powerbi-visuals-tools 4.0.7 → 4.0.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/Changelog.md CHANGED
@@ -2,7 +2,12 @@
2
2
 
3
3
  This page contains information about changes to the PowerBI Visual Tools (pbiviz).
4
4
 
5
+ ## 4.0.8
6
+ * Reverted to stable version
7
+ * Removed vulnerabilities
8
+
5
9
  ## 4.0.7
10
+ ### **⚠ NOT RECOMENDED** - critical bugs discovered for some cases
6
11
  * StringResources (Localizations) are supported in Developer Mode.
7
12
  * Update `powerbi-visuals-webpack-plugin` to 3.1.0
8
13
  * Fixed vulnerabilities
package/SECURITY.md ADDED
@@ -0,0 +1,41 @@
1
+ <!-- BEGIN MICROSOFT SECURITY.MD V0.0.8 BLOCK -->
2
+
3
+ ## Security
4
+
5
+ Microsoft takes the security of our software products and services seriously, which includes all source code repositories managed through our GitHub organizations, which include [Microsoft](https://github.com/microsoft), [Azure](https://github.com/Azure), [DotNet](https://github.com/dotnet), [AspNet](https://github.com/aspnet), [Xamarin](https://github.com/xamarin), and [our GitHub organizations](https://opensource.microsoft.com/).
6
+
7
+ If you believe you have found a security vulnerability in any Microsoft-owned repository that meets [Microsoft's definition of a security vulnerability](https://aka.ms/opensource/security/definition), please report it to us as described below.
8
+
9
+ ## Reporting Security Issues
10
+
11
+ **Please do not report security vulnerabilities through public GitHub issues.**
12
+
13
+ Instead, please report them to the Microsoft Security Response Center (MSRC) at [https://msrc.microsoft.com/create-report](https://aka.ms/opensource/security/create-report).
14
+
15
+ If you prefer to submit without logging in, send email to [secure@microsoft.com](mailto:secure@microsoft.com). If possible, encrypt your message with our PGP key; please download it from the [Microsoft Security Response Center PGP Key page](https://aka.ms/opensource/security/pgpkey).
16
+
17
+ You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message. Additional information can be found at [microsoft.com/msrc](https://aka.ms/opensource/security/msrc).
18
+
19
+ Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue:
20
+
21
+ * Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
22
+ * Full paths of source file(s) related to the manifestation of the issue
23
+ * The location of the affected source code (tag/branch/commit or direct URL)
24
+ * Any special configuration required to reproduce the issue
25
+ * Step-by-step instructions to reproduce the issue
26
+ * Proof-of-concept or exploit code (if possible)
27
+ * Impact of the issue, including how an attacker might exploit the issue
28
+
29
+ This information will help us triage your report more quickly.
30
+
31
+ If you are reporting for a bug bounty, more complete reports can contribute to a higher bounty award. Please visit our [Microsoft Bug Bounty Program](https://aka.ms/opensource/security/bounty) page for more details about our active programs.
32
+
33
+ ## Preferred Languages
34
+
35
+ We prefer all communications to be in English.
36
+
37
+ ## Policy
38
+
39
+ Microsoft follows the principle of [Coordinated Vulnerability Disclosure](https://aka.ms/opensource/security/cvd).
