This run took 45 seconds.
From 9114725ff89518b58cc6d82fff1e5e2303102f97 Mon Sep 17 00:00:00 2001 From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org> Date: Fri, 31 Jan 2025 03:52:32 +0000 Subject: [PATCH] build: Updating mediawiki/mediawiki-codesniffer to 46.0.0 Change-Id: I956f051aa2fa5a49ce52697498ed2f3cd558aca2 --- composer.json | 2 +- package-lock.json | 23 +++++++++++++---------- 2 files changed, 14 insertions(+), 11 deletions(-) diff --git a/composer.json b/composer.json index e0bb924..9ed56bb 100644 --- a/composer.json +++ b/composer.json @@ -26,7 +26,7 @@ "mediawiki/semantic-media-wiki": ">=1.7" }, "require-dev": { - "mediawiki/mediawiki-codesniffer": "45.0.0", + "mediawiki/mediawiki-codesniffer": "46.0.0", "mediawiki/minus-x": "1.1.3", "php-parallel-lint/php-console-highlighter": "1.0.0", "php-parallel-lint/php-parallel-lint": "1.4.0" diff --git a/package-lock.json b/package-lock.json index bc71e90..144ccf9 100644 --- a/package-lock.json +++ b/package-lock.json @@ -923,7 +923,7 @@ "node_modules/cross-spawn": { "version": "0.2.9", "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-0.2.9.tgz", - "integrity": "sha1-vWf5bAfvtjA7f+lMHpefiEeOCjk=", + "integrity": "sha512-jUNffe+x93R0/940d+JrdIl8SROZdUuvlw0HxjR/0GUKGvJEWiTK5rxtKNtP1lgMnoR8383q0orSA6k3eJ+y4A==", "dev": true, "dependencies": { "lru-cache": "^2.5.0" @@ -1699,9 +1699,9 @@ "dev": true }, "node_modules/eslint/node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "dependencies": { "path-key": "^3.1.0", @@ -2425,7 +2425,7 @@ "node_modules/grunt-contrib-sass": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/grunt-contrib-sass/-/grunt-contrib-sass-1.0.0.tgz", - "integrity": "sha1-gGg4JRy8DhqU1k1RXN00z2dNcBs=", + "integrity": "sha512-nYQW+vRDQi90//owyCi/9riDjx/lnNAKEhZu3i+i200jSk67U+RmdilGLWUJsYEwsohOCsvKOuFPtdOJGvEI4w==", "dev": true, "dependencies": { "async": "^0.9.0", @@ -2436,6 +2436,9 @@ }, "engines": { "node": ">=0.10.0" + }, + "peerDependencies": { + "grunt": ">=0.4.0" } }, "node_modules/grunt-contrib-sass/node_modules/ansi-styles": { @@ -5097,7 +5100,7 @@ "cross-spawn": { "version": "0.2.9", "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-0.2.9.tgz", - "integrity": "sha1-vWf5bAfvtjA7f+lMHpefiEeOCjk=", + "integrity": "sha512-jUNffe+x93R0/940d+JrdIl8SROZdUuvlw0HxjR/0GUKGvJEWiTK5rxtKNtP1lgMnoR8383q0orSA6k3eJ+y4A==", "dev": true, "requires": { "lru-cache": "^2.5.0" @@ -5268,9 +5271,9 @@ "dev": true }, "cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "requires": { "path-key": "^3.1.0", @@ -6194,7 +6197,7 @@ "grunt-contrib-sass": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/grunt-contrib-sass/-/grunt-contrib-sass-1.0.0.tgz", - "integrity": "sha1-gGg4JRy8DhqU1k1RXN00z2dNcBs=", + "integrity": "sha512-nYQW+vRDQi90//owyCi/9riDjx/lnNAKEhZu3i+i200jSk67U+RmdilGLWUJsYEwsohOCsvKOuFPtdOJGvEI4w==", "dev": true, "requires": { "async": "^0.9.0", -- 2.39.2
$ date --- stdout --- Fri Jan 31 03:52:01 UTC 2025 --- end --- $ git clone file:///srv/git/mediawiki-extensions-SemanticGenealogy.git repo --depth=1 -b master --- stderr --- Cloning into 'repo'... --- stdout --- --- end --- $ git config user.name libraryupgrader --- stdout --- --- end --- $ git config user.email tools.libraryupgrader@tools.wmflabs.org --- stdout --- --- end --- $ git submodule update --init --- stdout --- --- end --- $ grr init --- stdout --- Installed commit-msg hook. --- end --- $ git show-ref refs/heads/master --- stdout --- 9392c98d25501d7f2515edf6192a79f732427b8b refs/heads/master --- end --- $ /usr/bin/npm audit --json --- stdout --- { "auditReportVersion": 2, "vulnerabilities": { "cross-spawn": { "name": "cross-spawn", "severity": "high", "isDirect": false, "via": [ { "source": 1100562, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": [ "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<6.0.6" }, { "source": 1100563, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": [ "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": ">=7.0.0 <7.0.5" } ], "effects": [ "grunt-contrib-sass" ], "range": "<6.0.6 || >=7.0.0 <7.0.5", "nodes": [ "node_modules/cross-spawn", "node_modules/eslint/node_modules/cross-spawn" ], "fixAvailable": { "name": "grunt-contrib-sass", "version": "2.0.0", "isSemVerMajor": true } }, "grunt-contrib-sass": { "name": "grunt-contrib-sass", "severity": "high", "isDirect": true, "via": [ "cross-spawn" ], "effects": [], "range": "0.9.0 - 1.0.0", "nodes": [ "node_modules/grunt-contrib-sass" ], "fixAvailable": { "name": "grunt-contrib-sass", "version": "2.0.0", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 