@gemeentenijmegen/webapp 1.1.14 → 1.1.15

package/node_modules/@smithy/util-defaults-mode-node/README.md

@@ -3,8 +3,15 @@
 [![NPM version](https://img.shields.io/npm/v/@smithy/util-defaults-mode-node/latest.svg)](https://www.npmjs.com/package/@smithy/util-defaults-mode-node)
 [![NPM downloads](https://img.shields.io/npm/dm/@smithy/util-defaults-mode-node.svg)](https://www.npmjs.com/package/@smithy/util-defaults-mode-node)
 
-> An internal package
+### :warning: Internal API :warning:
 
-## Usage
+> This is an internal package.
+> That means this is used as a dependency for other, public packages, but
+> should not be taken directly as a dependency in your application's `package.json`.
 
-You probably shouldn't, at least directly.
+> If you are updating the version of this package, for example to bring in a
+> bug-fix, you should do so by updating your application lockfile with
+> e.g. `npm up @scope/package` or equivalent command in another
+> package manager, rather than taking a direct dependency.
+
+---

package/node_modules/@smithy/util-defaults-mode-node/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/util-defaults-mode-node",
-  "version": "4.2.45",
+  "version": "4.2.48",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types && yarn build:types:downlevel'",
     "build:cjs": "node ../../scripts/inline util-defaults-mode-node",
@@ -24,11 +24,11 @@
   "license": "Apache-2.0",
   "sideEffects": false,
   "dependencies": {
-    "@smithy/config-resolver": "^4.4.11",
+    "@smithy/config-resolver": "^4.4.13",
     "@smithy/credential-provider-imds": "^4.2.12",
     "@smithy/node-config-provider": "^4.3.12",
     "@smithy/property-provider": "^4.2.12",
-    "@smithy/smithy-client": "^4.12.6",
+    "@smithy/smithy-client": "^4.12.8",
     "@smithy/types": "^4.13.1",
     "tslib": "^2.6.2"
   },

package/node_modules/@smithy/util-retry/dist-cjs/index.js

@@ -17,8 +17,8 @@ class DefaultRateLimiter {
     minFillRate;
     scaleConstant;
     smooth;
-    currentCapacity = 0;
     enabled = false;
+    availableTokens = 0;
     lastMaxRate = 0;
     measuredTxRate = 0;
     requestCount = 0;
@@ -51,11 +51,11 @@ class DefaultRateLimiter {
             return;
         }
         this.refillTokenBucket();
-        if (amount > this.currentCapacity) {
-            const delay = ((amount - this.currentCapacity) / this.fillRate) * 1000;
+        if (amount > this.availableTokens) {
+            const delay = ((amount - this.availableTokens) / this.fillRate) * 1000;
             await new Promise((resolve) => DefaultRateLimiter.setTimeoutFn(resolve, delay));
         }
-        this.currentCapacity = this.currentCapacity - amount;
+        this.availableTokens = this.availableTokens - amount;
     }
     refillTokenBucket() {
         const timestamp = this.getCurrentTimeInSeconds();
@@ -64,13 +64,15 @@ class DefaultRateLimiter {
             return;
         }
         const fillAmount = (timestamp - this.lastTimestamp) * this.fillRate;
-        this.currentCapacity = Math.min(this.maxCapacity, this.currentCapacity + fillAmount);
+        this.availableTokens = Math.min(this.maxCapacity, this.availableTokens + fillAmount);
         this.lastTimestamp = timestamp;
     }
     updateClientSendingRate(response) {
         let calculatedRate;
         this.updateMeasuredRate();
-        if (serviceErrorClassification.isThrottlingError(response)) {
+        const retryErrorInfo = response;
+        const isThrottling = retryErrorInfo?.errorType === "THROTTLING" || serviceErrorClassification.isThrottlingError(retryErrorInfo?.error ?? response);
+        if (isThrottling) {
             const rateToUse = !this.enabled ? this.measuredTxRate : Math.min(this.measuredTxRate, this.fillRate);
             this.lastMaxRate = rateToUse;
             this.calculateTimeWindow();
@@ -101,7 +103,7 @@ class DefaultRateLimiter {
         this.refillTokenBucket();
         this.fillRate = Math.max(newRate, this.minFillRate);
         this.maxCapacity = Math.max(newRate, this.minCapacity);
-        this.currentCapacity = Math.min(this.currentCapacity, this.maxCapacity);
+        this.availableTokens = Math.min(this.availableTokens, this.maxCapacity);
     }
     updateMeasuredRate() {
         const t = this.getCurrentTimeInSeconds();

