Merge pull request #986 from art-alexeyenko/security-audit-april-2022

addressing some of the high-critical viulnerabilities

Author: art-alexeyenko

packages/create-sitecore-jss/package.json

@@ -38,7 +38,7 @@
     "fs-extra": "^10.0.0",
     "glob": "^7.2.0",
     "inquirer": "^8.2.0",
-    "minimist": "^1.2.5"
+    "minimist": "^1.2.6"
   },
   "devDependencies": {
     "@types/chai": "^4.2.22",

packages/create-sitecore-jss/src/templates/angular/package.json

@@ -113,7 +113,7 @@
     "isomorphic-fetch": "^3.0.0",
     "jasmine-core": "~3.7.1",
     "jasmine-spec-reporter": "~6.0.0",
-    "karma": "^6.2.0",
+    "karma": "^6.3.2",
     "karma-chrome-launcher": "~3.1.0",
     "karma-cli": "~2.0.0",
     "karma-coverage-istanbul-reporter": "~3.0.3",

packages/sitecore-jss-cli/package.json

@@ -46,7 +46,7 @@
   "devDependencies": {
     "@types/chai": "^4.2.3",
     "@types/cross-spawn": "^6.0.0",
-    "@types/mocha": "^5.2.7",
+    "@types/mocha": "^9.0.0",
     "@types/node": "^12.7.11",
     "@types/readline-sync": "^1.4.3",
     "@types/resolve": "^0.0.8",
@@ -57,7 +57,7 @@
     "cross-env": "^6.0.3",
     "del-cli": "^3.0.1",
     "eslint": "^7.15.0",
-    "mocha": "^8.1.3",
+    "mocha": "^9.1.3",
     "nyc": "^15.1.0",
     "sinon": "^7.5.0",
     "ts-node": "^8.4.1",

packages/sitecore-jss-dev-tools/package.json

@@ -64,7 +64,7 @@
     "@types/joi": "^17.2.3",
     "@types/js-yaml": "^3.12.1",
     "@types/jszip": "^3.1.6",
-    "@types/mocha": "^5.2.7",
+    "@types/mocha": "^9.0.0",
     "@types/node": "^12.7.11",
     "@types/readline-sync": "^1.4.3",
     "@types/resolve": "^0.0.8",
@@ -78,7 +78,7 @@
     "del": "^3.0.0",
     "del-cli": "^3.0.1",
     "eslint": "^7.15.0",
-    "mocha": "^8.1.3",
+    "mocha": "^9.1.3",
     "nock": "^13.0.6",
     "nyc": "^15.1.0",
     "sinon": "^7.5.0",

packages/sitecore-jss-forms/package.json

@@ -30,14 +30,14 @@
     "@types/chai": "^4.1.6",
     "@types/chai-string": "^1.4.1",
     "@types/lodash.unescape": "^4.0.4",
-    "@types/mocha": "^5.2.5",
+    "@types/mocha": "^9.0.0",
     "@types/node": "^10.12.0",
     "axios": "^0.21.1",
     "chai": "^4.2.0",
     "chai-string": "^1.5.0",
     "del-cli": "^1.1.0",
     "eslint": "^7.15.0",
-    "mocha": "^8.1.3",
+    "mocha": "^9.1.3",
     "nyc": "^15.1.0",
     "ts-node": "^8.4.1",
     "tslib": "^1.10.0",

packages/sitecore-jss-nextjs/package.json

@@ -34,7 +34,7 @@
     "@types/chai-as-promised": "^7.1.3",
     "@types/chai-string": "^1.4.2",
     "@types/enzyme": "^3.10.3",
-    "@types/mocha": "^5.2.7",
+    "@types/mocha": "^9.0.0",
     "@types/node": "12.7.5",
     "@types/prop-types": "^15.7.4",
     "@types/react": "^17.0.15",
@@ -51,7 +51,7 @@
     "eslint": "^7.15.0",
     "eslint-plugin-react": "^7.21.5",
     "jsdom": "^15.1.1",
-    "mocha": "^8.1.3",
+    "mocha": "^9.1.3",
     "next": "^12.1.0",
     "nock": "^13.0.5",
     "nyc": "^15.1.0",

