mediawiki/extensions/MediaSearch (main)

sourcepatches
From 707912a6b21829f329ddd9471c81a427a84abaa1 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Sat, 19 Jun 2021 08:36:42 +0000
Subject: [PATCH] build: Updating npm dependencies
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* postcss: 7.0.35 → 7.0.36
  * https://npmjs.com/advisories/1693 (CVE-2021-23368)
* ws: 7.4.4 → 7.5.0
  * https://npmjs.com/advisories/1748 (CVE-2021-32640)
* trim-newlines: 3.0.0 → 3.0.1
  * https://npmjs.com/advisories/1753 (CVE-2021-33623)

Change-Id: I6f7d18ab633dca6c9f9c36d0a5f7ab57101b4b38
---
 package-lock.json | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 49fb9d6..25bdebb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8454,9 +8454,9 @@
 			"dev": true
 		},
 		"postcss": {
-			"version": "7.0.35",
-			"resolved": "https://registry.npmjs.org/postcss/-/postcss-7.0.35.tgz",
-			"integrity": "sha512-3QT8bBJeX/S5zKTTjTCIjRF3If4avAT6kqxcASlTWEtAFCb9NH0OUxNDfgZSWdP5fJnBYCMEWkIFfWeugjzYMg==",
+			"version": "7.0.36",
+			"resolved": "https://registry.npmjs.org/postcss/-/postcss-7.0.36.tgz",
+			"integrity": "sha512-BebJSIUMwJHRH0HAQoxN4u1CN86glsrwsW0q7T+/m44eXOUAxSNdHRkNZPYz5vVUbg17hFgOQDE7fZk7li3pZw==",
 			"dev": true,
 			"requires": {
 				"chalk": "^2.4.2",
@@ -10194,9 +10194,9 @@
 			}
 		},
 		"trim-newlines": {
-			"version": "3.0.0",
-			"resolved": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-3.0.0.tgz",
-			"integrity": "sha512-C4+gOpvmxaSMKuEf9Qc134F1ZuOHVXKRbtEflf4NTtuuJDEIJ9p5PXsalL8SkeRw+qit1Mo+yuvMPAKwWg/1hA==",
+			"version": "3.0.1",
+			"resolved": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-3.0.1.tgz",
+			"integrity": "sha512-c1PTsA3tYrIsLGkJkzHF+w9F2EyxfXGo4UyJc4pFL++FMjnq0HJS69T3M7d//gKrFKwy429bouPescbjecU+Zw==",
 			"dev": true
 		},
 		"trim-right": {
@@ -10816,9 +10816,9 @@
 			}
 		},
 		"ws": {
-			"version": "7.4.4",
-			"resolved": "https://registry.npmjs.org/ws/-/ws-7.4.4.tgz",
-			"integrity": "sha512-Qm8k8ojNQIMx7S+Zp8u/uHOx7Qazv3Yv4q68MiWWWOJhiwG5W3x7iqmRtJo8xxrciZUY4vRxUTJCKuRnF28ZZw==",
+			"version": "7.5.0",
+			"resolved": "https://registry.npmjs.org/ws/-/ws-7.5.0.tgz",
+			"integrity": "sha512-6ezXvzOZupqKj4jUqbQ9tXuJNo+BR2gU8fFRk3XCP3e0G6WT414u5ELe6Y0vtp7kmSJ3F7YWObSNr1ESsgi4vw==",
 			"dev": true
 		},
 		"xml-name-validator": {
-- 
2.20.1

$ date
Sat Jun 19 08:34:42 UTC 2021

$ git clone file:///srv/git/mediawiki-extensions-MediaSearch.git repo --depth=1 -b master
Cloning into 'repo'...

$ git config user.name libraryupgrader

$ git config user.email tools.libraryupgrader@tools.wmflabs.org

$ git submodule update --init

$ grr init
Installed commit-msg hook.