package/node_modules/@smithy/util-retry/dist-es/DefaultRateLimiter.js

@@ -6,8 +6,8 @@ export class DefaultRateLimiter {
     minFillRate;
     scaleConstant;
     smooth;
-    currentCapacity = 0;
     enabled = false;
+    availableTokens = 0;
     lastMaxRate = 0;
     measuredTxRate = 0;
     requestCount = 0;
@@ -40,11 +40,11 @@ export class DefaultRateLimiter {
             return;
         }
         this.refillTokenBucket();
-        if (amount > this.currentCapacity) {
-            const delay = ((amount - this.currentCapacity) / this.fillRate) * 1000;
+        if (amount > this.availableTokens) {
+            const delay = ((amount - this.availableTokens) / this.fillRate) * 1000;
             await new Promise((resolve) => DefaultRateLimiter.setTimeoutFn(resolve, delay));
         }
-        this.currentCapacity = this.currentCapacity - amount;
+        this.availableTokens = this.availableTokens - amount;
     }
     refillTokenBucket() {
         const timestamp = this.getCurrentTimeInSeconds();
@@ -53,13 +53,15 @@ export class DefaultRateLimiter {
             return;
         }
         const fillAmount = (timestamp - this.lastTimestamp) * this.fillRate;
-        this.currentCapacity = Math.min(this.maxCapacity, this.currentCapacity + fillAmount);
+        this.availableTokens = Math.min(this.maxCapacity, this.availableTokens + fillAmount);
         this.lastTimestamp = timestamp;
     }
     updateClientSendingRate(response) {
         let calculatedRate;
         this.updateMeasuredRate();
-        if (isThrottlingError(response)) {
+        const retryErrorInfo = response;
+        const isThrottling = retryErrorInfo?.errorType === "THROTTLING" || isThrottlingError(retryErrorInfo?.error ?? response);
+        if (isThrottling) {
             const rateToUse = !this.enabled ? this.measuredTxRate : Math.min(this.measuredTxRate, this.fillRate);
             this.lastMaxRate = rateToUse;
             this.calculateTimeWindow();
@@ -90,7 +92,7 @@ export class DefaultRateLimiter {
         this.refillTokenBucket();
         this.fillRate = Math.max(newRate, this.minFillRate);
         this.maxCapacity = Math.max(newRate, this.minCapacity);
-        this.currentCapacity = Math.min(this.currentCapacity, this.maxCapacity);
+        this.availableTokens = Math.min(this.availableTokens, this.maxCapacity);
     }
     updateMeasuredRate() {
         const t = this.getCurrentTimeInSeconds();

