update @yext/eslint-config to patch babel vulnerability (#55)

No functional changes, just a package version bump. J=VULN-39422
yext · Nov 20, 2024 · 38030f9 · 38030f9
1 parent 66eed13
commit 38030f9
Show file tree

Hide file tree

Showing 10 changed files with 885 additions and 872 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -9,7 +9,7 @@
     "test": "turbo run test --filter='./packages/*'"
   },
   "devDependencies": {
-    "@yext/eslint-config": "^1.0.0",
+    "@yext/eslint-config": "^1.0.2",
     "eslint": "^8.40.0",
     "generate-license-file": "^2.0.0",
     "prettier": "^2.8.8",

diff --git a/packages/chat-core-aws-connect/THIRD-PARTY-NOTICES b/packages/chat-core-aws-connect/THIRD-PARTY-NOTICES
@@ -1,8 +1,7 @@
 The following NPM packages may be included in this product:
 
- - @babel/[email protected]
- - @babel/[email protected]
- - @babel/[email protected]
+ - @babel/[email protected]
+ - @babel/[email protected]
 
 These packages each contain the following license and notice below:
 
@@ -195,7 +194,7 @@ The following NPM packages may be included in this product:
  - @types/[email protected]
  - @types/[email protected]
  - @types/[email protected]
- - @types/node@22.7.4
+ - @types/node@22.9.1
  - @types/[email protected]
  - @types/[email protected]
  - @types/[email protected]
@@ -351,7 +350,7 @@ THE SOFTWARE.
 
 The following NPM package may be included in this product:
 
- - acorn@8.12.1
+ - acorn@8.14.0
 
 This package contains the following license and notice below:
 
@@ -718,16 +717,12 @@ Apache License
 
 The following NPM packages may be included in this product:
 
- - [email protected]
  - [email protected]
  - [email protected]
- - [email protected]
  - [email protected]
  - [email protected]
- - [email protected]
  - [email protected]
  - [email protected]
- - [email protected]
  - [email protected]
 
 These packages each contain the following license and notice below:
@@ -837,12 +832,11 @@ SOFTWARE.
 
 -----------
 
-The following NPM packages may be included in this product:
+The following NPM package may be included in this product:
 
- - [email protected]
  - [email protected]
 
-These packages each contain the following license and notice below:
+This package contains the following license and notice below:
 
 Copyright (c) 2011-2016 Heather Arthur <[email protected]>
 
@@ -867,12 +861,11 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 -----------
 
-The following NPM packages may be included in this product:
+The following NPM package may be included in this product:
 
- - [email protected]
  - [email protected]
 
-These packages each contain the following license and notice below:
+This package contains the following license and notice below:
 
 The MIT License (MIT)
 Copyright (c) 2015 Dmitry Ivanov
@@ -1161,36 +1154,6 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 -----------
 
-The following NPM package may be included in this product:
-
- - [email protected]
-
-This package contains the following license and notice below:
-
-The MIT License (MIT)
-
-Copyright (c) Sindre Sorhus <[email protected]> (sindresorhus.com)
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
------------
-
 The following NPM package may be included in this product:
 
  - [email protected]
@@ -1282,7 +1245,7 @@ THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 The following NPM package may be included in this product:
 
- - [email protected].0
+ - [email protected].1
 
 This package contains the following license and notice below:
 
@@ -1894,7 +1857,7 @@ OTHER DEALINGS IN THE SOFTWARE.
 
 The following NPM package may be included in this product:
 
- - parse5@7.1.2
+ - parse5@7.2.1
 
 This package contains the following license and notice below:
 
@@ -1922,7 +1885,7 @@ THE SOFTWARE.
 
 The following NPM package may be included in this product:
 
- - [email protected].0
+ - [email protected].1
 
 This package contains the following license and notice below:
 
@@ -1976,7 +1939,7 @@ THE SOFTWARE.
 
 The following NPM package may be included in this product:
 
- - psl@1.9.0
+ - psl@1.10.0
 
 This package contains the following license and notice below:
 

diff --git a/packages/chat-core-aws-connect/package.json b/packages/chat-core-aws-connect/package.json
@@ -47,13 +47,13 @@
         "amazon-connect-chatjs": "^2.3.0"
     },
     "devDependencies": {
-        "@babel/preset-env": "^7.21.5",
+        "@babel/preset-env": "^7.26.0",
         "@babel/preset-typescript": "^7.21.5",
         "@microsoft/api-documenter": "^7.22.4",
         "@microsoft/api-extractor": "^7.34.8",
         "@types/jest": "^29.5.1",
         "@types/node-fetch": "^2.6.4",
-        "@yext/eslint-config": "^1.0.0",
+        "@yext/eslint-config": "^1.0.2",
         "babel-jest": "^29.5.0",
         "@yext/chat-core": "^0.9.1",
         "dotenv": "^16.4.5",

