@automattic/vip 3.16.1 → 3.17.1

package/dist/bin/vip-import-sql.js

@@ -79,37 +79,117 @@ const SQL_IMPORT_PREFLIGHT_PROGRESS_STEPS = [{
   name: 'Queueing import'
 }];
 
+/**
+ * Check if a string is a valid URL
+ * @param {string} str - The string to check
+ * @returns {boolean} True if the string is a valid URL
+ */
+function isValidUrl(str) {
+  try {
+    new URL(str);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Validate MD5 hash format
+ * @param {string} md5 - The MD5 hash to validate
+ * @returns {boolean} True if the hash is valid
+ */
+function isValidMd5(md5) {
+  return /^[a-f0-9]{32}$/i.test(md5);
+}
+
 /**
  * @param {AppForImport} app
  * @param {EnvForImport} env
- * @param {FileMeta} fileMeta
+ * @param {string} fileNameOrURL
+ * @param {boolean} isUrl
+ * @param {string|null} md5
+ * @param searchReplace
  */
-async function gates(app, env, fileMeta) {
+// eslint-disable-next-line complexity
+async function gates(app, env, fileNameOrURL, isUrl = false, md5 = null, searchReplace = []) {
   const {
     id: envId,
     appId
   } = env;
   const track = _tracker.trackEventWithEnv.bind(null, appId, envId);
-  const {
-    fileName,
-    basename
-  } = fileMeta;
-  try {
-    // Extract base file name and exit if it contains unsafe character
-    (0, _sql.validateFilename)(basename);
-  } catch (error) {
-    await track('import_sql_command_error', {
-      error_type: 'invalid-filename'
-    });
-    exit.withError(error);
+  if (isUrl) {
+    if (!md5) {
+      await track('import_sql_command_error', {
+        error_type: 'missing-md5'
+      });
+      exit.withError('MD5 hash is required when importing from a URL. Please provide the --md5 parameter with a valid MD5 hash of the remote file.');
+    }
+    if (searchReplace.length > 0) {
+      await track('import_sql_command_error', {
+        error_type: 'search-replace-with-url'
+      });
+      exit.withError('Search and replace operations are not supported when importing from a URL. Please remove the --search-replace option.');
+    }
   }
-  try {
-    (0, _sql.validateImportFileExtension)(fileName);
-  } catch (error) {
+  if (md5 && !isValidMd5(md5)) {
     await track('import_sql_command_error', {
-      error_type: 'invalid-extension'
+      error_type: 'invalid-md5'
     });
-    exit.withError(error);
+    exit.withError('The provided MD5 hash is invalid. It should be a 32-character hexadecimal string.');
+  }
+  if (!isUrl && md5) {
+    console.log(_chalk.default.yellowBright('The --md5 parameter is only used for URL imports. It will be ignored for local file imports.'));
+  }
+  if (!isUrl) {
+    const fileName = fileNameOrURL;
+    const fileMeta = await (0, _clientFileUploader.getFileMeta)(fileName);
+    try {
+      // Extract base file name and exit if it contains unsafe character
+      (0, _sql.validateFilename)(fileMeta.basename);
+    } catch (error) {
+      await track('import_sql_command_error', {
+        error_type: 'invalid-filename'
+      });
+      exit.withError(error);
+    }
+    try {
+      (0, _sql.validateImportFileExtension)(fileName);
+    } catch (error) {
+      await track('import_sql_command_error', {
+        error_type: 'invalid-extension'
+      });
+      exit.withError(error);
+    }
+    try {
+      await (0, _clientFileUploader.checkFileAccess)(fileName);
+    } catch (err) {
+      await track('import_sql_command_error', {
+        error_type: 'sqlfile-unreadable'
+      });
+      exit.withError(`File '${fileName}' does not exist or is not readable.`);
+    }
+    if (!(await (0, _clientFileUploader.isFile)(fileName))) {