package/node_modules/@smithy/util-retry/dist-types/DefaultRateLimiter.d.ts

@@ -3,10 +3,30 @@ import type { RateLimiter } from "./types";
  * @public
  */
 export interface DefaultRateLimiterOptions {
+    /**
+     * Coefficient for controlling how aggressively the rate decreases on throttle.
+     * @defaultValue 0.7
+     */
     beta?: number;
+    /**
+     * Minimum token bucket capacity in adaptive-tokens.
+     * @defaultValue 1
+     */
     minCapacity?: number;
+    /**
+     * Minimum fill rate in adaptive-tokens per second.
+     * @defaultValue 0.5
+     */
     minFillRate?: number;
+    /**
+     * Scale constant used in the cubic rate calculation.
+     * @defaultValue 0.4
+     */
     scaleConstant?: number;
+    /**
+     * Smoothing factor for the exponential moving average of the measured send rate.
+     * @defaultValue 0.8
+     */
     smooth?: number;
 }
 /**
@@ -22,16 +42,51 @@ export declare class DefaultRateLimiter implements RateLimiter {
     private minFillRate;
     private scaleConstant;
     private smooth;
-    private currentCapacity;
+    /**
+     * Whether adaptive retry rate limiting is active.
+     * Remains `false` until a throttling error is detected.
+     */
     private enabled;
+    /**
+     * Current number of available adaptive-tokens. When exhausted, requests wait based on fill rate.
+     */
+    private availableTokens;
+    /**
+     * The most recent maximum fill rate in adaptive-tokens per second, recorded at the last throttle event.
+     */
     private lastMaxRate;
+    /**
+     * Smoothed measured send rate in requests per second.
+     */
     private measuredTxRate;
+    /**
+     * Number of requests observed in the current measurement time bucket.
+     */
     private requestCount;
+    /**
+     * Current token bucket fill rate in adaptive-tokens per second. Defaults to {@link minFillRate}.
+     */
     private fillRate;
+    /**
+     * Timestamp in seconds of the most recent throttle event.
+     */
     private lastThrottleTime;
+    /**
+     * Timestamp in seconds of the last token bucket refill.
+     */
     private lastTimestamp;
+    /**
+     * The time bucket (in seconds) used for measuring the send rate.
+     */
     private lastTxRateBucket;
+    /**
+     * Maximum token bucket capacity in adaptive-tokens. Defaults to {@link minCapacity}.
+     * Updated in {@link updateTokenBucketRate} to match the new fill rate, floored by {@link minCapacity}.
+     */
     private maxCapacity;
+    /**
+     * Calculated time window in seconds used in the cubic rate recovery function.
+     */
     private timeWindow;
     constructor(options?: DefaultRateLimiterOptions);
     private getCurrentTimeInSeconds;
@@ -40,9 +95,24 @@ export declare class DefaultRateLimiter implements RateLimiter {
     private refillTokenBucket;
     updateClientSendingRate(response: any): void;
     private calculateTimeWindow;
+    /**
+     * Returns a new fill rate in adaptive-tokens per second by reducing
+     * the given rate by a factor of {@link beta}.
+     */
     private cubicThrottle;
+    /**
+     * Returns a new fill rate in adaptive-tokens per second using a CUBIC
+     * congestion control curve. The rate recovers toward {@link lastMaxRate},
+     * then continues growing beyond it. The caller caps the result at
+     * `2 * measuredTxRate`.
+     */
     private cubicSuccess;
     private enableTokenBucket;
+    /**
+     * Set a new fill rate for adaptive-tokens.
+     * The max capacity is updated to allow for one second of time to approximately
+     * refill the adaptive-token capacity.
+     */
     private updateTokenBucketRate;
     private updateMeasuredRate;
     private getPrecise;

