diff --git a/.changeset/few-foxes-occur.md b/.changeset/few-foxes-occur.md deleted file mode 100644 index dc6ad1c12..000000000 --- a/.changeset/few-foxes-occur.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -'@openfn/lightning-mock': patch -'dts-inspector': patch -'@openfn/ws-worker': patch -'@openfn/cli': patch ---- - -Upgrade vulnerable version of ws. diff --git a/.changeset/fluffy-kids-melt.md b/.changeset/fluffy-kids-melt.md deleted file mode 100644 index 67f533ca6..000000000 --- a/.changeset/fluffy-kids-melt.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'dts-inspector': patch ---- - -Remove live-server as it was preventing an update of a vulnerable version of braces. diff --git a/.changeset/friendly-horses-fix.md b/.changeset/friendly-horses-fix.md deleted file mode 100644 index 9d1aa2012..000000000 --- a/.changeset/friendly-horses-fix.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@openfn/ws-worker': patch ---- - -Update vulnerable version of decode-uri-component. diff --git a/.changeset/itchy-walls-fetch.md b/.changeset/itchy-walls-fetch.md deleted file mode 100644 index 9e28244d4..000000000 --- a/.changeset/itchy-walls-fetch.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -'@openfn/lightning-mock': patch -'dts-inspector': patch -'@openfn/ws-worker': patch -'@openfn/cli': patch ---- - -Update vulnerable version of word-wrap. diff --git a/.changeset/light-insects-sniff.md b/.changeset/light-insects-sniff.md deleted file mode 100644 index e644aeb75..000000000 --- a/.changeset/light-insects-sniff.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -'@openfn/lightning-mock': patch -'dts-inspector': patch -'@openfn/ws-worker': patch -'@openfn/cli': patch ---- - -Update vulnerable version of postcss. diff --git a/.changeset/little-buses-drum.md b/.changeset/little-buses-drum.md deleted file mode 100644 index f92c63595..000000000 --- a/.changeset/little-buses-drum.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -'@openfn/lightning-mock': patch -'dts-inspector': patch -'@openfn/ws-worker': patch -'@openfn/cli': patch ---- - -Update @slack/web-api to remove dependency on vulnerable axios. diff --git a/.changeset/neat-games-move.md b/.changeset/neat-games-move.md deleted file mode 100644 index 2dae7a7ae..000000000 --- a/.changeset/neat-games-move.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -'@openfn/lightning-mock': patch -'@openfn/ws-worker': patch ---- - -Update vulnerable version of jose diff --git a/.changeset/pink-grapes-happen.md b/.changeset/pink-grapes-happen.md deleted file mode 100644 index 9a37e5700..000000000 --- a/.changeset/pink-grapes-happen.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -'@openfn/lightning-mock': patch -'dts-inspector': patch -'@openfn/ws-worker': patch -'@openfn/cli': patch ---- - -Update typesync to remove dependency on ip, which has a vulnerability without a patch. diff --git a/.changeset/sour-bugs-brush.md b/.changeset/sour-bugs-brush.md deleted file mode 100644 index c07aeefbd..000000000 --- a/.changeset/sour-bugs-brush.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -'@openfn/lightning-mock': patch -'dts-inspector': patch -'@openfn/ws-worker': patch -'@openfn/cli': patch ---- - -Update vulnerable version of micromatch. diff --git a/.changeset/sour-mugs-burn.md b/.changeset/sour-mugs-burn.md deleted file mode 100644 index a99814fe1..000000000 --- a/.changeset/sour-mugs-burn.md +++ /dev/null @@ -1,17 +0,0 @@ ---- -'dts-inspector': patch -'@openfn/integration-tests-cli': patch -'@openfn/integration-tests-execute': patch -'@openfn/integration-tests-worker': patch -'@openfn/cli': patch -'@openfn/compiler': patch -'@openfn/deploy': patch -'@openfn/describe-package': patch -'@openfn/engine-multi': patch -'@openfn/lightning-mock': patch -'@openfn/logger': patch -'@openfn/runtime': patch -'@openfn/ws-worker': patch ---- - -Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. diff --git a/examples/dts-inspector/CHANGELOG.md b/examples/dts-inspector/CHANGELOG.md index 470cbf9fe..d2afab257 100644 --- a/examples/dts-inspector/CHANGELOG.md +++ b/examples/dts-inspector/CHANGELOG.md @@ -1,5 +1,20 @@ # dts-inspector +## 1.0.19 + +### Patch Changes + +- 24534e1: Upgrade vulnerable version of ws. +- 2c69d90: Remove live-server as it was preventing an update of a vulnerable version of braces. +- 3a5277b: Update vulnerable version of word-wrap. +- ac5c373: Update vulnerable version of postcss. +- 03ad493: Update @slack/web-api to remove dependency on vulnerable axios. +- 1f340fa: Update typesync to remove dependency on ip, which has a vulnerability without a patch. +- 6370e76: Update vulnerable version of micromatch. +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. +- Updated dependencies [c3df1e5] + - @openfn/describe-package@0.1.1 + ## 1.0.18 ### Patch Changes diff --git a/examples/dts-inspector/package.json b/examples/dts-inspector/package.json index 17249680c..2e0061951 100644 --- a/examples/dts-inspector/package.json +++ b/examples/dts-inspector/package.json @@ -1,6 +1,6 @@ { "name": "dts-inspector", - "version": "1.0.18", + "version": "1.0.19", "description": "", "main": "index.js", "type": "module", diff --git a/integration-tests/cli/CHANGELOG.md b/integration-tests/cli/CHANGELOG.md new file mode 100644 index 000000000..fb0153ad7 --- /dev/null +++ b/integration-tests/cli/CHANGELOG.md @@ -0,0 +1,13 @@ +# @openfn/integration-tests-cli + +## 1.0.1 + +### Patch Changes + +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. + +## 1.0.1 + +### Patch Changes + +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. diff --git a/integration-tests/cli/package.json b/integration-tests/cli/package.json index d73270380..7578ef8b4 100644 --- a/integration-tests/cli/package.json +++ b/integration-tests/cli/package.json @@ -1,7 +1,7 @@ { "name": "@openfn/integration-tests-cli", "private": true, - "version": "1.0.0", + "version": "1.0.1", "description": "CLI integration tests", "author": "Open Function Group ", "license": "ISC", diff --git a/integration-tests/execute/CHANGELOG.md b/integration-tests/execute/CHANGELOG.md index a7d3f14d0..2f3a82b5b 100644 --- a/integration-tests/execute/CHANGELOG.md +++ b/integration-tests/execute/CHANGELOG.md @@ -1,5 +1,14 @@ # @openfn/integration-tests-execute +## 1.0.3 + +### Patch Changes + +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. +- Updated dependencies [c3df1e5] + - @openfn/compiler@0.3.1 + - @openfn/runtime@1.4.2 + ## 1.0.2 ### Patch Changes diff --git a/integration-tests/execute/package.json b/integration-tests/execute/package.json index da148d707..33db353be 100644 --- a/integration-tests/execute/package.json +++ b/integration-tests/execute/package.json @@ -1,7 +1,7 @@ { "name": "@openfn/integration-tests-execute", "private": true, - "version": "1.0.2", + "version": "1.0.3", "description": "Job execution tests", "author": "Open Function Group ", "license": "ISC", diff --git a/integration-tests/worker/CHANGELOG.md b/integration-tests/worker/CHANGELOG.md index 834a16de2..783af35e6 100644 --- a/integration-tests/worker/CHANGELOG.md +++ b/integration-tests/worker/CHANGELOG.md @@ -1,5 +1,24 @@ # @openfn/integration-tests-worker +## 1.0.57 + +### Patch Changes + +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. +- Updated dependencies [24534e1] +- Updated dependencies [7977220] +- Updated dependencies [3a5277b] +- Updated dependencies [ac5c373] +- Updated dependencies [03ad493] +- Updated dependencies [a223975] +- Updated dependencies [1f340fa] +- Updated dependencies [6370e76] +- Updated dependencies [c3df1e5] + - @openfn/lightning-mock@2.0.17 + - @openfn/ws-worker@1.6.2 + - @openfn/engine-multi@1.2.3 + - @openfn/logger@1.0.2 + ## 1.0.56 ### Patch Changes diff --git a/integration-tests/worker/package.json