@dwp/govuk-casa 8.16.1 → 8.16.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dwp/govuk-casa",
-  "version": "8.16.1",
+  "version": "8.16.3",
   "description": "A framework for building GOVUK Collect-And-Submit-Applications",
   "repository": {
     "type": "git",
@@ -20,8 +20,8 @@
     "views/**/*"
   ],
   "engines": {
-    "node": "^18.0.0 || ^20.0.0",
-    "npm": "^8.0.0 || ^9.0.0 || ^10.0.0"
+    "node": ">=18 <=22",
+    "npm": ">=8 <=10"
   },
   "scripts": {
     "pipeline": "npm run coverage && npm run lint",
@@ -31,7 +31,7 @@
     "test:e2e": "spiderplan --worker-init ./tests/e2e/worker-init.js --language en ./tests/e2e/personas/**/*.yaml",
     "test:dast": "spiderplan --worker-init ./tests/e2e/worker-init.js --language en ./tests/e2e/personas/**/traversal.yaml --workers 1 --zap --zap-proxy 'http://localhost:8080/' --zap-target-hostname 'host.docker.internal'",
     "test:dast:report": "curl -s --header 'X-ZAP-Api-Key: secret' http://localhost:8080/OTHER/core/other/htmlreport > gl-dast-report.html",
-    "test:dast:setup": "docker run --rm --name casa-dast -d -u zap -p 8080:8080 -i owasp/zap2docker-stable zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:dast:ready-check",
+    "test:dast:setup": "docker run --rm --name casa-dast -d -u zap -p 8080:8080 -i ghcr.io/zaproxy/zaproxy:bare@sha256:24a4037a3e8607d9fedbd75e4a7f1336d11998e1c331aab9991ef074f5de4b22 zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret -notel; npm run test:dast:ready-check",
     "test:dast:ready-check": "while [ \"$(curl -Is -o /dev/null -w %{response_code} http://localhost:8080/)\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done",
     "test:dast:teardown": "docker stop casa-dast",
     "lint": "eslint .",
@@ -48,57 +48,54 @@
   "license": "ISC",
   "type": "module",
   "dependencies": {
-    "@dagrejs/graphlib": "2.2.3",
+    "@dagrejs/graphlib": "2.2.4",
     "bytes": "3.1.2",
-    "cookie-parser": "1.4.6",
+    "cookie-parser": "1.4.7",
     "csrf-sync": "4.0.3",
-    "debug": "4.3.5",
+    "debug": "4.4.0",
     "deepmerge": "4.3.1",
-    "express": "4.20.0",
-    "express-session": "1.18.0",
-    "govuk-frontend": "4.8.0",
-    "helmet": "7.1.0",
-    "i18next": "23.12.1",
-    "i18next-http-middleware": "3.6.0",
+    "express": "4.21.2",
+    "express-session": "1.18.1",
+    "govuk-frontend": "4.9.0",
+    "helmet": "8.0.0",
+    "i18next": "24.2.0",
+    "i18next-http-middleware": "3.7.0",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
-    "luxon": "3.4.4",
+    "luxon": "3.5.0",
     "nunjucks": "3.2.4",
-    "path-to-regexp": "8.1.0",
+    "path-to-regexp": "8.2.0",
     "validator": "13.12.0"
   },
   "devDependencies": {
-    "@babel/core": "7.24.9",
-    "@babel/eslint-parser": "7.24.8",
-    "@babel/preset-env": "7.24.8",
-    "@ckeditor/jsdoc-plugins": "39.6.3",
-    "@commitlint/config-conventional": "18.4.3",
-    "@dwp/casa-spiderplan": "3.1.3",
-    "@dwp/casa-spiderplan-a11y-plugin": "0.1.14",
-    "@dwp/casa-spiderplan-zap-plugin": "0.1.10",
-    "@dwp/eslint-config-base": "7.0.0",
+    "@ckeditor/jsdoc-plugins": "43.0.1",
+    "@commitlint/config-conventional": "19.6.0",
+    "@dwp/casa-spiderplan": "4.1.1",
+    "@dwp/casa-spiderplan-a11y-plugin": "1.0.2",
+    "@dwp/casa-spiderplan-zap-plugin": "1.0.2",
+    "@dwp/eslint-config-base": "9.0.2",
     "@types/express": "4.17.21",
-    "@types/node": "20.14.11",
+    "@types/node": "22.10.2",
     "@types/nunjucks": "3.2.6",
-    "c8": "8.0.1",
-    "chai": "4.3.10",
-    "cheerio": "1.0.0-rc.12",
-    "commitlint": "18.4.3",
+    "c8": "10.1.3",
+    "chai": "5.1.2",
+    "cheerio": "1.0.0",
+    "commitlint": "19.6.1",
     "docdash": "2.0.2",
-    "eslint": "8.57.0",
-    "eslint-plugin-import": "2.29.1",
-    "eslint-plugin-jsdoc": "46.9.1",
+    "eslint": "9.17.0",
+    "eslint-plugin-import": "2.31.0",
+    "eslint-plugin-jsdoc": "50.6.1",
     "eslint-plugin-no-unsafe-regex": "1.0.0",
-    "eslint-plugin-security": "1.7.1",
-    "eslint-plugin-sonarjs": "0.25.1",
-    "fast-check": "3.20.0",
-    "jsdoc": "4.0.3",
+    "eslint-plugin-security": "3.0.1",
+    "eslint-plugin-sonarjs": "3.0.1",
+    "fast-check": "3.23.2",
+    "jsdoc": "4.0.4",
     "jsdoc-tsimport-plugin": "1.0.5",
-    "mocha": "10.6.0",
-    "sass": "1.77.8",
-    "sinon": "17.0.1",
-    "sinon-chai": "3.7.0",
-    "supertest": "6.3.4",
-    "typescript": "5.5.3"
+    "mocha": "11.0.1",
+    "sass": "1.83.0",
+    "sinon": "19.0.2",
+    "sinon-chai": "4.0.0",
+    "supertest": "7.0.0",
+    "typescript": "5.7.2"
   }
 }