40
+
41
+ <!-- END MICROSOFT SECURITY.MD BLOCK -->
@@ -78,7 +78,7 @@ VisualPackage.loadVisualPackage(cwd).then((visualPackage) => {
78
78
  ConsoleWriter.info('Starting server...');
79
79
  // webpack dev server serves bundle from disk instead memory
80
80
  if (program.drop) {
81
- webpackConfig.devServer.setupMiddlewares = (middlewares, devServer) => {
81
+ webpackConfig.devServer.onBeforeSetupMiddleware = (devServer) => {
82
82
  let setHeaders = (res) => {
83
83
  Object.getOwnPropertyNames(webpackConfig.devServer.headers)
84
84
  .forEach(property => res.header(property, webpackConfig.devServer.headers[property]));
@@ -99,8 +99,6 @@ VisualPackage.loadVisualPackage(cwd).then((visualPackage) => {
99
99
  readFile(path.join(webpackConfig.devServer.static.directory, asset), res);
100
100
  });
101
101
  });
102
-
103
- return middlewares;
104
102
  };
105
103
  }
106
104
 
@@ -1,28 +1,28 @@
1
1
  -----BEGIN PRIVATE KEY-----
2
- MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDKYpom5Gvkxmwa
3
- d6vvrjY1QazSlp9cuao3Ajml68yKoNg9C5L86VPKIRYqgHB/OBdkngQgEOCzdSgg
4
- aqSVSATHrYYuhTatzHbxmqx1XYkFbPpedhkrjA4esyJGrsmsg+J4Px3E3F6QyfJz
5
- yCA2xlpArFkLB/alRvwCISGkis5tX39BRdxMEFz2h9g7NjfcYZh4IaEJZMHqp9XP
6
- 2KKLC+jJ8SrneCWhD0zXfsxZsWhfHx6t7FLo4DfJOiC7RXunXONxlE4rpor9MMcG
7
- R2nogUOeHzcGX80Q42QRKPzjnJ/NzS/kHod1kPXmCh3HoGJR0IycvMZHU8owavpK
8
- WYMmGljHAgMBAAECggEBAKjs8FoyItSLwkO9S6f9M4X0UXpc+pt85VSQ6OlTDiFP
9
- 6+3YMVIktylpwIStPDkT6oKzWiIhtExWJ64XFVT9DfBVKEDANEmQ9l7nibdU4T/E
10
- HJ6n2I5+knKRdrSkw/TZCDjyBbkBb3VO+q4lhq3xlfeRY6lPdlGyFDr6yIf8zByB
11
- Mqpfbq1FTlema6diRYJdOuVfwAwLYfWcPtzKgGiWaxxw28JxdeiGYYWeSelZEayL
12
- ZTi/Mkq3lYRVSmzs6bnPFuoYWxlQZiZKQVjHFgoEv2Q52Dw9srjmi07Gfh1USfZD
13
- A29+7jJCrkWmV+UQEjG4ZDBecNQCsWDyi+SIiPCTNJECgYEA8S5A3Y1QV2QXA4E4
14
- ixpDjKGIFVtfm9GtRipQ3G49cCu5stxUr4wFL7ZFABqgAAFKRfwAtcTQJjVgliqF
15
- 2FHSdS4qgFtbye/GTEoHLhj7FQWHdd0lN95+RDy6Nsl6nCPvf3EyRLiTP5A3rmkK
16
- +nX04rFMjsmBFZQM/CERiEf2i10CgYEA1tIZdceh81WsXzcQ+tzkbkXDXjEsH36I
17
- G3L7JYVx/QSOkgBjQ/EYtJveQHWaXWrYjdWp2zmQFOQr/PzuqwF8Yztga3soVzL7
18
- +rKgg50nxb40PSsvcxF2F7o3gmdIqgzZxzzXGYCzUWqR34yr5DRtWXpcDzudMshb
19
- zHcKWR2i1nMCgYEAgccSzmTZI31PSOqCw48pZAYTlPJrGwyTwZrJkiOb2b0dmpom
20
- 06Nzsv3QWUL6b6ZCEjCNLUIvgy/bvlI5XXKB3d4uroz6ckocmTaIcIyuptwnzQtn
21
- mI2Xwh4vUYXO/S/1Es2VcBcl3OE8pRQO/UD1ufoPqRHS7QqShiVBKuUWTF0CgYAB
22