0, "high": 2, "critical": 0, "total": 2 }, "dependencies": { "prod": 1, "dev": 379, "optional": 0, "peer": 1, "peerOptional": 0, "total": 379 } } } --- end --- $ /usr/bin/composer install --- stderr --- No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information. Loading composer repositories with package information Updating dependencies Lock file operations: 43 installs, 0 updates, 0 removals - Locking composer/installers (dev-main 5b39088) - Locking composer/semver (3.4.3) - Locking composer/spdx-licenses (1.5.8) - Locking data-values/common (1.2.0) - Locking data-values/data-values (dev-master 0b6cdf1) - Locking data-values/interfaces (1.2.0) - Locking data-values/validators (1.0.0) - Locking dealerdirect/phpcodesniffer-composer-installer (v1.0.0) - Locking jeroen/file-fetcher (6.1.0) - Locking justinrainbow/json-schema (5.x-dev feb2ca6) - Locking mediawiki/http-request (dev-master 5c0ca08) - Locking mediawiki/mediawiki-codesniffer (v45.0.0) - Locking mediawiki/minus-x (1.1.3) - Locking mediawiki/parser-hooks (dev-master 35e4513) - Locking mediawiki/semantic-media-wiki (dev-master f22f7fb) - Locking onoi/blob-store (dev-master 7753172) - Locking onoi/cache (dev-master 9a8e3ea) - Locking onoi/callback-container (dev-master 70d2266) - Locking onoi/event-dispatcher (dev-master 2af64e3) - Locking onoi/message-reporter (dev-master 5381702) - Locking param-processor/param-processor (dev-master 0850dc2) - Locking php-parallel-lint/php-console-color (v1.0.1) - Locking php-parallel-lint/php-console-highlighter (v1.0.0) - Locking php-parallel-lint/php-parallel-lint (v1.4.0) - Locking phpcsstandards/phpcsextra (1.2.1) - Locking phpcsstandards/phpcsutils (dev-develop 8ef592a) - Locking psr/container (dev-master 7079847) - Locking psr/log (1.1.4) - Locking seld/jsonlint (1.11.0) - Locking serialization/serialization (4.1.0) - Locking squizlabs/php_codesniffer (3.10.3) - Locking symfony/console (7.3.x-dev 12b71ff) - Locking symfony/css-selector (5.4.x-dev 4f7f3c3) - Locking symfony/deprecation-contracts (dev-main 63afe74) - Locking symfony/polyfill-ctype (1.x-dev a3cc8b0) - Locking symfony/polyfill-intl-grapheme (1.x-dev b912392) - Locking symfony/polyfill-intl-normalizer (1.x-dev 3833d72) - Locking symfony/polyfill-mbstring (1.x-dev 6d857f4) - Locking symfony/polyfill-php80 (1.x-dev 60328e3) - Locking symfony/service-contracts (dev-main 5ad3869) - Locking symfony/string (7.3.x-dev 373a11f) - Locking wikimedia/cdb (3.0.0) - Locking wikimedia/textcat (2.0.0) Writing lock file Installing dependencies from lock file (including require-dev) Package operations: 43 installs, 0 updates, 0 removals - Downloading composer/installers (dev-main 5b39088) - Downloading data-values/data-values (dev-master 0b6cdf1) - Downloading onoi/message-reporter (dev-master 5381702) - Downloading onoi/callback-container (dev-master 70d2266) - Downloading onoi/cache (dev-master 9a8e3ea) - Downloading onoi/blob-store (dev-master 7753172) - Downloading mediawiki/parser-hooks (dev-master 35e4513) - Downloading mediawiki/http-request (dev-master 5c0ca08) - Downloading mediawiki/semantic-media-wiki (dev-master f22f7fb) 0/9 [>---------------------------] 0% 4/9 [============>---------------] 44% 8/9 [========================>---] 88% 9/9 [============================] 100% - Installing composer/installers (dev-main 5b39088): Extracting archive - Installing squizlabs/php_codesniffer (3.10.3): Extracting archive - Installing dealerdirect/phpcodesniffer-composer-installer (v1.0.0): Extracting archive - Installing symfony/polyfill-php80 (1.x-dev 60328e3): Extracting archive - Installing phpcsstandards/phpcsutils (dev-develop 8ef592a): Extracting archive - Installing phpcsstandards/phpcsextra (1.2.1): Extracting archive - Installing symfony/polyfill-mbstring (1.x-dev 6d857f4): Extracting archive - Installing composer/spdx-licenses (1.5.8): Extracting archive - Installing composer/semver (3.4.3): Extracting archive - Installing mediawiki/mediawiki-codesniffer (v45.0.0): Extracting archive - Installing symfony/polyfill-intl-normalizer (1.x-dev 3833d72): Extracting archive - Installing symfony/polyfill-intl-grapheme (1.x-dev b912392): Extracting archive - Installing symfony/polyfill-ctype (1.x-dev a3cc8b0): Extracting archive - Installing symfony/string (7.3.x-dev 373a11f): Extracting archive - Installing symfony/deprecation-contracts (dev-main 63afe74): Extracting archive - Installing psr/container (dev-master 7079847): Extracting archive - Installing symfony/service-contracts (dev-main 