chore: security updates

.yarnrc.yml

@@ -7,5 +7,3 @@ packageExtensions:
     dependencies:
       "#ansi-styles": "npm:[email protected]"
       "#supports-color": "npm:[email protected]"
-
-yarnPath: .yarn/releases/yarn-4.5.0.cjs

package.json

@@ -49,9 +49,9 @@
     ]
   },
   "dependencies": {
-    "@oada/client": "^5.2.3",
+    "@oada/client": "^5.2.6",
     "@oada/jobs": "^4.5.2",
-    "@oada/lib-prom": "^4.0.0",
+    "@oada/lib-prom": "^4.0.1",
     "@oada/list-lib": "6.0.2",
     "@oada/pino-debug": "^4.0.1",
     "@oada/poll": "^1.0.4",
@@ -62,7 +62,7 @@
     "convict": "^6.2.4",
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
-    "cron": "^3.1.7",
+    "cron": "^3.2.1",
     "csvjson": "^5.1.0",
     "date-fns": "^4.1.0",
     "debug": "^4.3.7",
@@ -84,7 +84,7 @@
     "mssql": "^11.0.1",
     "serialize-error": "^11.0.3",
     "sha256": "^0.2.0",
-    "tslib": "^2.7.0",
+    "tslib": "^2.8.1",
     "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.2/xlsx-0.20.2.tgz"
   },
   "devDependencies": {
@@ -93,20 +93,20 @@
     "@types/bluebird": "^3.5.42",
     "@types/convict": "^6.1.6",
     "@types/convict-format-with-validator": "^6.0.5",
-    "@types/cron": "^2.4.0",
+    "@types/cron": "^2.4.3",
     "@types/debug": "^4.1.12",
     "@types/deep-equal": "^1.0.4",
     "@types/lodash-es": "^4.17.12",
     "@types/md5": "^2.3.5",
     "@types/mssql": "^9.1.5",
-    "@types/node": "^22.7.5",
+    "@types/node": "^22.9.1",
     "@typescript-eslint/eslint-plugin": "^7.18.0",
     "@typescript-eslint/parser": "^7.18.0",
     "@yarnpkg/sdks": "^3.2.0",
-    "ava": "^6.1.3",
+    "ava": "^6.2.0",
     "bluebird": "^3.7.2",
     "c8": "^10.1.2",
-    "chai": "^5.1.1",
+    "chai": "^5.1.2",
     "chai-as-promised": "^8.0.0",
     "eslint": "^8.57.1",
     "eslint-config-prettier": "^9.1.0",
@@ -116,33 +116,33 @@
     "eslint-import-resolver-node": "^0.3.9",
     "eslint-plugin-array-func": "^5.0.2",
     "eslint-plugin-ava": "^15.0.1",
-    "eslint-plugin-escompat": "^3.11.3",
+    "eslint-plugin-escompat": "^3.11.4",
     "eslint-plugin-eslint-comments": "^3.2.0",
     "eslint-plugin-filenames": "^1.3.2",
     "eslint-plugin-github": "^5.0.2",
     "eslint-plugin-i18n-text": "^1.0.1",
     "eslint-plugin-import": "^2.31.0",
     "eslint-plugin-no-constructor-bind": "^2.0.4",
     "eslint-plugin-no-only-tests": "^3.3.0",
-    "eslint-plugin-no-secrets": "^1.0.2",
+    "eslint-plugin-no-secrets": "^1.1.2",
     "eslint-plugin-node": "^11.1.0",
     "eslint-plugin-notice": "^1.0.0",
     "eslint-plugin-optimize-regex": "^1.2.1",
     "eslint-plugin-prettier": "^5.2.1",
     "eslint-plugin-promise": "^6.6.0",
-    "eslint-plugin-regexp": "^2.6.0",
+    "eslint-plugin-regexp": "^2.7.0",
     "eslint-plugin-security": "^3.0.1",
     "eslint-plugin-sonarjs": "^1.0.4",
     "eslint-plugin-unicorn": "^54.0.0",
     "prettier": "^3.3.3",
     "typescript": "5.6.3"
   },
   "resolutions": {
-    "@oada/lib-prom": "^4.0.0",
+    "cross-spawn": "^7.0.5",
     "jsonpath-plus": "^10.0.0",
     "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.2/xlsx-0.20.2.tgz"
   },
-  "packageManager": "[email protected].0",
+  "packageManager": "[email protected].1",
   "volta": {
     "node": "22.9.0"
   }

src/index.ts

@@ -14,8 +14,15 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import '@oada/pino-debug';
-import type { 
+
+import { pino } from '@oada/pino-debug';
+
+// Load config first so it can set up env
+import config from './config.js';
+
+import '@oada/lib-prom';
+
+import type {
   Change,
   JsonObject,
   OADAClient
@@ -30,8 +37,6 @@ import {
   handleDocumentJob,
   startJobCreator,
 } from './mirrorWatch.js';
-// Load config first so it can set up env
-import config from './config.js';
 
 // Import this _before_ pino and/or DEBUG
 
@@ -44,7 +49,6 @@ import equal from 'deep-equal';
 import esMain from 'es-main';
 import type { FlObject } from './types.js';
 import { handleFlBusiness } from './masterData.js';
-import { pino } from '@oada/pino-debug';
 import { poll } from '@oada/poll';
 import { Service } from '@oada/jobs';
 // Import { businessesReportConfig } from './businessesReportConfig.js';
@@ -320,7 +324,7 @@ export async function pollFl(lastPoll: Moment, end: Moment) {
         'products',
         'locations',
         'documents',
-        //'assessments',
+        // 'assessments',
       ] as const) {
         await CONNECTION.put({
           path: `${SERVICE_PATH}/businesses/${index.business._id}/${type}`,