA==",
+			"version": "4.8.0",
+			"resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.8.0.tgz",
+			"integrity": "sha512-8U6BEgGjQOfGz3HHTYaC/L1GaxDCJ/KM0XTkJly0EhZ5U/du9uNEZy4ZgYzEzIqlx2CMm25CrCqr1ck899eLNA==",
 			"dev": true,
 			"requires": {
 				"accepts": "~1.3.4",
 				"base64id": "~2.0.0",
 				"cors": "~2.8.5",
 				"debug": "~4.3.2",
-				"engine.io": "~6.5.2",
+				"engine.io": "~6.6.0",
 				"socket.io-adapter": "~2.5.2",
 				"socket.io-parser": "~4.2.4"
 			}
@@ -10192,9 +10192,9 @@
 			}
 		},
 		"undici-types": {
-			"version": "5.26.5",
-			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-5.26.5.tgz",
-			"integrity": "sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA==",
+			"version": "6.19.8",
+			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.19.8.tgz",
+			"integrity": "sha512-ve2KP6f/JnbPBFyobGHuerC9g1FYGn/F8n1LWTwNxCEzd6IfqTwUQcNXgEtmmQ6DlRrC1hrSrBnCZPokRrDHjw==",
 			"dev": true
 		},
 		"universalify": {
-- 
2.39.2

$ date
--- stdout ---
Sat Oct  5 04:24:10 UTC 2024

--- end ---
$ git clone file:///srv/git/oojs-router.git repo --depth=1 -b master
--- stderr ---
Cloning into 'repo'...
--- stdout ---

--- end ---
$ git config user.name libraryupgrader
--- stdout ---

--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---

--- end ---
$ git submodule update --init
--- stdout ---

--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.

--- end ---
$ git show-ref refs/heads/master
--- stdout ---
bce48adbe7460ed155b112e37114a084ddb9f840 refs/heads/master

--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "cookie": {
      "name": "cookie",
      "severity": "low",
      "isDirect": false,
      "via": [
        {
          "source": 1099846,
          "name": "cookie",
          "dependency": "cookie",
          "title": "cookie accepts cookie name, path, and domain with out of bounds characters",
          "url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x",
          "severity": "low",
          "cwe": [
            "CWE-74"
          ],
          "cvss": {
            "score": 0,
            "vectorString": null
          },
          "range": "<0.7.0"
        }
      ],
      "effects": [
        "engine.io"
      ],
      "range": "<0.7.0",
      "nodes": [
        "node_modules/cookie"
      ],
      "fixAvailable": {
        "name": "karma",
        "version": "1.3.0",
        "isSemVerMajor": true
      }
    },
    "engine.io": {
      "name": "engine.io",
      "severity": "low",
      "isDirect": false,
      "via": [
        "cookie"
      ],
      "effects": [
        "socket.io"
      ],
      "range": ">=1.8.0",
      "nodes": [
        "node_modules/engine.io"
      ],
      "fixAvailable": {
        "name": "karma",
        "version": "1.3.0",
        "isSemVerMajor": true
      }
    },
    "grunt-karma": {
      "name": "grunt-karma",
      "severity": "low",
      "isDirect": true,
      "via": [
        "karma"
      ],
      "effects": [],
      "range": ">=3.0.1",
      "nodes": [
        "node_modules/grunt-karma"
      ],
      "fixAvailable": {
        "name": "grunt-karma",
        "version": "3.0.0",
        "isSemVerMajor": true
      }
    },
    "karma": {
      "name": "karma",
      "severity": "low",
      "isDirect": true,
      "via": [
        "socket.io"
      ],
      "effects": [
        "grunt-karma",
        "karma-qunit"
      ],
      "range": ">=1.4.0",
      "nodes": [
        "node_modules/karma"
      ],
      "fixAvailable": {
        "name": "karma",
        "version": "1.3.0",
        "isSemVerMajor": true
      }
    },
    "karma-qunit": {
      "name": "karma-qunit",
      "severity": "low",
      "isDirect": true,
      "via": [
        "karma"
      ],
      "effects": [],
      "range": ">=3.1.0",
      "nodes": [
        "node_modules/karma-qunit"
      ],
      "fixAvailable": {
        "name": "karma-qunit",
        "version": "3.0.0",
        "isSemVerMajor": true
      }
    },
    "socket.io": {
      "name": "socket.io",
      "severity": "low",
      "isDirect": false,
      "via": [
        "engine.io"
      ],
      "effects": [
        "karma"
      ],
      "range": ">=1.6.0",
      "nodes": [
        "node_modules/socket.io"
      ],
      "fixAvailable": {
        "name": "karma",
        "version": "1.3.0",
        "isSemVerMajor": true
      }
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 6,
      "moderate": 0,
      "high": 0,
      "critical": 0,
      "total": 6
    },
    "dependencies": {
      "prod": 3,
      "dev": 512,
      "optional": 1,
      "peer": 1,
      "peerOptional": 0,
      "total": 514
    }
  }
}

