powerbi-visuals-tools 4.0.6 → 4.0.8

package/Changelog.md

@@ -2,6 +2,16 @@
 
 This page contains information about changes to the PowerBI Visual Tools (pbiviz).
 
+## 4.0.8
+* Reverted to stable version
+* Removed vulnerabilities
+
+## 4.0.7
+### **⚠ NOT RECOMENDED** - critical bugs discovered for some cases
+* StringResources (Localizations) are supported in Developer Mode.
+* Update `powerbi-visuals-webpack-plugin` to 3.1.0
+* Fixed vulnerabilities
+
 ## 4.0.6
 Update templates visuals to:
 * Support new visuals-api version 5.1.0

package/SECURITY.md

@@ -0,0 +1,41 @@
+<!-- BEGIN MICROSOFT SECURITY.MD V0.0.8 BLOCK -->
+
+## Security
+
+Microsoft takes the security of our software products and services seriously, which includes all source code repositories managed through our GitHub organizations, which include [Microsoft](https://github.com/microsoft), [Azure](https://github.com/Azure), [DotNet](https://github.com/dotnet), [AspNet](https://github.com/aspnet), [Xamarin](https://github.com/xamarin), and [our GitHub organizations](https://opensource.microsoft.com/).
+
+If you believe you have found a security vulnerability in any Microsoft-owned repository that meets [Microsoft's definition of a security vulnerability](https://aka.ms/opensource/security/definition), please report it to us as described below.
+
+## Reporting Security Issues
+
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+Instead, please report them to the Microsoft Security Response Center (MSRC) at [https://msrc.microsoft.com/create-report](https://aka.ms/opensource/security/create-report).
+
+If you prefer to submit without logging in, send email to [secure@microsoft.com](mailto:secure@microsoft.com).  If possible, encrypt your message with our PGP key; please download it from the [Microsoft Security Response Center PGP Key page](https://aka.ms/opensource/security/pgpkey).
+
+You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message. Additional information can be found at [microsoft.com/msrc](https://aka.ms/opensource/security/msrc). 
+
+Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue:
+
+  * Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
+  * Full paths of source file(s) related to the manifestation of the issue
+  * The location of the affected source code (tag/branch/commit or direct URL)
+  * Any special configuration required to reproduce the issue
+  * Step-by-step instructions to reproduce the issue
+  * Proof-of-concept or exploit code (if possible)
+  * Impact of the issue, including how an attacker might exploit the issue
+
+This information will help us triage your report more quickly.
+
+If you are reporting for a bug bounty, more complete reports can contribute to a higher bounty award. Please visit our [Microsoft Bug Bounty Program](https://aka.ms/opensource/security/bounty) page for more details about our active programs.
+
+## Preferred Languages
+
+We prefer all communications to be in English.
+
+## Policy
+
+Microsoft follows the principle of [Coordinated Vulnerability Disclosure](https://aka.ms/opensource/security/cvd).
+
+<!-- END MICROSOFT SECURITY.MD BLOCK -->

