update third party libraries

OWASP · Dec 28, 2024 · 14074e8 · 14074e8
2 parents 58e622e + 8a752de
commit 14074e8
Show file tree

Hide file tree

Showing 10 changed files with 37 additions and 35 deletions.
diff --git a/.github/workflows/housekeeping.yaml b/.github/workflows/housekeeping.yaml
@@ -26,7 +26,7 @@ jobs:
           keep_minimum_runs: 10
 
       - name: Delete unused workflows
-        uses: otto-de/purge-deprecated-workflow-runs@v2.0.3
+        uses: otto-de/purge-deprecated-workflow-runs@v2.2.0
         with:
           token: ${{ github.token }}
 
@@ -117,7 +117,7 @@ jobs:
         uses: actions/[email protected]
 
       - name: Link Checker
-        uses: lycheeverse/lychee-action@v2.1.0
+        uses: lycheeverse/lychee-action@v2.2.0
         with:
           fail: true
         env:

diff --git a/.github/workflows/pull_request.yaml b/.github/workflows/pull_request.yaml
@@ -184,7 +184,7 @@ jobs:
           npm run test:e2e-pr-smokes
 
       - name: Upload e2e videos
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: e2e_vids.zip
           path: td.vue/tests/e2e/videos
@@ -224,7 +224,7 @@ jobs:
           npm run test:e2e-pr
 
       - name: Upload e2e videos
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: e2e_vids.zip
           path: td.vue/tests/e2e/videos
@@ -281,7 +281,7 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v3.7.0
+        uses: docker/setup-buildx-action@v3.8.0
         with:
           install: true
 
@@ -309,7 +309,7 @@ jobs:
           load: true
 
       - name: Upload docker local image
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: ${{ env.IMAGE_NAME }}
           path: /tmp/${{ env.IMAGE_NAME }}.tar

diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
@@ -54,7 +54,7 @@ jobs:
         run: npm run make-sbom
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-server
           path: './td.server/sbom.*'
@@ -172,7 +172,7 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v3.7.0
+        uses: docker/setup-buildx-action@v3.8.0
         with:
           install: true
 
@@ -226,7 +226,7 @@ jobs:
           IMAGE_ID: ${{ steps.docker_build_amd64.outputs.imageid }}
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-container-image-app
           path: './boms/*'
@@ -340,7 +340,7 @@ jobs:
         run: npm run test:e2e-ci-smokes
 
       - name: Upload e2e videos
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: e2e_vids.zip
           path: td.vue/tests/e2e/videos
@@ -392,7 +392,7 @@ jobs:
         run: npm run test:e2e-ci
 
       - name: Upload e2e videos
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: e2e_vids.zip
           path: td.vue/tests/e2e/videos
@@ -490,7 +490,7 @@ jobs:
         run: npm run build:desktop -- --windows --publish never
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-desktop-windows-site
           path: './td.vue/dist-desktop/bundled/.sbom/*'
@@ -532,7 +532,7 @@ jobs:
         run: npm run build:desktop -- --mac --publish never
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-desktop-macos-site
           path: './td.vue/dist-desktop/bundled/.sbom/*'
@@ -579,7 +579,7 @@ jobs:
         run: find . -name "*.log" -exec cat '{}' \; -print
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-desktop-linux-site
           path: './td.vue/dist-desktop/bundled/.sbom/*'
@@ -626,7 +626,7 @@ jobs:
         run: find . -name "*.log" -exec cat '{}' \; -print
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-desktop-linux-snap-site
           path: './td.vue/dist-desktop/bundled/.sbom/*'
@@ -666,7 +666,7 @@ jobs:
           cp raw/sboms-desktop-linux-snap-site/bom.xml  sboms/threat-dragon-desktop-linux-snap-site-bom.xml
           cp raw/sboms-container-image-app/*            sboms/threat-dragon-container-image/app/
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms
           path: 'sboms/'

diff --git a/.github/workflows/release-snap.yaml b/.github/workflows/release-snap.yaml
@@ -53,7 +53,7 @@ jobs:
         run: find . -name "*.log" -exec cat '{}' \; -print
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-desktop-linux-snap-site
           path: './td.vue/dist-desktop/bundled/.sbom/*'

diff --git a/.github/workflows/release-windows.yaml b/.github/workflows/release-windows.yaml
@@ -44,7 +44,7 @@ jobs:
         run: npm run build:desktop -- --windows --publish always
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-desktop-windows-site
           path: './td.vue/dist-desktop/bundled/.sbom/*'