5ad3869): Extracting archive - Installing symfony/console (7.3.x-dev 12b71ff): Extracting archive - Installing mediawiki/minus-x (1.1.3): Extracting archive - Installing wikimedia/textcat (2.0.0): Extracting archive - Installing wikimedia/cdb (3.0.0): Extracting archive - Installing symfony/css-selector (5.4.x-dev 4f7f3c3): Extracting archive - Installing serialization/serialization (4.1.0): Extracting archive - Installing seld/jsonlint (1.11.0): Extracting archive - Installing psr/log (1.1.4): Extracting archive - Installing data-values/interfaces (1.2.0): Extracting archive - Installing data-values/data-values (dev-master 0b6cdf1): Extracting archive - Installing data-values/validators (1.0.0): Extracting archive - Installing data-values/common (1.2.0): Extracting archive - Installing param-processor/param-processor (dev-master 0850dc2): Extracting archive - Installing onoi/message-reporter (dev-master 5381702): Extracting archive - Installing onoi/event-dispatcher (dev-master 2af64e3): Extracting archive - Installing onoi/callback-container (dev-master 70d2266): Extracting archive - Installing onoi/cache (dev-master 9a8e3ea): Extracting archive - Installing onoi/blob-store (dev-master 7753172): Extracting archive - Installing mediawiki/parser-hooks (dev-master 35e4513): Extracting archive - Installing mediawiki/http-request (dev-master 5c0ca08): Extracting archive - Installing justinrainbow/json-schema (5.x-dev feb2ca6): Extracting archive - Installing jeroen/file-fetcher (6.1.0): Extracting archive - Installing mediawiki/semantic-media-wiki (dev-master f22f7fb): Extracting archive - Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive - Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive - Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive 0/40 [>---------------------------] 0% 10/40 [=======>--------------------] 25% 19/40 [=============>--------------] 47% 28/40 [===================>--------] 70% 38/40 [==========================>-] 95% 40/40 [============================] 100% 4 package suggestions were added by new dependencies, use `composer suggest` to see details. Generating autoload files 24 packages you are using are looking for funding. Use the `composer fund` command to find out more! --- stdout --- PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils --- end --- Upgrading c:mediawiki/mediawiki-codesniffer from 45.0.0 -> 46.0.0 $ /usr/bin/composer update --- stderr --- Loading composer repositories with package information Updating dependencies Lock file operations: 0 installs, 2 updates, 0 removals - Upgrading mediawiki/mediawiki-codesniffer (v45.0.0 => v46.0.0) - Upgrading squizlabs/php_codesniffer (3.10.3 => 3.11.3) Writing lock file Installing dependencies from lock file (including require-dev) Package operations: 0 installs, 2 updates, 0 removals 0 [>---------------------------] 0 [->--------------------------] - Upgrading squizlabs/php_codesniffer (3.10.3 => 3.11.3): Extracting archive - Upgrading mediawiki/mediawiki-codesniffer (v45.0.0 => v46.0.0): Extracting archive 0/2 [>---------------------------] 0% 1/2 [==============>-------------] 50% 2/2 [============================] 100% Generating autoload files 24 packages you are using are looking for funding. Use the `composer fund` command to find out more! No security vulnerability advisories found --- stdout --- PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils --- end --- Previously failing phpcs rules: {'MediaWiki.Usage.ExtendClassUsage.FunctionConfigUsage', 'MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage', 'MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic', 'PSR12.Properties.ConstantVisibility.NotFound', 'MediaWiki.Files.ClassMatchesFilename.NotMatch', 'MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate', 'MediaWiki.Commenting.FunctionComment.MissingDocumentationPrivate', 'MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected'} $ vendor/bin/phpcs --report=json --- stdout --- {"totals":{"errors":38,"warnings":22,"fixable":0},"files":{"\/src\/repo\/src\/Decorator\/SimpleDecorator.php":{"errors":0,"warnings":2,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":5,"column":5},{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":6,"column":5}]},"\/src\/repo\/src\/Decorator\/BoxDecorator.php":{"errors":0,"warnings":2,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":5,"column":5},{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":6,"column":5}]},"\/src\/repo\/src\/Decorator\/TreeDecorator.php":{"errors":0,"warnings":2,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":5,"column":5},{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":6,"column":5}]},"\/src\/repo\/src\/Tree\/FamilyTreeFactory.