package/node_modules/@smithy/util-retry/dist-types/ts3.4/DefaultRateLimiter.d.ts

@@ -3,10 +3,30 @@ import { RateLimiter } from "./types";
  * @public
  */
 export interface DefaultRateLimiterOptions {
+    /**
+     * Coefficient for controlling how aggressively the rate decreases on throttle.
+     * @defaultValue 0.7
+     */
     beta?: number;
+    /**
+     * Minimum token bucket capacity in adaptive-tokens.
+     * @defaultValue 1
+     */
     minCapacity?: number;
+    /**
+     * Minimum fill rate in adaptive-tokens per second.
+     * @defaultValue 0.5
+     */
     minFillRate?: number;
+    /**
+     * Scale constant used in the cubic rate calculation.
+     * @defaultValue 0.4
+     */
     scaleConstant?: number;
+    /**
+     * Smoothing factor for the exponential moving average of the measured send rate.
+     * @defaultValue 0.8
+     */
     smooth?: number;
 }
 /**
@@ -22,16 +42,51 @@ export declare class DefaultRateLimiter implements RateLimiter {
     private minFillRate;
     private scaleConstant;
     private smooth;
-    private currentCapacity;
+    /**
+     * Whether adaptive retry rate limiting is active.
+     * Remains `false` until a throttling error is detected.
+     */
     private enabled;
+    /**
+     * Current number of available adaptive-tokens. When exhausted, requests wait based on fill rate.
+     */
+    private availableTokens;
+    /**
+     * The most recent maximum fill rate in adaptive-tokens per second, recorded at the last throttle event.
+     */
     private lastMaxRate;
+    /**
+     * Smoothed measured send rate in requests per second.
+     */
     private measuredTxRate;
+    /**
+     * Number of requests observed in the current measurement time bucket.
+     */
     private requestCount;
+    /**
+     * Current token bucket fill rate in adaptive-tokens per second. Defaults to {@link minFillRate}.
+     */
     private fillRate;
+    /**
+     * Timestamp in seconds of the most recent throttle event.
+     */
     private lastThrottleTime;
+    /**
+     * Timestamp in seconds of the last token bucket refill.
+     */
     private lastTimestamp;
+    /**
+     * The time bucket (in seconds) used for measuring the send rate.
+     */
     private lastTxRateBucket;
+    /**
+     * Maximum token bucket capacity in adaptive-tokens. Defaults to {@link minCapacity}.
+     * Updated in {@link updateTokenBucketRate} to match the new fill rate, floored by {@link minCapacity}.
+     */
     private maxCapacity;
+    /**
+     * Calculated time window in seconds used in the cubic rate recovery function.
+     */
     private timeWindow;
     constructor(options?: DefaultRateLimiterOptions);
     private getCurrentTimeInSeconds;
@@ -40,9 +95,24 @@ export declare class DefaultRateLimiter implements RateLimiter {
     private refillTokenBucket;
     updateClientSendingRate(response: any): void;
     private calculateTimeWindow;
+    /**
+     * Returns a new fill rate in adaptive-tokens per second by reducing
+     * the given rate by a factor of {@link beta}.
+     */
     private cubicThrottle;
+    /**
+     * Returns a new fill rate in adaptive-tokens per second using a CUBIC
+     * congestion control curve. The rate recovers toward {@link lastMaxRate},
+     * then continues growing beyond it. The caller caps the result at
+     * `2 * measuredTxRate`.
+     */
     private cubicSuccess;
     private enableTokenBucket;
+    /**
+     * Set a new fill rate for adaptive-tokens.
+     * The max capacity is updated to allow for one second of time to approximately
+     * refill the adaptive-token capacity.
+     */
     private updateTokenBucketRate;
     private updateMeasuredRate;
     private getPrecise;

package/node_modules/@smithy/util-retry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/util-retry",
-  "version": "4.2.12",
+  "version": "4.2.13",
   "description": "Shared retry utilities to be used in middleware packages.",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",

package/node_modules/@smithy/util-stream/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/util-stream",
-  "version": "4.5.20",
+  "version": "4.5.21",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types && yarn build:types:downlevel'",
     "build:cjs": "node ../../scripts/inline util-stream",
@@ -30,7 +30,7 @@
   "sideEffects": false,
   "dependencies": {
     "@smithy/fetch-http-handler": "^5.3.15",
-    "@smithy/node-http-handler": "^4.5.0",
+    "@smithy/node-http-handler": "^4.5.1",
     "@smithy/types": "^4.13.1",
     "@smithy/util-base64": "^4.3.2",
     "@smithy/util-buffer-from": "^4.2.2",

package/node_modules/@smithy/util-waiter/README.md

@@ -3,8 +3,15 @@
 [![NPM version](https://img.shields.io/npm/v/@smithy/util-waiter/latest.svg)](https://www.npmjs.com/package/@smithy/util-waiter)
 [![NPM downloads](https://img.shields.io/npm/dm/@smithy/util-waiter.svg)](https://www.npmjs.com/package/@smithy/util-waiter)
 
-> An internal package
+### :warning: Internal API :warning:
 
-## Usage
+> This is an internal package.
+> That means this is used as a dependency for other, public packages, but
+> should not be taken directly as a dependency in your application's `package.json`.
 
