Merge pull request #4 from wearehumblebee/security/upgrade-dependencies

Security: upgrade dependencies

.github/workflows/release.yml

@@ -15,7 +15,7 @@ jobs:
       # Install node.js environment
       - uses: actions/setup-node@v2
         with:
-          node-version: 14.x
+          node-version: 16.x
       # Cache node_modules (busting only when yarn.lock change)
       - uses: actions/cache@v2
         with:
@@ -41,7 +41,7 @@ jobs:
       # Install node.js environment
       - uses: actions/setup-node@v2
         with:
-          node-version: 14.x
+          node-version: 16.x
       # Cache node_modules (busting only when yarn.lock change)
       - uses: actions/cache@v2
         with:
@@ -63,7 +63,7 @@ jobs:
       - name: Authenticate with Registry
         run: |
           yarn logout
-          echo "registry=http://registry.npmjs.org/" >> .npmrc
+          echo "registry=https://registry.npmjs.org/" >> .npmrc
           echo "//registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN" >> .npmrc
           npm whoami
         env:

.github/workflows/simulate-release.yml

@@ -15,7 +15,7 @@ jobs:
       # Install node.js environment
       - uses: actions/setup-node@v2
         with:
-          node-version: 14.x
+          node-version: 16.x
       # Cache node_modules (busting only when yarn.lock change)
       - uses: actions/cache@v2
         with:
@@ -28,7 +28,7 @@ jobs:
       - name: Authenticate with Registry
         run: |
           yarn logout
-          echo "registry=http://registry.npmjs.org/" >> .npmrc
+          echo "registry=https://registry.npmjs.org/" >> .npmrc
           echo "//registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN" >> .npmrc
           npm whoami
         env:

.github/workflows/test.yml

@@ -11,7 +11,7 @@ jobs:
       # Install node.js environment
       - uses: actions/setup-node@v2
         with:
-          node-version: 14.x
+          node-version: 16.x
       # Cache node_modules (busting only when yarn.lock change)
       - uses: actions/cache@v2
         with:
@@ -30,7 +30,7 @@ jobs:
       matrix:
         os: ['ubuntu-latest', 'windows-latest']
         node-version: [
-            14.x, # current LTS
+            16.x, # current LTS
           ]
     steps:
       # Checkout git branch

package.json

@@ -46,7 +46,7 @@
     "webpack-dev-server": "^3.0"
   },
   "dependencies": {
-    "babel-loader": "^8.2.0",
+    "babel-loader": "^8.2.3",
     "clean-webpack-plugin": "^3.0.0",
     "compression-webpack-plugin": "^5.0.0",
     "copy-webpack-plugin": "^6.1.0",
@@ -59,45 +59,45 @@
     "webpack-subresource-integrity": "^1.5.0"
   },
   "devDependencies": {
-    "@babel/core": "^7.15.0",
-    "@babel/eslint-parser": "^7.15.0",
-    "@babel/preset-env": "^7.15.0",
-    "@babel/preset-typescript": "^7.15.0",
-    "@commitlint/cli": "^13.1.0",
-    "@commitlint/config-conventional": "^13.1.0",
-    "@semantic-release/changelog": "^5.0.0",
-    "@semantic-release/commit-analyzer": "^8.0.0",
-    "@semantic-release/github": "^7.2.0",
-    "@semantic-release/npm": "^7.1.0",
-    "@semantic-release/release-notes-generator": "^9.0.0",
+    "@babel/core": "^7.16.5",
+    "@babel/eslint-parser": "^7.16.5",
+    "@babel/preset-env": "^7.16.5",
+    "@babel/preset-typescript": "^7.16.5",
+    "@commitlint/cli": "^16.0.1",
+    "@commitlint/config-conventional": "^16.0.0",
+    "@semantic-release/changelog": "^6.0.1",
+    "@semantic-release/commit-analyzer": "^9.0.2",
+    "@semantic-release/github": "^8.0.2",
+    "@semantic-release/npm": "^8.0.3",
+    "@semantic-release/release-notes-generator": "^10.0.3",
     "@types/compression-webpack-plugin": "^4.0.0",
     "@types/copy-webpack-plugin": "^6.4.0",
     "@types/dotenv-webpack": "^1.8.0",
     "@types/jest": "^26.0.24",
     "@types/svgo": "^1.3.0",
     "@types/terser-webpack-plugin": "^4.0.0",
-    "@types/webpack": "^4.41.0",
+    "@types/webpack": "^4.41",
     "@types/webpack-dev-server": "^3.11.0",
     "@types/webpack-subresource-integrity": "^1.2.0",
-    "@typescript-eslint/eslint-plugin": "^4.29.0",
-    "@typescript-eslint/parser": "^4.29.0",
-    "babel-jest": "^27.0.0",
+    "@typescript-eslint/eslint-plugin": "^5.8.1",
+    "@typescript-eslint/parser": "^5.8.1",
+    "babel-jest": "^27.4.5",
     "commitizen": "^4.2.4",
     "cz-conventional-changelog": "^3.3.0",
-    "eslint": "^7.32.0",
+    "eslint": "^8.5.0",
     "eslint-config-prettier": "^8.3.0",
-    "eslint-plugin-import": "^2.23.0",
-    "eslint-plugin-jest": "^24.4.0",
-    "eslint-plugin-prettier": "^3.4.0",
-    "husky": "^7.0.0",
-    "jest": "^27.0.0",
-    "lint-staged": "^11.1.0",
-    "microbundle": "^0.13.0",
-    "prettier": "^2.3.0",
+    "eslint-plugin-import": "^2.25.3",
+    "eslint-plugin-jest": "^25.3.2",
+    "eslint-plugin-prettier": "^4.0.0",
+    "husky": "^7.0.4",
+    "jest": "^27.4.5",
+    "lint-staged": "^12.1.4",
+    "microbundle": "^0.14.2",
+    "prettier": "^2.5.1",
     "prettier-eslint": "^13.0.0",
     "rimraf": "^3.0.0",
-    "semantic-release": "^17.4.0",
-    "typescript": "^4.3",
+    "semantic-release": "^18.0.1",
+    "typescript": "^4.5.4",
     "webpack": "^4.46.0",
     "webpack-dev-server": "^3.11.0"
   },