package/certs/PowerBICustomVisualTest_private.key

@@ -1,28 +1,28 @@
 -----BEGIN PRIVATE KEY-----
-MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQC5mklx3Q18S0J1
-WN3Th5riawccYs060HO5hAZjUyAaB9Tl7GPUCNiKqOYVYkorgOg8xZzBQUFMexvB
-7jjSImev+RCyW5CT/Ssg6uDgza6tTFTYkLtA9eT48mGmk+nhbZxOjdFJ4Msj00MY
-luxSYuhnnj2i+szBvT83+6gnHPVahVLoshSZgL+QMYTZ1p5QK6lw/yYCX5P4Cja2
-Ei6RfKTKK5BLSFTxskg88Kza4DdH6Cf8R6ecTUCLvQ8LEfT3bJc8fXLnrGYwr+R/
-xZXbx1uqZn52DuvKIWKoNxShvkBaMfhAuKbaD7sp0Vc0CsrIsOZ9RuZSQWpqsSUx
-iJnHzo8XAgMBAAECggEBAJZy3n4R9dB/IQwGUSoajg5jO4xi+oFmX6hNwO/affcb
-yhPmnrVNxln/tyI2XnENOTOp6/srbkcUs9drx1tu0CXw+vvZBUUwvzkbq9YOZD3N
-1ikGiQOLT2QM9eMVm0xEkaOLic8dDQ2pPoY8MKxHyKPVvZjTPA7/3LMAp7ms26XX
-chqSY92zzwNhkr06vEUNyenInvgl+FihVF/MByKGtdL9lc8eun0zuEAHubK6T6B7
-QrfnQ1tZXjWtz5zPBa3Hpfy9TMqLhXqV+k6mfa03zCNywmV7IexLBm7/yY7dqkpZ
-Wks5hattB/xCL5tA5QIf88Q6O6tcDMERYWNu0yTcR2ECgYEA7qRlWaQ8pzw526xP
-XZclB/Qm8jkKMduqmv6A0JGLA+Hr7ugAgi3/ZYWxsI9NyRcw5+EwNrfZR/B/U6Ng
-NmyAuU1FE7X8ZbfHLNoijoxsJ1F9SK9z9J5/WVKUnrnYIFrqlrD5Pr5FpVDCqBT5
-2O9wRiWvoR0aN1gR6uC3XBajIHMCgYEAxxpGwytHKAqj1w9HGKFiT5F1EF+VLuvj
-GhokQLoeWKxSyVy0ePCyYKAnZy+pKhNxA4bGbdCiV0EliO3DWatWLF1/6mxDxNew
-qNIt1Ltok0OnvbTiNhHWaiCJ64NcYCWBEe5Vj0qY0dFgDBmltoXcf9yfMXFBh410
-mPSLMzoWYc0CgYEA6TaDTT0xgQVcTY9w6DeDGujA/so7akoPyfSZkjoJrrukRA86
-H/4vrtkeszr4e2JMiu8InRDCKImhBO2OYuFaUrxumzqn9AfLf8uVJdWZBDugwd2k
-5hPWxEXts8hOrB/tTWKZ0XVEvq/T60rEd/pWsFa38i1sp1VL/UuqJTaCKH0CgYEA
-vTIW8/b4EvCpZ/84jAsvJHUQTJLHbGLy1yboNCmoFJMLyBSz2gi/OFp3lvIPSdBX
-oAY+ILQUz900Eb392AOcS2Q93UEr1K0xTfsLWg8L/IRZrUdpff/NQ+PPq2CUMzjw
-QV29KAC23wqavmTQt3TUZxv6mj0JDAo7Ne2LKQ6VnjECgYAD/hssI7gN/O9VQh1H
-Lth9JaSWra9sG+U7fXG+a52q+4KWmmsrm3BWb/bPLQc/F4KZfU/6CQLdZkFPD8ZT
-I3bYMfJ0nBpdeqEC441xjVno4SAKuMuqxj9siuDO+tpHhJVNuZDeXTg5bXsfj1u6
-aO5D/CYn9kUZhd9raJCPIElKZw==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 -----END PRIVATE KEY-----