diff --git a/packages/chat-core-zendesk/package.json b/packages/chat-core-zendesk/package.json
@@ -50,14 +50,14 @@
     "smooch": "5.6.0"
   },
   "devDependencies": {
-    "@babel/preset-env": "^7.21.5",
+    "@babel/preset-env": "^7.26.0",
     "@babel/preset-typescript": "^7.21.5",
     "@microsoft/api-documenter": "^7.22.4",
     "@microsoft/api-extractor": "^7.34.8",
     "@types/jest": "^29.5.1",
     "@types/smooch": "^5.3.7",
     "@yext/chat-core": "^0.9.1",
-    "@yext/eslint-config": "^1.0.0",
+    "@yext/eslint-config": "^1.0.2",
     "babel-jest": "^29.5.0",
     "eslint": "^8.39.0",
     "generate-license-file": "^1.0.0",

diff --git a/packages/chat-core-zendesk/src/infra/ChatCoreZendeskImpl.ts b/packages/chat-core-zendesk/src/infra/ChatCoreZendeskImpl.ts
@@ -65,7 +65,9 @@ export class ChatCoreZendeskImpl implements ChatCoreZendesk {
    * mode on the first invocation. Subsequent calls to this method will create a
    * new conversation session.
    */
-  async init(messageRsp: MessageResponse): Promise<ChatCoreZendeskSessionCredentials> {
+  async init(
+    messageRsp: MessageResponse
+  ): Promise<ChatCoreZendeskSessionCredentials> {
     await this.initializeZendeskSdk();
     return this.createZendeskConversation(messageRsp);
   }
@@ -225,7 +227,9 @@ export class ChatCoreZendeskImpl implements ChatCoreZendesk {
     this.conversationId = undefined;
   }
 
-  async reinitializeSession(credentials: ChatCoreZendeskSessionCredentials): Promise<void> {
+  async reinitializeSession(
+    credentials: ChatCoreZendeskSessionCredentials
+  ): Promise<void> {
     this.conversationId = credentials.conversationId;
     await this.initializeZendeskSdk();
     await Smooch.loadConversation(credentials.conversationId);

diff --git a/packages/chat-core-zendesk/src/models/ChatCoreZendesk.ts b/packages/chat-core-zendesk/src/models/ChatCoreZendesk.ts
@@ -13,7 +13,9 @@ export interface ChatCoreZendesk {
    *
    * @param messageResponse - The response returned from a successful call to the Chat API.
    */
-  init(messageResponse: MessageResponse): Promise<ChatCoreZendeskSessionCredentials>;
+  init(
+    messageResponse: MessageResponse
+  ): Promise<ChatCoreZendeskSessionCredentials>;
 
   /**
    * Register a callback for an event triggered within the Zendesk chat session.
@@ -59,5 +61,7 @@ export interface ChatCoreZendesk {
    *
    * @param credentials - The credentials to use to reinitialize the session.
    */
-  reinitializeSession(credentials: ChatCoreZendeskSessionCredentials): Promise<void>;
+  reinitializeSession(
+    credentials: ChatCoreZendeskSessionCredentials
+  ): Promise<void>;
 }
diff --git a/packages/chat-core-zendesk/src/models/ChatCoreZendeskSessionCredentials.ts b/packages/chat-core-zendesk/src/models/ChatCoreZendeskSessionCredentials.ts
@@ -1,12 +1,12 @@
 /**
  * Credentials for the Zendesk session created by the {@link ChatCoreZendesk}.
  * Used for reinitializing the session across page reloads.
- * 
+ *
  * @public
  */
 export interface ChatCoreZendeskSessionCredentials {
   /**
    * The conversation ID for the current chat session.
    */
   conversationId: string;
-}
+}
diff --git a/packages/chat-core-zendesk/tests/ChatCoreZendesk.test.ts b/packages/chat-core-zendesk/tests/ChatCoreZendesk.test.ts
@@ -63,7 +63,7 @@ describe("chat session initialization", () => {
     const chatCoreZendesk = provideChatCoreZendesk(mockConfig);
     await expect(
       chatCoreZendesk.init(mockMessageResponse())
-    ).resolves.toStrictEqual({conversationId: "mock-conversation-id"});
+    ).resolves.toStrictEqual({ conversationId: "mock-conversation-id" });
   });
 
   it("avoid rendering smooch web widget on subsequent initialization", async () => {

diff --git a/packages/chat-core/package.json b/packages/chat-core/package.json
@@ -47,13 +47,13 @@
     "cross-fetch": "^3.1.5"
   },
   "devDependencies": {
-    "@babel/preset-env": "^7.21.5",
+    "@babel/preset-env": "^7.26.0",
     "@babel/preset-typescript": "^7.21.5",
     "@microsoft/api-documenter": "^7.22.4",
     "@microsoft/api-extractor": "^7.34.8",
     "@types/jest": "^29.5.1",
     "@types/node-fetch": "^2.6.4",
-    "@yext/eslint-config": "^1.0.0",
+    "@yext/eslint-config": "^1.0.2",
     "babel-jest": "^29.5.0",
     "eslint": "^8.39.0",
     "generate-license-file": "^1.0.0",