sa6anw/hedgedoc-hedgeagent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(deps): upgrade dependencies, remove some unnecessary ones

Browse Source 
This commit upgrades dependencies that are more or less trivial
to update, e.g. because they didn't have major version bumps or
simply didn't break anything. There are some dependencies which
have not been upgraded since this would have required larger
refactorings. This includes especially the markdown-it ecosystem
and the webpack ecosystem.
The largest refactorings in this commit come from the bump of
socket.io v2 to v4 which changed the handling of the connected
socket list for instance.

This commit further removes some outdated and/or unnecessary
dependencies. This includes the String.js library which is
unmaintained for 9 years and has some CVEs. We mainly used
this library for their escapeHTML and unescapeHTML methods.
This can be done using native DOM APIs nowadays, which is also
considered more safe since it is the same logic that the
browser itself uses.
Since we target Node 18 and above, we can also rely on the
built-in fetch function instead of the node-fetch package.
The current version of Chance.js includes a method for
generating a random color now too, so we don't need the
package randomcolor anymore.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
This commit is contained in:
Erik Michelson
2025-11-23 23:24:51 +01:00
committed by Philip Molares
parent 637c451486
commit 9a45d1e2a9
14 changed files with 1198 additions and 983 deletions
Download Patch File Download Diff File Expand all files Collapse all files