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/SemanticGenealogyException.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/SemanticGenealogy.body.php":{"errors":1,"warnings":0,"messages":[{"message":"Class name 'SemanticGenealogy' does not match filename 'SemanticGenealogy.body.php'","source":"MediaWiki.Files.ClassMatchesFilename.NotMatch","severity":5,"fixable":false,"type":"ERROR","line":12,"column":1}]},"\/src\/repo\/Tools.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/SemanticGenealogy.alias.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/src\/Decorator\/TreeDecoratorFactory.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/SemanticGenealogy.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/GenealogicalFilePrinter.php":{"errors":2,"warnings":0,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":13,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":14,"column":15}]},"\/src\/repo\/src\/Tree\/AncestorsFamilyTree.php":{"errors":0,"warnings":1,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":17,"column":5}]},"\/src\/repo\/src\/Tree\/DescendantListFamilyTree.php":{"errors":0,"warnings":1,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":16,"column":5}]},"\/src\/repo\/src\/Tree\/DescendantFamilyTree.php":{"errors":0,"warnings":1,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":16,"column":5}]},"\/src\/repo\/Gedcom5ResultPrinter.php":{"errors":1,"warnings":0,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":13,"column":12}]},"\/src\/repo\/src\/Tree\/FamilyTree.php":{"errors":6,"warnings":1,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":19,"column":5},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":21,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":22,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":23,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":24,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":25,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":26,"column":15}]},"\/src\/repo\/SpecialFamilyTree.php":{"errors":6,"warnings":11,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":14,"column":13},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":15,"column":13},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":16,"column":13},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":17,"column":13},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":18,"column":13},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":20,"column":13},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":37,"column":16},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":45,"column":56},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":50,"column":61},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":55,"column":56},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":57,"column":63},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":63,"column":61},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":66,"column":69},{"message":"Should use function $this->getOutput() rather than variable $wgOut","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":80,"column":16},{"message":"Should use function $this->getOutput() rather than variable $wgOut","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":110,"column":13},{"message":"Should use function $this->getOutput() rather than variable $wgOut","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":112,"column":13},{"message":"Should use function $this->getConfig()->get() rather than global $wgScript","source":"MediaWiki.Usage.ExtendClassUsage.FunctionConfigUsage","severity":5,"fixable":false,"type":"WARNING","line":122,"column":16}]},"\/src\/repo\/PersonPageValues.php":{"errors":17,"warnings":0,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":13,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":14,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":15,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":16,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":17,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":18,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":19,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":20,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":21,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":22,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":23,