+      await track('import_sql_command_error', {
+        error_type: 'sqlfile-notfile'
+      });
+      exit.withError(`Path '${fileName}' is not a file.`);
+    }
+    const fileSize = await (0, _clientFileUploader.getFileSize)(fileName);
+    if (!fileSize) {
+      await track('import_sql_command_error', {
+        error_type: 'sqlfile-empty'
+      });
+      exit.withError(`File '${fileName}' is empty.`);
+    }
+    const maxFileSize = env?.launched ? _dbFileImport.SQL_IMPORT_FILE_SIZE_LIMIT_LAUNCHED : _dbFileImport.SQL_IMPORT_FILE_SIZE_LIMIT;
+    if (fileSize > maxFileSize) {
+      await track('import_sql_command_error', {
+        error_type: 'sqlfile-toobig',
+        file_size: fileSize,
+        launched: Boolean(env?.launched)
+      });
+      exit.withError(`The sql import file size (${fileSize} bytes) exceeds the limit (${maxFileSize} bytes).` + (env.launched ? ' Note: This limit is lower for launched environments to maintain site stability.' : '') + '\n\nPlease split it into multiple files or contact support for assistance.');
+    }
   }
   if (!(0, _dbFileImport.currentUserCanImportForApp)(app)) {
     await track('import_sql_command_error', {
@@ -123,36 +203,6 @@ async function gates(app, env, fileMeta) {
     });
     exit.withError('The type of application you specified does not currently support SQL imports.');
   }
-  try {
-    await (0, _clientFileUploader.checkFileAccess)(fileName);
-  } catch (err) {
-    await track('import_sql_command_error', {
-      error_type: 'sqlfile-unreadable'
-    });
-    exit.withError(`File '${fileName}' does not exist or is not readable.`);
-  }
-  if (!(await (0, _clientFileUploader.isFile)(fileName))) {
-    await track('import_sql_command_error', {
-      error_type: 'sqlfile-notfile'
-    });
-    exit.withError(`Path '${fileName}' is not a file.`);
-  }
-  const fileSize = await (0, _clientFileUploader.getFileSize)(fileName);
-  if (!fileSize) {
-    await track('import_sql_command_error', {
-      error_type: 'sqlfile-empty'
-    });
-    exit.withError(`File '${fileName}' is empty.`);
-  }
-  const maxFileSize = env?.launched ? _dbFileImport.SQL_IMPORT_FILE_SIZE_LIMIT_LAUNCHED : _dbFileImport.SQL_IMPORT_FILE_SIZE_LIMIT;
-  if (fileSize > maxFileSize) {
-    await track('import_sql_command_error', {
-      error_type: 'sqlfile-toobig',
-      file_size: fileSize,
-      launched: Boolean(env?.launched)
-    });
-    exit.withError(`The sql import file size (${fileSize} bytes) exceeds the limit (${maxFileSize} bytes).` + (env.launched ? ' Note: This limit is lower for launched environments to maintain site stability.' : '') + '\n\nPlease split it into multiple files or contact support for assistance.');
-  }
   if (!env?.importStatus) {
     await track('import_sql_command_error', {
       error_type: 'empty-import-status'
@@ -186,10 +236,10 @@ const examples = [
   usage: 'vip @example-app.develop import sql file.sql',
   description: 'Import the local SQL database backup file "file.sql" to the develop environment of the "example-app" application.'
 },
-// `search-replace` flag
+// URL import
 {
-  usage: 'vip @example-app.develop import sql file.sql --search-replace="https://from.example.com,https://to.example.com"',
-  description: 'Perform a search and replace operation on the SQL database file during the import process.'
+  usage: 'vip @example-app.develop import sql https://example.org/file.sql --md5 b5b39269e9105d6e1e9cd50ff54e6282',
+  description: 'Import a remote SQL database backup file from the URL with MD5 hash verification to the develop environment of the "example-app" application.'
 },
 // `search-replace` flag
