@contrast/agent-bundle 5.47.0 → 5.48.0

package/node_modules/process-warning/test/no-warnings.test.js

@@ -1,8 +1,8 @@
 'use strict'
 
-const { test } = require('tap')
-const { spawnSync } = require('child_process')
-const { resolve } = require('path')
+const { test } = require('node:test')
+const { spawnSync } = require('node:child_process')
+const { resolve } = require('node:path')
 
 const entry = resolve(__dirname, '../examples', 'example.js')
 
@@ -14,7 +14,7 @@ test('--no-warnings is set in cli', t => {
   ])
 
   const stderr = child.stderr.toString()
-  t.equal(stderr, '')
+  t.assert.deepStrictEqual(stderr, '')
 })
 
 test('--no-warnings is not set in cli', t => {
@@ -24,7 +24,7 @@ test('--no-warnings is not set in cli', t => {
   ])
 
   const stderr = child.stderr.toString()
-  t.match(stderr, /\[CUSTDEP001\] DeprecationWarning: This is a deprecation warning/)
+  t.assert.match(stderr, /\[CUSTDEP001\] DeprecationWarning: This is a deprecation warning/)
 })
 
 test('NODE_NO_WARNINGS is set to 1', t => {
@@ -38,7 +38,7 @@ test('NODE_NO_WARNINGS is set to 1', t => {
   })
 
   const stderr = child.stderr.toString()
-  t.equal(stderr, '')
+  t.assert.deepStrictEqual(stderr, '')
 })
 
 test('NODE_NO_WARNINGS is set to 0', t => {
@@ -52,7 +52,7 @@ test('NODE_NO_WARNINGS is set to 0', t => {
   })
 
   const stderr = child.stderr.toString()
-  t.match(stderr, /\[CUSTDEP001\] DeprecationWarning: This is a deprecation warning/)
+  t.assert.match(stderr, /\[CUSTDEP001\] DeprecationWarning: This is a deprecation warning/)
 })
 
 test('NODE_NO_WARNINGS is not set', t => {
@@ -62,7 +62,7 @@ test('NODE_NO_WARNINGS is not set', t => {
   ])
 
   const stderr = child.stderr.toString()
-  t.match(stderr, /\[CUSTDEP001\] DeprecationWarning: This is a deprecation warning/)
+  t.assert.match(stderr, /\[CUSTDEP001\] DeprecationWarning: This is a deprecation warning/)
 })
 
 test('NODE_Options contains --no-warnings', t => {
@@ -76,5 +76,5 @@ test('NODE_Options contains --no-warnings', t => {
   })
 
   const stderr = child.stderr.toString()
-  t.equal(stderr, '')
+  t.assert.deepStrictEqual(stderr, '')
 })

package/node_modules/process-warning/test/promise.js

@@ -0,0 +1,10 @@
+module.exports = {
+  withResolvers: function () {
+    let promiseResolve, promiseReject
+    const promise = new Promise((resolve, reject) => {
+      promiseResolve = resolve
+      promiseReject = reject
+    })
+    return { promise, resolve: promiseResolve, reject: promiseReject }
+  }
+}

package/node_modules/process-warning/types/index.d.ts

@@ -27,11 +27,11 @@ declare namespace processWarning {
     createDeprecation(params: DeprecationOptions): WarningItem;
   }
 
-  export function createWarning(params: WarningOptions): WarningItem;
-  export function createDeprecation(params: DeprecationOptions): WarningItem;
+  export function createWarning (params: WarningOptions): WarningItem
+  export function createDeprecation (params: DeprecationOptions): WarningItem
 
-  const processWarning: ProcessWarning;
-  export { processWarning as default };
+  const processWarning: ProcessWarning
+  export { processWarning as default }
 }
 
-export = processWarning;
+export = processWarning

package/node_modules/thread-stream/.github/workflows/ci.yml

@@ -38,15 +38,11 @@ jobs:
       contents: read
     strategy:
       matrix:
-        node-version: [14, 16, 18, 20]
+        node-version: [18, 20, 22]
         os: [macos-latest, ubuntu-latest, windows-latest]
         exclude:
           - os: windows-latest
-            node-version: 14
-          - os: macos-latest
-            node-version: 14
-          - os: macos-latest
-            node-version: 16
+            node-version: 22
 
     steps:
       - name: Check out repo
@@ -66,7 +62,7 @@ jobs:
         run: npm run test:ci
 