package/certs/PowerBICustomVisualTest_public.crt

@@ -1,19 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIIDCTCCAfGgAwIBAgIUWvcK57IjhT9RnNLX0KJyVmGJgQYwDQYJKoZIhvcNAQEL
-BQAwFDESMBAGA1UEAwwJbG9jYWxob3N0MB4XDTIyMTAxOTE0MTY1M1oXDTIzMTAx
-OTE0MTY1M1owFDESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEF
-AAOCAQ8AMIIBCgKCAQEAuZpJcd0NfEtCdVjd04ea4msHHGLNOtBzuYQGY1MgGgfU
-5exj1AjYiqjmFWJKK4DoPMWcwUFBTHsbwe440iJnr/kQsluQk/0rIOrg4M2urUxU
-2JC7QPXk+PJhppPp4W2cTo3RSeDLI9NDGJbsUmLoZ549ovrMwb0/N/uoJxz1WoVS
-6LIUmYC/kDGE2daeUCupcP8mAl+T+Ao2thIukXykyiuQS0hU8bJIPPCs2uA3R+gn
-/EennE1Ai70PCxH092yXPH1y56xmMK/kf8WV28dbqmZ+dg7ryiFiqDcUob5AWjH4
-QLim2g+7KdFXNArKyLDmfUbmUkFqarElMYiZx86PFwIDAQABo1MwUTAdBgNVHQ4E
-FgQUYJZtzb9sVfhg4MbBimIX4S59EgAwHwYDVR0jBBgwFoAUYJZtzb9sVfhg4MbB
-imIX4S59EgAwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAcaAW
-CHtfOXSXOwhSvvZVXciYlkFGa7TBvetFlPAwpcx0iyp/xkagyhlBqmzM8gUA6+1y
-40WIJVCLKObBrHeV/3JM/7VEwRnua9LWDTraYYLd5yQ/eGhdeUIOvtBRWV0TCHmq
-2ArLPov4dAsYJkp5WNQNChg2IPizxEuEjJk+SAafZh7ZXJcyF3bUik5Nz2tX0O+h
-35BP/DVD3HqT9Ve0Em86Pd5tbGYdz0OQ9XteS5YG7wfe9XmKFOUp2Xwgv4joAFe5
-ysD+MpqokkgMXjjmNcj75H1yKs3FmvkT4nGWthvWAC5J+CIgvitKf7Vp7YcGtDUP
-+dMag6GYu0DoWVYElA==
+MIIDCTCCAfGgAwIBAgIUabVpBDtbkfYWxBXSA1Xq5cAW6uQwDQYJKoZIhvcNAQEL
+BQAwFDESMBAGA1UEAwwJbG9jYWxob3N0MB4XDTIyMTIxMjE5MTUzOFoXDTIzMTIx
+MjE5MTUzOFowFDESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEF
+AAOCAQ8AMIIBCgKCAQEAtmLM/i5oqlAt2TZ2DCqIUtQom92C9OhRlbw/ohr0G3RI
+isWfOqtYfwZBynPWoLvNl2XGP4LsZvOc5xE6MnVXaXHWnx5SU59DMsL4oTdO7ui/
+tEpX+gdWexTwsQ8jou4Lilet4fKjEX6AwtqxUSCwYJE6uU+7+2wUs48AJV8ZLu+W
+Czhzmjcaa+z4AVea3RjaKWmJ2XdopXUcq6QGDXzZ9ItHYJ8j2Dq+mQv9sLQqolQb
+pViI5XQYwrmVYDFvYHXwytPmhh+jApoRDv+d7z0jBBIlYioSmCBKrt5Wj6+oBEDE
+uMXPDvIEH3+tZjbOerdoq/VLQntnUbNJSIK2LJKoGwIDAQABo1MwUTAdBgNVHQ4E
+FgQU8vdg41zMzEe0gla3eC3GGLKsxBowHwYDVR0jBBgwFoAU8vdg41zMzEe0gla3
+eC3GGLKsxBowDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEArbdi
+j80tpyqv/ePkgwh/BMRFUI47aT/0wVGut4z/Nypjt6wVr5ybYvZOhlK0RI/NrTBs
+GNeXhKcFypT7s2CqXnIFHWZtCOso32kZx05+8acETuB5Lo1yQB+z8dEWxywpk+41
+8N5fHnWxxP6JVnYqpUznZAkL4HuJQY9n61ah/gi706p2DhgMWEZYcbouHzi4kAK5
+jI7SP6aWJnFc5GD5Q0TzJsbOs/jMsRsLztNu2ifJdJ1KzUQrWpxpDUC39PYcr2+D
+LYp+eiDdCTu52dxPnat9K3bPFYTn38aylzbMdEF66R/AiVZloEI0y6ISOYL2HIpl
+/WMm29V4VJ16ZoO27Q==
 -----END CERTIFICATE-----