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":24,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":25,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":26,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":27,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":28,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":29,"column":15}]},"\/src\/repo\/src\/Tree\/LinkFamilyTree.php":{"errors":3,"warnings":1,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":18,"column":5},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":20,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":21,"column":15},{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":167,"column":13}]},"\/src\/repo\/Gedcom5FilePrinter.php":{"errors":2,"warnings":0,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":18,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":19,"column":15}]}}} --- end --- PHPCS run failed $ vendor/bin/phpcs --report=json --- stdout --- {"totals":{"errors":38,"warnings":22,"fixable":0},"files":{"\/src\/repo\/src\/Decorator\/BoxDecorator.php":{"errors":0,"warnings":2,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":5,"column":5},{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":6,"column":5}]},"\/src\/repo\/src\/Decorator\/TreeDecorator.php":{"errors":0,"warnings":2,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":5,"column":5},{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":6,"column":5}]},"\/src\/repo\/src\/Decorator\/SimpleDecorator.php":{"errors":0,"warnings":2,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":5,"column":5},{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":6,"column":5}]},"\/src\/repo\/SemanticGenealogy.alias.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/Tools.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/SemanticGenealogyException.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/SemanticGenealogy.body.php":{"errors":1,"warnings":0,"messages":[{"message":"Class name 'SemanticGenealogy' does not match filename 'SemanticGenealogy.body.php'","source":"MediaWiki.Files.ClassMatchesFilename.NotMatch","severity":5,"fixable":false,"type":"ERROR","line":12,"column":1}]},"\/src\/repo\/GenealogicalFilePrinter.php":{"errors":2,"warnings":0,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":13,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":14,"column":15}]},"\/src\/repo\/src\/Tree\/FamilyTreeFactory.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/src\/Decorator\/TreeDecoratorFactory.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/src\/Tree\/DescendantListFamilyTree.php":{"errors":0,"warnings":1,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":16,"column":5}]},"\/src\/repo\/src\/Tree\/AncestorsFamilyTree.php":{"errors":0,"warnings":1,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":17,"column":5}]},"\/src\/repo\/Gedcom5ResultPrinter.php":{"errors":1,"warnings":0,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":13,"column":12}]},"\/src\/repo\/src\/Tree\/DescendantFamilyTree.php":{"errors":0,"warnings":1,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":16,"column":5}]},"\/src\/repo\/src\/Tree\/FamilyTree.php":{"errors":6,"warnings":1,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":19,"column":5},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":21,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":22,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":23,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":24,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":25,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":26,"column":15}]},"\/src\/repo\/PersonPageValues.php":{"errors":17,"warnings":0,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":13,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":14,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":15,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":16,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":17,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":18,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":19,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":20,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":21,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":22,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":23,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":24,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":25,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":26,