Update to fix dependabot security alerts

frontend/javascript/main.ts

@@ -1,7 +1,7 @@
 import '../styles/main.scss'
 
 import 'froide/frontend/javascript/snippets/bootstrap'
-import 'froide/frontend/javascript/snippets/copy-input'
+import 'froide/frontend/javascript/snippets/copy-text'
 import 'froide/frontend/javascript/snippets/form-ajax'
 import 'froide/frontend/javascript/snippets/misc'
 import 'froide/frontend/javascript/snippets/search'

package.json

@@ -41,14 +41,14 @@
   },
   "dependencies": {
     "@glidejs/glide": "^3.4.1",
-    "@okfde/filingcabinet": "okfde/django-filingcabinet",
+    "@okfde/filingcabinet": "https://github.com/CodeWithAloha/django-filingcabinet#main",
     "@popperjs/core": "^2.11.5",
     "@sentry/browser": "7.119.1",
     "@sentry/integrations": "^7.12.1",
     "@sentry/tracing": "^7.12.1",
     "bootstrap": "^5.3.2",
     "font-awesome": "^4.7.0",
-    "froide": "okfde/froide",
+    "froide": "https://github.com/CodeWithAloha/froide2#main",
     "froide_campaign": "okfde/froide-campaign",
     "froide_exam": "okfde/froide-exam",
     "froide_food": "okfde/froide-food",

vite.config.js

@@ -9,6 +9,12 @@ const outputDir = resolve(__dirname, 'build')
 
 // https://vitejs.dev/config/
 export default defineConfig({
+  optimizeDeps:{
+    esbuildOptions: {
+      target: "es2022",
+    }
+  },
+
   // eslint-disable-next-line no-undef
   base: process.env.ASSET_PATH || '/static/',
   publicDir: false,
@@ -25,6 +31,7 @@ export default defineConfig({
     emptyOutDir: true,
     outDir: outputDir,
     sourcemap: true,
+    target: 'es2022',
     rollupOptions: {
       input: {
         // audio_player: './frontend/javascript/audio-player.ts',
@@ -97,4 +104,4 @@ export default defineConfig({
       plugins: [autoprefixer]
     }
   }
-})
+})

yarn.lock

@@ -226,9 +226,9 @@
     "@nodelib/fs.scandir" "2.1.5"
     fastq "^1.6.0"
 
-"@okfde/filingcabinet@^0.0.4", "@okfde/filingcabinet@okfde/django-filingcabinet":
+"@okfde/filingcabinet@github:okfde/django-filingcabinet":
   version "0.0.4"
-  resolved "https://codeload.github.com/okfde/django-filingcabinet/tar.gz/fd84c42982de6f2d965b8eb427df0671203e4aa4"
+  resolved "https://codeload.github.com/okfde/django-filingcabinet/tar.gz/3e7a8cc61b04cb77f7010d4c878112fc93af4337"
   dependencies:
     "@popperjs/core" "^2.11.6"
     bootstrap "^5.3.0"
@@ -238,6 +238,18 @@
     vue "^3.3.4"
     vue-virtual-scroller "^2.0.0-alpha.1"
 
+"@okfde/filingcabinet@https://github.com/CodeWithAloha/django-filingcabinet#main":
+  version "0.0.4"
+  resolved "https://github.com/CodeWithAloha/django-filingcabinet#f5867fd54075a4a4a65cef41d51e6092d033f95b"
+  dependencies:
+    "@popperjs/core" "^2.11.6"
+    bootstrap "^5.3.0"
+    font-awesome "^4.7.0"
+    intersection-observer "^0.12.2"
+    pdfjs-dist "^2.9.359"
+    vue "^3.3.4"
+    vue-virtual-scroller "^2.0.0-alpha.1"
+
 "@popperjs/core@^2.11.5", "@popperjs/core@^2.11.6", "@popperjs/core@^2.9.2":
   version "2.11.8"
   resolved "https://registry.yarnpkg.com/@popperjs/core/-/core-2.11.8.tgz#6b79032e760a0899cd4204710beede972a3a185f"
@@ -435,6 +447,18 @@
   dependencies:
     "@types/geojson" "*"
 
