build(security): update vulnerable deps to debug:4.4.1 yaml:2.8.0 @fastify/view:11.1.0 fastify:5.3.3 jose:6.0.11

awlayton · awlayton · commit 09ef68c2d1e6 · 2025-08-05T15:21:38.000-07:00
diff --git a/oada/libs/lib-arangodb/package.json b/oada/libs/lib-arangodb/package.json
@@ -61,7 +61,7 @@
     "@oada/types": "^4.0.0",
     "arangojs": "^10.1.1",
     "bcryptjs": "^3.0.2",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "deep-equal": "^2.2.3",
     "flat": "^6.0.1",
     "json-ptr": "^3.1.1",
@@ -76,9 +76,9 @@
     "@types/deep-equal": "^1.0.4",
     "@types/flat": "^5.0.5",
     "@types/json-pointer": "^1.0.34",
-    "@types/node": "^22.15.3",
-    "ava": "6.2.0",
-    "type-fest": "^4.40.1"
+    "@types/node": "^22.15.18",
+    "ava": "6.3.0",
+    "type-fest": "^4.41.0"
   },
   "volta": {
     "node": "22.5.1"
diff --git a/oada/libs/lib-config/package.json b/oada/libs/lib-config/package.json
@@ -37,11 +37,11 @@
     "convict": "^6.2.4",
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "dotenv": "^16.5.0",
     "json5": "^2.2.3",
     "tslib": "2.8.1",
-    "yaml": "^2.7.1"
+    "yaml": "^2.8.0"
   },
   "devDependencies": {
     "@types/convict": "^6.1.6",
diff --git a/oada/libs/lib-kafka/package.json b/oada/libs/lib-kafka/package.json
@@ -37,7 +37,7 @@
   "dependencies": {
     "@oada/lib-config": "workspace:^",
     "cls-rtracer": "^2.6.3",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "eventemitter3": "^5.0.1",
     "kafkajs": "^2.2.4",
     "ksuid": "^3.0.0",
@@ -48,9 +48,9 @@
     "@ava/typescript": "^5.0.0",
     "@types/convict": "^6.1.6",
     "@types/debug": "^4.1.12",
-    "@types/node": "^22.15.3",
+    "@types/node": "^22.15.18",
     "@types/uuid": "^10.0.0",
-    "ava": "6.2.0"
+    "ava": "6.3.0"
   },
   "volta": {
     "node": "22.5.1"
diff --git a/oada/libs/lib-prom/package.json b/oada/libs/lib-prom/package.json
@@ -42,9 +42,9 @@
   "devDependencies": {
     "@ava/typescript": "^5.0.0",
     "@types/convict": "^6.1.6",
-    "@types/node": "^22.15.3",
+    "@types/node": "^22.15.18",
     "@types/ws": "^8.18.1",
-    "ava": "6.2.0",
+    "ava": "6.3.0",
     "fastify-plugin": "^5.0.1"
   },
   "volta": {
diff --git a/oada/libs/models/package.json b/oada/libs/models/package.json
@@ -31,14 +31,14 @@
     "@oada/types": "^4.0.0",
     "@qlever-llc/interface2class": "^1.1.0",
     "tslib": "2.8.1",
-    "type-fest": "^4.40.1",
+    "type-fest": "^4.41.0",
     "xksuid": "^0.0.4"
   },
   "volta": {
     "node": "22.5.1"
   },
   "devDependencies": {
-    "@types/node": "^22.15.3",
-    "jose": "^6.0.10"
+    "@types/node": "^22.15.18",
+    "jose": "^6.0.11"
   }
 }
diff --git a/oada/libs/pino-debug/package.json b/oada/libs/pino-debug/package.json
@@ -34,7 +34,7 @@
   },
   "devDependencies": {
     "@types/debug": "^4.1.12",
-    "@types/node": "^22.15.3"
+    "@types/node": "^22.15.18"
   },
   "peerDependencies": {
     "debug": "*"
diff --git a/oada/package.json b/oada/package.json
@@ -13,19 +13,19 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^1.9.4",
-    "@commitlint/cli": "^19.8.0",
-    "@commitlint/config-conventional": "^19.8.0",
+    "@commitlint/cli": "^19.8.1",
+    "@commitlint/config-conventional": "^19.8.1",
     "@tsconfig/node22": "^22.0.1",
     "@types/mocha": "^10.0.10",
-    "@types/node": "^22.15.3",
+    "@types/node": "^22.15.18",
     "@yarnpkg/sdks": "^3.2.1",
-    "browserslist": "^4.24.4",
+    "browserslist": "^4.24.5",
     "c8": "^10.1.3",
     "get-port": "^7.1.0",
     "tslib": "2.8.1",