--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "cookie": {
      "name": "cookie",
      "severity": "low",
      "isDirect": false,
      "via": [
        {
          "source": 1099846,
          "name": "cookie",
          "dependency": "cookie",
          "title": "cookie accepts cookie name, path, and domain with out of bounds characters",
          "url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x",
          "severity": "low",
          "cwe": [
            "CWE-74"
          ],
          "cvss": {
            "score": 0,
            "vectorString": null
          },
          "range": "<0.7.0"
        }
      ],
      "effects": [
        "engine.io"
      ],
      "range": "<0.7.0",
      "nodes": [
        "node_modules/cookie"
      ],
      "fixAvailable": {
        "name": "karma",
        "version": "1.3.0",
        "isSemVerMajor": true
      }
    },
    "engine.io": {
      "name": "engine.io",
      "severity": "low",
      "isDirect": false,
      "via": [
        "cookie"
      ],
      "effects": [
        "socket.io"
      ],
      "range": ">=1.8.0",
      "nodes": [
        "node_modules/engine.io"
      ],
      "fixAvailable": {
        "name": "karma",
        "version": "1.3.0",
        "isSemVerMajor": true
      }
    },
    "grunt-karma": {
      "name": "grunt-karma",
      "severity": "low",
      "isDirect": true,
      "via": [
        "karma"
      ],
      "effects": [],
      "range": ">=3.0.1",
      "nodes": [
        "node_modules/grunt-karma"
      ],
      "fixAvailable": {
        "name": "grunt-karma",
        "version": "3.0.0",
        "isSemVerMajor": true
      }
    },
    "karma": {
      "name": "karma",
      "severity": "low",
      "isDirect": true,
      "via": [
        "socket.io"
      ],
      "effects": [
        "grunt-karma",
        "karma-qunit"
      ],
      "range": ">=1.4.0",
      "nodes": [
        "node_modules/karma"
      ],
      "fixAvailable": {
        "name": "karma",
        "version": "1.3.0",
        "isSemVerMajor": true
      }
    },
    "karma-qunit": {
      "name": "karma-qunit",
      "severity": "low",
      "isDirect": true,
      "via": [
        "karma"
      ],
      "effects": [],
      "range": ">=3.1.0",
      "nodes": [
        "node_modules/karma-qunit"
      ],
      "fixAvailable": {
        "name": "karma-qunit",
        "version": "3.0.0",
        "isSemVerMajor": true
      }
    },
    "socket.io": {
      "name": "socket.io",
      "severity": "low",
      "isDirect": false,
      "via": [
        "engine.io"
      ],
      "effects": [
        "karma"
      ],
      "range": ">=1.6.0",
      "nodes": [
        "node_modules/socket.io"
      ],
      "fixAvailable": {
        "name": "karma",
        "version": "1.3.0",
        "isSemVerMajor": true
      }
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 6,
      "moderate": 0,
      "high": 0,
      "critical": 0,
      "total": 6
    },
    "dependencies": {
      "prod": 3,
      "dev": 512,
      "optional": 1,
      "peer": 1,
      "peerOptional": 0,
      "total": 514
    }
  }
}

