Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Major dependency updates / modernization, vulnerability reduction #1002

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Major dependency updates / modernization, vulnerability reduction #1002

wants to merge 1 commit into from

Conversation

andrewkfiedler
Copy link
Contributor

Summary:
Updates to various dependencies to get us on more modern versions and reduce vulnerability surface.

Engine:

  • node: 16.x.x → 20.x.x

Dependencies:

  • @blueprintjs/core: 3.29.0 → 4.20.2
  • @blueprintjs/datetime: 3.18.3 → 4.4.37
  • @emotion/react: 11.11.1 → 11.13.3
  • @emotion/styled: 11.11.0 → 11.13.0
  • @mui/icons-material: 5.13.7 → 6.3.0
  • @mui/lab: 5.0.0-alpha.135 → 6.0.0-beta.21
  • @mui/material: 5.13.7 → 6.3.0
  • @mui/system: 5.13.7 → 6.3.0
  • @mui/x-data-grid: 6.9.1 → 7.23.5
  • @turf/*: 6.5.0 → 7.1.0
  • @types/backbone: Added 1.4.4
  • @types/backbone.radio: Added 0.8.37
  • d3: 5.16.0 → 7.9.0
  • geospatialdraw: 0.4.8 → 0.4.17
  • jquery: 3.4.1 → 3.7.1
  • lodash: 4.17.15 → 4.17.21
  • moment: 2.27.0 → 2.30.1
  • moment-timezone: 0.5.31 → 0.5.46
  • openlayers/ol: 4.6.5 → 10.2.1
  • plotly.js: 1.45.0 → 2.35.3
  • react-router-dom: 5.3.4 → 6.28.1
  • styled-components: 5.3.10 → 6.1.13
  • tailwindcss: 3.3.1 → 3.4.17
  • urijs: 1.19.1 → 1.19.11

Dev Dependencies:

  • @connexta/ace: Updated git commit hash to latest
  • @testing-library/jest-dom: Added 6.6.3
  • @testing-library/dom: Added 10.4.0
  • @testing-library/react: Added 16.0.1
  • @testing-library/user-event: Added 14.5.2
  • @types/d3: 5.0.0 → 7.4.3 - resolutions necessary because the main types does not specify a version for subtypes
  • @types/jquery: Added 3.5.32
  • autoprefixer: Added 10.4.20
  • tslib: 2.5.0 → 2.8.1
  • typescript: 5.0.4 → 5.7.2

Removed Dependencies:

  • @types/enzyme
  • @types/react-router-dom
  • @types/styled-components
  • @welldone-software/why-did-you-render
  • enzyme - no longer supported, replaced with @testing-library
  • @wojtekmaj/enzyme-adapter-react-17
  • jsdom
  • react-addons-test-utils
  • @types/openlayers
  • bootstrap

Build Tools:

  • cpx → cpy-cli
  • cpy: Added 11.1.0
  • cpy-cli: Added 5.0.0
  • move-cli: 1.2.1 → move-file-cli 3.0.0
  • move-file: Added 3.1.0
  • move-file-cli: Added 3.0.0
  • json: 9.0.6 → 11.0.0

Script Changes:

  • Removed m2 and install:m2 scripts
  • Updated postbuild to use move-file instead of move-cli
  • Updated publish scripts to use cpy instead of cpx

Type Definition Resolutions Added:


  • Fixes issues that result from multiple differing versions of dependencies being pulled in.

@andrewkfiedler
Copy link
Contributor Author

build now

@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@cxddfuibot
Copy link
Collaborator

Build FAILURE See the job results in legacy Jenkins UI or in Blue Ocean UI.

@cxddfuibot
Copy link
Collaborator

Suspected Failure(s):

  • Error installing packages from yarn

@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@cxddfuibot
Copy link
Collaborator

Build FAILURE See the job results in legacy Jenkins UI or in Blue Ocean UI.

@cxddfuibot
Copy link
Collaborator

Suspected Failure(s):

  • Error installing packages from yarn

@andrewkfiedler
Copy link
Contributor Author

build now

@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@cxddfuibot
Copy link
Collaborator

Build FAILURE See the job results in legacy Jenkins UI or in Blue Ocean UI.

@cxddfuibot
Copy link
Collaborator

Suspected Failure(s):

  • Error installing packages from yarn

@andrewkfiedler
Copy link
Contributor Author

build now

@andrewkfiedler
Copy link
Contributor Author

build now

@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@cxddfuibot
Copy link
Collaborator

Build FAILURE See the job results in legacy Jenkins UI or in Blue Ocean UI.