$ git show-ref refs/heads/master
228174f4cb98cdfba17f52078b049dc068ac1338 refs/heads/master

$ composer install
Loading composer repositories with package information
Warning from https://repo.packagist.org: Support for Composer 1 is deprecated and some packages will not be available. You should upgrade to Composer 2. See https://blog.packagist.com/deprecating-composer-1-support/
Updating dependencies (including require-dev)
Package operations: 32 installs, 0 updates, 0 removals
  - Installing squizlabs/php_codesniffer (3.6.0): Loading from cache
  - Installing composer/spdx-licenses (1.5.5): Loading from cache
  - Installing composer/semver (3.2.5): Loading from cache
  - Installing mediawiki/mediawiki-codesniffer (v36.0.0): Loading from cache
  - Installing symfony/polyfill-php80 (v1.23.0): Loading from cache
  - Installing symfony/polyfill-mbstring (v1.23.0): Loading from cache
  - Installing symfony/polyfill-intl-normalizer (v1.23.0): Loading from cache
  - Installing symfony/polyfill-intl-grapheme (v1.23.0): Loading from cache
  - Installing symfony/polyfill-ctype (v1.23.0): Loading from cache
  - Installing symfony/string (v5.3.2): Loading from cache
  - Installing psr/container (1.1.1): Loading from cache
  - Installing symfony/service-contracts (v2.4.0): Loading from cache
  - Installing symfony/polyfill-php73 (v1.23.0): Loading from cache
  - Installing symfony/deprecation-contracts (v2.4.0): Loading from cache
  - Installing symfony/console (v5.3.2): Loading from cache
  - Installing psr/log (1.1.4): Loading from cache
  - Installing sabre/event (5.1.2): Loading from cache
  - Installing netresearch/jsonmapper (v3.1.1): Loading from cache
  - Installing microsoft/tolerant-php-parser (v0.0.23): Loading from cache
  - Installing phpdocumentor/reflection-common (2.2.0): Loading from cache
  - Installing webmozart/assert (1.10.0): Loading from cache
  - Installing phpdocumentor/type-resolver (1.4.0): Loading from cache
  - Installing phpdocumentor/reflection-docblock (5.2.2): Loading from cache
  - Installing felixfbecker/advanced-json-rpc (v3.2.1): Loading from cache
  - Installing composer/xdebug-handler (1.4.6): Loading from cache
  - Installing phan/phan (3.2.6): Loading from cache
  - Installing mediawiki/phan-taint-check-plugin (3.2.1): Loading from cache
  - Installing mediawiki/mediawiki-phan-config (0.10.6): Loading from cache
  - Installing mediawiki/minus-x (1.1.1): Loading from cache
  - Installing php-parallel-lint/php-console-color (v0.3): Loading from cache
  - Installing php-parallel-lint/php-console-highlighter (v0.5): Loading from cache
  - Installing php-parallel-lint/php-parallel-lint (v1.3.0): Loading from cache
symfony/service-contracts suggests installing symfony/service-implementation
symfony/console suggests installing symfony/event-dispatcher
symfony/console suggests installing symfony/lock
symfony/console suggests installing symfony/process
phan/phan suggests installing ext-ast (Needed for parsing ASTs (unless --use-fallback-parser is used). 1.0.1+ is needed, 1.0.8+ is recommended.)
Writing lock file
Generating autoload files
13 packages you are using are looking for funding.
Use the `composer fund` command to find out more!

Attempting to npm audit fix
$ npm audit fix --only=dev

> dtrace-provider@0.8.8 install /src/repo/node_modules/dtrace-provider
> node-gyp rebuild || node suppress-error.js

make: Entering directory '/src/repo/node_modules/dtrace-provider/build'
  TOUCH Release/obj.target/DTraceProviderStub.stamp
make: Leaving directory '/src/repo/node_modules/dtrace-provider/build'

> deasync@0.1.21 install /src/repo/node_modules/deasync
> node ./build.js

`linux-x64-node-10` exists; testing
Binary is fine; exiting

> core-js@2.6.12 postinstall /src/repo/node_modules/core-js
> node -e "try{require('./postinstall')}catch(e){}"

Thank you for using core-js ( https://github.com/zloirock/core-js ) for polyfilling JavaScript standard library!

The project needs your help! Please consider supporting of core-js on Open Collective or Patreon: 
> https://opencollective.com/core-js 
> https://www.patreon.com/zloirock 

Also, the author of core-js ( https://github.com/zloirock ) is looking for a good job -)


> core-js@3.10.1 postinstall /src/repo/node_modules/eslint-plugin-compat/node_modules/core-js
> node -e "try{require('./postinstall')}catch(e){}"

npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@2.3.2 (node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@2.3.2: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})

added 1222 packages from 635 contributors in 42.754s

94 packages are looking for funding
  run `npm fund` for details

fixed 17 of 17 vulnerabilities in 1224 scanned packages

$ npm audit fix --only=dev
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@2.3.2 (node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@2.3.2: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})

up to date in 6.047s

94 packages are looking for funding
  run `npm fund` for details

fixed 0 of 0 vulnerabilities in 1224 scanned packages

$ npm audit fix --only=dev
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@2.3.2 (node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@2.3.2: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})

up to date in 5.618s

94 packages are looking for funding
  run `npm fund` for details

fixed 0 of 0 vulnerabilities in 1224 scanned packages

$ package-lock-lint package-lock.json
0 issues found in: package-lock.json

Verifying that tests still pass
$ npm ci
npm WARN prepare removing existing node_modules/ before installation