--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
{
  "added": 514,
  "removed": 0,
  "changed": 0,
  "audited": 515,
  "funding": 82,
  "audit": {
    "auditReportVersion": 2,
    "vulnerabilities": {
      "cookie": {
        "name": "cookie",
        "severity": "low",
        "isDirect": false,
        "via": [
          {
            "source": 1099846,
            "name": "cookie",
            "dependency": "cookie",
            "title": "cookie accepts cookie name, path, and domain with out of bounds characters",
            "url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x",
            "severity": "low",
            "cwe": [
              "CWE-74"
            ],
            "cvss": {
              "score": 0,
              "vectorString": null
            },
            "range": "<0.7.0"
          }
        ],
        "effects": [
          "engine.io"
        ],
        "range": "<0.7.0",
        "nodes": [
          ""
        ],
        "fixAvailable": {
          "name": "karma",
          "version": "1.3.0",
          "isSemVerMajor": true
        }
      },
      "engine.io": {
        "name": "engine.io",
        "severity": "low",
        "isDirect": false,
        "via": [
          "cookie"
        ],
        "effects": [
          "socket.io"
        ],
        "range": ">=1.8.0",
        "nodes": [
          ""
        ],
        "fixAvailable": {
          "name": "karma",
          "version": "1.3.0",
          "isSemVerMajor": true
        }
      },
      "grunt-karma": {
        "name": "grunt-karma",
        "severity": "low",
        "isDirect": true,
        "via": [
          "karma"
        ],
        "effects": [],
        "range": ">=3.0.1",
        "nodes": [
          "node_modules/grunt-karma"
        ],
        "fixAvailable": {
          "name": "grunt-karma",
          "version": "3.0.0",
          "isSemVerMajor": true
        }
      },
      "karma": {
        "name": "karma",
        "severity": "low",
        "isDirect": true,
        "via": [
          "socket.io"
        ],
        "effects": [
          "grunt-karma",
          "karma-qunit"
        ],
        "range": ">=1.4.0",
        "nodes": [
          "node_modules/karma"
        ],
        "fixAvailable": {
          "name": "karma",
          "version": "1.3.0",
          "isSemVerMajor": true
        }
      },
      "karma-qunit": {
        "name": "karma-qunit",
        "severity": "low",
        "isDirect": true,
        "via": [
          "karma"
        ],
        "effects": [],
        "range": ">=3.1.0",
        "nodes": [
          "node_modules/karma-qunit"
        ],
        "fixAvailable": {
          "name": "karma-qunit",
          "version": "3.0.0",
          "isSemVerMajor": true
        }
      },
      "socket.io": {
        "name": "socket.io",
        "severity": "low",
        "isDirect": false,
        "via": [
          "engine.io"
        ],
        "effects": [
          "karma"
        ],
        "range": ">=1.6.0",
        "nodes": [
          ""
        ],
        "fixAvailable": {
          "name": "karma",
          "version": "1.3.0",
          "isSemVerMajor": true
        }
      }
    },
    "metadata": {
      "vulnerabilities": {
        "info": 0,
        "low": 6,
        "moderate": 0,
        "high": 0,
        "critical": 0,
        "total": 6
      },
      "dependencies": {
        "prod": 3,
        "dev": 512,
        "optional": 1,
        "peer": 1,
        "peerOptional": 0,
        "total": 514
      }
    }
  }
}

--- end ---
{"added": 514, "removed": 0, "changed": 0, "audited": 515, "funding": 82, "audit": {"auditReportVersion": 2, "vulnerabilities": {"cookie": {"name": "cookie", "severity": "low", "isDirect": false, "via": [{"source": 1099846, "name": "cookie", "dependency": "cookie", "title": "cookie accepts cookie name, path, and domain with out of bounds characters", "url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "severity": "low", "cwe": ["CWE-74"], "cvss": {"score": 0, "vectorString": null}, "range": "<0.7.0"}], "effects": ["engine.io"], "range": "<0.7.0", "nodes": [""], "fixAvailable": {"name": "karma", "version": "1.3.0", "isSemVerMajor": true}}, "engine.io": {"name": "engine.io", "severity": "low", "isDirect": false, "via": ["cookie"], "effects": ["socket.io"], "range": ">=1.8.0", "nodes": [""], "fixAvailable": {"name": "karma", "version": "1.3.0", "isSemVerMajor": true}}, "grunt-karma": {"name": "grunt-karma", "severity": "low", "isDirect": true, "via": ["karma"], "effects": [], "range": ">=3.0.1", "nodes": ["node_modules/grunt-karma"], "fixAvailable": {"name": "grunt-karma", "version": "3.0.0", "isSemVerMajor": true}}, "karma": {"name": "karma", "severity": "low", "isDirect": true, "via": ["socket.io"], "effects": ["grunt-karma", "karma-qunit"], "range": ">=1.4.0", "nodes": ["node_modules/karma"], "fixAvailable": {"name": "karma", "version": "1.3.0", "isSemVerMajor": true}}, "karma-qunit": {"name": "karma-qunit", "severity": "low", "isDirect": true, "via": ["karma"], "effects": [], "range": ">=3.1.0", "nodes": ["node_modules/karma-qunit"], "fixAvailable": {"name": "karma-qunit", "version": "3.0.0", "isSemVerMajor": true}}, "socket.io": {"name": "socket.io", "severity": "low", "isDirect": false, "via": ["engine.io"], "effects": ["karma"], "range": ">=1.6.0", "nodes": [""], "fixAvailable": {"name": "karma", "version": "1.3.0", "isSemVerMajor": true}}}, "metadata": {"vulnerabilities": {"info": 0, "low": 6, "moderate": 0, "high": 0, "critical": 0, "total": 6}, "dependencies": {"prod": 3, "dev": 512, "optional": 1, "peer": 1, "peerOptional": 0, "total": 514}}}}
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---

