@metricinsights/pp-dev 0.16.0 → 0.17.0

package/dist/esm/version-plugin-B1n39tE6.js.map

@@ -1 +1 @@
-{"version":3,"file":"version-plugin-B1n39tE6.js","sources":["../../../src/plugins/version-plugin.ts"],"sourcesContent":[null],"names":["walkDir","dir","baseDir","excludeFile","entries","readdirSync","withFileTypes","files","entry","fullPath","path","join","name","relativePath","relative","replace","isDirectory","push","isFile","sha256OfContent","filePath","content","readFileSync","createHash","update","digest","versionPlugin","config","apply","enforce","closeBundle","enabled","outDir","versionFileTemplate","packageVersion","outDirResolved","resolve","process","cwd","statSync","throwIfNoEntry","manifestDate","Date","toISOString","versionFileName","template","currentDate","resolveVersionFileName","allPaths","checksum","hashesConcatenated","Object","keys","sort","map","p","computeChecksum","manifest","version","date","manifestPath","writeFileSync","JSON","stringify"],"mappings":"4IAkBA,SAASA,EAAQC,EAAaC,EAAiBC,GAC7C,MAAMC,EAAUC,EAAYJ,EAAK,CAAEK,eAAe,IAC5CC,EAAkB,GAExB,IAAK,MAAMC,KAASJ,EAAS,CAC3B,MAAMK,EAAWC,EAAKC,KAAKV,EAAKO,EAAMI,MAChCC,EAAeH,EAAKI,SAASZ,EAASO,GAAUM,QAAQ,MAAO,KAEjEP,EAAMQ,cACRT,EAAMU,QAAQjB,EAAQS,EAAUP,EAASC,IAChCK,EAAMU,UAAYL,IAAiBV,GAC5CI,EAAMU,KAAKR,EAEf,CAEA,OAAOF,CACT,CAEA,SAASY,EAAgBC,GACvB,MAAMC,EAAUC,EAAaF,GAE7B,OAAOG,EAAW,UAAUC,OAAOH,GAASI,OAAO,MACrD,CAmBM,SAAUC,EAAcC,GAC5B,MAAO,CACLf,KAAM,iBACNgB,MAAO,QACPC,QAAS,OAET,WAAAC,GACE,IAAuB,IAAnBH,EAAOI,QACT,OAGF,MAAMC,OAAEA,EAAMC,oBAAEA,EAAmBC,eAAEA,GAAmBP,EAClDQ,EAAiBzB,EAAK0B,QAAQC,QAAQC,MAAON,GAEnD,IAAKO,EAASJ,EAAgB,CAAEK,gBAAgB,KAAUxB,cACxD,OAGF,MACMyB,GADM,IAAIC,MACSC,cAEnBC,EA/BZ,SACEC,EACAX,EACAY,GAEA,OAAOD,EACJ9B,QAAQ,sBAAuBmB,GAC/BnB,QAAQ,mBAAoB+B,EACjC,CAuB8BC,CACtBd,GAAuB,+CACvBC,EAHkBO,EAAa1B,QAAQ,KAAM,MAOzCiC,EAAWhD,EAAQmC,EAAgBA,EAAgBS,GACnDrC,EAAgC,CAAA,EAEtC,IAAK,MAAMa,KAAY4B,EAAU,CAG/BzC,EAFqBG,EAAKI,SAASqB,EAAgBf,GAAUL,QAAQ,MAAO,MAEtDI,EAAgBC,EACxC,CAEA,MAAM6B,EArDZ,SAAyB1C,GACvB,MACM2C,EADcC,OAAOC,KAAK7C,GAAO8C,OACAC,IAAKC,GAAMhD,EAAMgD,IAAI5C,KAAK,IAEjE,OAAOY,EAAW,UAAUC,OAAO0B,GAAoBzB,OAAO,MAChE,CAgDuB+B,CAAgBjD,GAE3BkD,EAA4B,CAChCC,QAAS,IAAIxB,IACbyB,KAAMlB,EACNQ,WACA1C,SAGIqD,EAAelD,EAAKC,KAAKwB,EAAgBS,GAE/CiB,EAAcD,EAAcE,KAAKC,UAAUN,EAAU,KAAM,GAAI,QACjE,EAEJ"}
+{"version":3,"file":"version-plugin-B1n39tE6.js","sources":["../../../../src/plugins/version-plugin.ts"],"sourcesContent":[null],"names":["walkDir","dir","baseDir","excludeFile","entries","readdirSync","withFileTypes","files","entry","fullPath","path","join","name","relativePath","relative","replace","isDirectory","push","isFile","sha256OfContent","filePath","content","readFileSync","createHash","update","digest","versionPlugin","config","apply","enforce","closeBundle","enabled","outDir","versionFileTemplate","packageVersion","outDirResolved","resolve","process","cwd","statSync","throwIfNoEntry","manifestDate","Date