@cxddfuibot
Copy link
Collaborator

Unable to Detect Failure Reason

@andrewkfiedler
Copy link
Contributor Author

build now

@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@cxddfuibot
Copy link
Collaborator

Build FAILURE See the job results in legacy Jenkins UI or in Blue Ocean UI.

@cxddfuibot
Copy link
Collaborator

Suspected Failure(s):

  • Error installing packages from yarn

@andrewkfiedler
Copy link
Contributor Author

build now

@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@cxddfuibot
Copy link
Collaborator

Build FAILURE See the job results in legacy Jenkins UI or in Blue Ocean UI.

@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@github-actions GitHub Actions
Copy link

An updated dist branch has been created and pushed to origin.
You can use:
"catalog-ui-search": "https://github.com/codice/ddf-ui#catalog-ui-search-dist-1002",
in your package.json to use this version in your project.

Remember to use "yarn install --force" if you want to pick up changes each time you make a change to this branch by committing.

github-actions bot pushed a commit that referenced this pull request Jan 23, 2025
@actions-user
Update catalog-ui-search package for PR #1002
cea849a
@cxddfuibot
Copy link
Collaborator

Build FAILURE See the job results in legacy Jenkins UI or in Blue Ocean UI.

@cxddfuibot
Copy link
Collaborator

Potentially Relevant Output: \n\n\njava.util.concurrent.FutureTask.run(FutureTask.java:266)\n[2025-01-23T00:42:02.803Z] \tat java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\n[2025-01-23T00:42:02.803Z] \tat java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\n[2025-01-23T00:42:02.803Z] \tat hudson.remoting.Engine$1.lambda$newThread$0(Engine.java:93)\n[2025-01-23T00:42:02.803Z] \tat java.lang.Thread.run(Thread.java:748)\n[2025-01-23T00:42:02.803Z] \tSuppressed: hudson.remoting.Chann...\n\n\n

@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@github-actions GitHub Actions
Copy link

An updated dist branch has been created and pushed to origin.
You can use:
"catalog-ui-search": "https://github.com/codice/ddf-ui#catalog-ui-search-dist-1002",
in your package.json to use this version in your project.

Remember to use "yarn install --force" if you want to pick up changes each time you make a change to this branch by committing.

github-actions bot pushed a commit that referenced this pull request Jan 23, 2025
@actions-user
Update catalog-ui-search package for PR #1002
86c385d
@cxddfuibot
Copy link
Collaborator

Build FAILURE See the job results in legacy Jenkins UI or in Blue Ocean UI.

@cxddfuibot
Copy link
Collaborator

Unable to Detect Failure Reason

@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@github-actions GitHub Actions
Copy link

An updated dist branch has been created and pushed to origin.
You can use:
"catalog-ui-search": "https://github.com/codice/ddf-ui#catalog-ui-search-dist-1002",
in your package.json to use this version in your project.

Remember to use "yarn install --force" if you want to pick up changes each time you make a change to this branch by committing.

github-actions bot pushed a commit that referenced this pull request Jan 23, 2025
@actions-user
Update catalog-ui-search package for PR #1002
de6b5d6
@cxddfuibot
Copy link
Collaborator

Build SUCCESS See the job results in legacy Jenkins UI or in Blue Ocean UI.

@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@github-actions GitHub Actions
Copy link

An updated dist branch has been created and pushed to origin.
You can use:
"catalog-ui-search": "https://github.com/codice/ddf-ui#catalog-ui-search-dist-1002",
in your package.json to use this version in your project.

Remember to use "yarn install --force" if you want to pick up changes each time you make a change to this branch by committing.

github-actions bot pushed a commit that referenced this pull request Jan 23, 2025
@actions-user
Update catalog-ui-search package for PR #1002
b63f45c
@cxddfuibot
Copy link
Collaborator

Build SUCCESS See the job results in legacy Jenkins UI or in Blue Ocean UI.

@github-actions GitHub Actions
Copy link

An updated dist branch has been created and pushed to origin.
You can use:
"catalog-ui-search": "https://github.com/codice/ddf-ui#catalog-ui-search-dist-1002",
in your package.json to use this version in your project.