 {
@@ -339,57 +389,68 @@ void (0, _command.default)({
   requiredArgs: 1,
   module: 'import-sql',
   usage
-}).command('status', 'Check the status of a SQL database import currently in progress.').option('skip-validate', 'Do not perform file validation prior to import. If the file contains unsupported entries, the import is likely to fail.').option('search-replace', 'Search for a string in the SQL file and replace it with a new string. Separate the values by a comma only; no spaces (e.g. --search-replace=“from,to”).').option('in-place', 'Overwrite the local input file with the results of the search and replace operation prior to import.').option('output', 'The local file path to save a copy of the results from the search and replace operation when the --search-replace option is passed. Ignored when used with the --in-place option.').option('skip-maintenance-mode', 'Imports data without putting the environment in maintenance mode. Available only for unlaunched environments. Caution: This may cause site instability during import.').examples(examples).argv(process.argv, async (arg, opts) => {
+}).command('status', 'Check the status of a SQL database import currently in progress.').option('skip-validate', 'Do not perform file validation prior to import. If the file contains unsupported entries, the import is likely to fail.').option('search-replace', 'Search for a string in the SQL file and replace it with a new string. Separate the values by a comma only; no spaces (e.g. --search-replace="from,to").').option('in-place', 'Overwrite the local input file with the results of the search and replace operation prior to import.').option('output', 'The local file path to save a copy of the results from the search and replace operation when the --search-replace option is passed. Ignored when used with the --in-place option.').option('skip-maintenance-mode', 'Imports data without putting the environment in maintenance mode. Available only for unlaunched environments. Caution: This may cause site instability during import.').option('md5', 'MD5 hash of the remote SQL file for verification. Required when importing from a URL.').examples(examples)
+// eslint-disable-next-line complexity
+.argv(process.argv, async (arg, opts) => {
   const {
     app,
     env
   } = opts;
-  let {
+  const {
     skipValidate,
     searchReplace,
-    skipMaintenanceMode
+    skipMaintenanceMode,
+    md5
   } = opts;
   const {
     id: envId,
     appId
   } = env;
-  const [fileName] = arg;
+  const [fileNameOrURL] = arg;
   const isMultiSite = await (0, _isMultiSite.isMultiSiteInSiteMeta)(appId, envId);
-  let fileMeta = await (0, _clientFileUploader.getFileMeta)(fileName);
-  if (fileMeta.isCompressed) {
-    console.log(_chalk.default.yellowBright('You are importing a compressed file. Validation and search-replace operations will be skipped.'));
-    skipValidate = true;
-    searchReplace = undefined;
+  const isUrl = isValidUrl(fileNameOrURL);
+  if (isUrl && opts.inPlace) {
+    console.log(_chalk.default.yellowBright('The --in-place option is not supported when importing from a URL. This option will be ignored.'));
+    opts.inPlace = false;
+  }
+  if (isUrl && opts.output) {
+    console.log(_chalk.default.yellowBright('The --output option is not supported when importing from a URL. This option will be ignored.'));
+    opts.output = undefined;
   }
   debug('Options: ', opts);
   debug('Args: ', arg);
   const track = _tracker.trackEventWithEnv.bind(null, appId, envId);
-  await track('import_sql_command_execute');
+  await track('import_sql_command_execute', {
+    is_url: isUrl
+  });
 
