From e00eaa94c7c0485a2891a10ad4cecfc270d777cf Mon Sep 17 00:00:00 2001 From: Stas Schaller Date: Wed, 21 Jan 2026 12:29:31 -0500 Subject: [PATCH 1/8] KSM-758: replace rollup-plugin-sourcemaps with rollup-plugin-sourcemaps2 --- .../packages/core/package-lock.json | 100 ++++++------------ sdk/javascript/packages/core/package.json | 2 +- sdk/javascript/packages/core/rollup.config.js | 2 +- 3 files changed, 36 insertions(+), 68 deletions(-) diff --git a/sdk/javascript/packages/core/package-lock.json b/sdk/javascript/packages/core/package-lock.json index 4e08d6672..dbf56b63a 100644 --- a/sdk/javascript/packages/core/package-lock.json +++ b/sdk/javascript/packages/core/package-lock.json @@ -18,7 +18,7 @@ "https-proxy-agent": "^7.0.6", "jest": "^30.2.0", "rollup": "^4.52.3", - "rollup-plugin-sourcemaps": "^0.6.3", + "rollup-plugin-sourcemaps2": "^0.5.4", "rollup-plugin-typescript2": "^0.36.0", "rollup-plugin-version-injector": "^1.3.3", "ts-jest": "^29.4.4", @@ -3244,19 +3244,6 @@ "sprintf-js": "~1.0.2" } }, - "node_modules/atob": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/atob/-/atob-2.1.2.tgz", - "integrity": "sha512-Wm6ukoaOGJi/73p/cl2GvLjTI5JM1k/O14isD73YML8StrH/7/lRFgmg8nICZgD3bZZvjwCGxtMOD3wWNAu8cg==", - "dev": true, - "license": "(MIT OR Apache-2.0)", - "bin": { - "atob": "bin/atob.js" - }, - "engines": { - "node": ">= 4.5.0" - } - }, "node_modules/babel-jest": { "version": "30.2.0", "resolved": "https://registry.npmjs.org/babel-jest/-/babel-jest-30.2.0.tgz", @@ -3795,16 +3782,6 @@ } } }, - "node_modules/decode-uri-component": { - "version": "0.2.2", - "resolved": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.2.tgz", - "integrity": "sha512-FqUYQ+8o158GyGTrMFJms9qh3CqTKvAqgqsTnkLI8sKu0028orqBhxNMFkFen0zGyg6epACD32pjVk58ngIErQ==", - "dev": true, - "license": "MIT", - "engines": { - "node": ">=0.10" - } - }, "node_modules/dedent": { "version": "1.7.0", "resolved": "https://registry.npmjs.org/dedent/-/dedent-1.7.0.tgz", @@ -5855,22 +5832,21 @@ "fsevents": "~2.3.2" } }, - "node_modules/rollup-plugin-sourcemaps": { - "version": "0.6.3", - "resolved": "https://registry.npmjs.org/rollup-plugin-sourcemaps/-/rollup-plugin-sourcemaps-0.6.3.tgz", - "integrity": "sha512-paFu+nT1xvuO1tPFYXGe+XnQvg4Hjqv/eIhG8i5EspfYYPBKL57X7iVbfv55aNVASg3dzWvES9dmWsL2KhfByw==", + "node_modules/rollup-plugin-sourcemaps2": { + "version": "0.5.4", + "resolved": "https://registry.npmjs.org/rollup-plugin-sourcemaps2/-/rollup-plugin-sourcemaps2-0.5.4.tgz", + "integrity": "sha512-XK6ITvEsKtUFN1GQbYKoqilwh1yKxTS9BLaFlVsm0IaYUYe3eVnhBWzKP4AHbkBO2BNOheGNlf407K7wCj6Rrw==", "dev": true, "license": "MIT", "dependencies": { - "@rollup/pluginutils": "^3.0.9", - "source-map-resolve": "^0.6.0" + "@rollup/pluginutils": "5.2.0" }, "engines": { - "node": ">=10.0.0" + "node": ">=18.0.0" }, "peerDependencies": { - "@types/node": ">=10.0.0", - "rollup": ">=0.31.2" + "@types/node": ">=18.0.0", + "rollup": ">=4" }, "peerDependenciesMeta": { "@types/node": { @@ -5878,37 +5854,41 @@ } } }, - "node_modules/rollup-plugin-sourcemaps/node_modules/@rollup/pluginutils": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/@rollup/pluginutils/-/pluginutils-3.1.0.tgz", - "integrity": "sha512-GksZ6pr6TpIjHm8h9lSQ8pi8BE9VeubNT0OMJ3B5uZJ8pz73NPiqOtCog/x2/QzM1ENChPKxMDhiQuRHsqc+lg==", + "node_modules/rollup-plugin-sourcemaps2/node_modules/@rollup/pluginutils": { + "version": "5.2.0", + "resolved": "https://registry.npmjs.org/@rollup/pluginutils/-/pluginutils-5.2.0.tgz", + "integrity": "sha512-qWJ2ZTbmumwiLFomfzTyt5Kng4hwPi9rwCYN4SHb6eaRU1KNO4ccxINHr/VhH4GgPlt1XfSTLX2LBTme8ne4Zw==", "dev": true, "license": "MIT", "dependencies": { - "@types/estree": "0.0.39", - "estree-walker": "^1.0.1", - "picomatch": "^2.2.2" + "@types/estree": "^1.0.0", + "estree-walker": "^2.0.2", + "picomatch": "^4.0.2" }, "engines": { - "node": ">= 