diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 649e97f91dc..27a30ba71c5 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -19,7 +19,7 @@ jobs: uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7 + uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1 with: languages: typescript # If you wish to specify custom queries, you can do so here or in a config file. @@ -29,4 +29,4 @@ jobs: # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs # queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7 + uses: github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1 diff --git a/.github/workflows/maintenance.yml b/.github/workflows/maintenance.yml index cfc97527206..6c6a13d01dd 100644 --- a/.github/workflows/maintenance.yml +++ b/.github/workflows/maintenance.yml @@ -29,7 +29,7 @@ jobs: steps: - run: echo "${{ github.actor }}" - name: check if prs are dirty - uses: eps1lon/actions-label-merge-conflict@1b1b1fcde06a9b3d089f3464c96417961dde1168 # v3.0.2 + uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3 with: dirtyLabel: 'PR: out-of-date' removeOnDirtyLabel: 'PR: ready to ship' diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index ed7342e3c67..4b315bf5425 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -44,6 +44,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: Upload to code-scanning - uses: github/codeql-action/upload-sarif@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7 + uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1 with: sarif_file: results.sarif diff --git a/docs/package.json b/docs/package.json index ffa2e03c81c..66dae5ce394 100644 --- a/docs/package.json +++ b/docs/package.json @@ -65,7 +65,7 @@ "jss-rtl": "0.3.0", "lodash": "4.17.21", "lz-string": "1.5.0", - "markdown-to-jsx": "7.7.0", + "markdown-to-jsx": "7.7.3", "next": "^15.1.3", "nprogress": "0.2.0", "postcss": "8.4.49", @@ -98,7 +98,7 @@ "@types/doctrine": "0.0.9", "@types/json-schema": "7.0.15", "@types/react": "^19.0.6", - "@types/react-dom": "^19.0.0", + "@types/react-dom": "^19.0.3", "@types/react-is": "^19.0.0", "@types/react-swipeable-views": "^0.13.6", "cpy-cli": "5.0.0", diff --git a/packages/toolpad-core/package.json b/packages/toolpad-core/package.json index 947eb033818..4e8e64635d5 100644 --- a/packages/toolpad-core/package.json +++ b/packages/toolpad-core/package.json @@ -70,7 +70,7 @@ "@types/invariant": "2.2.37", "@types/prop-types": "15.7.14", "@types/react": "^19.0.6", - "@types/react-dom": "^19.0.0", + "@types/react-dom": "^19.0.3", "@types/sinon": "^17.0.3", "@vitest/browser": "2.1.8", "next": "^15.1.3", diff --git a/packages/toolpad-studio-components/package.json b/packages/toolpad-studio-components/package.json index 2bf13247c75..beb91f5654a 100644 --- a/packages/toolpad-studio-components/package.json +++ b/packages/toolpad-studio-components/package.json @@ -53,7 +53,7 @@ "@toolpad/utils": "workspace:*", "dayjs": "1.11.13", "invariant": "2.2.4", - "markdown-to-jsx": "7.7.0", + "markdown-to-jsx": "7.7.3", "react-error-boundary": "4.0.13", "react-hook-form": "7.53.2" }, diff --git a/packages/toolpad-studio/package.json b/packages/toolpad-studio/package.json index 7d7913eda62..bad509fb00b 100644 --- a/packages/toolpad-studio/package.json +++ b/packages/toolpad-studio/package.json @@ -101,7 +101,7 @@ "dotenv": "16.4.7", "esbuild": "0.24.2", "execa": "9.5.2", - "express": "4.21.1", + "express": "4.21.2", "find-up": "7.0.0", "fractional-indexing": "3.2.0", "get-port": "7.1.0", @@ -113,7 +113,7 @@ "json5": "2.2.3", "latest-version": "9.0.0", "lodash-es": "4.17.21", - "markdown-to-jsx": "7.7.0", + "markdown-to-jsx": "7.7.3", "mime": "4.0.4", "monaco-editor": "0.52.0", "mysql2": "3.11.4", @@ -163,7 +163,7 @@ "@types/node-fetch": "2.6.12", "@types/pg": "8.11.10", "@types/react": "^19.0.6", - "@types/react-dom": "^19.0.0", + "@types/react-dom": "^19.0.3", "@types/react-is": "^19.0.0", "@types/semver": "7.5.8", "@types/serialize-javascript": "5.0.4", diff --git a/playground/nextjs-pages/package.json b/playground/nextjs-pages/package.json index 9406bc5d7b4..de2df095cf4 100644 --- a/playground/nextjs-pages/package.json +++ b/playground/nextjs-pages/package.json @@ -14,7 +14,7 @@ "@mui/material-nextjs": "6.3.1", "@toolpad/core": "workspace:*", "@types/react": "^19.0.6", - "@types/react-dom": "^19.0.0", + "@types/react-dom": "^19.0.3", "eslint-config-next": "15.1.3", "next": "15.1.3", "next-auth": "5.0.0-beta.25", diff --git a/playground/nextjs/package.json b/playground/nextjs/package.json index fc74f2e1747..48081b50ced 100644 --- a/playground/nextjs/package.json +++ b/playground/nextjs/package.json @@ -15,7 +15,7 @@ "@toolpad/core": "workspace:*", "@types/node": "^20.17.12", "@types/react": "^19.0.6", - "@types/react-dom": "^19.0.0", + "@types/react-dom": "^19.0.3", "eslint-config-next": "15.1.3", "next": "15.1.3", "next-auth": "5.0.0-beta.25", diff --git a/playground/vite/package.json b/playground/vite/package.json index 1a21f4113dc..64201595d5b 100644 --- a/playground/vite/package.json +++ b/playground/vite/package.json @@ -14,7 +14,7 @@ "@mui/material": "6.3.1", "@toolpad/core": "workspace:*", "@types/react": "^19.0.6", - "@types/react-dom": "^19.0.0", + "@types/react-dom": "^19.0.3", "@vitejs/plugin-react": "4.3.4", "react": "^19.0.0", "react-dom": "^19.0.0", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 5f28a035800..807e80881ed 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -117,7 +117,7 @@ importers: version: 6.6.3 '@testing-library/react': specifier: 16.1.0 - version: 16.1.0(@testing-library/dom@10.4.0)(@types/react-dom@19.0.1)(@types/react@19.0.6)(react-dom@19.0.0(react@19.0.0))(react@19.0.0) + version: 16.1.0(@testing-library/dom@10.4.0)(@types/react-dom@19.0.3(@types/react@19.0.6))(@types/react@19.0.6)(react-dom@19.0.0(react@19.0.0))(react@19.0.0) '@testing-library/user-event': specifier: 14.5.2 version: 14.5.2(@testing-library/dom@10.4.0) @@ -201,7 +201,7 @@ importers: version: 7.37.3(eslint@8.57.1) eslint-plugin-react-compiler: specifier: latest - version: 19.0.0-beta-63e3235-20250105(eslint@8.57.1) + version: 19.0.0-beta-e552027-20250112(eslint@8.57.1) eslint-plugin-react-hooks: specifier: 5.1.0 version: 5.1.0(eslint@8.57.1) @@ -419,8 +419,8 @@ importers: specifier: 1.5.0 version: 1.5.0 markdown-to-jsx: - specifier: 7.7.0 - version: 7.7.0(react@19.0.0) + specifier: 7.7.3 + version: 7.7.3(react@19.0.0) next: specifier: ^15.1.3 version: 15.1.3(@babel/core@7.26.0)(@playwright/test@1.47.2)(babel-plugin-macros@3.1.0)(react-dom@19.0.0(react@19.0.0))(react@19.0.0) @@ -513,8 +513,8 @@ importers: specifier: ^19.0.6 version: 19.0.6 '@types/react-dom': - specifier: ^19.0.0 - version: 19.0.1 + specifier: ^19.0.3 + version: 19.0.3(@types/react@19.0.6) '@types/react-is': specifier: ^19.0.0 version: 19.0.0 @@ -648,8 +648,8 @@ importers: specifier: ^19.0.6 version: 19.0.6 '@types/react-dom': - specifier: ^19.0.0 - version: 19.0.1 + specifier: ^19.0.3 + version: 