added 513 packages, and audited 514 packages in 6s

82 packages are looking for funding
  run `npm fund` for details

# npm audit report

cookie  <0.7.0
cookie accepts cookie name, path, and domain with out of bounds characters - https://github.com/advisories/GHSA-pxg6-pf52-xh8x
fix available via `npm audit fix --force`
Will install karma@1.3.0, which is a breaking change
node_modules/cookie
  engine.io  >=1.8.0
  Depends on vulnerable versions of cookie
  node_modules/engine.io
    socket.io  >=1.6.0
    Depends on vulnerable versions of engine.io
    node_modules/socket.io
      karma  >=1.4.0
      Depends on vulnerable versions of socket.io
      node_modules/karma
        grunt-karma  >=3.0.1
        Depends on vulnerable versions of karma
        node_modules/grunt-karma
        karma-qunit  >=3.1.0
        Depends on vulnerable versions of karma
        node_modules/karma-qunit

6 low severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stdout ---

> oojs-router@0.5.0 prepare
> grunt build

Running "clean:dist" (clean) task
>> 0 paths cleaned.

Running "concat:router" (concat) task

Running "uglify:js" (uglify) task
>> 1 sourcemap created.
>> 1 file created 5.66 kB → 1.84 kB

Done.

added 513 packages, and audited 514 packages in 6s

82 packages are looking for funding
  run `npm fund` for details

6 low severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

Run `npm audit` for details.

--- end ---
$ /usr/bin/npm test
--- stdout ---

> oojs-router@0.5.0 test
> grunt test

Running "eslint:all" (eslint) task

Running "git-build" task

Running "clean:dist" (clean) task
>> 3 paths cleaned.

Running "concat:router" (concat) task

Running "uglify:js" (uglify) task
>> 1 sourcemap created.
>> 1 file created 5.68 kB → 1.86 kB

Running "karma:main" (karma) task
05 10 2024 04:24:33.499:INFO [karma-server]: Karma v6.4.2 server started at http://localhost:9876/
05 10 2024 04:24:33.501:INFO [launcher]: Launching browsers ChromeCustom with concurrency unlimited
05 10 2024 04:24:33.505:INFO [launcher]: Starting browser ChromeHeadless
05 10 2024 04:24:33.982:INFO [Chrome Headless 126.0.6478.182 (Linux x86_64)]: Connected on socket wYCNkHFhvvX6b4mFAAAB with id 62782343
..........
Chrome Headless 126.0.6478.182 (Linux x86_64): Executed 10 of 10 SUCCESS (0.11 secs / 0.091 secs)

=============================== Coverage summary ===============================
Statements   : 90.16% ( 55/61 )
Branches     : 75% ( 12/16 )
Functions    : 85.71% ( 12/14 )
Lines        : 90.16% ( 55/61 )
================================================================================

Running "karma:other" (karma) task
05 10 2024 04:24:34.354:INFO [karma-server]: Karma v6.4.2 server started at http://localhost:9876/
05 10 2024 04:24:34.354:INFO [launcher]: Launching browsers FirefoxHeadless with concurrency unlimited
05 10 2024 04:24:34.356:INFO [launcher]: Starting browser FirefoxHeadless
05 10 2024 04:24:36.684:INFO [Firefox 115.0 (Linux x86_64)]: Connected on socket p_ymJnx5xHOzJWIEAAAD with id 527415
..........
Firefox 115.0 (Linux x86_64): Executed 10 of 10 SUCCESS (0.102 secs / 0.095 secs)

Done.