package/src/casa.js

@@ -1,17 +1,17 @@
 // NOTE: Any changes made here must be reflected in `scripts/esm-wrapper.js`
-import configure from './lib/configure.js';
-import validators from './lib/validators/index.js';
-import field from './lib/field.js';
-import Plan from './lib/Plan.js';
-import JourneyContext from './lib/JourneyContext.js';
-import ValidatorFactory from './lib/ValidatorFactory.js';
-import ValidationError from './lib/ValidationError.js';
-import MutableRouter from './lib/MutableRouter.js';
-import waypointUrl from './lib/waypoint-url.js';
-import endSession from './lib/end-session.js';
-import * as nunjucksFilters from './lib/nunjucks-filters.js';
-import * as constants from './lib/constants.js';
-import * as contextIdGenerators from './lib/context-id-generators.js';
+import configure from "./lib/configure.js";
+import validators from "./lib/validators/index.js";
+import field from "./lib/field.js";
+import Plan from "./lib/Plan.js";
+import JourneyContext from "./lib/JourneyContext.js";
+import ValidatorFactory from "./lib/ValidatorFactory.js";
+import ValidationError from "./lib/ValidationError.js";
+import MutableRouter from "./lib/MutableRouter.js";
+import waypointUrl from "./lib/waypoint-url.js";
+import endSession from "./lib/end-session.js";
+import * as nunjucksFilters from "./lib/nunjucks-filters.js";
+import * as constants from "./lib/constants.js";
+import * as contextIdGenerators from "./lib/context-id-generators.js";
 
 /** @module @dwp/govuk-casa */
 export {

package/src/lib/CasaTemplateLoader.js

@@ -1,4 +1,4 @@
-import { FileSystemLoader } from 'nunjucks';
+import { FileSystemLoader } from "nunjucks";
 
 /**
  * @access private
@@ -11,19 +11,19 @@ import { FileSystemLoader } from 'nunjucks';
  */
 
 const VALID_BLOCKS = [
-  'beforeContent',
-  'bodyEnd',
-  'bodyStart',
-  'casaPageTitle',
-  'content',
-  'footer',
-  'head',
-  'header',
-  'headIcons',
-  'journey_form',
-  'main',
-  'pageTitle',
-  'skipLink',
+  "beforeContent",
+  "bodyEnd",
+  "bodyStart",
+  "casaPageTitle",
+  "content",
+  "footer",
+  "head",
+  "header",
+  "headIcons",
+  "journey_form",
+  "main",
+  "pageTitle",
+  "skipLink",
 ];
 
 /**
@@ -73,7 +73,9 @@ export default class CasaTemplateLoader extends FileSystemLoader {
   modifyBlock(block, modifier) {
     // Limit to only known block so the user can't do general string replacements
     if (!VALID_BLOCKS.includes(block)) {
-      throw new Error(`Block "${String(block)}" is not a recognised template block.`);
+      throw new Error(
+        `Block "${String(block)}" is not a recognised template block.`,
+      );
     }
 
     this.#blockModifiers.push({
@@ -95,8 +97,10 @@ export default class CasaTemplateLoader extends FileSystemLoader {
       /* eslint-disable-next-line security/detect-object-injection */
       const { block, modifier } = this.#blockModifiers[i];
       if (source.src.indexOf(`block ${block}`) > -1) {
-        /* eslint-disable-next-line no-param-reassign */
-        source.src = source.src.replace(`block ${block} %}`, `block ${block} %}${modifier(name)}`);
+        source.src = source.src.replace(
+          `block ${block} %}`,
+          `block ${block} %}${modifier(name)}`,
+        );
       }
     }
     return source;