       - name: Coveralls Parallel
-        uses: coverallsapp/github-action@v2.2.3
+        uses: coverallsapp/github-action@v2.3.0
         with:
           github-token: ${{ secrets.github_token }}
           parallel: true
@@ -77,7 +73,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Coveralls Finished
-        uses: coverallsapp/github-action@v2.2.3
+        uses: coverallsapp/github-action@v2.3.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           parallel-finished: true

package/node_modules/thread-stream/index.d.ts

@@ -1,5 +1,5 @@
 import { EventEmitter } from 'events'
-import workerThreads from 'worker_threads'
+import * as workerThreads from 'worker_threads'
 
 interface ThreadStreamOptions {
   /**
@@ -76,9 +76,8 @@ declare class ThreadStream extends EventEmitter {
    * @param args the arguments to be passed to the event handlers.
    * @returns {boolean} `true` if the event had listeners, `false` otherwise.
    */
-  emit(eventName: string | symbol, ...args: any[]): boolean {
-    return super.emit(eventName, ...args);
-  }
+  emit(eventName: string | symbol, ...args: any[]): boolean;
+
   /**
    * Post a message to the Worker with specified data and an optional list of transferable objects.
    *
@@ -87,7 +86,7 @@ declare class ThreadStream extends EventEmitter {
    * @param transferList an optional list of transferable objects to be transferred to the Worker context.
    * @returns {boolean} true if the event had listeners, false otherwise.
    */
-  emit(eventName: 'message', message: any, transferList?: Transferable[]): boolean
+  emit(eventName: 'message', message: any, transferList?: workerThreads.TransferListItem[]): boolean
 }
 
 export = ThreadStream;

package/node_modules/thread-stream/lib/worker.js

@@ -48,7 +48,11 @@ async function start () {
       // When bundled with pkg, an undefined error is thrown when called with realImport
       // When bundled with pkg and using node v20, an ERR_VM_DYNAMIC_IMPORT_CALLBACK_MISSING error is thrown when called with realImport
       // More info at: https://github.com/pinojs/thread-stream/issues/143
-      worker = realRequire(decodeURIComponent(filename.replace(process.platform === 'win32' ? 'file:///' : 'file://', '')))
+      try {
+        worker = realRequire(decodeURIComponent(filename.replace(process.platform === 'win32' ? 'file:///' : 'file://', '')))
+      } catch {
+        throw error
+      }
     } else {
       throw error
     }
@@ -159,7 +163,6 @@ process.once('exit', exitCode => {
     process.exit(exitCode)
     return
   }
-
   if (destination?.writableNeedDrain && !destination?.writableEnded) {
     parentPort.postMessage({
       code: 'WARNING',

package/node_modules/thread-stream/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thread-stream",
-  "version": "2.7.0",
+  "version": "3.1.0",
   "description": "A streaming way to send data to a Node.js Worker Thread",
   "main": "index.js",
   "types": "index.d.ts",
@@ -15,7 +15,7 @@
     "fastbench": "^1.0.1",
     "husky": "^9.0.6",
     "pino-elasticsearch": "^8.0.0",
-    "sonic-boom": "^3.0.0",
+    "sonic-boom": "^4.0.1",
     "standard": "^17.0.0",
     "tap": "^16.2.0",
     "ts-node": "^10.8.0",
@@ -23,7 +23,8 @@
     "why-is-node-running": "^2.2.2"
   },
   "scripts": {
-    "test": "standard && npm run transpile && tap \"test/**/*.test.*js\" && tap --ts test/*.test.*ts",
+    "build": "tsc --noEmit",
+    "test": "standard && npm run build && npm run transpile && tap \"test/**/*.test.*js\" && tap --ts test/*.test.*ts",
     "test:ci": "standard && npm run transpile && npm run test:ci:js && npm run test:ci:ts",
     "test:ci:js": "tap --no-check-coverage --timeout=120 --coverage-report=lcovonly \"test/**/*.test.*js\"",
     "test:ci:ts": "tap --ts --no-check-coverage --coverage-report=lcovonly \"test/**/*.test.*ts\"",
@@ -33,7 +34,8 @@
   },
   "standard": {
     "ignore": [
-      "test/ts/**/*"
+      "test/ts/**/*",
+      "test/syntax-error.mjs"
     ]
   },
   "repository": {