     "typescript": "5.8.3",
     "update-browserslist-db": "^1.1.3",
-    "zx": "^8.5.3"
+    "zx": "^8.5.4"
   },
   "dependencies": {
     "pino-pretty": "^13.0.0"
diff --git a/oada/services/auth/package.json b/oada/services/auth/package.json
@@ -60,7 +60,7 @@
     "@fastify/secure-session": "^8.2.0",
     "@fastify/sensible": "^6.0.3",
     "@fastify/static": "^8.1.1",
-    "@fastify/view": "^11.0.0",
+    "@fastify/view": "^11.1.0",
     "@oada/certs": "^4.1.1",
     "@oada/error": "^2.0.1",
     "@oada/lib-arangodb": "workspace:^",
@@ -77,14 +77,14 @@
     "bcryptjs": "^3.0.2",
     "chalk": "^5.4.1",
     "cmd-ts": "^0.13.0",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "ejs": "^3.1.10",
     "es-main": "^1.3.0",
-    "fastify": "^5.3.2",
+    "fastify": "^5.3.3",
     "fastify-graceful-shutdown": "^4.0.1",
     "fastify-healthcheck": "^5.1.0",
     "ioredis": "^5.6.1",
-    "jose": "^6.0.10",
+    "jose": "^6.0.11",
     "oauth2orize": "^1.12.0",
     "oauth2orize-device-code": "^0.1.0",
     "oauth2orize-openid": "^0.4.1",
@@ -104,7 +104,7 @@
     "tslib": "2.8.1",
     "urijs": "^1.19.11",
     "uuid": "^11.1.0",
-    "yaml": "^2.7.1"
+    "yaml": "^2.8.0"
   },
   "devDependencies": {
     "@fastify/type-provider-json-schema-to-ts": "^5.0.0",
@@ -126,7 +126,7 @@
     "@types/uuid": "^10.0.0",
     "c8": "^10.1.3",
     "json-schema-to-ts": "^3.1.1",
-    "type-fest": "^4.40.1"
+    "type-fest": "^4.41.0"
   },
   "volta": {
     "node": "22.5.1"
diff --git a/oada/services/http-handler/package.json b/oada/services/http-handler/package.json
@@ -57,10 +57,10 @@
     "@oada/pino-debug": "workspace:^",
     "@oada/types": "^4.0.0",
     "cacache": "^19.0.1",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "es-main": "^1.3.0",
     "eventemitter3": "^5.0.1",
-    "fastify": "5.3.2",
+    "fastify": "5.3.3",
     "fastify-graceful-shutdown": "^4.0.1",
     "fastify-healthcheck": "^5.1.0",
     "fastify-jwt-jwks": "^2.0.2",
@@ -80,14 +80,14 @@
     "@types/cacache": "^17.0.2",
     "@types/debug": "^4.1.12",
     "@types/ioredis": "^5.0.0",
-    "@types/node": "^22.15.3",
+    "@types/node": "^22.15.18",
     "@types/type-is": "^1.6.7",
     "@types/uuid": "^10.0.0",
     "@types/ws": "^8.18.1",
     "connect": "^3.7.0",
     "find-my-way": "^9.3.0",
     "light-my-request": "^6.6.0",
-    "type-fest": "^4.40.1"
+    "type-fest": "^4.41.0"
   },
   "volta": {
     "node": "22.5.1"
diff --git a/oada/services/permissions-handler/package.json b/oada/services/permissions-handler/package.json
@@ -30,14 +30,14 @@
     "@oada/lib-kafka": "workspace:^",
     "@oada/lib-prom": "workspace:^",
     "@oada/pino-debug": "workspace:^",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "es-main": "^1.3.0",
     "tslib": "2.8.1",
     "type-is": "^2.0.1"
   },
   "devDependencies": {
     "@types/debug": "^4.1.12",
-    "@types/node": "^22.15.3",
+    "@types/node": "^22.15.18",
     "@types/type-is": "^1.6.7"
   },
   "volta": {
diff --git a/oada/services/rev-graph-update/package.json b/oada/services/rev-graph-update/package.json
@@ -41,7 +41,7 @@
     "@oada/lib-prom": "workspace:^",
     "@oada/pino-debug": "workspace:^",
     "ajv": "^8.17.1",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "p-queue": "^8.1.0",
     "randomstring": "^1.3.1",
     "tslib": "2.8.1"
@@ -51,10 +51,10 @@
     "@oada/client": "^5.3.0",
     "@oada/write-handler": "workspace:^",
     "@types/debug": "^4.1.12",
-    "@types/node": "^22.15.3",
+    "@types/node": "^22.15.18",
     "@types/randomstring": "^1.3.0",