-  // // halt operation of the import based on some rules
-  await gates(app, env, fileMeta);
+  // halt operation of the import based on some rules
+  await gates(app, env, fileNameOrURL, isUrl, md5, searchReplace);
 
   // Log summary of import details
   const domain = env?.primaryDomain?.name ? env.primaryDomain.name : `#${env.id}`;
   const formattedEnvironment = (0, _format.formatEnvironment)(opts.env.type);
   const launched = opts.env.launched;
-  let fileNameToUpload = fileName;
+  const fileNameToUpload = fileNameOrURL;
 
-  // SQL file validations
-  const tableNames = await validateAndGetTableNames({
-    skipValidate,
-    appId,
-    envId,
-    fileNameToUpload,
-    searchReplace
-  });
+  // SQL file validations - only for local files
+  let tableNames = [];
+  if (!isUrl) {
+    tableNames = await validateAndGetTableNames({
+      skipValidate,
+      appId,
+      envId,
+      fileNameToUpload,
+      searchReplace
+    });
+  }
 
   // display playbook of what will happen during execution
   displayPlaybook({
     launched,
     tableNames,
     searchReplace,
-    fileName,
+    fileName: fileNameOrURL,
     domain,
     formattedEnvironment,
     unformattedEnvironment: opts.env.type,
@@ -406,7 +467,7 @@ void (0, _command.default)({
     isMultiSite,
     tableNames
   });
-  if (opts.inPlace) {
+  if (!isUrl && opts.inPlace) {
     const approved = await (0, _prompt.confirm)([], 'Are you sure you want to run search and replace on your input file? This operation is not reversible.');
     if (!approved) {
       await (0, _tracker.trackEventWithEnv)('search_replace_in_place_cancelled', {
@@ -433,7 +494,7 @@ void (0, _command.default)({
 =============================================================
 Processing the SQL import for your environment...
 `;
-    progressTracker.suffix = `\n${(0, _format.getGlyphForStatus)(status, progressTracker.runningSprite)} ${status === 'running' ? 'Loading remaining steps' : ''}`; // TODO: maybe use progress tracker status
+    progressTracker.suffix = `\n${(0, _format.getGlyphForStatus)(status, progressTracker.runningSprite)} ${status === 'running' ? 'Loading remaining steps' : ''}`;
   };
   const failWithError = failureError => {
     status = 'failed';
@@ -446,89 +507,101 @@ Processing the SQL import for your environment...
   };
   progressTracker.startPrinting(setProgressTrackerPrefixAndSuffix);
 
-  // Run Search and Replace if the --search-replace flag was provided
-  if (searchReplace && searchReplace.length) {
+  // Run Search and Replace if the --search-replace flag was provided (local files only)
+  if (!isUrl && searchReplace && searchReplace.length) {
     progressTracker.stepRunning('replace');
     const {
       outputFileName
-    } = await (0, _searchAndReplace.searchAndReplace)(fileName, searchReplace, {
+    } = await (0, _searchAndReplace.searchAndReplace)(fileNameOrURL, searchReplace, {
       isImport: true,
       inPlace: opts.inPlace,
       output: opts.output ?? true,
-      // "true" creates a temp output file instead of printing to stdout, as we need to upload the output to S3.
       batchMode: true
     });
     if (typeof outputFileName !== 'string') {
       progressTracker.stepFailed('replace');
       return failWithError('Unable to determine location of the intermediate search and replace file.');
     }
-    fileNameToUpload = outputFileName;
-    fileMeta = await (0, _clientFileUploader.getFileMeta)(fileNameToUpload);
     progressTracker.stepSuccess('replace');
   } else {
     progressTracker.stepSkipped('replace');
   }
-  progressTracker.stepRunning('upload');
 