","toISOString","versionFileName","template","currentDate","resolveVersionFileName","allPaths","checksum","hashesConcatenated","Object","keys","sort","map","p","computeChecksum","manifest","version","date","manifestPath","writeFileSync","JSON","stringify"],"mappings":"4IAkBA,SAASA,EAAQC,EAAaC,EAAiBC,GAC7C,MAAMC,EAAUC,EAAYJ,EAAK,CAAEK,eAAe,IAC5CC,EAAkB,GAExB,IAAK,MAAMC,KAASJ,EAAS,CAC3B,MAAMK,EAAWC,EAAKC,KAAKV,EAAKO,EAAMI,MAChCC,EAAeH,EAAKI,SAASZ,EAASO,GAAUM,QAAQ,MAAO,KAEjEP,EAAMQ,cACRT,EAAMU,QAAQjB,EAAQS,EAAUP,EAASC,IAChCK,EAAMU,UAAYL,IAAiBV,GAC5CI,EAAMU,KAAKR,EAEf,CAEA,OAAOF,CACT,CAEA,SAASY,EAAgBC,GACvB,MAAMC,EAAUC,EAAaF,GAE7B,OAAOG,EAAW,UAAUC,OAAOH,GAASI,OAAO,MACrD,CAmBM,SAAUC,EAAcC,GAC5B,MAAO,CACLf,KAAM,iBACNgB,MAAO,QACPC,QAAS,OAET,WAAAC,GACE,IAAuB,IAAnBH,EAAOI,QACT,OAGF,MAAMC,OAAEA,EAAMC,oBAAEA,EAAmBC,eAAEA,GAAmBP,EAClDQ,EAAiBzB,EAAK0B,QAAQC,QAAQC,MAAON,GAEnD,IAAKO,EAASJ,EAAgB,CAAEK,gBAAgB,KAAUxB,cACxD,OAGF,MACMyB,GADM,IAAIC,MACSC,cAEnBC,EA/BZ,SACEC,EACAX,EACAY,GAEA,OAAOD,EACJ9B,QAAQ,sBAAuBmB,GAC/BnB,QAAQ,mBAAoB+B,EACjC,CAuB8BC,CACtBd,GAAuB,+CACvBC,EAHkBO,EAAa1B,QAAQ,KAAM,MAOzCiC,EAAWhD,EAAQmC,EAAgBA,EAAgBS,GACnDrC,EAAgC,CAAA,EAEtC,IAAK,MAAMa,KAAY4B,EAAU,CAG/BzC,EAFqBG,EAAKI,SAASqB,EAAgBf,GAAUL,QAAQ,MAAO,MAEtDI,EAAgBC,EACxC,CAEA,MAAM6B,EArDZ,SAAyB1C,GACvB,MACM2C,EADcC,OAAOC,KAAK7C,GAAO8C,OACAC,IAAKC,GAAMhD,EAAMgD,IAAI5C,KAAK,IAEjE,OAAOY,EAAW,UAAUC,OAAO0B,GAAoBzB,OAAO,MAChE,CAgDuB+B,CAAgBjD,GAE3BkD,EAA4B,CAChCC,QAAS,IAAIxB,IACbyB,KAAMlB,EACNQ,WACA1C,SAGIqD,EAAelD,EAAKC,KAAKwB,EAAgBS,GAE/CiB,EAAcD,EAAcE,KAAKC,UAAUN,EAAU,KAAM,GAAI,QACjE,EAEJ"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@metricinsights/pp-dev",
   "type": "module",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Portal Page dev build tool",
   "bin": {
     "pp-dev": "bin/pp-dev.js"
@@ -9,6 +9,7 @@
   "main": "dist/esm/index.js",
   "types": "dist/types/index.d.ts",
   "scripts": {
+    "postinstall": "node scripts/patch-npm-bundled-vulnerabilities.mjs",
     "clean": "rimraf ./dist",
     "prebuild": "npm run clean",
     "build": "npm run build:parallel",
@@ -66,11 +67,13 @@
     "node": ">=22.14"
   },
   "overrides": {
+    "@xmldom/xmldom": ">=0.8.12",
+    "brace-expansion": "5.0.5",
     "chokidar": "^5.0.0",
-    "file-type": "^21.3.3",
+    "file-type": "^22.0.0",
     "minimatch": "10.2.4",
-    "npm": ">=11.11.0",
-    "serialize-javascript": ">=7.0.3",
+    "npm": ">=11.12.1",
+    "serialize-javascript": ">=7.0.5",
     "undici": ">=6.24.0"
   },
   "peerDependencies": {
@@ -83,36 +86,37 @@
     }
   },
   "dependencies": {
-    "axios": "^1.13.6",
+    "axios": "^1.14.0",
     "cac": "^7.0.0",
     "chokidar": "^5.0.0",
     "deepmerge-ts": "^7.1.5",
     "diff-match-patch": "^1.0.5",
     "dir-compare": "^5.0.0",
     "ejs": "^5.0.1",
+    "esbuild": "^0.27.7",
     "express": "^5.2.1",
     "extract-zip": "^2.0.1",
-    "file-type": "^21.3.3",
+    "file-type": "^22.0.0",