> core-js@2.6.12 postinstall /src/repo/node_modules/core-js
> node -e "try{require('./postinstall')}catch(e){}"


> deasync@0.1.21 install /src/repo/node_modules/deasync
> node ./build.js

`linux-x64-node-10` exists; testing
Binary is fine; exiting

> dtrace-provider@0.8.8 install /src/repo/node_modules/dtrace-provider
> node-gyp rebuild || node suppress-error.js

make: Entering directory '/src/repo/node_modules/dtrace-provider/build'
  TOUCH Release/obj.target/DTraceProviderStub.stamp
make: Leaving directory '/src/repo/node_modules/dtrace-provider/build'

> core-js@3.10.1 postinstall /src/repo/node_modules/eslint-plugin-compat/node_modules/core-js
> node -e "try{require('./postinstall')}catch(e){}"

added 1223 packages in 12.081s

$ npm test

> media-search@0.1.0 test /src/repo
> grunt test && npm run test:unit

Running "eslint:all" (eslint) task

/src/repo/resources/components/base/Image.vue
  52:28  warning  IntersectionObserverEntry is not supported in Safari 9.1, IE 11  compat/compat

/src/repo/resources/components/base/Observer.vue
  52:19  warning  IntersectionObserver is not supported in Safari 9.1, IE 11  compat/compat

/src/repo/resources/components/base/Tabs.vue
  97:28  warning  IntersectionObserverEntry is not supported in Safari 9.1, IE 11  compat/compat

/src/repo/resources/components/results/PageResult.vue
  17:23  warning  'v-html' directive can lead to XSS attack  vue/no-v-html

/src/repo/resources/components/SearchFilters.vue
  157:28  warning  IntersectionObserverEntry is not supported in Safari 9.1, IE 11  compat/compat

/src/repo/resources/getLocationAgnosticMwApi.js
  27:0  warning  The type 'mediaWiki' is undefined  jsdoc/no-undefined-types

✖ 6 problems (0 errors, 6 warnings)


Running "stylelint:all" (stylelint) task
>> Linted 36 files without errors

Running "banana:0" (banana) task
>> 1 message directory checked.

Running "banana:1" (banana) task
>> 1 message directory checked.

Running "banana:2" (banana) task
>> 1 message directory checked.

Running "banana:3" (banana) task
>> 1 message directory checked.

Running "banana:4" (banana) task
>> 1 message directory checked.

Done.