   // Call the Public API
   const api = (0, _api.default)();
-  const startImportVariables = {};
-  const progressCallback = percentage => {
-    progressTracker.setUploadPercentage(percentage);
-  };
-  fileMeta.fileName = fileNameToUpload;
-  try {
-    const {
-      fileMeta: {
-        basename
-      },
-      checksum: md5,
-      result
-    } = await (0, _clientFileUploader.uploadImportSqlFileToS3)({
-      app,
-      env,
-      fileMeta,
-      progressCallback
-    });
-    startImportVariables.input = {
+  const startImportVariables = {
+    input: {
       id: app.id,
       environmentId: env.id,
-      basename,
-      md5,
-      searchReplace: [],
       skipMaintenanceMode
+    }
+  };
+  if (isUrl) {
+    progressTracker.stepSkipped('upload');
+    startImportVariables.input = {
+      ...startImportVariables.input,
+      url: fileNameOrURL,
+      searchReplace: [],
+      md5
     };
-    if (searchReplace) {
-      let pairs = searchReplace;
-      if (!Array.isArray(pairs)) {
-        pairs = [searchReplace];
-      }
-
-      // determine all the replacements required
-      const replacementsArr = pairs.map(pair => pair.split(',').map(str => str.trim()));
-      startImportVariables.input.searchReplace = replacementsArr.map(arr => {
-        return {
-          from: arr[0],
-          to: arr[1]
-        };
+  } else {
+    progressTracker.stepRunning('upload');
+    const fileMeta = await (0, _clientFileUploader.getFileMeta)(fileNameOrURL);
+    const progressCallback = percentage => {
+      progressTracker.setUploadPercentage(percentage);
+    };
+    fileMeta.fileName = fileNameToUpload;
+    try {
+      const {
+        fileMeta: {
+          basename
+        },
+        checksum: uploadedMD5,
+        result
+      } = await (0, _clientFileUploader.uploadImportSqlFileToS3)({
+        app,
+        env,
+        fileMeta,
+        progressCallback
       });
+      startImportVariables.input = {
+        ...startImportVariables.input,
+        basename,
+        md5: uploadedMD5,
+        searchReplace: []
+      };
+      debug({
+        basename,
+        uploadedMD5,
+        result,
+        startImportVariables
+      });
+      debug('Upload complete. Initiating the import.');
+      progressTracker.stepSuccess('upload');
+      await track('import_sql_upload_complete');
+    } catch (uploadError) {
+      await track('import_sql_command_error', {
+        error_type: 'upload_failed',
+        upload_error: uploadError.message
+      });
+      progressTracker.stepFailed('upload');
+      return failWithError(uploadError);
     }
-    debug({
-      basename,
-      md5,
-      result,
-      startImportVariables
-    });
-    debug('Upload complete. Initiating the import.');
-    progressTracker.stepSuccess('upload');
-    await track('import_sql_upload_complete');
-  } catch (uploadError) {
-    await track('import_sql_command_error', {
-      error_type: 'upload_failed',
-      upload_error: uploadError.message
+  }
+  if (searchReplace) {
+    let pairs = searchReplace;
+    if (!Array.isArray(pairs)) {
+      pairs = [searchReplace];
+    }
+
+    // determine all the replacements required
+    const replacementsArr = pairs.map(pair => pair.split(',').map(str => str.trim()));
+    startImportVariables.input.searchReplace = replacementsArr.map(arr => {
+      return {
+        from: arr[0],
+        to: arr[1]
+      };
     });
-    progressTracker.stepFailed('upload');
-    return failWithError(uploadError);
   }
 
   // Start the import
@@ -541,7 +614,6 @@ Processing the SQL import for your environment...
       startImportResults
     });
   } catch (gqlErr) {
-    progressTracker.stepFailed('queue_import');
     await track('import_sql_command_error', {
       error_type: 'StartImport-failed',
       gql_err: gqlErr

package/docs/CHANGELOG.md

@@ -1,5 +1,39 @@
 ## Changelog
 
+### 3.17.1
+
+* chore: Update Git Hash Checker Github Action
+* build(deps-dev): bump @types/node from 22.15.27 to 22.15.29
+* build(deps-dev): bump @babel/core from 7.27.3 to 7.27.4 in the babel group
+* chore(deps): update `tar-fs` to 2.1.3 to fix CVE-2025-48387
+
+**Full Changelog**: https://github.com/Automattic/vip-cli/compare/3.17.0...3.17.1
+
+### 3.17.0
+
+* Allow URLs in the SQL import command
+
+**Full Changelog**: https://github.com/Automattic/vip-cli/compare/3.16.1...3.17.0
+
+### 3.16.1
+
+* build(deps-dev): bump @types/node from 22.15.24 to 22.15.27
+* fix(dev-env): Support multisite subdirectory/subdomain values in vip-dev-env.yml files
+* chore(deps): update lando
+
+**Full Changelog**: https://github.com/Automattic/vip-cli/compare/3.16.0...3.16.1
+
+### 3.16.0
+
+* build(deps-dev): bump @types/dockerode from 3.3.38 to 3.3.39
+* build(deps-dev): bump @types/node from 22.15.18 to 22.15.21
+* feat(dev-env) Update ES to elasticsearch:8.18.1
+* build(deps-dev): bump @types/node from 22.15.21 to 22.15.24
+* build(deps-dev): bump @babel/core from 7.27.1 to 7.27.3 in the babel group
+
+
+**Full Changelog**: https://github.com/Automattic/vip-cli/compare/3.15.0...3.16.0
+
 ### 3.15.0
 