- 80hd5GEZB3cYKjTSQj0kryd17HZdFtX/gcy763k8ddUhiDVegYra4OtkpGyxWm36
23
- 46y2G9CuD+BCXL2B+fJ6KCjY8PZNzF2zSfnhGAUra22n/INixQ7QalVkrrFfMdys
24
- TWYaiiuWmqQWZn2NBdjUTiMV1FG6C02iDpaedoFq9wKBgAM1195FTP/XDNzwyUg1
25
- UjMKKRwrckoCtrDt9kkBjJeU8tTyhmgxRZT1FnAyiY9ZQwsIL2wZkbkf1vmH6D6C
26
- nzcAb1NyLqXHY1BGOOnfnreJr5U5eocgf9UXESG4hrrXgx93AgXZxrGLAnkVWWk2
27
- Im9LGWq/aiMpQaIRdmkC2VU1
2
+ MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC2Ysz+LmiqUC3Z
3
+ NnYMKohS1Cib3YL06FGVvD+iGvQbdEiKxZ86q1h/BkHKc9agu82XZcY/guxm85zn
4
+ EToydVdpcdafHlJTn0MywvihN07u6L+0Slf6B1Z7FPCxDyOi7guKV63h8qMRfoDC
5
+ 2rFRILBgkTq5T7v7bBSzjwAlXxku75YLOHOaNxpr7PgBV5rdGNopaYnZd2ildRyr
6
+ pAYNfNn0i0dgnyPYOr6ZC/2wtCqiVBulWIjldBjCuZVgMW9gdfDK0+aGH6MCmhEO
7
+ /53vPSMEEiViKhKYIEqu3laPr6gEQMS4xc8O8gQff61mNs56t2ir9UtCe2dRs0lI
8
+ grYskqgbAgMBAAECggEAEX5chyzQYTWbkDAHFpelx7wNwRV4ECGQYbpSqCvJqjB3
9
+ HMhjw27X6CcjfFWsCnK4/4KFh2X5Ys6PCCLA4EIdBkIjAdQYtWibO200B9KUQZoV
10
+ eSeAVL0LcHbLt0/qbSBD/xr11Kw/M9hcZVQwmcV25WxIo6mgMDdnrOlUbEE42yV5
11
+ +99Qkw/tP/iLOM5pZzb2T4zhQ4w9TTzS8NaHeyBWP0xVXsitGEEvivQ5KIrrHHde
12
+ 1kqmNO8EQv53AN8vSi6HmTw5vjt0yCDuZoQmu8jwP4Z2zCjXQyYz/v5f4291psuN
13
+ XCueozoWVulBcHg3FTrk0D9QSLjGqEUcVP+5b2Ml0QKBgQD3ZiN4YeG2a4OHWq4z
14
+ X5EtmRsiYDPLYPGO5lWadFLvTkrs7Fy2Nwwtc4e0pb6l944deD5i57fKJLat0C3P
15
+ w0Ir3ChDETObFYfnLgb+/7AISghXCqtkvgB32yYJduxrEIvRh8fBdthLQ/26lSbJ
16
+ 4NVnL524RcIjzvbdmFZMFg8ptQKBgQC8ugsbimpkabx4qOA2Tyto22/Y6tOqkL8r
17
+ JcQFt6I+uLeR9UaWUS+Neb8Wl/KExgoyEvozCk+Fg8EsfzpFOrxKMgmXymWDqrNA
18
+ dpLrVtgeiThh/JxE8Zqa0lH2hbBg8WCPgcBxf/YlTy8uH8IWdiB6EWRXHpBmksqR
19
+ jvBy67psjwKBgA+ixu8e0JMk7GUrmALrMVO+b3aWue9Kqzmq2RIv8+Xn/thGf/2M
20
+ MRrWSGdkak42/SZjqR27I2SFOX52v853usDm4yyJ88cDb1lvEUYghtGfTDOkGvz8
21
+ /S6WDStf9sU1gIC3oipaBoWLQIgAUTlFGnexDLjOv9xfgj6zGBEq+75ZAoGBALqJ
22
+ CEGIZfApsmdwQ2xqg/V4Luyv7dZAizMSeNVN08c6u/ZAACzCwcWL+BtUxBgHxjwI
23
+ FdQs9Lx6pYxdlDKpA0IygtjM69lf9xxYFo8VnzdPWbNAAxUB2FX+W5TWPqcS7OXq
24
+ 0VNdruThhziHm0aoKyF73zlctE0t+Zo1NePgqrpxAoGBAJ1njT4BEu5y9Uw/4uZ9
25
+ 8Kf+NWONab5ab2nD8xmqXI+1/l17dDI1e6y2L4XZs/eKwyAHL2H6N2vtt78TZlZR
26
+ A0YD45cFANVBE00d09UPy1/tsW2cz/c1EwUjpL8w0/ZOsqReLfFRgQ0kT5fmbqsQ
27
+ lch4f8u9PoVmpVEse19fmdkr
28
28
  -----END PRIVATE KEY-----
@@ -1,19 +1,19 @@
1
1
  -----BEGIN CERTIFICATE-----
2
- MIIDCTCCAfGgAwIBAgIUXKpBGZWc/1u4QmAuAvXiCSE8iRMwDQYJKoZIhvcNAQEL
3
- BQAwFDESMBAGA1UEAwwJbG9jYWxob3N0MB4XDTIyMTEyMzExMTcwMloXDTIzMTEy