19.0.3(@types/react@19.0.6) '@types/sinon': specifier: ^17.0.3 version: 17.0.3 @@ -814,8 +814,8 @@ importers: specifier: 9.5.2 version: 9.5.2 express: - specifier: 4.21.1 - version: 4.21.1 + specifier: 4.21.2 + version: 4.21.2 find-up: specifier: 7.0.0 version: 7.0.0 @@ -850,8 +850,8 @@ importers: specifier: 4.17.21 version: 4.17.21 markdown-to-jsx: - specifier: 7.7.0 - version: 7.7.0(react@19.0.0) + specifier: 7.7.3 + version: 7.7.3(react@19.0.0) mime: specifier: 4.0.4 version: 4.0.4 @@ -995,8 +995,8 @@ importers: specifier: ^19.0.6 version: 19.0.6 '@types/react-dom': - specifier: ^19.0.0 - version: 19.0.1 + specifier: ^19.0.3 + version: 19.0.3(@types/react@19.0.6) '@types/react-is': specifier: ^19.0.0 version: 19.0.0 @@ -1076,8 +1076,8 @@ importers: specifier: 2.2.4 version: 2.2.4 markdown-to-jsx: - specifier: 7.7.0 - version: 7.7.0(react@19.0.0) + specifier: 7.7.3 + version: 7.7.3(react@19.0.0) react-error-boundary: specifier: 4.0.13 version: 4.0.13(react@19.0.0) @@ -1226,8 +1226,8 @@ importers: specifier: ^19.0.6 version: 19.0.6 '@types/react-dom': - specifier: ^19.0.0 - version: 19.0.1 + specifier: ^19.0.3 + version: 19.0.3(@types/react@19.0.6) eslint-config-next: specifier: 15.1.3 version: 15.1.3(eslint-import-resolver-webpack@0.13.10(eslint-plugin-import@2.31.0)(webpack@5.96.1(esbuild@0.24.2)))(eslint@8.57.1)(typescript@5.7.2) @@ -1268,8 +1268,8 @@ importers: specifier: ^19.0.6 version: 19.0.6 '@types/react-dom': - specifier: ^19.0.0 - version: 19.0.1 + specifier: ^19.0.3 + version: 19.0.3(@types/react@19.0.6) eslint-config-next: specifier: 15.1.3 version: 15.1.3(eslint-import-resolver-webpack@0.13.10(eslint-plugin-import@2.31.0)(webpack@5.96.1(esbuild@0.24.2)))(eslint@8.57.1)(typescript@5.7.2) @@ -1307,8 +1307,8 @@ importers: specifier: ^19.0.6 version: 19.0.6 '@types/react-dom': - specifier: ^19.0.0 - version: 19.0.1 + specifier: ^19.0.3 + version: 19.0.3(@types/react@19.0.6) '@vitejs/plugin-react': specifier: 4.3.4 version: 4.3.4(vite@5.4.11(@types/node@20.17.12)(terser@5.36.0)) @@ -4413,8 +4413,10 @@ packages: '@types/react-dev-utils@9.0.15': resolution: {integrity: sha512-JSZZtC8f5FD3FvlT8F6dPojPH6u0f+E/+g9DqXgQo/7GvCdPYiK+Q+mMajZClqH/f5SjyYop7v6uiLyfgnyLQA==} - '@types/react-dom@19.0.1': - resolution: {integrity: sha512-hljHij7MpWPKF6u5vojuyfV0YA4YURsQG7KT6SzV0Zs2BXAtgdTxG6A229Ub/xiWV4w/7JL8fi6aAyjshH4meA==} + '@types/react-dom@19.0.3': + resolution: {integrity: sha512-0Knk+HJiMP/qOZgMyNFamlIjw9OFCsyC2ZbigmEEyXXixgre6IQpm/4V+r3qH4GC1JPvRJKInw+on2rV6YZLeA==} + peerDependencies: + '@types/react': ^19.0.0 '@types/react-is@19.0.0': resolution: {integrity: sha512-71dSZeeJ0t3aoPyY9x6i+JNSvg5m9EF2i2OlSZI5QoJuI8Ocgor610i+4A10TQmURR+0vLwcVCEYFpXdzM1Biw==} @@ -6189,8 +6191,8 @@ packages: peerDependencies: eslint: '>=7.0.0' - eslint-plugin-react-compiler@19.0.0-beta-63e3235-20250105: - resolution: {integrity: sha512-Smts5x+u+rRopr0926jCXFPkS8D8hFJexDvTW41V0Xu/xHgd4pnGWiJQRBsvTEARzOdJ6NdlmYs4n+O4Thn2iA==} + eslint-plugin-react-compiler@19.0.0-beta-e552027-20250112: + resolution: {integrity: sha512-VjkIXHouCYyJHgk5HmZ1LH+fAK5CX+ULRX9iNYtwYJ+ljbivFhIT+JJyxNT/USQpCeS2Dt5ahjFeeMv0RRwTww==} engines: {node: ^14.17.0 || ^16.0.0 || >= 18.0.0} peerDependencies: eslint: '>=7' @@ -6340,6 +6342,10 @@ packages: resolution: {integrity: sha512-YSFlK1Ee0/GC8QaO91tHcDxJiE/X4FbpAyQWkxAvG6AXCuR65YzK8ua6D9hvi/TzUfZMpc+BwuM1IPw8fmQBiQ==} engines: {node: '>= 0.10.0'} + express@4.21.2: + resolution: {integrity: sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==} + engines: {node: '>= 0.10.0'} + express@5.0.1: resolution: {integrity: sha512-ORF7g6qGnD+YtUG9yx4DFoqCShNMmUKiXuT5oWMHiOvt/4WFbHC6yCwQMTSBMno7AqntNCAzzcnnjowRkTL9eQ==} engines: {node: '>= 18'} @@ -7804,8 +7810,8 @@ packages: resolution: {integrity: sha512-a54IwgWPaeBCAAsv13YgmALOF1elABB08FxO9i+r4VFk5Vl4pKokRPeX8u5TCgSsPi6ec1otfLjdOpVcgbpshg==} hasBin: true - markdown-to-jsx@7.7.0: - resolution: {integrity: sha512-130nIMbJY+woOQJ11xTqEtYko60t6EpNkZuqjKMferL3udtob3nRfzXOdsiA26NPemiR7w/hR8M3/B9yiYPGZg==} + markdown-to-jsx@7.7.3: + resolution: {integrity: sha512-o35IhJDFP6Fv60zPy+hbvZSQMmgvSGdK5j8NRZ7FeZMY+Bgqw+dSg7SC1ZEzC26++CiOUCqkbq96/c3j/FfTEQ==} engines: {node: '>= 10'} peerDependencies: react: '>= 0.14.0' @@ -8686,6 +8692,9 @@ packages: path-to-regexp@0.1.10: resolution: {integrity: sha512-7lf7qcQidTku0Gu3YDPc8DJ1q7OOucfa/BSsIwjuh56VU7katFvuM8hULfkwB3Fns/rsVF7PwPKVw1sl5KQS9w==} + path-to-regexp@0.1.12: + resolution: {integrity: sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==} + path-to-regexp@6.3.0: resolution: {integrity: sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ==} @@ -13860,7 +13869,7 @@ snapshots: lodash: 4.17.21 redent: 3.0.0 - '@testing-library/react@16.1.0(@testing-library/dom@10.4.0)(@types/react-dom@19.0.1)(@types/react@19.0.6)(react-dom@19.0.0(react@19.0.0))(react@19.0.0)': + '@testing-library/react@16.1.0(@testing-library/dom@10.4.0)(@types/react-dom@19.0.3(@types/react@19.0.6))(@types/react@19.0.6)(react-dom@19.0.0(react@19.0.0))(react@19.0.0)': dependencies: '@babel/runtime': 7.26.0 '@testing-library/dom': 10.4.0 @@ -13868,7 +13877,7 @@ snapshots: react-dom: 19.0.0(react@19.0.0) optionalDependencies: '@types/react': 19.0.6 - '@types/react-dom': 19.0.1 + '@types/react-dom': 19.0.3(@types/react@19.0.6) '@testing-library/user-event@14.5.2(@testing-library/dom@10.4.0)': dependencies: @@ -14128,7 +14137,7 @@ snapshots: transitivePeerDependencies: - debug - '@types/react-dom@19.0.1': + '@types/react-dom@19.0.3(@types/react@19.0.6)': dependencies: '@types/react': 19.0.6 @@ -16324,7 +16333,7 @@ snapshots: globals: 13.24.0 rambda: 7.5.0 - eslint-plugin-react-compiler@19.0.0-beta-63e3235-20250105(eslint@8.57.1): + eslint-plugin-react-compiler@19.0.0-beta-e552027-20250112(eslint@8.57.1): dependencies: '@babel/core': 7.26.0 '@babel/parser': 7.26.2 @@ -16616,6 +16625,42 @@ snapshots: transitivePeerDependencies: - supports-color + express@4.21.2: + dependencies: + accepts: 1.3.8 + array-flatten: 1.1.1 + body-parser: 1.20.3 + content-disposition: 0.5.4 + content-type: 1.0.5 + cookie: 0.7.1 + cookie-signature: 1.0.6 + debug: 2.6.9 + depd: 2.0.0 + encodeurl: 2.0.0 + escape-html: 1.0.3 + etag: 1.8.1 + finalhandler: 1.3.1 + fresh: 0.5.2 + http-errors: 2.0.0 + merge-descriptors: 1.0.3 + methods: 1.1.2 + on-finished: 2.4.1 + parseurl: 1.3.3 + path-to-regexp: 0.1.12 + proxy-addr: 2.0.7 + qs: 6.13.0 + range-parser: 1.2.1 + safe-buffer: 5.2.1 + send: 0.19.0 + serve-static: 1.16.2 + setprototypeof: 1.2.0 + statuses: 2.0.1 + type-is: 1.6.18 + utils-merge: 1.0.1 + vary: 1.1.2 + transitivePeerDependencies: + - supports-color + express@5.0.1: dependencies: accepts: 2.0.0 @@ -18295,7 +18340,7 @@ snapshots: punycode.js: 2.3.1 uc.micro: 2.1.0 - markdown-to-jsx@7.7.0(react@19.0.0): + markdown-to-jsx@7.7.3(react@19.0.0): dependencies: react: 19.0.0 @@ -19330,6 +19375,8 @@ snapshots: path-to-regexp@0.1.10: {} + path-to-regexp@0.1.12: {} + path-to-regexp@6.3.0: {} path-to-regexp@8.2.0: {}