Remember to use "yarn install --force" if you want to pick up changes each time you make a change to this branch by committing.

github-actions bot pushed a commit that referenced this pull request Jan 23, 2025
@actions-user
Update catalog-ui-search package for PR #1002
6bb2138
@cxddfuibot
Copy link
Collaborator

Internal build has been started, your results will be available at build completion.

@cxddfuibot
Copy link
Collaborator

Build SUCCESS See the job results in legacy Jenkins UI or in Blue Ocean UI.

@andrewkfiedler
Major dependency updates and modernization, vulnerability reduction
8c1f814 
Engine:
- node: 16.x.x → 20.x.x

Dependencies:
- @blueprintjs/core: 3.29.0 → 4.20.2
- @blueprintjs/datetime: 3.18.3 → 4.4.37
- @emotion/react: 11.11.1 → 11.13.3
- @emotion/styled: 11.11.0 → 11.13.0
- @mui/icons-material: 5.13.7 → 6.3.0
- @mui/lab: 5.0.0-alpha.135 → 6.0.0-beta.21
- @mui/material: 5.13.7 → 6.3.0
- @mui/system: 5.13.7 → 6.3.0
- @mui/x-data-grid: 6.9.1 → 7.23.5
- @turf/*: 6.5.0 → 7.1.0
- @types/backbone: Added 1.4.4
- @types/backbone.radio: Added 0.8.37
- d3: 5.16.0 → 7.9.0
- jquery: 3.4.1 → 3.7.1
- lodash: 4.17.15 → 4.17.21
- moment: 2.27.0 → 2.30.1
- moment-timezone: 0.5.31 → 0.5.46
- openlayers/ol: 4.6.5 → 10.2.1
- plotly.js: 1.45.0 → 2.35.3
- react-router-dom: 5.3.4 → 6.28.1
- styled-components: 5.3.10 → 6.1.13
- tailwindcss: 3.3.1 → 3.4.17
- urijs: 1.19.1 → 1.19.11

Dev Dependencies:
- @connexta/ace: Updated git commit hash to latest
- @testing-library/jest-dom: Added 6.6.3
- @testing-library/dom: Added 10.4.0
- @testing-library/react: Added 16.0.1
- @testing-library/user-event: Added 14.5.2
- @types/d3: 5.0.0 → 7.4.3 - resolutions necessary because the main types does not specify a version for subtypes
- @types/jquery: Added 3.5.32
- autoprefixer: Added 10.4.20
- tslib: 2.5.0 → 2.8.1
- typescript: 5.0.4 → 5.7.2

Removed Dependencies:
- @types/enzyme
- @types/react-router-dom
- @types/styled-components
- @welldone-software/why-did-you-render
- enzyme - no longer supported, replaced with @testing-library
- @wojtekmaj/enzyme-adapter-react-17
- jsdom
- react-addons-test-utils
- @types/openlayers
- bootstrap

Build Tools:
- cpx → cpy-cli
- cpy: Added 11.1.0
- cpy-cli: Added 5.0.0
- move-cli: 1.2.1 → move-file-cli 3.0.0
- move-file: Added 3.1.0
- move-file-cli: Added 3.0.0
- json: 9.0.6 → 11.0.0

Script Changes:
- Removed m2 and install:m2 scripts
- Updated postbuild to use move-file instead of move-cli
- Updated publish scripts to use cpy instead of cpx

Other Changes:
- Updated our jenkins file to use an unofficial build of node 20 that works for it's OS
- Removed lerna from ui-frontend top managing package.  We were not using the main features it provides (workspaces), and it was heavily out of date, and causing hard to solve build issues.  We now have a few custom scripts in that package json to handle the nested packages (catalog-ui-search, admin, and cesium-assets).
- Updated npm to a more recent version (10 latest) in the packages that use it for packing.

Type Definition Resolutions Added:
 - Fixes issues that result from multiple differing versions of dependencies being pulled in.
@github-actions GitHub Actions
Copy link

An updated dist branch has been created and pushed to origin.
You can use:
"catalog-ui-search": "https://github.com/codice/ddf-ui#catalog-ui-search-dist-1002",
in your package.json to use this version in your project.

Remember to use "yarn install --force" if you want to pick up changes each time you make a change to this branch by committing.

github-actions bot pushed a commit that referenced this pull request Jan 28, 2025
@actions-user
Update catalog-ui-search package for PR #1002
9ee5dcc
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@andrewkfiedler @cxddfuibot