72
package.json
View File

@@ -18,40 +18,40 @@
},
"dependencies": {
"@hedgedoc/meta-marked": "14.1.0",
"@node-saml/passport-saml": "5.0.1",
"@node-saml/passport-saml": "5.1.0",
"@passport-next/passport-openid": "1.0.0",
"Idle.Js": "git+https://github.com/shawnmclean/Idle.js#commit=2b57cc6e49d177b7ddce0cca00ef5cbe07453541",
"archiver": "6.0.2",
"archiver": "7.0.1",
"async": "3.2.6",
"aws-sdk": "2.1692.0",
"azure-storage": "2.10.7",
"base64url": "3.0.1",
"body-parser": "2.2.0",
"chance": "1.1.12",
"cheerio": "0.22.0",
"chance": "1.1.13",
"cheerio": "1.1.2",
"clean-webpack-plugin": "4.0.0",
"compression": "1.8.0",
"compression": "1.8.1",
"connect-flash": "0.1.1",
"connect-session-sequelize": "7.1.7",
"connect-session-sequelize": "8.0.2",
"cookie": "1.0.2",
"cookie-parser": "1.4.7",
"deep-freeze": "0.0.1",
"diff-match-patch": "git+https://github.com/hackmdio/diff-match-patch.git#commit=59a9395ad9fe143e601e7ae5765ed943bdd2b11e",
"ejs": "3.1.10",
"express": "4.21.2",
"express-rate-limit": "7.5.0",
"express-session": "1.18.1",
"file-type": "20.4.1",
"formidable": "2.1.3",
"express-rate-limit": "8.2.1",
"express-session": "1.18.2",
"file-type": "21.1.1",
"formidable": "3.5.4",
"graceful-fs": "4.2.11",
"helmet": "8.1.0",
"i18n": "0.15.1",
"is-svg": "4.4.0",
"i18n": "0.15.3",
"is-svg": "6.1.0",
"jsdom-nogyp": "0.8.3",
"lodash": "4.17.21",
"lutim": "1.0.3",
"lz-string": "git+https://github.com/hackmdio/lz-string.git#commit=6edfccb79cd8c210f03fd3bf18e41ca144fbeefb",
"mariadb": "3.4.1",
"mariadb": "3.4.5",
"markdown-it": "13.0.2",
"markdown-it-abbr": "1.0.4",
"markdown-it-container": "3.0.0",
@@ -68,12 +68,11 @@
"mattermost": "3.4.0",
"method-override": "3.0.0",
"minimist": "1.2.8",
"minio": "7.1.3",
"minio": "8.0.6",
"moment": "2.30.1",
"morgan": "1.10.0",
"mysql2": "3.14.0",
"nanoid": "3.3.11",
"node-fetch": "2.7.0",
"mysql2": "3.15.3",
"nanoid": "5.1.6",
"passport": "patch:passport@npm%3A0.7.0#~/.yarn/patches/passport-npm-0.7.0-df02531736.patch",
"passport-dropbox-oauth2": "1.1.0",
"passport-facebook": "3.0.0",
@@ -86,25 +85,23 @@
"passport-twitter": "1.0.4",
"passport.socketio": "3.7.0",
"pdfobject": "2.3.1",
"pg": "8.14.1",
"pg": "8.16.3",
"pg-hstore": "2.3.4",
"prom-client": "15.1.3",
"prometheus-api-metrics": "4.0.0",
"randomcolor": "0.6.2",
"readline-sync": "1.4.10",
"rimraf": "5.0.10",
"rimraf": "6.1.2",
"sanitize-filename": "1.6.3",
"scrypt-kdf": "2.0.1",
"scrypt-kdf": "3.0.0",
"sequelize": "5.22.5",
"socket.io": "2.5.1",
"socket.io": "4.8.1",
"sqlite3": "5.1.7",
"store": "2.0.12",
"string": "3.3.3",
"toobusy-js": "0.5.1",
"umzug": "2.3.0",
"uuid": "11.1.0",
"validator": "13.15.0",
"winston": "3.17.0",
"uuid": "13.0.0",
"validator": "13.15.23",
"winston": "3.18.3",
"xss": "1.0.15"
},
"engines": {
@@ -138,9 +135,9 @@
},
"devDependencies": {
"@eslint/eslintrc": "3.3.1",
"@eslint/js": "9.24.0",
"@eslint/js": "9.39.1",
"@hedgedoc/codemirror-5": "5.65.12",
"abcjs": "6.4.4",
"abcjs": "6.5.2",
"babel-cli": "6.26.0",
"babel-core": "6.26.3",
"babel-loader": "7.1.5",
@@ -153,12 +150,11 @@
"copy-webpack-plugin": "6.4.1",
"css-loader": "5.2.7",
"emojify.js": "1.1.0",
"esbuild-loader": "4.3.0",
"escape-html": "1.0.3",
"eslint": "9.24.0",
"esbuild-loader": "4.4.0",
"eslint": "9.39.1",
"eslint-config-standard": "17.1.0",
"eslint-plugin-import": "2.31.0",
"eslint-plugin-n": "17.17.0",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-n": "17.23.1",
"eslint-plugin-promise": "7.2.1",
"eslint-plugin-standard": "5.0.0",
"exports-loader": "1.1.1",
@@ -167,7 +163,7 @@
"file-saver": "2.0.5",
"flowchart.js": "1.18.0",
"fork-awesome": "1.2.0",
"globals": "16.0.0",
"globals": "16.5.0",
"highlight.js": "10.7.3",
"html-webpack-plugin": "4.5.2",
"imports-loader": "1.2.0",
@@ -180,13 +176,13 @@
"js-yaml": "3.14.1",
"jsonlint": "1.6.3",
"keymaster": "1.6.2",
"less": "4.3.0",
"less": "4.4.2",
"less-loader": "7.3.0",
"list.js": "2.3.1",
"mathjax": "2.7.9",
"mermaid": "9.1.7",
"mini-css-extract-plugin": "1.6.2",
"mocha": "11.1.0",
"mocha": "11.7.5",
"mock-require": "3.0.3",
"optimize-css-assets-webpack-plugin": "6.0.1",
"prismjs": "1.30.0",
@@ -195,10 +191,10 @@
"remark-preset-lint-markdown-style-guide": "5.1.3",
"reveal.js": "3.9.2",
"select2": "3.5.2-browserify",
"socket.io-client": "2.5.0",
"socket.io-client": "4.8.1",
"spin.js": "4.1.2",
"string-loader": "0.0.1",
"turndown": "7.2.0",
"turndown": "7.2.2",
"url-loader": "4.1.1",
"velocity-animate": "1.5.2",
"visibilityjs": "2.0.2",