From c5df1dc9424fb5dd9e2f27403230859d06323832 Mon Sep 17 00:00:00 2001 From: Octavian Ionescu Date: Wed, 29 Apr 2026 19:32:12 +0300 Subject: [PATCH 1/3] chore(deps): upgrade major dependencies MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - jest: 29 → 30 - jest-junit: 16 → 17 (fixes uuid security vulnerability) - typescript: 5 → 6 - globby: 14 → 16 - @adobe/aio-lib-ims (peer): 7 → 8 Reduces security vulnerabilities from 6 to 5. All tests pass with 100% coverage. Co-Authored-By: Claude Sonnet 4.5 --- package.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index e5677cc..d1ba9a5 100644 --- a/package.json +++ b/package.json @@ -10,7 +10,7 @@ "jsonwebtoken": "^9.0.0" }, "peerDependencies": { - "@adobe/aio-lib-ims": "^7" + "@adobe/aio-lib-ims": "^8" }, "devDependencies": { "@adobe/eslint-config-aio-lib-config": "^4.0.0", @@ -22,11 +22,11 @@ "eslint-plugin-n": "^15.7.0", "eslint-plugin-node": "^11.1.0", "eslint-plugin-promise": "^6.6.0", - "globby": "^14.0.2", - "jest": "^29", - "jest-junit": "^16.0.0", + "globby": "^16.0.0", + "jest": "^30", + "jest-junit": "^17.0.0", "stdout-stderr": "^0.1.9", - "typescript": "^5.1.6" + "typescript": "^6.0.0" }, "engines": { "node": ">=20" From 23faedc67236c461e7075a0f130d2ac9064251a5 Mon Sep 17 00:00:00 2001 From: Octavian Ionescu Date: Wed, 29 Apr 2026 19:41:59 +0300 Subject: [PATCH 2/3] chore(deps): upgrade to ESLint 9 with flat config MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - eslint: 8.57.1 → 9.0.0 - @adobe/eslint-config-aio-lib-config: 4.0.0 → 5.0.0 - neostandard: added (replaces eslint-config-standard + plugins) Removed dependencies (now provided by neostandard): - eslint-config-standard - eslint-plugin-import - eslint-plugin-jest - eslint-plugin-n - eslint-plugin-node - eslint-plugin-promise Migrated from .eslintrc.json to eslint.config.js (flat config format). Added Jest globals configuration for test files. All tests pass with 100% coverage. Linting passes. Co-Authored-By: Claude Sonnet 4.5 --- .eslintrc.json | 3 --- eslint.config.js | 32 ++++++++++++++++++++++++++++++++ package.json | 11 +++-------- 3 files changed, 35 insertions(+), 11 deletions(-) delete mode 100644 .eslintrc.json create mode 100644 eslint.config.js diff --git a/.eslintrc.json b/.eslintrc.json deleted file mode 100644 index e039a28..0000000 --- a/.eslintrc.json +++ /dev/null @@ -1,3 +0,0 @@ -{ - "extends": ["@adobe/eslint-config-aio-lib-config"] -} \ No newline at end of file diff --git a/eslint.config.js b/eslint.config.js new file mode 100644 index 0000000..2e0bd56 --- /dev/null +++ b/eslint.config.js @@ -0,0 +1,32 @@ +/* +Copyright 2020 Adobe. All rights reserved. +This file is licensed to you under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. You may obtain a copy +of the License at http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software distributed under +the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS +OF ANY KIND, either express or implied. See the License for the specific language +governing permissions and limitations under the License. +*/ + +const aioLibConfig = require('@adobe/eslint-config-aio-lib-config') + +module.exports = [ + ...aioLibConfig, + { + files: ['test/**/*.js'], + languageOptions: { + globals: { + jest: 'readonly', + describe: 'readonly', + test: 'readonly', + expect: 'readonly', + beforeEach: 'readonly', + afterEach: 'readonly', + beforeAll: 'readonly', + afterAll: 'readonly' + } + } + } +] diff --git a/package.json b/package.json index d1ba9a5..8744c30 100644 --- a/package.json +++ b/package.json @@ -13,18 +13,13 @@ "@adobe/aio-lib-ims": "^8" }, "devDependencies": { - "@adobe/eslint-config-aio-lib-config": "^4.0.0", - "eslint": "^8.57.1", - "eslint-config-standard": "^17.1.0", - "eslint-plugin-import": "^2.31.0", - "eslint-plugin-jest": "^27.9.0", + "@adobe/eslint-config-aio-lib-config": "^5.0.0", + "eslint": "^9.0.0", "eslint-plugin-jsdoc": "^48.11.0", - "eslint-plugin-n": "^15.7.0", - "eslint-plugin-node": "^11.1.0", - "eslint-plugin-promise": "^6.6.0", "globby": "^16.0.0", "jest": "^30", "jest-junit": "^17.0.0", + "neostandard": "^0", "stdout-stderr": "^0.1.9", "typescript": "^6.0.0" }, From e959877ea93b2bcbca9c58224244a3375eb365f2 Mon Sep 17 00:00:00 2001 From: Octavian Ionescu Date: Wed, 29 Apr 2026 21:34:21 +0300 Subject: [PATCH 3/3] chore(deps): require @adobe/aio-lib-ims >= 8.1.2 Version 8.1.2 updates @adobe/aio-lib-state from v3 to v5, which removes the @azure/cosmos dependency and its vulnerable uuid < 14.0.0. Note: npm audit still reports 5 vulnerabilities due to a nested copy of @adobe/aio-lib-ims-jwt with old peer dependencies, but this is a false positive - the nested copy is not used at runtime (peer dependencies take precedence). Related: https://github.com/adobe/aio-lib-ims/pull/174 Co-Authored-By: Claude Sonnet 4.5 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 8744c30..69edae7 100644 --- a/package.json +++ b/package.json @@ -10,7 +10,7 @@ "jsonwebtoken": "^9.0.0" }, "peerDependencies": { - "@adobe/aio-lib-ims": "^8" + "@adobe/aio-lib-ims": "^8.1.2" }, "devDependencies": { "@adobe/eslint-config-aio-lib-config": "^5.0.0",