     "formdata-node": "^6.0.3",
     "http-proxy-middleware": "^3.0.5",
     "isbinaryfile": "^6.0.0",
-    "jsdom": "^29.0.0",
+    "jsdom": "28.0.0",
     "memory-cache": "^0.2.0",
     "picocolors": "^1.1.1",
-    "rollup": "^4.59.0",
-    "sass": "^1.98.0",
+    "rollup": "^4.60.1",
+    "sass": "^1.99.0",
     "sharp": "^0.34.5",
     "source-map-support": "^0.5.21",
     "svgo": "^4.0.1",
     "svgtofont": "^6.5.1",
-    "typescript": "^5.9.3",
-    "vite": "^8.0.1",
+    "typescript": "^6.0.2",
+    "vite": "^8.0.3",
     "vite-plugin-image-optimizer": "^2.0.3",
     "vite-plugin-zip-pack": "^1.2.4",
     "winston": "^3.19.0"
   },
   "devDependencies": {
-    "@playwright/test": "^1.58.2",
+    "@playwright/test": "^1.59.1",
     "@rollup/plugin-terser": "^1.0.0",
     "@rollup/plugin-typescript": "^12.3.0",
     "@rollup/plugin-url": "^8.0.2",
@@ -122,27 +126,27 @@
     "@types/diff-match-patch": "^1.0.36",
     "@types/ejs": "^3.1.5",
     "@types/express": "^5.0.6",
-    "@types/jsdom": "^28.0.0",
+    "@types/jsdom": "^28.0.1",
     "@types/memory-cache": "^0.2.6",
-    "@types/node": "^25.5.0",
-    "@vitest/coverage-v8": "^4.1.0",
+    "@types/node": "^25.5.2",
+    "@vitest/coverage-v8": "^4.1.2",
     "connect": "^3.7.0",
-    "esbuild": "^0.27.4",
-    "next": "^16.2.0",
+    "next": "^16.2.2",
     "prettier": "^3.8.1",
     "rimraf": "^6.1.3",
-    "rollup-plugin-dts": "^6.4.0",
+    "rollup-plugin-dts": "^6.4.1",
     "rollup-plugin-scss": "^4.0.1",
     "rollup-plugin-visualizer": "7.0.1",
     "semantic-release": "^25.0.3",
     "tslib": "^2.8.1",
     "tsx": "^4.21.0",
-    "vitest": "^4.1.0",
+    "vitest": "^4.1.2",
     "yargs": "^18.0.0"
   },
   "files": [
     "bin",
     "dist",
+    "scripts/patch-npm-bundled-vulnerabilities.mjs",
     "package.json",
     "README.md",
     "LICENSE.md",

package/scripts/patch-npm-bundled-vulnerabilities.mjs

@@ -0,0 +1,30 @@
+/**
+ * The `npm` package vendors dependencies (bundleDependencies). npm overrides do not
+ * replace those copies, so `npm audit` still flags known-fixed versions that exist
+ * hoisted at the project root. Sync patched trees into npm's bundle after install.
+ */
+import { cpSync, existsSync, rmSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const root = join(dirname(fileURLToPath(import.meta.url)), "..");
+const npmRoot = join(root, "node_modules", "npm");
+
+function replaceDir(src, dest) {
+  if (!existsSync(src) || !existsSync(dirname(dest))) {
+    return;
+  }
+  rmSync(dest, { recursive: true, force: true });
+  cpSync(src, dest, { recursive: true });
+}
+
+if (existsSync(npmRoot)) {
+  replaceDir(
+    join(root, "node_modules", "brace-expansion"),
+    join(npmRoot, "node_modules", "brace-expansion"),
+  );
+  replaceDir(
+    join(root, "node_modules", "picomatch"),
+    join(npmRoot, "node_modules", "tinyglobby", "node_modules", "picomatch"),
+  );
+}