-You probably shouldn't, at least directly.
+> If you are updating the version of this package, for example to bring in a
+> bug-fix, you should do so by updating your application lockfile with
+> e.g. `npm up @scope/package` or equivalent command in another
+> package manager, rather than taking a direct dependency.
+
+---

package/node_modules/@smithy/util-waiter/package.json

@@ -1,9 +1,8 @@
 {
   "name": "@smithy/util-waiter",
-  "version": "4.2.13",
+  "version": "4.2.14",
   "description": "Shared utilities for client waiters for the AWS SDK",
   "dependencies": {
-    "@smithy/abort-controller": "^4.2.12",
     "@smithy/types": "^4.13.1",
     "tslib": "^2.6.2"
   },
@@ -49,6 +48,7 @@
     "directory": "packages/util-waiter"
   },
   "devDependencies": {
+    "@smithy/abort-controller": "^4.2.12",
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",

package/node_modules/axios/README.md

@@ -1,3 +1,6 @@
+<h3 align="center"> 💎 Platinum sponsors <br> </h3> <table align="center"><tr><td align="center" width="50%"> <a href="https://thanks.dev/?utm_source&#x3D;axios&amp;utm_medium&#x3D;sponsorlist&amp;utm_campaign&#x3D;sponsorship" style="padding: 10px; display: inline-block" target="_blank"> <img width="90px" height="90px" src="https://axios-http.com/assets/sponsors/opencollective/ed51c2ee8f1b70aa3484d6dd678652134079a036.png" alt="THANKS.DEV"/> </a> <p align="center" title="We&#x27;re passionate about making open source sustainable. Scan your dependancy tree to better understand which open source projects need funding the most. Maintainers can also register their projects to become eligible for funding.">We&#x27;re passionate about making open source sustainable. Scan your dependancy tree to better understand which open source projects need funding the...</p> <p align="center"> <a href="https://thanks.dev/?utm_source&#x3D;axios&amp;utm_medium&#x3D;readme_sponsorlist&amp;utm_campaign&#x3D;sponsorship" target="_blank"><b>thanks.dev</b></a> </p>
+</td><td align="center" width="50%"> <a href="https://opencollective.com/axios/contribute" target="_blank" >💜 Become a sponsor</a>
+</td></tr></table>
 <h3 align="center"> 🥇 Gold sponsors <br> </h3> <table align="center" width="100%"><tr width="33.333333333333336%"><td align="center" width="33.333333333333336%"> <a href="https://www.principal.com/about-us?utm_source&#x3D;axios&amp;utm_medium&#x3D;sponsorlist&amp;utm_campaign&#x3D;sponsorship" style="padding: 10px; display: inline-block" target="_blank"> <img width="133px" height="43px" src="https://axios-http.com/assets/sponsors/principal.svg" alt="Principal Financial Group"/> </a> <p align="center" title="We’re bound by one common purpose: to give you the financial tools, resources and information you need to live your best life.">We’re bound by one common purpose: to give you the financial tools, resources and information you ne...</p> <p align="center"> <a href="https://www.principal.com/about-us?utm_source&#x3D;axios&amp;utm_medium&#x3D;readme_sponsorlist&amp;utm_campaign&#x3D;sponsorship" target="_blank"><b>www.principal.com</b></a> </p>
 </td><td align="center" width="33.333333333333336%"> <a href="https://twicsy.com/buy-instagram-followers?utm_source&#x3D;axios&amp;utm_medium&#x3D;sponsorlist&amp;utm_campaign&#x3D;sponsorship" style="padding: 10px; display: inline-block" target="_blank"> <img width="85px" height="70px" src="https://axios-http.com/assets/sponsors/opencollective/dfa9670ad5e66eea17315332453c7f4e3a3b5905.png" alt="Buy Instagram Followers Twicsy"/> </a> <p align="center" title="Buy real Instagram followers from Twicsy starting at only $2.97. Twicsy has been voted the best site to buy followers from the likes of US Magazine.">Buy real Instagram followers from Twicsy starting at only $2.97. Twicsy has been voted the best site...</p> <p align="center"> <a href="https://twicsy.com/buy-instagram-followers?utm_source&#x3D;axios&amp;utm_medium&#x3D;readme_sponsorlist&amp;utm_campaign&#x3D;sponsorship" target="_blank"><b>twicsy.com</b></a> </p>
 </td><td align="center" width="33.333333333333336%"> <a href="https://www.descope.com/?utm_source&#x3D;axios&amp;utm_medium&#x3D;referral&amp;utm_campaign&#x3D;axios-oss-sponsorship" style="padding: 10px; display: inline-block" target="_blank"> <picture> <source width="200px" height="52px" media="(prefers-color-scheme: dark)" srcset="https://axios-http.com/assets/sponsors/descope_white.png"> <img width="200px" height="52px" src="https://axios-http.com/assets/sponsors/descope.png" alt="Descope"/> </picture> </a> <p align="center" title="Hi, we&#x27;re Descope! We are building something in the authentication space for app developers and can’t wait to place it in your hands.">Hi, we&#x27;re Descope! We are building something in the authentication space for app developers and...</p> <p align="center"> <a href="https://www.descope.com/?utm_source&#x3D;axios&amp;utm_medium&#x3D;referral&amp;utm_campaign&#x3D;axios-oss-sponsorship" target="_blank"><b>Website</b></a> | <a href="https://docs.descope.com/?utm_source&#x3D;axios&amp;utm_medium&#x3D;referral&amp;utm_campaign&#x3D;axios-oss-sponsorship" target="_blank"><b>Docs</b></a> | <a href="https://www.descope.com/community?utm_source&#x3D;axios&amp;utm_medium&#x3D;referral&amp;utm_campaign&#x3D;axios-oss-sponsorship" target="_blank"><b>Community</b></a> </p>
@@ -497,6 +500,23 @@ These are the available config options for making requests. Only the `url` is re
   // `undefined` (default) - set XSRF header only for the same origin requests
   withXSRFToken: boolean | undefined | ((config: InternalAxiosRequestConfig) => boolean | undefined),
 