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":27,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPublic","severity":5,"fixable":false,"type":"ERROR","line":28,"column":12},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":29,"column":15}]},"\/src\/repo\/SemanticGenealogy.php":{"errors":0,"warnings":0,"messages":[]},"\/src\/repo\/SpecialFamilyTree.php":{"errors":6,"warnings":11,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":14,"column":13},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":15,"column":13},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":16,"column":13},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":17,"column":13},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":18,"column":13},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":20,"column":13},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":37,"column":16},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":45,"column":56},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":50,"column":61},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":55,"column":56},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":57,"column":63},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":63,"column":61},{"message":"Should use function $this->getRequest() rather than variable $wgRequest","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":66,"column":69},{"message":"Should use function $this->getOutput() rather than variable $wgOut","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":80,"column":16},{"message":"Should use function $this->getOutput() rather than variable $wgOut","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":110,"column":13},{"message":"Should use function $this->getOutput() rather than variable $wgOut","source":"MediaWiki.Usage.ExtendClassUsage.FunctionVarUsage","severity":5,"fixable":false,"type":"WARNING","line":112,"column":13},{"message":"Should use function $this->getConfig()->get() rather than global $wgScript","source":"MediaWiki.Usage.ExtendClassUsage.FunctionConfigUsage","severity":5,"fixable":false,"type":"WARNING","line":122,"column":16}]},"\/src\/repo\/Gedcom5FilePrinter.php":{"errors":2,"warnings":0,"messages":[{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":18,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":19,"column":15}]},"\/src\/repo\/src\/Tree\/LinkFamilyTree.php":{"errors":3,"warnings":1,"messages":[{"message":"Visibility must be declared on all constants if your project supports PHP 7.1 or later","source":"PSR12.Properties.ConstantVisibility.NotFound","severity":5,"fixable":false,"type":"WARNING","line":18,"column":5},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":20,"column":15},{"message":"Missing class property doc comment","source":"MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationProtected","severity":5,"fixable":false,"type":"ERROR","line":21,"column":15},{"message":"Missing function doc comment","source":"MediaWiki.Commenting.FunctionComment.MissingDocumentationPrivate","severity":5,"fixable":false,"type":"ERROR","line":167,"column":13}]}}} --- end --- $ git checkout .phpcs.xml --- stderr --- Updated 1 path from the index --- stdout --- --- end --- $ /usr/bin/composer install --- stderr --- Installing dependencies from lock file (including require-dev) Verifying lock file contents can be installed on current platform. Nothing to install, update or remove Generating autoload files 24 packages you are using are looking for funding. Use the `composer fund` command to find out more! --- stdout --- --- end --- $ /usr/bin/composer test --- stderr --- > parallel-lint . --exclude vendor --exclude node_modules --exclude extensions > phpcs -sp --cache > minus-x check . --- stdout --- PHP 8.2.20 | 10 parallel jobs .................... 20/20 (100%) Checked 20 files in 0.1 seconds No syntax error found .................... 