botframework-webchat 4.14.1 → 4.15.2-main.20220413.af6e8a3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "botframework-webchat",
-  "version": "4.14.1",
+  "version": "4.15.2-main.20220413.af6e8a3",
   "description": "A highly-customizable web-based chat client for Azure Bot Services.",
   "main": "lib/index.js",
   "typings": "lib/index.d.ts",
@@ -22,68 +22,68 @@
     "build:babel": "babel src --extensions .js,.ts,.tsx --ignore **/*.spec.js,**/*.spec.ts,**/*.spec.tsx,**/*.test.js,**/*.test.ts,**/*.test.tsx,__tests__/**/*.js,__tests__/**/*.ts,__tests__/**/*.tsx --out-dir lib --verbose",
     "build:typescript": "tsc --project src/tsconfig.json",
     "build:webpack": "webpack-cli",
+    "bump": "npm run bump:prod && npm run bump:dev",
+    "bump:dev": "npm install $(cat package.json | jq -r '(.devDependencies | keys) - .skipBump | .[]' | awk '{print $1 \"@latest\"}')",
+    "bump:prod": "npm install --save-exact $(cat package.json | jq -r '(.dependencies | keys) - .skipBump | .[]' | awk '{print $1 \"@latest\"}')",
     "eslint": "npm run precommit",
     "precommit": "npm run precommit:eslint -- src && npm run precommit:typecheck",
-    "precommit:eslint": "eslint",
+    "precommit:eslint": "../../node_modules/.bin/eslint --report-unused-disable-directives --max-warnings 0",
     "precommit:typecheck": "tsc --project ./src --emitDeclarationOnly false --esModuleInterop true --noEmit --pretty false",
     "start": "concurrently --kill-others --names \"babel,tsc,webpack\" \"npm run start:babel\" \"npm run start:typescript\" \"npm run start:webpack\"",
     "start:babel": "npm run build:babel -- --skip-initial-build --watch",
     "start:typescript": "npm run build:typescript -- --watch",
     "start:webpack": "npm run build:webpack -- --watch"
   },
+  "skipBump": [
+    "adaptivecards",
+    "microsoft-cognitiveservices-speech-sdk"
+  ],
   "dependencies": {
-    "@babel/runtime": "7.14.6",
-    "adaptivecards": "2.9.0",
-    "botframework-directlinejs": "0.15.0",
-    "botframework-directlinespeech-sdk": "4.14.1",
-    "botframework-webchat-api": "4.14.1",
-    "botframework-webchat-component": "4.14.1",
-    "botframework-webchat-core": "4.14.1",
+    "@babel/runtime": "7.17.2",
+    "adaptivecards": "2.10.0",
+    "botframework-directlinejs": "0.15.1",
+    "botframework-directlinespeech-sdk": "4.15.2-main.20220413.af6e8a3",
+    "botframework-webchat-api": "4.15.2-main.20220413.af6e8a3",
+    "botframework-webchat-component": "4.15.2-main.20220413.af6e8a3",
+    "botframework-webchat-core": "4.15.2-main.20220413.af6e8a3",
     "classnames": "2.3.1",
-    "core-js": "3.15.2",
-    "markdown-it": "12.1.0",
-    "markdown-it-attrs": "4.0.0",
-    "markdown-it-attrs-es5": "2.0.0",
+    "core-js": "3.21.1",
+    "markdown-it": "12.3.2",
+    "markdown-it-attrs": "4.1.3",
+    "markdown-it-attrs-es5": "2.0.2",
     "markdown-it-for-inline": "0.1.1",
     "math-random": "2.0.1",
-    "memoize-one": "5.2.1",
+    "memoize-one": "6.0.0",
     "microsoft-cognitiveservices-speech-sdk": "1.17.0",
-    "prop-types": "15.7.2",
-    "sanitize-html": "2.4.0",
+    "prop-types": "15.8.1",
+    "sanitize-html": "2.7.0",
     "url-search-params-polyfill": "8.1.1",
     "uuid": "8.3.2",
     "web-speech-cognitive-services": "7.1.1",
     "whatwg-fetch": "3.6.2"
   },
   "devDependencies": {
-    "@babel/cli": "^7.14.5",
-    "@babel/core": "^7.14.6",
-    "@babel/plugin-proposal-class-properties": "^7.14.5",
-    "@babel/plugin-proposal-object-rest-spread": "^7.14.7",
-    "@babel/plugin-transform-runtime": "^7.14.5",
-    "@babel/preset-env": "^7.14.7",
-    "@babel/preset-react": "^7.14.5",
-    "@babel/preset-typescript": "^7.14.5",
-    "@types/node": "^16.3.1",
-    "@types/react": "^17.0.14",
-    "@typescript-eslint/eslint-plugin": "^4.28.3",
-    "@typescript-eslint/parser": "^4.28.3",
-    "babel-loader": "^8.2.2",
-    "babel-plugin-istanbul": "^6.0.0",
+    "@babel/cli": "^7.17.6",
+    "@babel/core": "^7.17.5",
+    "@babel/plugin-proposal-class-properties": "^7.16.7",
+    "@babel/plugin-proposal-object-rest-spread": "^7.17.3",
+    "@babel/plugin-transform-runtime": "^7.17.0",
+    "@babel/preset-env": "^7.16.11",
+    "@babel/preset-react": "^7.16.7",
+    "@babel/preset-typescript": "^7.16.7",
+    "@types/node": "^17.0.21",
+    "@types/react": "^17.0.39",
+    "babel-loader": "^8.2.3",
+    "babel-plugin-istanbul": "^6.1.1",
     "babel-plugin-transform-inline-environment-variables": "^0.4.3",
-    "concurrently": "^6.2.0",
-    "eslint": "^7.30.0",
-    "eslint-plugin-prettier": "^3.4.0",
-    "eslint-plugin-react": "^7.24.0",
-    "eslint-plugin-react-hooks": "^4.2.0",
-    "isomorphic-react": "4.14.1",
-    "isomorphic-react-dom": "4.14.1",
-    "prettier": "^2.3.2",
-    "source-map-loader": "^1.1.3",
-    "terser-webpack-plugin": "^4.2.3",
-    "typescript": "^4.3.5",
-    "webpack": "^5.45.1",
-    "webpack-cli": "^4.6.0",
+    "concurrently": "^7.0.0",
+    "isomorphic-react": "4.15.2-main.20220413.af6e8a3",
+    "isomorphic-react-dom": "4.15.2-main.20220413.af6e8a3",
+    "source-map-loader": "^3.0.1",
+    "terser-webpack-plugin": "^5.3.1",
+    "typescript": "^4.6.2",
+    "webpack": "^5.70.0",
+    "webpack-cli": "^4.9.2",
     "webpack-stats-plugin": "^1.0.3"
   },
   "peerDependencies": {

