Merge pull request #47 from wasertech/security-patch-1b

Fix security vulneabilites
coqui-ai · Jul 14, 2022 · 35811c4 · 35811c4
2 parents 9b7da19 + 69c6b35
commit 35811c4
Show file tree

Hide file tree

Showing 3 changed files with 3,898 additions and 2,587 deletions.
diff --git a/config/webpack.config.js b/config/webpack.config.js
@@ -14,15 +14,14 @@ const safePostCssParser = require('postcss-safe-parser');
 const ManifestPlugin = require('webpack-manifest-plugin');
 const InterpolateHtmlPlugin = require('react-dev-utils/InterpolateHtmlPlugin');
 const WorkboxWebpackPlugin = require('workbox-webpack-plugin');
-const WatchMissingNodeModulesPlugin = require('react-dev-utils/WatchMissingNodeModulesPlugin');
 const ModuleScopePlugin = require('react-dev-utils/ModuleScopePlugin');
 const getCSSModuleLocalIdent = require('react-dev-utils/getCSSModuleLocalIdent');
 const paths = require('./paths');
 const modules = require('./modules');
 const {NODE_ENV, getClientEnvironment} = require('./env');
 const ModuleNotFoundPlugin = require('react-dev-utils/ModuleNotFoundPlugin');
 const ForkTsCheckerWebpackPlugin = require('react-dev-utils/ForkTsCheckerWebpackPlugin');
-const typescriptFormatter = require('react-dev-utils/typescriptFormatter');
+
 
 const postcssNormalize = require('postcss-normalize');
 
@@ -236,7 +235,7 @@ module.exports = function(webpackEnv) {
         }),
         // This is only used in production mode
         new OptimizeCSSAssetsPlugin({
-          cssProcessorOptions: {
+          minimizerOptions: {
             parser: safePostCssParser,
             map: shouldUseSourceMap
               ? {
@@ -249,7 +248,7 @@ module.exports = function(webpackEnv) {
                 }
               : false,
           },
-          cssProcessorPluginOptions: {
+          minimizerPluginOptions: {
             preset: ['default', { minifyFontValues: { removeQuotes: false } }],
           },
         }),
@@ -509,12 +508,6 @@ module.exports = function(webpackEnv) {
       // a plugin that prints an error when you attempt to do this.
       // See https://github.com/facebook/create-react-app/issues/240
       isEnvDevelopment && new CaseSensitivePathsPlugin(),
-      // If you require a missing module and then `npm install` it, you still have
-      // to restart the development server for webpack to discover it. This plugin
-      // makes the discovery automatic so you don't have to restart.
-      // See https://github.com/facebook/create-react-app/issues/186
-      isEnvDevelopment &&
-        new WatchMissingNodeModulesPlugin(paths.appNodeModules),
       isEnvProduction &&
         new MiniCssExtractPlugin({
           // Options similar to the same options in webpackOptions.output
@@ -569,8 +562,6 @@ module.exports = function(webpackEnv) {
             '!**/src/setupTests.*',
           ],
           silent: true,
-          // The formatter is invoked directly in WebpackDevServerUtils during development
-          formatter: isEnvProduction ? typescriptFormatter : undefined,
         }),
     ].filter(Boolean),
     // Some libraries import Node modules but don't use them in the browser.

diff --git a/package.json b/package.json
@@ -4,9 +4,9 @@
   "private": true,
   "dependencies": {
     "@babel/core": "7.9.0",
-    "@svgr/webpack": "4.3.3",
-    "@testing-library/jest-dom": "^4.2.4",
-    "@testing-library/react": "^9.3.2",
+    "@svgr/webpack": "6.0.0",
+    "@testing-library/jest-dom": "^5.1.0",
+    "@testing-library/react": "^10.0.0",
     "@testing-library/user-event": "^7.1.2",
     "@typescript-eslint/eslint-plugin": "^2.10.0",
     "@typescript-eslint/parser": "^2.10.0",
@@ -19,12 +19,12 @@
     "case-sensitive-paths-webpack-plugin": "2.3.0",
     "chai": "^4.2.0",
     "chai-http": "^4.3.0",
-    "create-react-app": "^4.0.3",
-    "css-loader": "3.4.2",
+    "create-react-app": "^5.0.0",
+    "css-loader": "5.2.6",
     "defaults": "^1.0.3",
     "dotenv": "8.2.0",
     "dotenv-expand": "5.1.0",
-    "eslint": "^6.6.0",
+    "eslint": "^7.16.0",
     "eslint-config-react-app": "^5.2.1",
     "eslint-loader": "3.0.3",
     "eslint-plugin-flowtype": "4.6.0",
@@ -36,13 +36,13 @@
     "fs-extra": "^8.1.0",
     "html-webpack-plugin": "4.0.0",
     "identity-obj-proxy": "3.0.0",
-    "jest": "24.9.0",
+    "jest": "26.0.0",
     "jest-environment-jsdom-fourteen": "1.0.1",
     "jest-resolve": "24.9.0",
-    "jest-watch-typeahead": "0.4.2",
+    "jest-watch-typeahead": "0.6.0",
     "mini-css-extract-plugin": "0.9.0",
-    "mocha": "^6.1.4",
-    "optimize-css-assets-webpack-plugin": "5.0.3",
+    "mocha": "^9.1.2",
+    "optimize-css-assets-webpack-plugin": "5.0.5",
     "pnp-webpack-plugin": "1.6.4",
     "postcss-flexbugs-fixes": "4.1.0",
     "postcss-loader": "3.0.0",
@@ -51,21 +51,21 @@
     "postcss-safe-parser": "4.0.1",
     "react": "^16.12.0",
     "react-app-polyfill": "^1.0.6",
-    "react-dev-utils": "^11.0.4",
+    "react-dev-utils": "^12.0.0",
     "react-dom": "^17.0.2",
     "resolve": "1.15.0",
-    "resolve-url-loader": "3.1.2",
+    "resolve-url-loader": "4.0.0",
     "sass-loader": "8.0.2",
     "semver": "6.3.0",
     "should": "^13.2.3",
     "should-http": "^0.1.1",
     "socket.io-client": "^2.3.0",
     "style-loader": "0.23.1",
     "terser-webpack-plugin": "2.3.8",
-    "ts-pnp": "1.1.6",
+    "ts-pnp": "1.2.0",
     "url-loader": "2.3.0",
     "webpack": "4.42.0",
-    "webpack-dev-server": "3.11.0",
+    "webpack-dev-server": "4.0.0",
     "webpack-manifest-plugin": "2.2.0",
     "workbox-webpack-plugin": "4.3.1"
   },