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -86,7 +86,7 @@ jobs:
         run: npm run make-sbom
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-server
           path: './td.server/sbom.*'
@@ -164,7 +164,7 @@ jobs:
         run: npm run build:desktop -- --windows --publish always
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-desktop-windows-site
           path: './td.vue/dist-desktop/bundled/.sbom/*'
@@ -227,7 +227,7 @@ jobs:
         run: find . -name "*.log" -exec cat '{}' \; -print
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-desktop-macos-site
           path: './td.vue/dist-desktop/bundled/.sbom/*'
@@ -277,7 +277,7 @@ jobs:
         run: find . -name "*.log" -exec cat '{}' \; -print
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-desktop-linux-site
           path: './td.vue/dist-desktop/bundled/.sbom/*'
@@ -333,7 +333,7 @@ jobs:
         run: find . -name "*.log" -exec cat '{}' \; -print
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-desktop-linux-snap-site
           path: './td.vue/dist-desktop/bundled/.sbom/*'
@@ -354,7 +354,7 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v3.7.0
+        uses: docker/setup-buildx-action@v3.8.0
         with:
           install: true
 
@@ -408,7 +408,7 @@ jobs:
           IMAGE_ID: ${{ steps.docker_build_amd64.outputs.imageid }}
 
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms-container-image-app
           path: './boms/*'
@@ -456,7 +456,7 @@ jobs:
           cp raw/sboms-desktop-linux-snap-site/bom.xml  sboms/threat-dragon-desktop-linux-snap-site-bom.xml
           cp raw/sboms-container-image-app/*            sboms/threat-dragon-container-image/app/
       - name: Save SBOM artifact
-        uses: actions/upload-artifact@v4.4.0
+        uses: actions/upload-artifact@v4.5.0
         with:
           name: sboms
           path: 'sboms/'
@@ -488,7 +488,7 @@ jobs:
           tar -czvf threat-dragon-sboms.zip sboms
 
       - name: Create release notes
-        uses: softprops/action-gh-release@v2.1.0
+        uses: softprops/action-gh-release@v2.2.0
         with:
           draft: true
           name: "${releaseVersion:1}"

diff --git a/td.server/package-lock.json b/td.server/package-lock.json
diff --git a/td.server/package.json b/td.server/package.json
@@ -93,7 +93,7 @@
     "path-to-regexp@<1.0.0": "0.1.12",
     "postcss@<8.4.31": ">=8.4.31",
     "send": ">=0.19.0",
-    "systeminformation@<5.21.8": ">=5.21.8",
+    "systeminformation": ">=5.23.23",
     "tough-cookie@<4.1.3": ">=4.1.3",
     "vm2@<3.9.16": ">=3.9.19",
     "ws": ">=8.18.0"

diff --git a/td.vue/package-lock.json b/td.vue/package-lock.json
diff --git a/td.vue/package.json b/td.vue/package.json
@@ -172,7 +172,7 @@
     "postcss@<8.4.31": ">=8.4.31",
     "send": ">=0.19.0",
     "serve-static": ">=1.16.0",
-    "systeminformation@<5.21.8": ">=5.21.8",
+    "systeminformation": ">=5.23.23",
     "tar@>=6.0.0 <6.1.9": ">=6.1.9",
     "tough-cookie@<4.1.3": ">=4.1.3",
     "vm2@<3.9.16": ">=3.9.19",