package/src/AddFullBundle.tsx

@@ -73,7 +73,6 @@ AddFullBundle.propTypes = {
   adaptiveCardHostConfig: PropTypes.any,
   adaptiveCardsHostConfig: PropTypes.any,
   // TypeScript class is not mappable to PropTypes.func
-  // eslint-disable-next-line @typescript-eslint/ban-ts-comment
   // @ts-ignore
   adaptiveCardsPackage: PropTypes.shape({
     AdaptiveCard: PropTypes.func.isRequired,

package/src/FullComposer.tsx

@@ -13,6 +13,8 @@ const FullComposer: FC<FullComposerProps> = props => (
   <AddFullBundle {...props}>
     {extraProps => (
       <Composer {...props} {...extraProps}>
+        {/* We need to spread, thus, we cannot we destructuring assignment. */}
+        {/* eslint-disable-next-line react/destructuring-assignment */}
         {props.children}
       </Composer>
     )}

package/src/adaptiveCards/Attachment/AdaptiveCardAttachment.tsx

@@ -1,6 +1,6 @@
-import { DirectLineAttachment } from 'botframework-webchat-core';
 import PropTypes from 'prop-types';
 import React, { FC } from 'react';
+import type { DirectLineAttachment } from 'botframework-webchat-core';
 
 import AdaptiveCardContent from './AdaptiveCardContent';
 
@@ -20,6 +20,8 @@ AdaptiveCardAttachment.defaultProps = {
 };
 
 AdaptiveCardAttachment.propTypes = {
+  // PropTypes cannot fully capture TypeScript types.
+  // @ts-ignore
   attachment: PropTypes.shape({
     content: PropTypes.any.isRequired
   }).isRequired,

package/src/adaptiveCards/Attachment/AdaptiveCardBuilder.ts

@@ -15,8 +15,9 @@ import {
   TextSize,
   TextWeight
 } from 'adaptivecards';
+import { isForbiddenPropertyName } from 'botframework-webchat-core';
+import type { DirectLineCardAction } from 'botframework-webchat-core';
 
-import { DirectLineCardAction } from 'botframework-webchat-core';
 import AdaptiveCardsPackage from '../../types/AdaptiveCardsPackage';
 import AdaptiveCardsStyleOptions from '../AdaptiveCardsStyleOptions';
 
@@ -96,9 +97,12 @@ export default class AdaptiveCardBuilder {
     if (typeof text !== 'undefined') {
       const textblock = new TextBlock();
 
-      // tslint:disable-next-line:forin
       for (const prop in template) {
-        textblock[prop] = template[prop];
+        if (!isForbiddenPropertyName(prop)) {
+          // Mitigated through denylisting.
+          // eslint-disable-next-line security/detect-object-injection
+          textblock[prop] = template[prop];
+        }
       }
 
       textblock.text = text;
@@ -119,6 +123,7 @@ export default class AdaptiveCardBuilder {
     this.addTextBlock(content.title, {
       color: TextColor.Default,
       size: TextSize.Medium,
+      style: 'heading',
       weight: TextWeight.Bolder,
       wrap: richCardWrapTitle
     });