20 / 20 (100%) Time: 234ms; Memory: 8MB MinusX ====== Processing /src/repo... ............................................................. ............................................................. . All good! --- end --- $ /usr/bin/npm audit --json --- stdout --- { "auditReportVersion": 2, "vulnerabilities": { "cross-spawn": { "name": "cross-spawn", "severity": "high", "isDirect": false, "via": [ { "source": 1100562, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": [ "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<6.0.6" }, { "source": 1100563, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": [ "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": ">=7.0.0 <7.0.5" } ], "effects": [ "grunt-contrib-sass" ], "range": "<6.0.6 || >=7.0.0 <7.0.5", "nodes": [ "node_modules/cross-spawn", "node_modules/eslint/node_modules/cross-spawn" ], "fixAvailable": { "name": "grunt-contrib-sass", "version": "2.0.0", "isSemVerMajor": true } }, "grunt-contrib-sass": { "name": "grunt-contrib-sass", "severity": "high", "isDirect": true, "via": [ "cross-spawn" ], "effects": [], "range": "0.9.0 - 1.0.0", "nodes": [ "node_modules/grunt-contrib-sass" ], "fixAvailable": { "name": "grunt-contrib-sass", "version": "2.0.0", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 0, "high": 2, "critical": 0, "total": 2 }, "dependencies": { "prod": 1, "dev": 379, "optional": 0, "peer": 1, "peerOptional": 0, "total": 379 } } } --- end --- Attempting to npm audit fix $ /usr/bin/npm audit fix --dry-run --only=dev --json --- stderr --- npm WARN invalid config only="dev" set in command line options npm WARN invalid config Must be one of: null, prod, production --- stdout --- { "added": 379, "removed": 0, "changed": 0, "audited": 380, "funding": 64, "audit": { "auditReportVersion": 2, "vulnerabilities": { "cross-spawn": { "name": "cross-spawn", "severity": "high", "isDirect": false, "via": [ { "source": 1100562, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": [ "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": "<6.0.6" }, { "source": 1100563, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": [ "CWE-1333" ], "cvss": { "score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "range": ">=7.0.0 <7.0.5" } ], "effects": [ "grunt-contrib-sass" ], "range": "<6.0.6 || >=7.0.0 <7.0.5", "nodes": [ "", "" ], "fixAvailable": { "name": "grunt-contrib-sass", "version": "2.0.0", "isSemVerMajor": true } }, "grunt-contrib-sass": { "name": "grunt-contrib-sass", "severity": "high", "isDirect": false, "via": [ "cross-spawn" ], "effects": [], "range": "0.9.0 - 1.0.0", "nodes": [ "" ], "fixAvailable": { "name": "grunt-contrib-sass", "version": "2.0.0", "isSemVerMajor": true } } }, "metadata": { "vulnerabilities": { "info": 0, "low": 0, "moderate": 0, "high": 2, "critical": 0, "total": 2 }, "dependencies": { "prod": 1, "dev": 379, "optional": 0, "peer": 1, "peerOptional": 0, "total": 379 } } } } --- end --- {"added": 379, "removed": 0, "changed": 0, "audited": 380, "funding": 64, "audit": {"auditReportVersion": 2, "vulnerabilities": {"cross-spawn": {"name": "cross-spawn", "severity": "high", "isDirect": false, "via": [{"source": 1100562, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<6.0.6"}, {"source": 1100563, "name": "cross-spawn", "dependency": "cross-spawn", "title": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": ">=7.0.0 <7.0.5"}], "effects": ["grunt-contrib-sass"], "range": "<6.0.6 || >=7.0.0 <7.0.5", "nodes": ["", ""], "fixAvailable": {"name": "grunt-contrib-sass", "version": "2.0.0", "isSemVerMajor": true}}, "grunt-contrib-sass": {"name": "grunt-contrib-sass", "severity": "high", "isDirect": false, "via": ["cross-spawn"], "effects": [], "range": "0.9.0 - 1.0.0", "nodes": [""], "fixAvailable": {"name": "grunt-contrib-sass", "version": "2.0.0", "isSemVerMajor": true}}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 0, "high": 2, "critical": 0, "total": 2}, "dependencies": {"prod": 1, "dev": 379, "optional": 0, "peer": 1, "peerOptional": 0, "total": 379}}}} $ /usr/bin/npm audit fix --only=dev --- stderr --- npm WARN invalid config only="dev" set in command line options npm WARN invalid config Must be one of: null, prod, production --- stdout --- added 379 packages, and audited 380 packages in 4s 64 packages are looking for funding run `npm fund` for details # npm audit report cross-spawn <6.0.6 Severity: high Regular Expression Denial of Service (ReDoS) in cross-spawn - https://github.com/advisories/GHSA-3xgq-45jj-v275 fix available via `npm audit fix --force` Will install grunt-contrib-sass@2.0.0, which is a breaking change node_modules/cross-spawn grunt-contrib-sass 0.9.0 - 1.0.0 Depends on vulnerable versions of cross-spawn node_modules/grunt-contrib-sass 2 high severity vulnerabilities To address all issues (including breaking changes), run: npm audit fix --force --- end --- Verifying that tests still pass $ /usr/bin/npm ci --- stdout --- added 379 packages, and audited 380 packages in 4s 64 packages are looking for funding run `npm fund` for details 2 high severity vulnerabilities To address all issues (including breaking changes), run: npm audit fix --force Run `npm audit` for details. --- end --- $ /usr/bin/npm test --- stdout --- > SemanticGenealogy@0.3.0 test > grunt test Running "eslint:all" (eslint) task /src/repo/modules/specialFamilyTree.js 3:3 warning Avoid queries which search the entire DOM. Keep DOM nodes in memory where possible no-jquery/no-global-selector 11:18 warning Prefer Array#map to $.map no-jquery/no-map-util 29:8 warning Avoid queries which search the entire DOM. Keep DOM nodes in memory where possible no-jquery/no-global-selector 29:33 warning Expected '===' and instead saw '==' eqeqeq 30:4 warning Avoid queries which search the entire DOM. Keep DOM nodes in memory where possible no-jquery/no-global-selector 31:4 warning Avoid queries which search the entire DOM. Keep DOM nodes in memory where possible no-jquery/no-global-selector 33:4 warning Avoid queries which search the entire DOM. Keep DOM nodes in memory where possible no-jquery/no-global-selector 34:4 warning Avoid queries which search the entire DOM. Keep DOM nodes in memory where possible no-jquery/no-global-selector 40:2 warning Avoid queries which search the entire DOM. Keep DOM nodes in memory where possible no-jquery/no-global-selector ✖ 9 problems (0 errors, 9 warnings) Running "banana:all" (banana) task >> 1 message directory checked. Done. --- end --- $ package-lock-lint package-lock.json --- stdout --- Checking package-lock.json --- end --- build: Updating mediawiki/mediawiki-codesniffer to 46.0.0 $ git add . --- stdout --- --- end --- $ git commit -F /tmp/tmpelbv29gu --- stdout --- [master 9114725] build: Updating mediawiki/mediawiki-codesniffer to 46.0.0 2 files changed, 14 insertions(+), 11 deletions(-) --- end --- $ git format-patch HEAD~1 --stdout --- stdout --- From 9114725ff89518b58cc6d82fff1e5e2303102f97 Mon Sep 17 00:00:00 2001 From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org> Date: Fri, 31 Jan 2025 03:52:32 +0000 Subject: [PATCH] build: Updating mediawiki/mediawiki-codesniffer to 46.0.0 Change-Id: I956f051aa2fa5a49ce52697498ed2f3cd558aca2 --- composer.json | 2 +- package-lock.json | 23 +++++++++++++---------- 2 files changed, 14 insertions(+), 11 deletions(-) diff --git a/composer.json b/composer.json index e0bb924..9ed56bb 100644 --- a/composer.json +++ b/composer.json @@ -26,7 +26,7 @@ "mediawiki/semantic-media-wiki": ">=1.7" }, "require-dev": { - "mediawiki/mediawiki-codesniffer": "45.0.0", + "mediawiki/mediawiki-codesniffer": "46.0.0", "mediawiki/minus-x": "1.1.3", "php-parallel-lint/php-console-highlighter": "1.0.0", "php-parallel-lint/php-parallel-lint": "1.4.0" diff --git a/package-lock.json b/package-lock.json index bc71e90..144ccf9 100644 --- a/package-lock.json +++ b/package-lock.json @@ -923,7 +923,7 @@ "node_modules/cross-spawn": { "version": "0.2.9", "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-0.2.9.tgz", - "integrity": "sha1-vWf5bAfvtjA7f+lMHpefiEeOCjk=", + "integrity": "sha512-jUNffe+x93R0/940d+JrdIl8SROZdUuvlw0HxjR/0GUKGvJEWiTK5rxtKNtP1lgMnoR8383q0orSA6k3eJ+y4A==", "dev": true, "dependencies": { "lru-cache": "^2.5.0" @@ -1699,9 +1699,9 @@ "dev": true }, "node_modules/eslint/node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "dependencies": { "path-key": "^3.1.0", @@ -2425,7 +2425,7 @@ "node_modules/grunt-contrib-sass": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/grunt-contrib-sass/-/grunt-contrib-sass-1.0.0.tgz", - "integrity": "sha1-gGg4JRy8DhqU1k1RXN00z2dNcBs=", + "integrity": "sha512-nYQW+vRDQi90//owyCi/9riDjx/lnNAKEhZu3i+i200jSk67U+RmdilGLWUJsYEwsohOCsvKOuFPtdOJGvEI4w==", "dev": true, "dependencies": { "async": "^0.9.0", @@ -2436,6 +2436,9 @@ }, "engines": { "node": ">=0.10.0" + }, + "peerDependencies": { + "grunt": ">=0.4.0" } }, "node_modules/grunt-contrib-sass/node_modules/ansi-styles": { @@ -5097,7 +5100,7 @@ "cross-spawn": { "version": "0.2.9", "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-0.2.9.tgz", - "integrity": "sha1-vWf5bAfvtjA7f+lMHpefiEeOCjk=", + "integrity": "sha512-jUNffe+x93R0/940d+JrdIl8SROZdUuvlw0HxjR/0GUKGvJEWiTK5rxtKNtP1lgMnoR8383q0orSA6k3eJ+y4A==", "dev": true, "requires": { "lru-cache": "^2.5.0" @@ -5268,9 +5271,9 @@ "dev": true }, "cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "requires": { "path-key": "^3.1.0", @@ -6194,7 +6197,7 @@ "grunt-contrib-sass": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/grunt-contrib-sass/-/grunt-contrib-sass-1.0.0.tgz", - "integrity": "sha1-gGg4JRy8DhqU1k1RXN00z2dNcBs=", + "integrity": "sha512-nYQW+vRDQi90//owyCi/9riDjx/lnNAKEhZu3i+i200jSk67U+RmdilGLWUJsYEwsohOCsvKOuFPtdOJGvEI4w==", "dev": true, "requires": { "async": "^0.9.0", -- 2.39.2 --- end ---