package/node_modules/thread-stream/test/base.test.js

@@ -271,3 +271,15 @@ test('destroy does not error', function (t) {
     t.doesNotThrow(() => stream.end())
   })
 })
+
+test('syntax error', function (t) {
+  t.plan(1)
+
+  const stream = new ThreadStream({
+    filename: join(__dirname, 'syntax-error.mjs')
+  })
+
+  stream.on('error', (err) => {
+    t.equal(err.message, 'Unexpected end of input')
+  })
+})

package/node_modules/thread-stream/test/never-drain.test.js

@@ -22,7 +22,9 @@ function retryUntilTimeout (fn, timeout) {
   })
 }
 
-test('emit warning when the worker gracefully exit without the stream ended', async function (t) {
+const isNode18 = process.version.indexOf('v18') === 0
+
+test('emit warning when the worker gracefully exit without the stream ended', { skip: !isNode18 }, async function (t) {
   const expectedWarning = 'ThreadStream: process exited before destination stream was drained. this may indicate that the destination stream try to write to a another missing stream'
   const stream = new ThreadStream({
     filename: join(__dirname, 'to-next.js')

package/node_modules/thread-stream/test/pkg/pkg.test.js

@@ -14,6 +14,8 @@ test('worker test when packaged into executable using pkg', async (t) => {
   // package the app into several node versions, check config for more info
   const filePath = `${join(__dirname, packageName)}.js`
   const configPath = join(__dirname, 'pkg.config.json')
+  process.env.NODE_OPTIONS ||= ''
+  process.env.NODE_OPTIONS = '--no-warnings'
   const { stderr } = await exec(`npx pkg ${filePath} --config ${configPath}`)
 
   // there should be no error when packaging

package/node_modules/thread-stream/test/syntax-error.mjs

@@ -0,0 +1,2 @@
+// this is a syntax error
+import

package/node_modules/thread-stream/tsconfig.json

@@ -0,0 +1,8 @@
+{
+    "compilerOptions": {
+        "esModuleInterop": true
+    },
+    "files": [
+        "index.d.ts"
+    ],
+}

package/node_modules/yaml/browser/dist/compose/compose-collection.js

@@ -59,7 +59,7 @@ function composeCollection(CN, ctx, token, props, onError) {
     let tag = ctx.schema.tags.find(t => t.tag === tagName && t.collection === expType);
     if (!tag) {
         const kt = ctx.schema.knownTags[tagName];
-        if (kt && kt.collection === expType) {
+        if (kt?.collection === expType) {
             ctx.schema.tags.push(Object.assign({}, kt, { default: false }));
             tag = kt;
         }

package/node_modules/yaml/browser/dist/compose/resolve-block-seq.js

@@ -22,7 +22,7 @@ function resolveBlockSeq({ composeNode, composeEmptyNode }, ctx, bs, onError, ta
         });
         if (!props.found) {
             if (props.anchor || props.tag || value) {
-                if (value && value.type === 'block-seq')
+                if (value?.type === 'block-seq')
                     onError(props.end, 'BAD_INDENT', 'All sequence items must start at the same column');
                 else
                     onError(offset, 'MISSING_CHAR', 'Sequence item without - indicator');

package/node_modules/yaml/browser/dist/compose/resolve-flow-collection.js

@@ -133,7 +133,7 @@ function resolveFlowCollection({ composeNode, composeEmptyNode }, ctx, fc, onErr
                 }
             }
             else if (value) {
-                if ('source' in value && value.source && value.source[0] === ':')
+                if ('source' in value && value.source?.[0] === ':')
                     onError(value, 'MISSING_CHAR', `Missing space after : in ${fcName}`);
                 else
                     onError(valueProps.start, 'MISSING_CHAR', `Missing , or : between ${fcName} items`);
@@ -177,7 +177,7 @@ function resolveFlowCollection({ composeNode, composeEmptyNode }, ctx, fc, onErr
     const expectedEnd = isMap ? '}' : ']';
     const [ce, ...ee] = fc.end;
     let cePos = offset;
-    if (ce && ce.source === expectedEnd)
+    if (ce?.source === expectedEnd)
         cePos = ce.offset + ce.source.length;
     else {
         const name = fcName[0].toUpperCase() + fcName.substring(1);

package/node_modules/yaml/browser/dist/errors.js

@@ -46,7 +46,7 @@ const prettifyError = (src, lc) => (error) => {
     if (/[^ ]/.test(lineStr)) {
         let count = 1;
         const end = error.linePos[1];
-        if (end && end.line === line && end.col > col) {
+        if (end?.line === line && end.col > col) {
             count = Math.max(1, Math.min(end.col - col, 80 - ci));
         }
         const pointer = ' '.repeat(ci) + '^'.repeat(count);