package/config.json

@@ -1,35 +1 @@
-{
-    "templates": {
-        "visuals": "templates/visuals",
-        "pbiviz": "templates/pbiviz.json.template",
-        "plugin": "templates/plugin.ts.template",
-        "package": "templates/package.json.template"
-    },
-    "generate": {
-        "apiVersion": "3.8.0"
-    },
-    "constants": {
-        "minAPIversion": "3.2.0"
-    },
-    "build": {
-        "precompileFolder": ".tmp/precompile",
-        "dropFolder": ".tmp/drop",
-        "js": "tmp.visual.js",
-        "css": "visual.css",
-        "stats": "../../webpack.statistics.html"
-    },
-    "package": {
-        "dropFolder": "dist"
-    },
-    "server": {
-        "root": "webRoot",
-        "assetsRoute": "/assets",
-        "privateKey": "certs/PowerBICustomVisualTest_private.key",
-        "certificate": "certs/PowerBICustomVisualTest_public.crt",
-        "pfx": "certs/PowerBICustomVisualTest_public.pfx",
-        "port": "8080"
-    },
-    "visualTemplates": {
-        "circlecard": "https://codeload.github.com/microsoft/powerbi-visuals-circlecard-react/zip/master"
-    }
-}
+{"templates":{"visuals":"templates/visuals","pbiviz":"templates/pbiviz.json.template","plugin":"templates/plugin.ts.template","package":"templates/package.json.template"},"generate":{"apiVersion":"3.8.0"},"constants":{"minAPIversion":"3.2.0"},"build":{"precompileFolder":".tmp/precompile","dropFolder":".tmp/drop","js":"tmp.visual.js","css":"visual.css","stats":"../../webpack.statistics.html"},"package":{"dropFolder":"dist"},"server":{"root":"webRoot","assetsRoute":"/assets","privateKey":"certs/PowerBICustomVisualTest_private.key","certificate":"certs/PowerBICustomVisualTest_public.crt","pfx":"certs/PowerBICustomVisualTest_public.pfx","port":"8080","passphrase":"3598678133652331"},"visualTemplates":{"circlecard":"https://codeload.github.com/microsoft/powerbi-visuals-circlecard-react/zip/master"}}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "powerbi-visuals-tools",
-  "version": "4.0.6",
+  "version": "4.0.8",
   "description": "Command line tool for creating and publishing visuals for Power BI",
   "main": "./lib/VisualPackage.js",
   "scripts": {
@@ -27,7 +27,7 @@
   "homepage": "https://github.com/Microsoft/PowerBI-visuals-tools#readme",
   "dependencies": {
     "assert": "^2.0.0",
-    "async": "^3.2.3",
+    "async": "^3.2.4",
     "base64-inline-loader": "^2.0.1",
     "browserify-zlib": "^0.2.0",
     "buffer": "^6.0.3",
@@ -45,12 +45,12 @@
     "https-browserify": "^1.0.0",
     "json-loader": "0.5.7",
     "jszip": "^3.7.1",
-    "less": "^3.11.1",
-    "less-loader": "^10.0.1",
+    "less": "^3.13.1",
+    "less-loader": "^10.2.0",
     "lodash.clonedeep": "4.5.0",
     "lodash.defaults": "4.2.0",
     "lodash.isequal": "4.5.0",
-    "mini-css-extract-plugin": "^1.4.0",
+    "mini-css-extract-plugin": "^1.6.2",
     "os-browserify": "^0.3.0",
     "path-browserify": "^1.0.1",
     "powerbi-visuals-webpack-plugin": "^2.3.1",
@@ -74,7 +74,7 @@
     "webpack-dev-server": "^4.8.1"
   },
   "devDependencies": {
-    "eslint": "^7.31.0",
+    "eslint": "^7.32.0",
     "jasmine": "3.5.0",
     "jasmine-spec-reporter": "5.0.1",
     "semver": "7.1.3",

package/spec/e2e/pbivizNewSpec.js

@@ -96,11 +96,11 @@ describe("E2E - pbiviz new", () => {
 
         it(`Verifiy size`, async () => {
             const folder = createFolder(template);
-            const archiveSize = 49558;
+            const archiveSize = 10000;
             const archiveName = path.join(folder, `${template}Archive.zip`);
             await download(config.visualTemplates[template], archiveName);
             const stats = await fsPromises.stat(archiveName);
-            await expect(stats.size).toBe(archiveSize);
+            await expect(stats.size).toBeGreaterThanOrEqual(archiveSize);
             await fsPromises.unlink(archiveName);
         });