Merge pull request #169 from celluloid-camp/fix-vulnerable-deps

upgrade webpack,ramda,nodemail

package.json

@@ -27,7 +27,7 @@
   },
   "devDependencies": {
     "cors-anywhere": "^0.4.4",
-    "lerna": "^3.0.0"
+    "lerna": "^6.0.0"
   },
   "dependencies": {}
 }

packages/client/package.json

@@ -46,7 +46,7 @@
     "password-generator": "^2.2.0",
     "prop-types": "^15.6.2",
     "query-string": "^6.1.0",
-    "ramda": "^0.25.0",
+    "ramda": "^0.28.0",
     "randomcolor": "^0.5.3",
     "rc-slider": "^8.5.0",
     "react": "^16.4.0",
@@ -65,8 +65,8 @@
     "redux-thunk": "^2.3.0",
     "shiitake": "^2.2.4",
     "typescript": "^3.1.2",
-    "webpack": "^4.15.1",
-    "webpack-cli": "^3.0.0"
+    "webpack": "^5.74.0",
+    "webpack-cli": "^4.10.0"
   },
   "scripts": {
     "watch": "yarn start",

packages/server/package.json

@@ -28,13 +28,13 @@
     "passport-local": "^1.0.0",
     "pg": "^8.0.3",
     "pino": "^6.2.1",
-    "ramda": "^0.25.0",
+    "ramda": "^0.28.0",
     "unfurl.js": "^1.1.6",
     "validator": "^10.2.0"
   },
   "scripts": {
     "clean": "rm -rf build",
-    "build": "yarn run webpack-cli --config webpack-server.config.js --colors",
+    "build": "yarn run webpack-cli --config webpack-server.config.js",
     "watch": "concurrently \"yarn build --watch --mode=development\" \"nodemon --use-strict build/index.js\"",
     "start": "node --use-strict build/index.js"
   },
@@ -49,7 +49,7 @@
     "@types/express": "^4.0.39",
     "@types/express-session": "^1.15.8",
     "@types/knex": "^0.14.15",
-    "@types/nodemailer": "^4.6.2",
+    "@types/nodemailer": "^6.4.6",
     "@types/nodemailer-smtp-transport": "^2.7.4",
     "@types/passport": "^1.0.0",
     "@types/passport-local": "^1.0.33",
@@ -58,13 +58,13 @@
     "@types/validator": "^9.4.0",
     "babel-loader": "^8.0.0",
     "concurrently": "^4.0.0",
-    "nodemon": "^1.11.0",
+    "nodemon": "^2.0.20",
     "ts-loader": "^5.0.0",
     "tslint": "^5.10.0",
     "tslint-react": "^3.6.0",
     "typescript": "^3.1.2",
-    "webpack": "^4.16.5",
-    "webpack-cli": "^3.1.0",
-    "webpack-node-externals": "^1.7.2"
+    "webpack": "^5.74.0",
+    "webpack-cli": "^4.10.0",
+    "webpack-node-externals": "^3.0.0"
   }
 }

packages/server/webpack-server.config.js

@@ -15,9 +15,9 @@ const output = {
 };
 
 const plugins = [
-  new webpack.IgnorePlugin(/\.(css|less)$/),
+  new webpack.IgnorePlugin({resourceRegExp:/\.(css|less)$/}),
   new webpack.BannerPlugin('require("source-map-support").install();'),
-  new webpack.IgnorePlugin(/dtrace-provider/),
+  new webpack.IgnorePlugin({resourceRegExp:/dtrace-provider/}),
 ];
 
 const rules = [
@@ -31,7 +31,7 @@ const rules = [
 
 const webpackConfig = {
   mode: process.env.NODE_ENV,
-  devtool: isProduction ? 'source-map' : 'cheap-eval-source-map',
+  devtool: isProduction ? 'source-map' : 'cheap-source-map',
   context: srcPath,
   target: 'node',
   externals: [
@@ -51,10 +51,10 @@ const webpackConfig = {
     ],
   },
   node: {
-    console: false,
+    // console: false,
     global: false,
-    process: false,
-    Buffer: false,
+    // process: false,
+    // Buffer: false,
     __filename: false,
     __dirname: false,
   },