-    "ava": "6.2.0",
-    "type-fest": "^4.40.1"
+    "ava": "6.3.0",
+    "type-fest": "^4.41.0"
   },
   "volta": {
     "node": "22.5.1"
diff --git a/oada/services/shares/package.json b/oada/services/shares/package.json
@@ -31,7 +31,7 @@
     "@oada/lib-kafka": "workspace:^",
     "@oada/lib-prom": "workspace:^",
     "@oada/pino-debug": "workspace:^",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "tslib": "2.8.1"
   },
   "devDependencies": {
diff --git a/oada/services/startup/package.json b/oada/services/startup/package.json
@@ -36,12 +36,12 @@
     "@oada/lib-arangodb": "workspace:^",
     "@oada/lib-kafka": "workspace:^",
     "@oada/pino-debug": "workspace:^",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "tslib": "2.8.1"
   },
   "devDependencies": {
     "@types/debug": "^4.1.12",
-    "@types/node": "^22.15.3"
+    "@types/node": "^22.15.18"
   },
   "volta": {
     "node": "22.5.1"
diff --git a/oada/services/sync-handler/package.json b/oada/services/sync-handler/package.json
@@ -33,14 +33,14 @@
     "@oada/lib-kafka": "workspace:^",
     "@oada/lib-prom": "workspace:^",
     "@oada/pino-debug": "workspace:^",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "got": "^14.4.7",
     "tslib": "2.8.1"
   },
   "devDependencies": {
     "@oada/write-handler": "workspace:^",
     "@types/debug": "^4.1.12",
-    "@types/node": "^22.15.3"
+    "@types/node": "^22.15.18"
   },
   "volta": {
     "node": "22.5.1"
diff --git a/oada/services/users/package.json b/oada/services/users/package.json
@@ -31,14 +31,14 @@
     "@oada/pino-debug": "workspace:^",
     "chalk": "^5.4.1",
     "cmd-ts": "^0.13.0",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "es-main": "^1.3.0",
     "ksuid": "^3.0.0",
     "tslib": "2.8.1"
   },
   "devDependencies": {
     "@types/debug": "^4.1.12",
-    "type-fest": "^4.40.1"
+    "type-fest": "^4.41.0"
   },
   "volta": {
     "node": "22.5.1"
diff --git a/oada/services/webhooks/package.json b/oada/services/webhooks/package.json
@@ -31,7 +31,7 @@
     "@oada/lib-kafka": "workspace:^",
     "@oada/lib-prom": "workspace:^",
     "@oada/pino-debug": "workspace:^",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "got": "^14.4.7",
     "tslib": "2.8.1"
   },
diff --git a/oada/services/well-known/package.json b/oada/services/well-known/package.json
@@ -42,14 +42,14 @@
     "@oada/well-known-json": "^4.0.2",
     "allow-methods": "^7.0.0",
     "cors": "^2.8.5",
-    "debug": "^4.4.0",
-    "fastify": "^5.3.2",
+    "debug": "^4.4.1",
+    "fastify": "^5.3.3",
     "got": "^14.4.7",
     "openid-client": "^5.7.1",
     "tslib": "2.8.1"
   },
   "devDependencies": {
-    "@types/cors": "^2.8.17",
+    "@types/cors": "^2.8.18",
     "@types/debug": "^4.1.12",
     "fastify-plugin": "^5.0.1"
   },
diff --git a/oada/services/write-handler/package.json b/oada/services/write-handler/package.json
@@ -48,7 +48,7 @@
     "@oada/lib-kafka": "workspace:^",
     "@oada/lib-prom": "workspace:^",
     "@oada/pino-debug": "workspace:^",
-    "debug": "^4.4.0",
+    "debug": "^4.4.1",
     "json-ptr": "^3.1.1",
     "object-assign-deep": "^0.4.0",
     "timed-cache": "^2.0.0",
@@ -60,9 +60,9 @@
     "@oada/types": "^4.0.0",
     "@types/debug": "^4.1.12",
     "@types/json-pointer": "^1.0.34",
-    "@types/node": "^22.15.3",
+    "@types/node": "^22.15.18",
     "@types/object-assign-deep": "^0.4.3",
-    "ava": "6.2.0"
+    "ava": "6.3.0"
   },
   "volta": {
     "node": "22.5.1"
diff --git a/oada/yarn.lock b/oada/yarn.lock
