Fix fast-xml-parser security vulnerability (#654)

jpmorganchase · Sep 9, 2024 · c8fa528 · c8fa528
1 parent 90502a9
commit c8fa528
Show file tree

Hide file tree

Showing 8 changed files with 1,127 additions and 1,027 deletions.
diff --git a/package.json b/package.json
@@ -60,8 +60,8 @@
     "@testing-library/user-event": "^14.0.0",
     "@types/lodash-es": "^4.17.6",
     "@types/node": "^17.0.24",
-    "@typescript-eslint/eslint-plugin": "5.38.0",
-    "@typescript-eslint/parser": "5.38.0",
+    "@typescript-eslint/eslint-plugin": "^7.0.0",
+    "@typescript-eslint/parser": "^7.0.0",
     "@vanilla-extract/esbuild-plugin": "^2.0.0",
     "@vitest/coverage-istanbul": "^2.0.0",
     "concurrently": "^7.1.0",

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -49,7 +49,7 @@
     "@jpmorganchase/mosaic-plugins": "^0.1.0-beta.85",
     "@jpmorganchase/mosaic-standard-generator": "^0.1.0-beta.85",
     "@jpmorganchase/mosaic-source-local-folder": "^0.1.0-beta.85",
-    "@aws-sdk/client-s3": "^3.359.0",
+    "@aws-sdk/client-s3": "^3.645.0",
     "@fastify/middie": "^8.3.0",
     "@fastify/websocket": "^8.2.0",
     "commander": "^9.4.1",

diff --git a/packages/site-middleware/package.json b/packages/site-middleware/package.json
@@ -35,7 +35,7 @@
     "typescript": "^4.8.3"
   },
   "dependencies": {
-    "@aws-sdk/client-s3": "^3.256.0",
+    "@aws-sdk/client-s3": "^3.645.0",
     "@jpmorganchase/mosaic-schemas": "^0.1.0-beta.85",
     "@jpmorganchase/mosaic-store": "^0.1.0-beta.85",
     "@jpmorganchase/mosaic-types": "^0.1.0-beta.85",

diff --git a/packages/site-middleware/src/__tests__/withMDXContent.test.ts b/packages/site-middleware/src/__tests__/withMDXContent.test.ts
@@ -1,7 +1,7 @@
 import { describe, expect, test, vi, beforeAll, afterAll } from 'vitest';
 import { GetObjectCommand, S3Client } from '@aws-sdk/client-s3';
 import { AwsStub, mockClient } from 'aws-sdk-client-mock';
-import { sdkStreamMixin } from '@aws-sdk/util-stream';
+import { sdkStreamMixin } from '@smithy/util-stream';
 import { Readable } from 'stream';
 import createFetchMock from 'vitest-fetch-mock';
 

diff --git a/packages/site-middleware/src/__tests__/withSearchIndex.test.ts b/packages/site-middleware/src/__tests__/withSearchIndex.test.ts
@@ -1,7 +1,7 @@
 import { describe, expect, beforeAll, afterAll, test, afterEach, beforeEach, vi } from 'vitest';
 import { GetObjectCommand, HeadObjectCommand, S3Client } from '@aws-sdk/client-s3';
 import { AwsStub, mockClient } from 'aws-sdk-client-mock';
-import { sdkStreamMixin } from '@aws-sdk/util-stream';
+import { sdkStreamMixin } from '@smithy/util-stream';
 import { Readable } from 'stream';
 import createFetchMock from 'vitest-fetch-mock';
 const mockFs = require('mock-fs');

diff --git a/packages/site-middleware/src/__tests__/withSharedConfig.test.ts b/packages/site-middleware/src/__tests__/withSharedConfig.test.ts
@@ -1,7 +1,7 @@
 import { describe, test, expect, beforeAll, afterAll, beforeEach, afterEach, vi } from 'vitest';
 import { GetObjectCommand, HeadObjectCommand, S3Client } from '@aws-sdk/client-s3';
 import { AwsStub, mockClient } from 'aws-sdk-client-mock';
-import { sdkStreamMixin } from '@aws-sdk/util-stream';
+import { sdkStreamMixin } from '@smithy/util-stream';
 import { Readable } from 'stream';
 import createFetchMock from 'vitest-fetch-mock';
 import { vol, fs } from 'memfs';

diff --git a/packages/site-middleware/src/loaders/__tests__/createS3Loader.test.ts b/packages/site-middleware/src/loaders/__tests__/createS3Loader.test.ts
@@ -1,7 +1,7 @@
 import { describe, test, expect, beforeAll, afterAll } from 'vitest';
 import { GetObjectCommand, HeadObjectCommand, S3Client } from '@aws-sdk/client-s3';
 import { AwsStub, mockClient } from 'aws-sdk-client-mock';
-import { sdkStreamMixin } from '@aws-sdk/util-stream';
+import { sdkStreamMixin } from '@smithy/util-stream';
 import { Readable } from 'stream';
 
 import { createS3Loader } from '../index.js';