b/integration-tests/worker/package.json index 63167ed0d..4a3ed7694 100644 --- a/integration-tests/worker/package.json +++ b/integration-tests/worker/package.json @@ -1,7 +1,7 @@ { "name": "@openfn/integration-tests-worker", "private": true, - "version": "1.0.56", + "version": "1.0.57", "description": "Lightning WOrker integration tests", "author": "Open Function Group ", "license": "ISC", diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index 93f047634..bf121dd4d 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -1,5 +1,11 @@ # @openfn/cli +## 1.8.2 + +### Patch Changes + +Security updates + ## 1.8.1 ### Patch Changes diff --git a/packages/cli/package.json b/packages/cli/package.json index 7595affc2..88fda2245 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/cli", - "version": "1.8.1", + "version": "1.8.2", "description": "CLI devtools for the openfn toolchain.", "engines": { "node": ">=18", diff --git a/packages/compiler/CHANGELOG.md b/packages/compiler/CHANGELOG.md index 78e08e40a..956924084 100644 --- a/packages/compiler/CHANGELOG.md +++ b/packages/compiler/CHANGELOG.md @@ -1,5 +1,14 @@ # @openfn/compiler +## 0.3.1 + +### Patch Changes + +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. +- Updated dependencies [c3df1e5] + - @openfn/describe-package@0.1.1 + - @openfn/logger@1.0.2 + ## 0.3.0 ### Minor Changes diff --git a/packages/compiler/package.json b/packages/compiler/package.json index a0229ce97..85a7d5286 100644 --- a/packages/compiler/package.json +++ b/packages/compiler/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/compiler", - "version": "0.3.0", + "version": "0.3.1", "description": "Compiler and language tooling for openfn jobs.", "author": "Open Function Group ", "license": "ISC", diff --git a/packages/deploy/CHANGELOG.md b/packages/deploy/CHANGELOG.md index ff172b7ea..87ce343bd 100644 --- a/packages/deploy/CHANGELOG.md +++ b/packages/deploy/CHANGELOG.md @@ -1,5 +1,13 @@ # @openfn/deploy +## 0.7.1 + +### Patch Changes + +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. +- Updated dependencies [c3df1e5] + - @openfn/logger@1.0.2 + ## 0.7.0 ### Minor Changes diff --git a/packages/deploy/package.json b/packages/deploy/package.json index ba962c003..4b8f8fcd7 100644 --- a/packages/deploy/package.json +++ b/packages/deploy/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/deploy", - "version": "0.7.0", + "version": "0.7.1", "description": "Deploy projects to Lightning instances", "type": "module", "exports": { diff --git a/packages/describe-package/CHANGELOG.md b/packages/describe-package/CHANGELOG.md index d2a281c59..fcfb30992 100644 --- a/packages/describe-package/CHANGELOG.md +++ b/packages/describe-package/CHANGELOG.md @@ -1,5 +1,11 @@ # @openfn/describe-package +## 0.1.1 + +### Patch Changes + +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. + ## 0.1.0 ### Minor Changes diff --git a/packages/describe-package/package.json b/packages/describe-package/package.json index eaef23fff..c64bada5d 100644 --- a/packages/describe-package/package.json +++ b/packages/describe-package/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/describe-package", - "version": "0.1.0", + "version": "0.1.1", "description": "Utilities to inspect an npm package.", "author": "Open Function Group ", "license": "ISC", diff --git a/packages/engine-multi/CHANGELOG.md b/packages/engine-multi/CHANGELOG.md index 9e256b0c7..26b35010a 100644 --- a/packages/engine-multi/CHANGELOG.md +++ b/packages/engine-multi/CHANGELOG.md @@ -1,5 +1,16 @@ # engine-multi +## 1.2.3 + +### Patch Changes + +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. +- Updated dependencies [c3df1e5] + - @openfn/compiler@0.3.1 + - @openfn/logger@1.0.2 + - @openfn/runtime@1.4.2 + - @openfn/lexicon@1.1.0 + ## 1.2.2 ### Patch Changes diff --git a/packages/engine-multi/package.json b/packages/engine-multi/package.json