> media-search@0.1.0 test:unit /src/repo
> jest

PASS tests/jest/mutations.test.js
PASS tests/jest/actions.test.js
PASS tests/jest/ImageResult.test.js
PASS tests/jest/QuickView.test.js
----------------------------------|---------|----------|---------|---------|-----------------------------------------------------------------------------------------------------------------
File                              | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s                                                                                               
----------------------------------|---------|----------|---------|---------|-----------------------------------------------------------------------------------------------------------------
All files                         |   21.43 |    16.92 |    19.2 |   21.43 |                                                                                                                 
 resources                        |   81.82 |       50 |     100 |   81.82 |                                                                                                                 
  getLocationAgnosticMwApi.js     |   81.82 |       50 |     100 |   81.82 | 13,34                                                                                                           
 resources/components             |   15.11 |     12.9 |   15.97 |   15.11 |                                                                                                                 
  App.vue                         |       0 |        0 |       0 |       0 | 95-579                                                                                                          
  ConceptChips.vue                |       0 |      100 |     100 |       0 | 22-25                                                                                                           
  DidYouMean.vue                  |       0 |      100 |       0 |       0 | 11-47                                                                                                           
  EmptyState.vue                  |       0 |      100 |       0 |       0 | 19-33                                                                                                           
  EndOfResults.vue                |       0 |      100 |     100 |       0 | 17                                                                                                              
  NamespaceFilterDialog.vue       |       0 |        0 |       0 |       0 | 40-218                                                                                                          
  NoResults.vue                   |       0 |      100 |     100 |       0 | 22                                                                                                              
  QuickView.vue                   |    56.3 |    35.96 |    56.1 |    56.3 | 220,303,312-322,350-353,371,394-400,409,420,431,433,440-453,476-480,515,537,546-555,575-606,618,630,668-702,710 
  SearchError.vue                 |       0 |      100 |     100 |       0 | 22                                                                                                              
  SearchFilters.vue               |       0 |        0 |       0 |       0 | 67-401                                                                                                          
  SearchResults.vue               |       0 |        0 |       0 |       0 | 108-523                                                                                                         
  Spinner.vue                     |     100 |      100 |     100 |     100 |                                                                                                                 
  UserNotice.vue                  |       0 |        0 |       0 |       0 | 26-72                                                                                                           
 resources/components/base        |    8.79 |     8.81 |     8.8 |    8.79 |                                                                                                                 
  AutocompleteSearchInput.vue     |       0 |        0 |       0 |       0 | 71-420                                                                                                          
  Button.vue                      |   66.67 |      100 |       0 |   66.67 | 68                                                                                                              
  Checkbox.vue                    |       0 |      100 |     100 |       0 | 27-33                                                                                                           
  CopyTextLayout.vue              |     6.9 |        0 |       0 |     6.9 | 43-144                                                                                                          
  Dialog.vue                      |       0 |        0 |       0 |       0 | 69-229                                                                                                          
  Icon.vue                        |   69.57 |    40.91 |     100 |   69.57 | 116-117,124,144-156                                                                                             
  Image.vue                       |   33.33 |    33.33 |   57.14 |   33.33 | 74-108,115-135                                                                                                  
  LookupResults.vue               |       0 |      100 |       0 |       0 | 41-76                                                                                                           
  Message.vue                     |       0 |      100 |       0 |       0 | 16-62                                                                                                           
  Observer.vue                    |       0 |        0 |       0 |       0 | 19-64                                                                                                           
  Player.vue                      |      10 |        0 |       0 |      10 | 20-66                                                                                                           
  Radio.vue                       |       0 |      100 |     100 |       0 | 28-34                                                                                                           
  Select.vue                      |       0 |        0 |       0 |       0 | 48-367                                                                                                          
  SelectMenu.vue                  |       0 |        0 |       0 |       0 | 39-192                                                                                                          
  Tab.vue                         |       0 |      100 |       0 |       0 | 21-47                                                                                                           
  Tabs.vue                        |       0 |        0 |       0 |       0 | 44-244                                                                                                          
 resources/components/base/mixins |       0 |      100 |       0 |       0 |                                                                                                                 
  binaryInput.js                  |       0 |      100 |       0 |       0 | 6-58                                                                                                            
 resources/components/results     |   21.67 |     6.25 |   33.33 |   21.67 |                                                                                                                 
  AudioResult.vue                 |       0 |      100 |       0 |       0 | 41-59                                                                                                           
  ImageResult.vue                 |   92.86 |       50 |     100 |   92.86 | 109                                                                                                             
  OtherResult.vue                 |       0 |        0 |       0 |       0 | 42-124                                                                                                          
  PageResult.vue                  |       0 |        0 |       0 |       0 | 54-156                                                                                                          
  VideoResult.vue                 |       0 |      100 |       0 |       0 | 48-79                                                                                                           
 resources/mixins                 |   16.49 |    16.28 |    9.68 |   16.49 |                                                                                                                 
  autocompleteLookupHandler.js    |       0 |        0 |       0 |       0 | 1-211                                                                                                           
  searchResult.js                 |   48.48 |    38.89 |    37.5 |   48.48 | 33,66,84-87,110,128-181                                                                                         
  searchResultTimeBased.js        |       0 |        0 |       0 |       0 | 8-41                                                                                                            
 resources/models                 |       0 |        0 |       0 |       0 |                                                                                                                 
  SearchFilter.js                 |       0 |        0 |       0 |       0 | 10-20                                                                                                           
 resources/plugins                |       0 |      100 |       0 |       0 |                                                                                                                 
  eventLogger.js                  |       0 |      100 |       0 |       0 | 6-22                                                                                                            
 resources/store                  |   62.35 |    36.97 |   56.82 |   62.35 |                                                                                                                 
  actions.js                      |   70.09 |    59.15 |      60 |   70.09 | 38,58-61,111,117-118,133,142-151,182,198,206,237,247,261,279-305,317-318,322-323                                
  getters.js                      |       0 |      100 |       0 |       0 | 1-23                                                                                                            
  index.js                        |       0 |      100 |     100 |       0 | 3-15                                                                                                            
  mutations.js                    |      80 |      100 |   68.42 |      80 | 83,145-180                                                                                                      
  state.js                        |       0 |        0 |       0 |       0 | 3-25                                                                                                            
----------------------------------|---------|----------|---------|---------|-----------------------------------------------------------------------------------------------------------------

Test Suites: 4 passed, 4 total
Tests:       36 passed, 36 total
Snapshots:   0 total
Time:        9.423 s
Ran all test suites.