packages/sitecore-jss-proxy/package.json

@@ -35,13 +35,13 @@
   "devDependencies": {
     "@types/chai": "^4.1.6",
     "@types/http-proxy-middleware": "^0.19.3",
-    "@types/mocha": "^5.2.5",
+    "@types/mocha": "^9.0.0",
     "@types/node": "^12.7.11",
     "@types/set-cookie-parser": "^0.0.5",
     "chai": "^4.2.0",
     "del-cli": "^3.0.1",
     "eslint": "^7.15.0",
-    "mocha": "^8.1.3",
+    "mocha": "^9.1.3",
     "nyc": "^15.1.0",
     "ts-node": "^8.4.1",
     "typescript": "~4.3.5"

packages/sitecore-jss-react-forms/package.json

@@ -29,7 +29,7 @@
   "devDependencies": {
     "@types/chai": "^4.2.11",
     "@types/enzyme": "^3.10.5",
-    "@types/mocha": "^7.0.2",
+    "@types/mocha": "^9.0.0",
     "@types/node": "*",
     "@types/prop-types": "^15.7.4",
     "@types/react": "^17.0.15",
@@ -42,7 +42,7 @@
     "eslint": "^7.15.0",
     "eslint-plugin-react": "^7.21.5",
     "jsdom": "^16.2.2",
-    "mocha": "^7.2.0",
+    "mocha": "^9.1.3",
     "nyc": "^15.1.0",
     "react": "^17.0.2",
     "react-dom": "^17.0.2",

packages/sitecore-jss-react/package.json

@@ -31,7 +31,7 @@
     "@types/chai-string": "^1.4.2",
     "@types/deep-equal": "^1.0.1",
     "@types/enzyme": "^3.10.3",
-    "@types/mocha": "^5.2.7",
+    "@types/mocha": "^9.0.0",
     "@types/node": "12.7.5",
     "@types/prop-types": "^15.7.4",
     "@types/react": "^17.0.15",
@@ -46,7 +46,7 @@
     "eslint": "^7.15.0",
     "eslint-plugin-react": "^7.21.5",
     "jsdom": "^15.1.1",
-    "mocha": "^8.1.3",
+    "mocha": "^9.1.3",
     "nyc": "^15.1.0",
     "react": "^17.0.2",
     "react-dom": "^17.0.2",

packages/sitecore-jss-rendering-host/package.json

@@ -40,15 +40,15 @@
     "@types/express": "4.17.8",
     "@types/express-serve-static-core": "^4.17.24",
     "@types/glob": "^7.1.1",
-    "@types/mocha": "^5.2.7",
+    "@types/mocha": "^9.0.0",
     "@types/node": "^12.7.11",
     "@types/webpack": "4.39.2",
     "@types/webpack-dev-middleware": "2.0.5",
     "@types/webpack-dev-server": "3.1.7",
     "chai": "^4.2.0",
     "del-cli": "^3.0.1",
     "eslint": "^7.15.0",
-    "mocha": "^8.1.3",
+    "mocha": "^9.1.3",
     "nyc": "^15.1.0",
     "ts-node": "^8.4.1",
     "typescript": "~4.3.5"

packages/sitecore-jss/package.json

@@ -37,15 +37,15 @@
     "@types/debug": "^4.1.5",
     "@types/lodash.unescape": "^4.0.6",
     "@types/memory-cache": "^0.2.1",
-    "@types/mocha": "^5.2.7",
+    "@types/mocha": "^9.0.0",
     "@types/node": "^16.11.6",
     "@types/url-parse": "1.4.3",
     "chai": "^4.2.0",
     "chai-spies": "^1.0.0",
     "chai-string": "^1.5.0",
-    "del-cli": "^3.0.1",
+    "del-cli": "^4.0.1",
     "eslint": "^7.15.0",
-    "mocha": "^8.1.3",
+    "mocha": "^9.1.3",
     "nock": "^13.0.5",
     "nyc": "^15.1.0",
     "ts-node": "^8.4.1",
@@ -57,10 +57,10 @@
     "chalk": "^4.1.0",
     "debug": "^4.3.1",
     "graphql": "^15.4.0",
-    "graphql-request": "^3.4.0",
+    "graphql-request": "^4.2.0",
     "lodash.unescape": "^4.0.1",
     "memory-cache": "^0.2.0",
-    "url-parse": "^1.5.1"
+    "url-parse": "^1.5.8"
   },
   "description": "",
   "types": "types/index.d.ts",