4
- MzExMTcwMlowFDESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEF
5
- AAOCAQ8AMIIBCgKCAQEAymKaJuRr5MZsGner7642NUGs0pafXLmqNwI5pevMiqDY
6
- PQuS/OlTyiEWKoBwfzgXZJ4EIBDgs3UoIGqklUgEx62GLoU2rcx28ZqsdV2JBWz6
7
- XnYZK4wOHrMiRq7JrIPieD8dxNxekMnyc8ggNsZaQKxZCwf2pUb8AiEhpIrObV9/
8
- QUXcTBBc9ofYOzY33GGYeCGhCWTB6qfVz9iiiwvoyfEq53gloQ9M137MWbFoXx8e
9
- rexS6OA3yTogu0V7p1zjcZROK6aK/TDHBkdp6IFDnh83Bl/NEONkESj845yfzc0v
10
- 5B6HdZD15godx6BiUdCMnLzGR1PKMGr6SlmDJhpYxwIDAQABo1MwUTAdBgNVHQ4E
11
- FgQUk0TXTSBQFXOi8Mf+6WpBFvmQ4OkwHwYDVR0jBBgwFoAUk0TXTSBQFXOi8Mf+
12
- 6WpBFvmQ4OkwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAcP1p
13
- XCef/HfV45eab4yw23RYZC4YRqPjK85ZjHyE+OqlmwQcW77GLEDbWL/yU0B4o0w3
14
- M5wNarn1C8mwKYnzSUOXv8awZB/Fx1V1Di+/UqDPHe9iVo5ClmSjfl2Hl0UJ5Tim
15
- Yg/NJhyB3V7Ex4c8aJ7OOslW69Nm8F44BaJKvkjGpY5H0MIsVAccB2tbbm4bS9ql
16
- KDumoOsDU/5ZjyaSHWACt2/xFYIGqURAwIva/+LaGyg+VbrhpCAloAihmivqG5v+
17
- QZrNWI+fyBaRLJ3VCOyTX/S4/jaOSPDbnz1A1e+CXKnZDkIZq8R6d70+t7o7QWYW
18
- jGUdoCIK33ZjtIWOjQ==
2
+ MIIDCTCCAfGgAwIBAgIUabVpBDtbkfYWxBXSA1Xq5cAW6uQwDQYJKoZIhvcNAQEL
3
+ BQAwFDESMBAGA1UEAwwJbG9jYWxob3N0MB4XDTIyMTIxMjE5MTUzOFoXDTIzMTIx
4
+ MjE5MTUzOFowFDESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEF
5
+ AAOCAQ8AMIIBCgKCAQEAtmLM/i5oqlAt2TZ2DCqIUtQom92C9OhRlbw/ohr0G3RI
6
+ isWfOqtYfwZBynPWoLvNl2XGP4LsZvOc5xE6MnVXaXHWnx5SU59DMsL4oTdO7ui/
7
+ tEpX+gdWexTwsQ8jou4Lilet4fKjEX6AwtqxUSCwYJE6uU+7+2wUs48AJV8ZLu+W
8
+ Czhzmjcaa+z4AVea3RjaKWmJ2XdopXUcq6QGDXzZ9ItHYJ8j2Dq+mQv9sLQqolQb
9
+ pViI5XQYwrmVYDFvYHXwytPmhh+jApoRDv+d7z0jBBIlYioSmCBKrt5Wj6+oBEDE
10
+ uMXPDvIEH3+tZjbOerdoq/VLQntnUbNJSIK2LJKoGwIDAQABo1MwUTAdBgNVHQ4E
11
+ FgQU8vdg41zMzEe0gla3eC3GGLKsxBowHwYDVR0jBBgwFoAU8vdg41zMzEe0gla3
12
+ eC3GGLKsxBowDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEArbdi
13
+ j80tpyqv/ePkgwh/BMRFUI47aT/0wVGut4z/Nypjt6wVr5ybYvZOhlK0RI/NrTBs
14
+ GNeXhKcFypT7s2CqXnIFHWZtCOso32kZx05+8acETuB5Lo1yQB+z8dEWxywpk+41
15
+ 8N5fHnWxxP6JVnYqpUznZAkL4HuJQY9n61ah/gi706p2DhgMWEZYcbouHzi4kAK5
16
+ jI7SP6aWJnFc5GD5Q0TzJsbOs/jMsRsLztNu2ifJdJ1KzUQrWpxpDUC39PYcr2+D
17
+ LYp+eiDdCTu52dxPnat9K3bPFYTn38aylzbMdEF66R/AiVZloEI0y6ISOYL2HIpl
18
+ /WMm29V4VJ16ZoO27Q==
19
19
  -----END CERTIFICATE-----
package/config.json CHANGED
@@ -1,35 +1 @@
1
- {
2
- "templates": {
3
- "visuals": "templates/visuals",
4
- "pbiviz": "templates/pbiviz.json.template",