package/node_modules/yaml/browser/dist/nodes/Alias.js

@@ -59,7 +59,7 @@ class Alias extends NodeBase {
             data = anchors.get(source);
         }
         /* istanbul ignore if */
-        if (!data || data.res === undefined) {
+        if (data?.res === undefined) {
             const msg = 'This should not happen: Alias anchor was not resolved?';
             throw new ReferenceError(msg);
         }

package/node_modules/yaml/browser/dist/parse/parser.js

@@ -226,7 +226,7 @@ class Parser {
     }
     *step() {
         const top = this.peek(1);
-        if (this.type === 'doc-end' && (!top || top.type !== 'doc-end')) {
+        if (this.type === 'doc-end' && top?.type !== 'doc-end') {
             while (this.stack.length > 0)
                 yield* this.pop();
             this.stack.push({
@@ -758,7 +758,7 @@ class Parser {
             do {
                 yield* this.pop();
                 top = this.peek(1);
-            } while (top && top.type === 'flow-collection');
+            } while (top?.type === 'flow-collection');
         }
         else if (fc.end.length === 0) {
             switch (this.type) {

package/node_modules/yaml/browser/dist/stringify/stringifyNumber.js

@@ -4,7 +4,7 @@ function stringifyNumber({ format, minFractionDigits, tag, value }) {
     const num = typeof value === 'number' ? value : Number(value);
     if (!isFinite(num))
         return isNaN(num) ? '.nan' : num < 0 ? '-.inf' : '.inf';
-    let n = JSON.stringify(value);
+    let n = Object.is(value, -0) ? '-0' : JSON.stringify(value);
     if (!format &&
         minFractionDigits &&
         (!tag || tag === 'tag:yaml.org,2002:float') &&

package/node_modules/yaml/browser/dist/stringify/stringifyPair.js

@@ -101,7 +101,7 @@ function stringifyPair({ key, value }, ctx, onComment, onChompKeep) {
             ws += `\n${indentComment(cs, ctx.indent)}`;
         }
         if (valueStr === '' && !ctx.inFlow) {
-            if (ws === '\n')
+            if (ws === '\n' && valueComment)
                 ws = '\n\n';
         }
         else {

package/node_modules/yaml/dist/compose/compose-collection.js

@@ -61,7 +61,7 @@ function composeCollection(CN, ctx, token, props, onError) {
     let tag = ctx.schema.tags.find(t => t.tag === tagName && t.collection === expType);
     if (!tag) {
         const kt = ctx.schema.knownTags[tagName];
-        if (kt && kt.collection === expType) {
+        if (kt?.collection === expType) {
             ctx.schema.tags.push(Object.assign({}, kt, { default: false }));
             tag = kt;
         }

package/node_modules/yaml/dist/compose/resolve-block-seq.js

@@ -24,7 +24,7 @@ function resolveBlockSeq({ composeNode, composeEmptyNode }, ctx, bs, onError, ta
         });
         if (!props.found) {
             if (props.anchor || props.tag || value) {
-                if (value && value.type === 'block-seq')
+                if (value?.type === 'block-seq')
                     onError(props.end, 'BAD_INDENT', 'All sequence items must start at the same column');
                 else
                     onError(offset, 'MISSING_CHAR', 'Sequence item without - indicator');

package/node_modules/yaml/dist/compose/resolve-flow-collection.js

@@ -135,7 +135,7 @@ function resolveFlowCollection({ composeNode, composeEmptyNode }, ctx, fc, onErr
                 }
             }
             else if (value) {
-                if ('source' in value && value.source && value.source[0] === ':')
+                if ('source' in value && value.source?.[0] === ':')
                     onError(value, 'MISSING_CHAR', `Missing space after : in ${fcName}`);
                 else
                     onError(valueProps.start, 'MISSING_CHAR', `Missing , or : between ${fcName} items`);
@@ -179,7 +179,7 @@ function resolveFlowCollection({ composeNode, composeEmptyNode }, ctx, fc, onErr
     const expectedEnd = isMap ? '}' : ']';
     const [ce, ...ee] = fc.end;
     let cePos = offset;
-    if (ce && ce.source === expectedEnd)
+    if (ce?.source === expectedEnd)
         cePos = ce.offset + ce.source.length;
     else {
         const name = fcName[0].toUpperCase() + fcName.substring(1);