8.0.0" + "node": ">=14.0.0" }, "peerDependencies": { - "rollup": "^1.20.0||^2.0.0" + "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" + }, + "peerDependenciesMeta": { + "rollup": { + "optional": true + } } }, - "node_modules/rollup-plugin-sourcemaps/node_modules/@types/estree": { - "version": "0.0.39", - "resolved": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz", - "integrity": "sha512-EYNwp3bU+98cpU4lAWYYL7Zz+2gryWH1qbdDTidVd6hkiR6weksdbMadyXKXNPEkQFhXM+hVO9ZygomHXp+AIw==", - "dev": true, - "license": "MIT" - }, - "node_modules/rollup-plugin-sourcemaps/node_modules/estree-walker": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-1.0.1.tgz", - "integrity": "sha512-1fMXF3YP4pZZVozF8j/ZLfvnR8NSIljt56UhbZ5PeeDmmGHpgpdwQt7ITlGvYaQukCvuBRMLEiKiYC+oeIg4cg==", + "node_modules/rollup-plugin-sourcemaps2/node_modules/picomatch": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", + "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", "dev": true, - "license": "MIT" + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/jonschlinkert" + } }, "node_modules/rollup-plugin-typescript2": { "version": "0.36.0", @@ -6019,18 +5999,6 @@ "node": ">=0.10.0" } }, - "node_modules/source-map-resolve": { - "version": "0.6.0", - "resolved": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.6.0.tgz", - "integrity": "sha512-KXBr9d/fO/bWo97NXsPIAW1bFSBOuCnjbNTBMO7N59hsv5i9yzRDfcYwwt0l04+VqnKC+EwzvJZIP/qkuMgR/w==", - "deprecated": "See https://github.com/lydell/source-map-resolve#deprecated", - "dev": true, - "license": "MIT", - "dependencies": { - "atob": "^2.1.2", - "decode-uri-component": "^0.2.0" - } - }, "node_modules/source-map-support": { "version": "0.5.13", "resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.13.tgz", diff --git a/sdk/javascript/packages/core/package.json b/sdk/javascript/packages/core/package.json index ec676b97b..d259d99e0 100644 --- a/sdk/javascript/packages/core/package.json +++ b/sdk/javascript/packages/core/package.json @@ -25,7 +25,7 @@ "jest": "^30.2.0", "https-proxy-agent": "^7.0.6", "rollup": "^4.52.3", - "rollup-plugin-sourcemaps": "^0.6.3", + "rollup-plugin-sourcemaps2": "^0.5.4", "rollup-plugin-typescript2": "^0.36.0", "rollup-plugin-version-injector": "^1.3.3", "ts-jest": "^29.4.4", diff --git a/sdk/javascript/packages/core/rollup.config.js b/sdk/javascript/packages/core/rollup.config.js index faaa528fb..6de20816b 100644 --- a/sdk/javascript/packages/core/rollup.config.js +++ b/sdk/javascript/packages/core/rollup.config.js @@ -1,6 +1,6 @@ import typescript from "rollup-plugin-typescript2" import pkg from './package.json' -import sourcemaps from "rollup-plugin-sourcemaps"; +import sourcemaps from "rollup-plugin-sourcemaps2"; import versionInjector from "rollup-plugin-version-injector"; export default [ From b200ea8fc52541823a723981586e3849f10ea8b5 Mon Sep 17 00:00:00 2001 From: Stas Schaller Date: Tue, 14 Apr 2026 15:33:57 -0400 Subject: [PATCH 2/8] chore: bump JavaScript SDK version to 17.4.1 --- sdk/javascript/packages/core/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sdk/javascript/packages/core/package.json b/sdk/javascript/packages/core/package.json index ec676b97b..dd312706b 100644 --- a/sdk/javascript/packages/core/package.json +++ b/sdk/javascript/packages/core/package.json @@ -1,6 +1,6 @@ { "name": "@keeper-security/secrets-manager-core", - "version": "17.4.0", + "version": "17.4.1", "description": "Keeper Secrets Manager Javascript SDK", "browser": "dist/index.es.js", "main": "dist/index.cjs.js", From 1472a7f3d861d27176b51a1698556199d9f3aa2b Mon Sep 17 00:00:00 2001 From: Stas Schaller Date: Tue, 14 Apr 2026 15:33:58 -0400 Subject: [PATCH 3/8] KSM-901: add IL5 region mapping (il5.keepersecurity.us) --- sdk/javascript/packages/core/README.md | 3 +++ sdk/javascript/packages/core/src/keeper.ts | 3 ++- sdk/javascript/packages/core/test/keeper.test.ts | 4 ++++ 3 files changed, 9 insertions(+), 1 deletion(-) diff --git a/sdk/javascript/packages/core/README.md b/sdk/javascript/packages/core/README.md index 5f1a660af..4f94af682 100644 --- a/sdk/javascript/packages/core/README.md +++ b/sdk/javascript/packages/core/README.md @@ -4,6 +4,9 @@ For more information see our official documentation page https://docs.keeper.io/ # Change Log +## 17.4.1 +- KSM-901 - Add IL5 (DoD Impact Level 5) region mapping (`IL5` → `il5.keepersecurity.us`) + ## 17.4.0 - KSM-669 - Crypto issues when using getFolders() on Cloudflare workers with JS SDK - KSM-697 - Fix file permissions for config files (write with 0600 permissions for security) diff --git a/sdk/javascript/packages/core/src/keeper.ts b/sdk/javascript/packages/core/src/keeper.ts index 422fcd758..4630f2548 100644 --- a/sdk/javascript/packages/core/src/keeper.ts +++ b/sdk/javascript/packages/core/src/keeper.ts @@ -723,7 +723,8 @@ export const initializeStorage = async ( AU: 'keepersecurity.com.au', GOV: 'govcloud.keepersecurity.us', JP: 'keepersecurity.jp', - CA: 'keepersecurity.ca' + CA: 'keepersecurity.ca', + IL5: 'il5.keepersecurity.us' }[tokenParts[0].toUpperCase()] if (!host) { diff --git a/sdk/javascript/packages/core/test/keeper.test.ts b/sdk/javascript/packages/core/test/keeper.test.ts index 935d332e8..cdbf57287 100644 --- a/sdk/javascript/packages/core/test/keeper.test.ts +++ b/sdk/javascript/packages/core/test/keeper.test.ts @@ -64,6 +64,10 @@ test('Storage prefixes', async () => { await initializeStorage(storage, 'eu:ONE_TIME_TOKEN') expect(await storage.getString('hostname')).toBe('keepersecurity.eu') + storage = inMemoryStorage({}) + await initializeStorage(storage, 'IL5:ONE_TIME_TOKEN') + expect(await storage.getString('hostname')).toBe('il5.keepersecurity.us') + storage = inMemoryStorage({}) await initializeStorage(storage, 'fake.keepersecurity.com:ONE_TIME_TOKEN') expect(await storage.getString('hostname')).toBe('fake.keepersecurity.com') From 8af7cca96b7e51cf289bdfcc8a64116a5032c50d Mon Sep 17 00:00:00 2001 From: Stas Schaller Date: Tue, 14 Apr 2026 16:57:54 -0400 Subject: [PATCH 4/8] docs(sdk/javascript): migrate changelog from README to CHANGELOG.md; add KSM-758 entry --- sdk/javascript/packages/core/CHANGELOG.md | 66 ++++++++++++++++++++++ sdk/javascript/packages/core/README.md | 67 +---------------------- 2 files changed, 67 insertions(+), 66 deletions(-) create mode 100644 sdk/javascript/packages/core/CHANGELOG.md diff --git a/sdk/javascript/packages/core/CHANGELOG.md b/sdk/javascript/packages/core/CHANGELOG.md new file mode 100644 index 000000000..b6e09270c --- /dev/null +++ b/sdk/javascript/packages/core/CHANGELOG.md @@ -0,0 +1,66 @@ +# Change Log + +## 17.4.1 +- KSM-901 - Add IL5 (DoD Impact Level 5) region mapping (`IL5` → `il5.keepersecurity.us`) +- KSM-758 - Replace deprecated `rollup-plugin-sourcemaps@0.6.3` with `rollup-plugin-sourcemaps2@0.5.4` — resolves peer dependency warnings