+"@types/lodash.throttle@^4.1.9":
+  version "4.1.9"
+  resolved "https://registry.yarnpkg.com/@types/lodash.throttle/-/lodash.throttle-4.1.9.tgz#f17a6ae084f7c0117bd7df145b379537bc9615c5"
+  integrity sha512-PCPVfpfueguWZQB7pJQK890F2scYKoDUL3iM522AptHWn7d5NQmeS/LTEHIcLr5PaTzl3dK2Z0xSUHHTHwaL5g==
+  dependencies:
+    "@types/lodash" "*"
+
+"@types/lodash@*":
+  version "4.17.13"
+  resolved "https://registry.yarnpkg.com/@types/lodash/-/lodash-4.17.13.tgz#786e2d67cfd95e32862143abe7463a7f90c300eb"
+  integrity sha512-lfx+dftrEZcdBPczf9d0Qv0x+j/rfNCMuC6OcfXmO8gkfeNAY88PgKUbvG56whcN23gc27yenwF6oJZXGFpYxg==
+
 "@types/[email protected]":
   version "0.12.2"
   resolved "https://registry.yarnpkg.com/@types/retry/-/retry-0.12.2.tgz#ed279a64fa438bb69f2480eda44937912bb7480a"
@@ -450,6 +474,11 @@
   resolved "https://registry.yarnpkg.com/@types/stripe-v3/-/stripe-v3-3.1.33.tgz#5cd34d9c37c5a0f7aee9adc42acd0c21bf813b5d"
   integrity sha512-fIE7F7alypCrnIMsk4naprHf8kXEvPM2Q9FGdL/3TDeGM0xlHohdVWkwuaEZ2tKzXB9QQKoS8k+ocLkPjZajwQ==
 
+"@types/web-bluetooth@^0.0.20":
+  version "0.0.20"
+  resolved "https://registry.yarnpkg.com/@types/web-bluetooth/-/web-bluetooth-0.0.20.tgz#f066abfcd1cbe66267cdbbf0de010d8a41b41597"
+  integrity sha512-g9gZnnXVq7gM7v3tJCWV/qw7w+KeOlSHAhgF9RytFyifW6AF61hdT2ucrYhPq9hLs5JIryeupHV3qGk95dH9ow==
+
 "@typescript-eslint/eslint-plugin@^5", "@typescript-eslint/eslint-plugin@^5.59.1":
   version "5.62.0"
   resolved "https://registry.yarnpkg.com/@typescript-eslint/eslint-plugin/-/eslint-plugin-5.62.0.tgz#aeef0328d172b9e37d9bab6dbc13b87ed88977db"
@@ -742,6 +771,37 @@
   resolved "https://registry.yarnpkg.com/@vue/shared/-/shared-3.4.21.tgz#de526a9059d0a599f0b429af7037cd0c3ed7d5a1"
   integrity sha512-PuJe7vDIi6VYSinuEbUIQgMIRZGgM8e4R+G+/dQTk0X1NEdvgvvgv7m+rfmDH1gZzyA1OjjoWskvHlfRNfQf3g==
 
+"@vueuse/[email protected]", "@vueuse/core@^10.11.0":
+  version "10.11.1"
+  resolved "https://registry.yarnpkg.com/@vueuse/core/-/core-10.11.1.tgz#15d2c0b6448d2212235b23a7ba29c27173e0c2c6"
+  integrity sha512-guoy26JQktXPcz+0n3GukWIy/JDNKti9v6VEMu6kV2sYBsWuGiTU8OWdg+ADfUbHg3/3DlqySDe7JmdHrktiww==
+  dependencies:
+    "@types/web-bluetooth" "^0.0.20"
+    "@vueuse/metadata" "10.11.1"
+    "@vueuse/shared" "10.11.1"
+    vue-demi ">=0.14.8"
+
+"@vueuse/integrations@^10.11.0":
+  version "10.11.1"
+  resolved "https://registry.yarnpkg.com/@vueuse/integrations/-/integrations-10.11.1.tgz#e4af23b871773c5ef5b8fb939f959f2fc728557e"
+  integrity sha512-Y5hCGBguN+vuVYTZmdd/IMXLOdfS60zAmDmFYc4BKBcMUPZH1n4tdyDECCPjXm0bNT3ZRUy1xzTLGaUje8Xyaw==
+  dependencies:
+    "@vueuse/core" "10.11.1"
+    "@vueuse/shared" "10.11.1"
+    vue-demi ">=0.14.8"
+
+"@vueuse/[email protected]":
+  version "10.11.1"
+  resolved "https://registry.yarnpkg.com/@vueuse/metadata/-/metadata-10.11.1.tgz#209db7bb5915aa172a87510b6de2ca01cadbd2a7"
+  integrity sha512-IGa5FXd003Ug1qAZmyE8wF3sJ81xGLSqTqtQ6jaVfkeZ4i5kS2mwQF61yhVqojRnenVew5PldLyRgvdl4YYuSw==
+
+"@vueuse/[email protected]":
+  version "10.11.1"
+  resolved "https://registry.yarnpkg.com/@vueuse/shared/-/shared-10.11.1.tgz#62b84e3118ae6e1f3ff38f4fbe71b0c5d0f10938"
+  integrity sha512-LHpC8711VFZlDaYUXEBbFBCQ7GS3dVU9mjOhhMhXP6txTV4EhYQg/KGnQuvt/sPAtoUKq7VVUnL6mVtFoL42sA==
+  dependencies:
+    vue-demi ">=0.14.8"
+
 "@xmldom/xmldom@^0.8.10":
   version "0.8.10"
   resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.8.10.tgz#a1337ca426aa61cef9fe15b5b28e340a72f6fa99"
@@ -1490,10 +1550,10 @@ domutils@^3.0.1, domutils@^3.1.0:
     domelementtype "^2.3.0"
     domhandler "^5.0.3"
 