package/node_modules/yaml/dist/errors.js

@@ -48,7 +48,7 @@ const prettifyError = (src, lc) => (error) => {
     if (/[^ ]/.test(lineStr)) {
         let count = 1;
         const end = error.linePos[1];
-        if (end && end.line === line && end.col > col) {
+        if (end?.line === line && end.col > col) {
             count = Math.max(1, Math.min(end.col - col, 80 - ci));
         }
         const pointer = ' '.repeat(ci) + '^'.repeat(count);

package/node_modules/yaml/dist/nodes/Alias.js

@@ -61,7 +61,7 @@ class Alias extends Node.NodeBase {
             data = anchors.get(source);
         }
         /* istanbul ignore if */
-        if (!data || data.res === undefined) {
+        if (data?.res === undefined) {
             const msg = 'This should not happen: Alias anchor was not resolved?';
             throw new ReferenceError(msg);
         }

package/node_modules/yaml/dist/parse/parser.js

@@ -231,7 +231,7 @@ class Parser {
     }
     *step() {
         const top = this.peek(1);
-        if (this.type === 'doc-end' && (!top || top.type !== 'doc-end')) {
+        if (this.type === 'doc-end' && top?.type !== 'doc-end') {
             while (this.stack.length > 0)
                 yield* this.pop();
             this.stack.push({
@@ -763,7 +763,7 @@ class Parser {
             do {
                 yield* this.pop();
                 top = this.peek(1);
-            } while (top && top.type === 'flow-collection');
+            } while (top?.type === 'flow-collection');
         }
         else if (fc.end.length === 0) {
             switch (this.type) {

package/node_modules/yaml/dist/stringify/stringifyNumber.js

@@ -6,7 +6,7 @@ function stringifyNumber({ format, minFractionDigits, tag, value }) {
     const num = typeof value === 'number' ? value : Number(value);
     if (!isFinite(num))
         return isNaN(num) ? '.nan' : num < 0 ? '-.inf' : '.inf';
-    let n = JSON.stringify(value);
+    let n = Object.is(value, -0) ? '-0' : JSON.stringify(value);
     if (!format &&
         minFractionDigits &&
         (!tag || tag === 'tag:yaml.org,2002:float') &&

package/node_modules/yaml/dist/stringify/stringifyPair.js

@@ -103,7 +103,7 @@ function stringifyPair({ key, value }, ctx, onComment, onChompKeep) {
             ws += `\n${stringifyComment.indentComment(cs, ctx.indent)}`;
         }
         if (valueStr === '' && !ctx.inFlow) {
-            if (ws === '\n')
+            if (ws === '\n' && valueComment)
                 ws = '\n\n';
         }
         else {

package/node_modules/yaml/package.json

@@ -1,8 +1,9 @@
 {
   "name": "yaml",
-  "version": "2.8.1",
+  "version": "2.8.2",
   "license": "ISC",
   "author": "Eemeli Aro <eemeli@gmail.com>",
+  "funding": "https://github.com/sponsors/eemeli",
   "repository": "github:eemeli/yaml",
   "description": "JavaScript parser and stringifier for YAML",
   "keywords": [
@@ -73,14 +74,13 @@
     "@babel/preset-env": "^7.12.11",
     "@eslint/js": "^9.9.1",
     "@rollup/plugin-babel": "^6.0.3",
-    "@rollup/plugin-replace": "^5.0.2",
+    "@rollup/plugin-replace": "^6.0.3",
     "@rollup/plugin-typescript": "^12.1.1",
     "@types/jest": "^29.2.4",
     "@types/node": "^20.11.20",
     "babel-jest": "^29.0.1",
-    "cross-env": "^7.0.3",
     "eslint": "^9.9.1",
-    "eslint-config-prettier": "^9.0.0",
+    "eslint-config-prettier": "^10.1.8",
     "fast-check": "^2.12.0",
     "jest": "^29.0.1",
     "jest-resolve": "^29.7.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/agent-bundle",
-  "version": "5.47.0",
+  "version": "5.48.0",
   "description": "Contrast Security Node.js Agent bundle with all dependencies included",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -27,7 +27,7 @@
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/agent": "5.47.0"
+    "@contrast/agent": "5.48.0"
   },
   "bundleDependencies": [
     "@contrast/agent"