index fb6a2e5dd..94339096a 100644 --- a/packages/engine-multi/package.json +++ b/packages/engine-multi/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/engine-multi", - "version": "1.2.2", + "version": "1.2.3", "description": "Multi-process runtime engine", "main": "dist/index.js", "type": "module", diff --git a/packages/lightning-mock/CHANGELOG.md b/packages/lightning-mock/CHANGELOG.md index 5717c5694..2be864327 100644 --- a/packages/lightning-mock/CHANGELOG.md +++ b/packages/lightning-mock/CHANGELOG.md @@ -1,5 +1,23 @@ # @openfn/lightning-mock +## 2.0.17 + +### Patch Changes + +- 24534e1: Upgrade vulnerable version of ws. +- 3a5277b: Update vulnerable version of word-wrap. +- ac5c373: Update vulnerable version of postcss. +- 03ad493: Update @slack/web-api to remove dependency on vulnerable axios. +- a223975: Update vulnerable version of jose +- 1f340fa: Update typesync to remove dependency on ip, which has a vulnerability without a patch. +- 6370e76: Update vulnerable version of micromatch. +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. +- Updated dependencies [c3df1e5] + - @openfn/engine-multi@1.2.3 + - @openfn/logger@1.0.2 + - @openfn/runtime@1.4.2 + - @openfn/lexicon@1.1.0 + ## 2.0.16 ### Patch Changes diff --git a/packages/lightning-mock/package.json b/packages/lightning-mock/package.json index 99274cb78..af56fb0c1 100644 --- a/packages/lightning-mock/package.json +++ b/packages/lightning-mock/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/lightning-mock", - "version": "2.0.16", + "version": "2.0.17", "private": true, "description": "A mock Lightning server", "main": "dist/index.js", diff --git a/packages/logger/CHANGELOG.md b/packages/logger/CHANGELOG.md index 3b7147a98..ec257fd51 100644 --- a/packages/logger/CHANGELOG.md +++ b/packages/logger/CHANGELOG.md @@ -1,5 +1,11 @@ # @openfn/logger +## 1.0.2 + +### Patch Changes + +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. + ## 1.0.1 ### Patch Changes diff --git a/packages/logger/package.json b/packages/logger/package.json index 19f8171c0..beb6a568b 100644 --- a/packages/logger/package.json +++ b/packages/logger/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/logger", - "version": "1.0.1", + "version": "1.0.2", "description": "Cross-package logging utility", "module": "dist/index.js", "author": "Open Function Group ", diff --git a/packages/runtime/CHANGELOG.md b/packages/runtime/CHANGELOG.md index 227b3cbf2..0e7f0f7d3 100644 --- a/packages/runtime/CHANGELOG.md +++ b/packages/runtime/CHANGELOG.md @@ -1,5 +1,13 @@ # @openfn/runtime +## 1.4.2 + +### Patch Changes + +- c3df1e5: Partially update vulnerable versions of braces - live-server is a holdout as there is not a newer version available. +- Updated dependencies [c3df1e5] + - @openfn/logger@1.0.2 + ## 1.4.1 ### Patch Changes diff --git a/packages/runtime/package.json b/packages/runtime/package.json index c44f4a45b..8741d1fe5 100644 --- a/packages/runtime/package.json +++ b/packages/runtime/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/runtime", - "version": "1.4.1", + "version": "1.4.2", "description": "Job processing runtime.", "type": "module", "exports": { diff --git a/packages/ws-worker/CHANGELOG.md b/packages/ws-worker/CHANGELOG.md index b05ad2ed0..326413374 100644 --- a/packages/ws-worker/CHANGELOG.md +++ b/packages/ws-worker/CHANGELOG.md @@ -1,5 +1,11 @@ # ws-worker +## 1.6.2 + +### Patch Changes + +security updates + ## 1.6.1 ### Patch Changes diff --git a/packages/ws-worker/package.json b/packages/ws-worker/package.json index 52df11da3..cc9b91af8 100644 --- a/packages/ws-worker/package.json +++ b/packages/ws-worker/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/ws-worker", - "version": "1.6.1", + "version": "1.6.2", "description": "A Websocket Worker to connect Lightning to a Runtime Engine", "main": "dist/index.js", "type": "module",