--- end ---
$ package-lock-lint package-lock.json
--- stdout ---
Checking package-lock.json

--- end ---
[DNM] there are no updates
$ git add .
--- stdout ---

--- end ---
$ git commit -F /tmp/tmpsdu25upo
--- stdout ---
[master d2b4c8d] [DNM] there are no updates
 1 file changed, 34 insertions(+), 34 deletions(-)

--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From d2b4c8dcf014dd1b43b625f25d32c4fd8b1b7de7 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Sat, 5 Oct 2024 04:24:37 +0000
Subject: [PATCH] [DNM] there are no updates

Change-Id: I5390d15d4cbcb85131d21b7ee223c19a5e483bd6
---
 package-lock.json | 68 +++++++++++++++++++++++------------------------
 1 file changed, 34 insertions(+), 34 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 9a5408c..c4595c5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -854,12 +854,12 @@
 			"dev": true
 		},
 		"node_modules/@types/node": {
-			"version": "20.14.7",
-			"resolved": "https://registry.npmjs.org/@types/node/-/node-20.14.7.tgz",
-			"integrity": "sha512-uTr2m2IbJJucF3KUxgnGOZvYbN0QgkGyWxG6973HCpMYFy2KfcgYuIwkJQMQkt1VbBMlvWRbpshFTLxnxCZjKQ==",
+			"version": "22.7.4",
+			"resolved": "https://registry.npmjs.org/@types/node/-/node-22.7.4.tgz",
+			"integrity": "sha512-y+NPi1rFzDs1NdQHHToqeiX2TIS79SWEAw9GYhkkx8bD0ChpfqC+n2j5OXOCpzfojBEBt6DnEnnG9MY0zk1XLg==",
 			"dev": true,
 			"dependencies": {
-				"undici-types": "~5.26.4"
+				"undici-types": "~6.19.2"
 			}
 		},
 		"node_modules/@types/normalize-package-data": {
@@ -1776,9 +1776,9 @@
 			}
 		},
 		"node_modules/engine.io": {
-			"version": "6.5.5",
-			"resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.5.5.tgz",
-			"integrity": "sha512-C5Pn8Wk+1vKBoHghJODM63yk8MvrO9EWZUfkAt5HAqIgPE4/8FF0PEGHXtEd40l223+cE5ABWuPzm38PHFXfMA==",
+			"version": "6.6.1",
+			"resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.1.tgz",
+			"integrity": "sha512-NEpDCw9hrvBW+hVEOK4T7v0jFJ++KgtPl4jKFwsZVfG1XhS0dCrSb3VMb9gPAd7VAdW52VT1EnaNiU2vM8C0og==",
 			"dev": true,
 			"dependencies": {
 				"@types/cookie": "^0.4.1",
@@ -1797,9 +1797,9 @@
 			}
 		},
 		"node_modules/engine.io-parser": {
-			"version": "5.2.2",
-			"resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.2.tgz",
-			"integrity": "sha512-RcyUFKA93/CXH20l4SoVvzZfrSDMOTUS3bWVpTt2FuFP+XYrL8i8oonHP7WInRyVHXh0n/ORtoeiE1os+8qkSw==",
+			"version": "5.2.3",
+			"resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.3.tgz",
+			"integrity": "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==",
 			"dev": true,
 			"engines": {
 				"node": ">=10.0.0"
@@ -5282,16 +5282,16 @@
 			}
 		},
 		"node_modules/socket.io": {
-			"version": "4.7.5",
-			"resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.7.5.tgz",
-			"integrity": "sha512-DmeAkF6cwM9jSfmp6Dr/5/mfMwb5Z5qRrSXLpo3Fq5SqyU8CMF15jIN4ZhfSwu35ksM1qmHZDQ/DK5XTccSTvA==",
+			"version": "4.8.0",
+			"resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.8.0.tgz",
+			"integrity": "sha512-8U6BEgGjQOfGz3HHTYaC/L1GaxDCJ/KM0XTkJly0EhZ5U/du9uNEZy4ZgYzEzIqlx2CMm25CrCqr1ck899eLNA==",
 			"dev": true,
 			"dependencies": {
 				"accepts": "~1.3.4",
 				"base64id": "~2.0.0",
 				"cors": "~2.8.5",
 				"debug": "~4.3.2",
-				"engine.io": "~6.5.2",
+				"engine.io": "~6.6.0",
 				"socket.io-adapter": "~2.5.2",
 				"socket.io-parser": "~4.2.4"
 			},
@@ -5669,9 +5669,9 @@
 			}
 		},
 		"node_modules/undici-types": {