Upgrading n:postcss from 7.0.35 -> 7.0.36
Upgrading n:ws from 7.4.4 -> 7.5.0
Upgrading n:trim-newlines from 3.0.0 -> 3.0.1
$ package-lock-lint package-lock.json
0 issues found in: package-lock.json

$ git add .

$ git commit -F /tmp/tmpak71_bhz
[master 707912a] build: Updating npm dependencies
 1 file changed, 9 insertions(+), 9 deletions(-)

$ git format-patch HEAD~1 --stdout
From 707912a6b21829f329ddd9471c81a427a84abaa1 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Sat, 19 Jun 2021 08:36:42 +0000
Subject: [PATCH] build: Updating npm dependencies
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* postcss: 7.0.35 → 7.0.36
  * https://npmjs.com/advisories/1693 (CVE-2021-23368)
* ws: 7.4.4 → 7.5.0
  * https://npmjs.com/advisories/1748 (CVE-2021-32640)
* trim-newlines: 3.0.0 → 3.0.1
  * https://npmjs.com/advisories/1753 (CVE-2021-33623)

Change-Id: I6f7d18ab633dca6c9f9c36d0a5f7ab57101b4b38
---
 package-lock.json | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 49fb9d6..25bdebb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8454,9 +8454,9 @@
 			"dev": true
 		},
 		"postcss": {
-			"version": "7.0.35",
-			"resolved": "https://registry.npmjs.org/postcss/-/postcss-7.0.35.tgz",
-			"integrity": "sha512-3QT8bBJeX/S5zKTTjTCIjRF3If4avAT6kqxcASlTWEtAFCb9NH0OUxNDfgZSWdP5fJnBYCMEWkIFfWeugjzYMg==",
+			"version": "7.0.36",
+			"resolved": "https://registry.npmjs.org/postcss/-/postcss-7.0.36.tgz",
+			"integrity": "sha512-BebJSIUMwJHRH0HAQoxN4u1CN86glsrwsW0q7T+/m44eXOUAxSNdHRkNZPYz5vVUbg17hFgOQDE7fZk7li3pZw==",
 			"dev": true,
 			"requires": {
 				"chalk": "^2.4.2",
@@ -10194,9 +10194,9 @@
 			}
 		},
 		"trim-newlines": {
-			"version": "3.0.0",
-			"resolved": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-3.0.0.tgz",
-			"integrity": "sha512-C4+gOpvmxaSMKuEf9Qc134F1ZuOHVXKRbtEflf4NTtuuJDEIJ9p5PXsalL8SkeRw+qit1Mo+yuvMPAKwWg/1hA==",
+			"version": "3.0.1",
+			"resolved": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-3.0.1.tgz",
+			"integrity": "sha512-c1PTsA3tYrIsLGkJkzHF+w9F2EyxfXGo4UyJc4pFL++FMjnq0HJS69T3M7d//gKrFKwy429bouPescbjecU+Zw==",
 			"dev": true
 		},
 		"trim-right": {
@@ -10816,9 +10816,9 @@
 			}
 		},
 		"ws": {
-			"version": "7.4.4",
-			"resolved": "https://registry.npmjs.org/ws/-/ws-7.4.4.tgz",
-			"integrity": "sha512-Qm8k8ojNQIMx7S+Zp8u/uHOx7Qazv3Yv4q68MiWWWOJhiwG5W3x7iqmRtJo8xxrciZUY4vRxUTJCKuRnF28ZZw==",
+			"version": "7.5.0",
+			"resolved": "https://registry.npmjs.org/ws/-/ws-7.5.0.tgz",
+			"integrity": "sha512-6ezXvzOZupqKj4jUqbQ9tXuJNo+BR2gU8fFRk3XCP3e0G6WT414u5ELe6Y0vtp7kmSJ3F7YWObSNr1ESsgi4vw==",
 			"dev": true
 		},
 		"xml-name-validator": {
-- 
2.20.1

composer dependencies

Development dependencies

npm dependencies

Development dependencies

Logs

Source code is licensed under the AGPL.