5
- "plugin": "templates/plugin.ts.template",
6
- "package": "templates/package.json.template"
7
- },
8
- "generate": {
9
- "apiVersion": "3.8.0"
10
- },
11
- "constants": {
12
- "minAPIversion": "3.2.0"
13
- },
14
- "build": {
15
- "precompileFolder": ".tmp/precompile",
16
- "dropFolder": ".tmp/drop",
17
- "js": "tmp.visual.js",
18
- "css": "visual.css",
19
- "stats": "../../webpack.statistics.html"
20
- },
21
- "package": {
22
- "dropFolder": "dist"
23
- },
24
- "server": {
25
- "root": "webRoot",
26
- "assetsRoute": "/assets",
27
- "privateKey": "certs/PowerBICustomVisualTest_private.key",
28
- "certificate": "certs/PowerBICustomVisualTest_public.crt",
29
- "pfx": "certs/PowerBICustomVisualTest_public.pfx",
30
- "port": "8080"
31
- },
32
- "visualTemplates": {
33
- "circlecard": "https://codeload.github.com/microsoft/powerbi-visuals-circlecard-react/zip/master"
34
- }
35
- }
1
+ {"templates":{"visuals":"templates/visuals","pbiviz":"templates/pbiviz.json.template","plugin":"templates/plugin.ts.template","package":"templates/package.json.template"},"generate":{"apiVersion":"3.8.0"},"constants":{"minAPIversion":"3.2.0"},"build":{"precompileFolder":".tmp/precompile","dropFolder":".tmp/drop","js":"tmp.visual.js","css":"visual.css","stats":"../../webpack.statistics.html"},"package":{"dropFolder":"dist"},"server":{"root":"webRoot","assetsRoute":"/assets","privateKey":"certs/PowerBICustomVisualTest_private.key","certificate":"certs/PowerBICustomVisualTest_public.crt","pfx":"certs/PowerBICustomVisualTest_public.pfx","port":"8080","passphrase":"3598678133652331"},"visualTemplates":{"circlecard":"https://codeload.github.com/microsoft/powerbi-visuals-circlecard-react/zip/master"}}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "powerbi-visuals-tools",
3
- "version": "4.0.7",
3
+ "version": "4.0.8",
4
4
  "description": "Command line tool for creating and publishing visuals for Power BI",
5
5
  "main": "./lib/VisualPackage.js",
6
6
  "scripts": {
@@ -37,52 +37,49 @@
37
37
  "console-browserify": "^1.2.0",
38
38
  "constants-browserify": "^1.0.0",
39
39
  "crypto-browserify": "^3.12.0",
40
- "css-loader": "^6.7.2",
40
+ "css-loader": "^5.2.7",
41
41
  "domain-browser": "^4.22.0",
42
42
  "events": "^3.3.0",
43
43
  "extra-watch-webpack-plugin": "^1.0.3",
44
- "fs-extra": "^10.1.0",
44
+ "fs-extra": "^9.1.0",
45
45