-			"version": "5.26.5",
-			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-5.26.5.tgz",
-			"integrity": "sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA==",
+			"version": "6.19.8",
+			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.19.8.tgz",
+			"integrity": "sha512-ve2KP6f/JnbPBFyobGHuerC9g1FYGn/F8n1LWTwNxCEzd6IfqTwUQcNXgEtmmQ6DlRrC1hrSrBnCZPokRrDHjw==",
 			"dev": true
 		},
 		"node_modules/universalify": {
@@ -6646,12 +6646,12 @@
 			"dev": true
 		},
 		"@types/node": {
-			"version": "20.14.7",
-			"resolved": "https://registry.npmjs.org/@types/node/-/node-20.14.7.tgz",
-			"integrity": "sha512-uTr2m2IbJJucF3KUxgnGOZvYbN0QgkGyWxG6973HCpMYFy2KfcgYuIwkJQMQkt1VbBMlvWRbpshFTLxnxCZjKQ==",
+			"version": "22.7.4",
+			"resolved": "https://registry.npmjs.org/@types/node/-/node-22.7.4.tgz",
+			"integrity": "sha512-y+NPi1rFzDs1NdQHHToqeiX2TIS79SWEAw9GYhkkx8bD0ChpfqC+n2j5OXOCpzfojBEBt6DnEnnG9MY0zk1XLg==",
 			"dev": true,
 			"requires": {
-				"undici-types": "~5.26.4"
+				"undici-types": "~6.19.2"
 			}
 		},
 		"@types/normalize-package-data": {
@@ -7315,9 +7315,9 @@
 			"dev": true
 		},
 		"engine.io": {
-			"version": "6.5.5",
-			"resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.5.5.tgz",
-			"integrity": "sha512-C5Pn8Wk+1vKBoHghJODM63yk8MvrO9EWZUfkAt5HAqIgPE4/8FF0PEGHXtEd40l223+cE5ABWuPzm38PHFXfMA==",
+			"version": "6.6.1",
+			"resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.1.tgz",
+			"integrity": "sha512-NEpDCw9hrvBW+hVEOK4T7v0jFJ++KgtPl4jKFwsZVfG1XhS0dCrSb3VMb9gPAd7VAdW52VT1EnaNiU2vM8C0og==",
 			"dev": true,
 			"requires": {
 				"@types/cookie": "^0.4.1",
@@ -7333,9 +7333,9 @@
 			}
 		},
 		"engine.io-parser": {
-			"version": "5.2.2",
-			"resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.2.tgz",
-			"integrity": "sha512-RcyUFKA93/CXH20l4SoVvzZfrSDMOTUS3bWVpTt2FuFP+XYrL8i8oonHP7WInRyVHXh0n/ORtoeiE1os+8qkSw==",
+			"version": "5.2.3",
+			"resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.3.tgz",
+			"integrity": "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==",
 			"dev": true
 		},
 		"enhanced-resolve": {
@@ -9909,16 +9909,16 @@
 			"dev": true
 		},
 		"socket.io": {
-			"version": "4.7.5",
-			"resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.7.5.tgz",
-			"integrity": "sha512-DmeAkF6cwM9jSfmp6Dr/5/mfMwb5Z5qRrSXLpo3Fq5SqyU8CMF15jIN4ZhfSwu35ksM1qmHZDQ/DK5XTccSTvA==",
+			"version": "4.8.0",
+			"resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.8.0.tgz",
+			"integrity": "sha512-8U6BEgGjQOfGz3HHTYaC/L1GaxDCJ/KM0XTkJly0EhZ5U/du9uNEZy4ZgYzEzIqlx2CMm25CrCqr1ck899eLNA==",
 			"dev": true,
 			"requires": {
 				"accepts": "~1.3.4",
 				"base64id": "~2.0.0",
 				"cors": "~2.8.5",
 				"debug": "~4.3.2",
-				"engine.io": "~6.5.2",
+				"engine.io": "~6.6.0",
 				"socket.io-adapter": "~2.5.2",
 				"socket.io-parser": "~4.2.4"
 			}
@@ -10192,9 +10192,9 @@
 			}
 		},
 		"undici-types": {
-			"version": "5.26.5",
-			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-5.26.5.tgz",
-			"integrity": "sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA==",
+			"version": "6.19.8",
+			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.19.8.tgz",
+			"integrity": "sha512-ve2KP6f/JnbPBFyobGHuerC9g1FYGn/F8n1LWTwNxCEzd6IfqTwUQcNXgEtmmQ6DlRrC1hrSrBnCZPokRrDHjw==",
 			"dev": true
 		},
 		"universalify": {
-- 
2.39.2


--- end ---
Source code is licensed under the AGPL.