 * chore(deps): update `lando`

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@automattic/vip",
-  "version": "3.16.1",
+  "version": "3.17.1",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "@automattic/vip",
-      "version": "3.16.1",
+      "version": "3.17.1",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
@@ -110,7 +110,7 @@
       "devDependencies": {
         "@automattic/eslint-plugin-wpvip": "0.13.1",
         "@babel/cli": "7.27.2",
-        "@babel/core": "7.27.3",
+        "@babel/core": "7.27.4",
         "@babel/preset-env": "7.27.2",
         "@babel/preset-typescript": "7.27.1",
         "@jest/globals": "^29.7.0",
@@ -404,9 +404,9 @@
       }
     },
     "node_modules/@babel/core": {
-      "version": "7.27.3",
-      "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.27.3.tgz",
-      "integrity": "sha512-hyrN8ivxfvJ4i0fIJuV4EOlV0WDMz5Ui4StRTgVaAvWeiRCilXgwVvxJKtFQ3TKtHgJscB2YiXKGNJuVwhQMtA==",
+      "version": "7.27.4",
+      "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.27.4.tgz",
+      "integrity": "sha512-bXYxrXFubeYdvB0NhD/NBB3Qi6aZeV20GOWVI47t2dkecCEoneR4NPVcb7abpXDEvejgrUfFtG6vG/zxAKmg+g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -415,10 +415,10 @@
         "@babel/generator": "^7.27.3",
         "@babel/helper-compilation-targets": "^7.27.2",
         "@babel/helper-module-transforms": "^7.27.3",
-        "@babel/helpers": "^7.27.3",
-        "@babel/parser": "^7.27.3",
+        "@babel/helpers": "^7.27.4",
+        "@babel/parser": "^7.27.4",
         "@babel/template": "^7.27.2",
-        "@babel/traverse": "^7.27.3",
+        "@babel/traverse": "^7.27.4",
         "@babel/types": "^7.27.3",
         "convert-source-map": "^2.0.0",
         "debug": "^4.1.0",
@@ -795,9 +795,9 @@
       }
     },
     "node_modules/@babel/helpers": {
-      "version": "7.27.3",
-      "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.27.3.tgz",
-      "integrity": "sha512-h/eKy9agOya1IGuLaZ9tEUgz+uIRXcbtOhRtUyyMf8JFmn1iT13vnl/IGVWSkdOCG/pC57U4S1jnAabAavTMwg==",
+      "version": "7.27.4",
+      "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.27.4.tgz",
+      "integrity": "sha512-Y+bO6U+I7ZKaM5G5rDUZiYfUvQPUibYmAFe7EnKdnKBbVXDZxvp+MWOH5gYciY0EPk4EScsuFMQBbEfpdRKSCQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -809,9 +809,9 @@
       }
     },
     "node_modules/@babel/parser": {
-      "version": "7.27.3",
-      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.27.3.tgz",
-      "integrity": "sha512-xyYxRj6+tLNDTWi0KCBcZ9V7yg3/lwL9DWh9Uwh/RIVlIfFidggcgxKX3GCXwCiswwcGRawBKbEg2LG/Y8eJhw==",
+      "version": "7.27.5",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.27.5.tgz",
+      "integrity": "sha512-OsQd175SxWkGlzbny8J3K8TnnDD0N3lrIUtB92xwyRpzaenGZhxDvxN/JgU00U3CDZNj9tPuDJ5H0WS4Nt3vKg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2160,15 +2160,15 @@
       }
     },
     "node_modules/@babel/traverse": {
-      "version": "7.27.3",
-      "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.27.3.tgz",
-      "integrity": "sha512-lId/IfN/Ye1CIu8xG7oKBHXd2iNb2aW1ilPszzGcJug6M8RCKfVNcYhpI5+bMvFYjK7lXIM0R+a+6r8xhHp2FQ==",