-driver.js@^0.9.8:
-  version "0.9.8"
-  resolved "https://registry.yarnpkg.com/driver.js/-/driver.js-0.9.8.tgz#4b327f4537b1c9b9fb19419de86174be821ae32a"
-  integrity sha512-bczjyKdX6XmFyCDkwtRmlaORDwfBk1xXmRO0CAe5VwNQTM98aWaG2LAIiIdTe53iV/B7W5lXlIy2xYtf0JRb7Q==
+driver.js@^1.3.1:
+  version "1.3.1"
+  resolved "https://registry.yarnpkg.com/driver.js/-/driver.js-1.3.1.tgz#5ac4d0d9e1c60f7eade418992ceffef7bf6c6610"
+  integrity sha512-MvUdXbqSgEsgS/H9KyWb5Rxy0aE6BhOVT4cssi2x2XjmXea6qQfgdx32XKVLLSqTaIw7q/uxU5Xl3NV7+cN6FQ==
 
 electron-to-chromium@^1.4.668:
   version "1.4.708"
@@ -2002,26 +2062,61 @@ fraction.js@^4.3.7:
   resolved "https://registry.yarnpkg.com/fraction.js/-/fraction.js-4.3.7.tgz#06ca0085157e42fda7f9e726e79fefc4068840f7"
   integrity sha512-ZsDfxO51wGAXREY55a7la9LScWpwv9RxIrYABrlvOFBlH/ShPnrtsXeuUIfXKKOVicNxQ+o8JTbJvjS4M89yew==
 
+"froide@https://github.com/CodeWithAloha/froide2#main":
+  version "1.0.0"
+  resolved "https://github.com/CodeWithAloha/froide2#a77445108b55e49fffc0589f57fbf171a8c39589"
+  dependencies:
+    "@okfde/filingcabinet" "github:okfde/django-filingcabinet"
+    "@popperjs/core" "^2.11.5"
+    "@types/lodash.throttle" "^4.1.9"
+    "@uppy/core" "^3.0.4"
+    "@uppy/dashboard" "^3.2.0"
+    "@uppy/tus" "^3.0.5"
+    "@vueuse/core" "^10.11.0"
+    "@vueuse/integrations" "^10.11.0"
+    bootstrap "^5.3.2"
+    choices.js "^10.1.0"
+    driver.js "^1.3.1"
+    exifreader "^4.12.1"
+    font-awesome "^4.7.0"
+    leaflet "^1.5.1"
+    leaflet.icon.glyph "^0.3.0"
+    lodash.debounce "^4.0.8"
+    lodash.range "^3.2.0"
+    lodash.sortby "^4.7.0"
+    lodash.throttle "^4.1.1"
+    pdfjs-dist "^2.9.359"
+    sortablejs "^1"
+    string.prototype.repeat "^1.0.0"
+    vue "^3.2.38"
+    vuedraggable "^2.23.2"
+    vuex "^4.1.0"
+
 froide@okfde/froide:
   version "1.0.0"
-  resolved "https://codeload.github.com/okfde/froide/tar.gz/d9baeae8fc399d524d931dc96d56ca31d5abc094"
+  resolved "https://codeload.github.com/okfde/froide/tar.gz/484ca1070ea10ffa01d848499d20bf40c7cc0d79"
   dependencies:
-    "@okfde/filingcabinet" "^0.0.4"
+    "@okfde/filingcabinet" "github:okfde/django-filingcabinet"
     "@popperjs/core" "^2.11.5"
+    "@types/lodash.throttle" "^4.1.9"
     "@uppy/core" "^3.0.4"
     "@uppy/dashboard" "^3.2.0"
     "@uppy/tus" "^3.0.5"
+    "@vueuse/core" "^10.11.0"
+    "@vueuse/integrations" "^10.11.0"
     bootstrap "^5.3.2"
     choices.js "^10.1.0"
-    driver.js "^0.9.8"
+    driver.js "^1.3.1"
     exifreader "^4.12.1"
     font-awesome "^4.7.0"
     leaflet "^1.5.1"
     leaflet.icon.glyph "^0.3.0"
     lodash.debounce "^4.0.8"
     lodash.range "^3.2.0"
     lodash.sortby "^4.7.0"
-    pdfjs-dist "==2.9.359"
+    lodash.throttle "^4.1.1"
+    pdfjs-dist "^2.9.359"
+    sortablejs "^1"
     string.prototype.repeat "^1.0.0"
     vue "^3.2.38"
     vuedraggable "^2.23.2"
@@ -3114,7 +3209,7 @@ path2d@^0.2.0:
   resolved "https://registry.yarnpkg.com/path2d/-/path2d-0.2.1.tgz#faf98e5e2222541805a6ac232adc026332330765"
   integrity sha512-Fl2z/BHvkTNvkuBzYTpTuirHZg6wW9z8+4SND/3mDTEcYbbNKWAy21dz9D3ePNNwrrK8pqZO5vLPZ1hLF6T7XA==
 