  "https-browserify": "^1.0.0",
46
46
  "json-loader": "0.5.7",
47
47
  "jszip": "^3.7.1",
48
- "less": "^4.1.3",
49
- "less-loader": "^11.1.0",
48
+ "less": "^3.13.1",
49
+ "less-loader": "^10.2.0",
50
50
  "lodash.clonedeep": "4.5.0",
51
51
  "lodash.defaults": "4.2.0",
52
52
  "lodash.isequal": "4.5.0",
53
- "mini-css-extract-plugin": "^2.7.0",
53
+ "mini-css-extract-plugin": "^1.6.2",
54
54
  "os-browserify": "^0.3.0",
55
55
  "path-browserify": "^1.0.1",
56
- "powerbi-visuals-webpack-plugin": "3.1.1",
56
+ "powerbi-visuals-webpack-plugin": "^2.3.1",
57
57
  "process": "^0.11.10",
58
58
  "punycode": "^2.1.1",
59
59
  "querystring-es3": "^0.2.1",
60
- "readable-stream": "^4.2.0",
60
+ "readable-stream": "^3.6.0",
61
61
  "stream-browserify": "^3.0.0",
62
62
  "stream-http": "^3.2.0",
63
63
  "string_decoder": "^1.3.0",
64
64
  "timers-browserify": "^2.0.12",
65
- "ts-loader": "^9.4.1",
65
+ "ts-loader": "^9.2.5",
66
66
  "tty-browserify": "0.0.1",
67
67
  "typescript": "^4.4.3",
68
68
  "url": "^0.11.0",
69
- "util": "^0.12.5",
69
+ "util": "^0.12.3",
70
70
  "uuid": "7.0.2",
71
71
  "vm-browserify": "^1.1.2",
72
- "webpack": "^5.75.0",
73
- "webpack-bundle-analyzer": "4.7.0",
74
- "webpack-dev-server": "^4.11.1"
72
+ "webpack": "^5.51.1",
73
+ "webpack-bundle-analyzer": "4.4.2",
74
+ "webpack-dev-server": "^4.8.1"
75
75
  },
76
76
  "devDependencies": {
77
- "eslint": "^7.31.0",
78
- "jasmine": "4.5.0",
79
- "jasmine-spec-reporter": "7.0.0",
77
+ "eslint": "^7.32.0",
78
+ "jasmine": "3.5.0",
79
+ "jasmine-spec-reporter": "5.0.1",
80
80
  "semver": "7.1.3",
81
81
  "tree-kill": "1.2.2"
82
82
  },
83
- "optionalDependencies": {
84
- "fsevents": "*"
85
- },
86
83
  "engines": {
87
84
  "node": ">=12.0.0"
88
85
  }
@@ -96,11 +96,11 @@ describe("E2E - pbiviz new", () => {
96
96
 
97
97
  it(`Verifiy size`, async () => {
98
98
  const folder = createFolder(template);
99
- const archiveSize = 49558;
99
+ const archiveSize = 10000;
100
100
  const archiveName = path.join(folder, `${template}Archive.zip`);
101
101
  await download(config.visualTemplates[template], archiveName);
102
102
  const stats = await fsPromises.stat(archiveName);
103
- await expect(stats.size).toBe(archiveSize);
103
+ await expect(stats.size).toBeGreaterThanOrEqual(archiveSize);
104
104
  await fsPromises.unlink(archiveName);
105
105
  });
106
106