+  // `withXSRFToken` controls whether Axios reads the XSRF cookie and sets the XSRF header.
+  // - `undefined` (default): the XSRF header is set only for same-origin requests.
+  // - `true`: attempt to set the XSRF header for all requests (including cross-origin).
+  // - `false`: never set the XSRF header.
+  // - function: a callback that receives the request `config` and returns `true`,
+  //   `false`, or `undefined` to decide per-request behavior.
+  //
+  // Note about `withCredentials`: `withCredentials` controls whether cross-site
+  // requests include credentials (cookies and HTTP auth). In older Axios versions,
+  // setting `withCredentials: true` implicitly caused Axios to set the XSRF header
+  // for cross-origin requests. Newer Axios separates these concerns: to allow the
+  // XSRF header to be sent for cross-origin requests you should set both
+  // `withCredentials: true` and `withXSRFToken: true`.
+  //
+  // Example:
+  // axios.get('/user', { withCredentials: true, withXSRFToken: true });
+
   // `onUploadProgress` allows handling of progress events for uploads
   // browser & node.js
   onUploadProgress: function ({loaded, total, progress, bytes, estimated, rate, upload = true}) {
@@ -607,7 +627,12 @@ These are the available config options for making requests. Only the `url` is re
   transitional: {
     // silent JSON parsing mode
     // `true`  - ignore JSON parsing errors and set response.data to null if parsing failed (old behaviour)
-    // `false` - throw SyntaxError if JSON parsing failed (Note: responseType must be set to 'json')
+    // `false` - throw SyntaxError if JSON parsing failed
+    // Important: this option only takes effect when `responseType` is explicitly set to 'json'.
+    // When `responseType` is omitted (defaults to no value), axios uses `forcedJSONParsing`
+    // to attempt JSON parsing, but will silently return the raw string on failure regardless
+    // of this setting. To have invalid JSON throw errors, use:
+    //   { responseType: 'json', transitional: { silentJSONParsing: false } }
     silentJSONParsing: true, // default value for the current Axios version
 
     // try to parse the response string as JSON even if `responseType` is not 'json'