+      "version": "7.27.4",
+      "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.27.4.tgz",
+      "integrity": "sha512-oNcu2QbHqts9BtOWJosOVJapWjBDSxGCpFvikNR5TGDYDQf3JwpIoMzIKrvfoti93cLfPJEG4tH9SPVeyCGgdA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@babel/code-frame": "^7.27.1",
         "@babel/generator": "^7.27.3",
-        "@babel/parser": "^7.27.3",
+        "@babel/parser": "^7.27.4",
         "@babel/template": "^7.27.2",
         "@babel/types": "^7.27.3",
         "debug": "^4.3.1",
@@ -3807,9 +3807,9 @@
       "dev": true
     },
     "node_modules/@types/node": {
-      "version": "22.15.27",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.15.27.tgz",
-      "integrity": "sha512-5fF+eu5mwihV2BeVtX5vijhdaZOfkQTATrePEaXTcKqI16LhJ7gi2/Vhd9OZM0UojcdmiOCVg5rrax+i1MdoQQ==",
+      "version": "22.15.29",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.15.29.tgz",
+      "integrity": "sha512-LNdjOkUDlU1RZb8e1kOIUpN1qQUlzGkEtbVNo53vbrwDg5om6oduhm4SiUaPW5ASTXhAiP0jInWG8Qx9fVlOeQ==",
       "license": "MIT",
       "dependencies": {
         "undici-types": "~6.21.0"
@@ -12252,9 +12252,9 @@
       }
     },
     "node_modules/tar-fs": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.2.tgz",
-      "integrity": "sha512-EsaAXwxmx8UB7FRKqeozqEPop69DXcmYwTQwXvyAPF352HJsPdkVhvTaDPYqfNgruveJIJy3TA2l+2zj8LJIJA==",
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.3.tgz",
+      "integrity": "sha512-090nwYJDmlhwFwEW3QQl+vaNnxsO2yVsd45eTKRBzSzu+hlb1w2K9inVq5b0ngXuLVqQ4ApvsUHHnu/zQNkWAg==",
       "license": "MIT",
       "dependencies": {
         "chownr": "^1.1.1",
@@ -13680,9 +13680,9 @@
       "dev": true
     },
     "@babel/core": {
-      "version": "7.27.3",
-      "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.27.3.tgz",
-      "integrity": "sha512-hyrN8ivxfvJ4i0fIJuV4EOlV0WDMz5Ui4StRTgVaAvWeiRCilXgwVvxJKtFQ3TKtHgJscB2YiXKGNJuVwhQMtA==",
+      "version": "7.27.4",
+      "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.27.4.tgz",
+      "integrity": "sha512-bXYxrXFubeYdvB0NhD/NBB3Qi6aZeV20GOWVI47t2dkecCEoneR4NPVcb7abpXDEvejgrUfFtG6vG/zxAKmg+g==",
       "dev": true,
       "requires": {
         "@ampproject/remapping": "^2.2.0",
@@ -13690,10 +13690,10 @@
         "@babel/generator": "^7.27.3",
         "@babel/helper-compilation-targets": "^7.27.2",
         "@babel/helper-module-transforms": "^7.27.3",
-        "@babel/helpers": "^7.27.3",
-        "@babel/parser": "^7.27.3",
+        "@babel/helpers": "^7.27.4",
+        "@babel/parser": "^7.27.4",
         "@babel/template": "^7.27.2",
-        "@babel/traverse": "^7.27.3",
+        "@babel/traverse": "^7.27.4",
         "@babel/types": "^7.27.3",
         "convert-source-map": "^2.0.0",
         "debug": "^4.1.0",
@@ -13960,9 +13960,9 @@
       }
     },
     "@babel/helpers": {
-      "version": "7.27.3",
-      "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.27.3.tgz",
-      "integrity": "sha512-h/eKy9agOya1IGuLaZ9tEUgz+uIRXcbtOhRtUyyMf8JFmn1iT13vnl/IGVWSkdOCG/pC57U4S1jnAabAavTMwg==",
+      "version": "7.27.4",
+      "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.27.4.tgz",