-[email protected], pdfjs-dist@==2.9.359:
+[email protected], pdfjs-dist@^2.9.359:
   version "4.2.67"
   resolved "https://registry.yarnpkg.com/pdfjs-dist/-/pdfjs-dist-4.2.67.tgz#dd2a65a4b00d95cd4bc2c1f6a27c5e9eb31d512a"
   integrity sha512-rJmuBDFpD7cqC8WIkQUEClyB4UAH05K4AsyewToMTp2gSy3Rrx8c1ydAVqlJlGv3yZSOrhEERQU/4ScQQFlLHA==
@@ -3506,6 +3601,11 @@ [email protected]:
   resolved "https://registry.yarnpkg.com/sortablejs/-/sortablejs-1.10.2.tgz#6e40364d913f98b85a14f6678f92b5c1221f5290"
   integrity sha512-YkPGufevysvfwn5rfdlGyrGjt7/CRHwvRPogD/lC+TnvcN29jDpCifKP+rBqf+LRldfXSTh+0CGLcSg0VIxq3A==
 
+sortablejs@^1:
+  version "1.15.3"
+  resolved "https://registry.yarnpkg.com/sortablejs/-/sortablejs-1.15.3.tgz#033668db5ebfb11167d1249ab88e748f27959e29"
+  integrity sha512-zdK3/kwwAK1cJgy1rwl1YtNTbRmc8qW/+vgXf75A7NHag5of4pyI6uK86ktmQETyWRH7IGaE73uZOOBcGxgqZg==
+
 "source-map-js@>=0.6.2 <2.0.0", source-map-js@^1.0.2:
   version "1.0.2"
   resolved "https://registry.yarnpkg.com/source-map-js/-/source-map-js-1.0.2.tgz#adbc361d9c62df380125e7f161f71c826f1e490c"
@@ -4175,6 +4275,11 @@ vite@^4.5.5:
   optionalDependencies:
     fsevents "~2.3.2"
 
+vue-demi@>=0.14.8:
+  version "0.14.10"
+  resolved "https://registry.yarnpkg.com/vue-demi/-/vue-demi-0.14.10.tgz#afc78de3d6f9e11bf78c55e8510ee12814522f04"
+  integrity sha512-nMZBOwuzabUO0nLgIcc6rycZEebF6eeUfaiQx9+WSk8e29IbLvPU9feI6tqW4kTo3hvoYAJkMh8n8D0fuISphg==
+
 vue-eslint-parser@^9.1.1, vue-eslint-parser@^9.3.1, vue-eslint-parser@^9.4.2:
   version "9.4.2"
   resolved "https://registry.yarnpkg.com/vue-eslint-parser/-/vue-eslint-parser-9.4.2.tgz#02ffcce82042b082292f2d1672514615f0d95b6d"