+      "integrity": "sha512-Y+bO6U+I7ZKaM5G5rDUZiYfUvQPUibYmAFe7EnKdnKBbVXDZxvp+MWOH5gYciY0EPk4EScsuFMQBbEfpdRKSCQ==",
       "dev": true,
       "requires": {
         "@babel/template": "^7.27.2",
@@ -13970,9 +13970,9 @@
       }
     },
     "@babel/parser": {
-      "version": "7.27.3",
-      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.27.3.tgz",
-      "integrity": "sha512-xyYxRj6+tLNDTWi0KCBcZ9V7yg3/lwL9DWh9Uwh/RIVlIfFidggcgxKX3GCXwCiswwcGRawBKbEg2LG/Y8eJhw==",
+      "version": "7.27.5",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.27.5.tgz",
+      "integrity": "sha512-OsQd175SxWkGlzbny8J3K8TnnDD0N3lrIUtB92xwyRpzaenGZhxDvxN/JgU00U3CDZNj9tPuDJ5H0WS4Nt3vKg==",
       "dev": true,
       "requires": {
         "@babel/types": "^7.27.3"
@@ -14818,14 +14818,14 @@
       }
     },
     "@babel/traverse": {
-      "version": "7.27.3",
-      "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.27.3.tgz",
-      "integrity": "sha512-lId/IfN/Ye1CIu8xG7oKBHXd2iNb2aW1ilPszzGcJug6M8RCKfVNcYhpI5+bMvFYjK7lXIM0R+a+6r8xhHp2FQ==",
+      "version": "7.27.4",
+      "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.27.4.tgz",
+      "integrity": "sha512-oNcu2QbHqts9BtOWJosOVJapWjBDSxGCpFvikNR5TGDYDQf3JwpIoMzIKrvfoti93cLfPJEG4tH9SPVeyCGgdA==",
       "dev": true,
       "requires": {
         "@babel/code-frame": "^7.27.1",
         "@babel/generator": "^7.27.3",
-        "@babel/parser": "^7.27.3",
+        "@babel/parser": "^7.27.4",
         "@babel/template": "^7.27.2",
         "@babel/types": "^7.27.3",
         "debug": "^4.3.1",
@@ -16140,9 +16140,9 @@
       "dev": true
     },
     "@types/node": {
-      "version": "22.15.27",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.15.27.tgz",
-      "integrity": "sha512-5fF+eu5mwihV2BeVtX5vijhdaZOfkQTATrePEaXTcKqI16LhJ7gi2/Vhd9OZM0UojcdmiOCVg5rrax+i1MdoQQ==",
+      "version": "22.15.29",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.15.29.tgz",
+      "integrity": "sha512-LNdjOkUDlU1RZb8e1kOIUpN1qQUlzGkEtbVNo53vbrwDg5om6oduhm4SiUaPW5ASTXhAiP0jInWG8Qx9fVlOeQ==",
       "requires": {
         "undici-types": "~6.21.0"
       }
@@ -22223,9 +22223,9 @@
       }
     },
     "tar-fs": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.2.tgz",
-      "integrity": "sha512-EsaAXwxmx8UB7FRKqeozqEPop69DXcmYwTQwXvyAPF352HJsPdkVhvTaDPYqfNgruveJIJy3TA2l+2zj8LJIJA==",
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.3.tgz",
+      "integrity": "sha512-090nwYJDmlhwFwEW3QQl+vaNnxsO2yVsd45eTKRBzSzu+hlb1w2K9inVq5b0ngXuLVqQ4ApvsUHHnu/zQNkWAg==",
       "requires": {
         "chownr": "^1.1.1",
         "mkdirp-classic": "^0.5.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automattic/vip",
-  "version": "3.16.1",
+  "version": "3.17.1",
   "description": "The VIP Javascript library & CLI",
   "main": "index.js",
   "bin": {
@@ -109,7 +109,7 @@
   "devDependencies": {
     "@automattic/eslint-plugin-wpvip": "0.13.1",
     "@babel/cli": "7.27.2",
-    "@babel/core": "7.27.3",
+    "@babel/core": "7.27.4",
     "@babel/preset-env": "7.27.2",
     "@babel/preset-typescript": "7.27.1",
     "@jest/globals": "^29.7.0",