with Rollup 4.x + +## 17.4.0 +- KSM-669 - Crypto issues when using getFolders() on Cloudflare workers with JS SDK +- KSM-697 - Fix file permissions for config files (write with 0600 permissions for security) +- KSM-731 - Fix notation lookup with record shortcuts (handles duplicate UIDs from shortcuts) +- KSM-739 - Added transmission public key #18 for Gov Cloud Dev support +- Security: Updated transitive dependencies (glob 10.5.0, js-yaml 3.14.2) + +## 17.3.0 +- KSM-534 - Added proxy support +- KSM-575 - Resolve DOM Clobbering CVE-2024-43788 +- KSM-657 - Added custom caching example +- KSM-661 - Handle broken records, files, and folders + +## 17.2.0 +- KSM-581: Added GraphSync library to read GraphSync links + +## 17.1.0 +- KSM-588: Enhance JS SDK to enable editing of external shares + +## 17.0.0 +- KSM-574 - Replace Node.js Buffer with Browser-Compatible Alternative + +## 16.6.3 +- KSM-489 - Added transaction support for updateSecret +- KSM-521 - Dependencies upgrade +- KSM-549 - Stop generating UIDs that start with "-" +- KSM-556 - Added new field types and updated PAM field types + +## 16.6.2 +- KSM-487 - Dependencies upgrade + +## 16.6.1 +- KSM-438 - include enterprise logo in KSM response, `extra` field. (related to KA-5546) +- Bump dependencies + +## 16.6.0 +- KSM-412 - Added support for Folders +- KSM-432 - Improved support for Passkey field type +- Dependencies upgrade + +## 16.5.2 +- KSM-407 - New field type: Passkey +- KSM-402 - New filed type: script and modification to record types +- KSM-377 - Added support for PAM record types + +## 16.5.1 +- Adding back missing methods for the Notation improvements + +## 16.5.0 +- Notation improvements - new parser, notation URIs using record title, new escape characters +- Creation of the custom fields +- Logging improvement + +## 16.4.0 +- KSM-310 - Improved password generation entropy +- Record deletion + +## 16.3.3 +- KSM-273 - Avoid reliance on external package for file upload with Node +- Added support to Japan `JP` and Canada `CA` regions diff --git a/sdk/javascript/packages/core/README.md b/sdk/javascript/packages/core/README.md index 4f94af682..249a84b8e 100644 --- a/sdk/javascript/packages/core/README.md +++ b/sdk/javascript/packages/core/README.md @@ -2,69 +2,4 @@ For more information see our official documentation page https://docs.keeper.io/secrets-manager/secrets-manager/developer-sdk-library/javascript-sdk -# Change Log - -## 17.4.1 -- KSM-901 - Add IL5 (DoD Impact Level 5) region mapping (`IL5` → `il5.keepersecurity.us`) - -## 17.4.0 -- KSM-669 - Crypto issues when using getFolders() on Cloudflare workers with JS SDK -- KSM-697 - Fix file permissions for config files (write with 0600 permissions for security) -- KSM-731 - Fix notation lookup with record shortcuts (handles duplicate UIDs from shortcuts) -- KSM-739 - Added transmission public key #18 for Gov Cloud Dev support -- Security: Updated transitive dependencies (glob 10.5.0, js-yaml 3.14.2) - -## 17.3.0 -- KSM-534 - Added proxy support -- KSM-575 - Resolve DOM Clobbering CVE-2024-43788 -- KSM-657 - Added custom caching example -- KSM-661 - Handle broken records, files, and folders - -## 17.2.0 -- KSM-581: Added GraphSync library to read GraphSync links - -## 17.1.0 -- KSM-588: Enhance JS SDK to enable editing of external shares - -## 17.0.0 -- KSM-574 - Replace Node.js Buffer with Browser-Compatible Alternative - -## 16.6.3 -- KSM-489 - Added transaction support for updateSecret -- KSM-521 - Dependencies upgrade -- KSM-549 - Stop generating UIDs that start with "-" -- KSM-556 - Added new field types and updated PAM field types - -## 16.6.2 -- KSM-487 - Dependencies upgrade - -## 16.6.1 -- KSM-438 - include enterprise logo in KSM response, `extra` field. (related to KA-5546) -- Bump dependencies - -## 16.6.0 -- KSM-412 - Added support for Folders -- KSM-432 - Improved support for Passkey field type -- Dependencies upgrade - -## 16.5.2 -- KSM-407 - New field type: Passkey -- KSM-402 - New filed type: script and modification to record types -- KSM-377 - Added support for PAM record types - -## 16.5.1 -- Adding back missing methods for the Notation improvements - -## 16.5.0 -- Notation improvements - new parser, notation URIs using record title, new escape characters -- Creation of the custom fields -- Logging improvement - -## 16.4.0 -- KSM-310 - Improved password generation entropy -- Record deletion - -## 16.3.3 - -- KSM-273 - Avoid reliance on external package for file upload with Node -- Added support to Japan `JP` and Canada `CA` regions +See [CHANGELOG.md](CHANGELOG.md) for version history. From a87e219e6337c79ed457bb9e9749b545fb7be117 Mon Sep 17 00:00:00 2001 From: Stas Schaller Date: Tue, 14 Apr 2026 17:24:05 -0400 Subject: [PATCH 5/8] =?UTF-8?q?security:=20bump=20rollup=20to=20^4.60.1=20?= =?UTF-8?q?=E2=80=94=20fixes=20HIGH=20arbitrary=20file=20write=20(CVE,=204?= =?UTF-8?q?.0.0-4.58.0)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- sdk/javascript/packages/core/CHANGELOG.md | 1 + .../packages/core/package-lock.json | 233 +++++++++++------- sdk/javascript/packages/core/package.json | 4 +- 3 files changed, 142 insertions(+), 96 deletions(-) diff --git a/sdk/javascript/packages/core/CHANGELOG.md b/sdk/javascript/packages/core/CHANGELOG.md index b6e09270c..477dd8008 100644 --- a/sdk/javascript/packages/core/CHANGELOG.md +++ b/sdk/javascript/packages/core/CHANGELOG.md @@ -3,6 +3,7 @@ ## 17.4.1 - KSM-901 - Add IL5 (DoD Impact Level 5) region mapping (`IL5` → `il5.keepersecurity.us`) - KSM-758 - Replace deprecated `rollup-plugin-sourcemaps@0.6.3` with `rollup-plugin-sourcemaps2@0.5.4` — resolves peer dependency warnings with Rollup 4.x +- Security: Bump `rollup` devDependency from `^4.52.3` to `^4.60.1` — fixes HIGH severity arbitrary file write via path traversal (CVE affects 4.0.0–4.58.0) ## 17.4.0 - KSM-669 - Crypto issues when using getFolders() on Cloudflare workers with JS SDK diff --git a/sdk/javascript/packages/core/package-lock.json b/sdk/javascript/packages/core/package-lock.json index dbf56b63a..4c1f3e7d1 100644 --- a/sdk/javascript/packages/core/package-lock.json +++ b/sdk/javascript/packages/core/package-lock.json @@ -1,12 +1,12 @@ { "name": "@keeper-security/secrets-manager-core", - "version": "17.4.0", + "version": "17.4.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@keeper-security/secrets-manager-core", - "version": "17.4.0", + "version": "17.4.1", "license": "MIT", "devDependencies": { "@babel/core": "^7.28.4", @@ -17,7 +17,7 @@ "babel-jest": "^30.2.0", "https-proxy-agent": "^7.0.6", "jest": "^30.2.0", - "rollup": "^4.52.3", + "rollup": "^4.60.1", "rollup-plugin-sourcemaps2": "^0.5.4", "rollup-plugin-typescript2": "^0.36.0", "rollup-plugin-version-injector": "^1.3.3", @@ -2358,9 +2358,9 @@ } }, "node_modules/@rollup/rollup-android-arm-eabi": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.52.3.tgz", - "integrity": "sha512-h6cqHGZ6VdnwliFG1NXvMPTy/9PS3h8oLh7ImwR+kl+oYnQizgjxsONmmPSb2C66RksfkfIxEVtDSEcJiO0tqw==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.60.1.tgz", + "integrity": "sha512-d6FinEBLdIiK+1uACUttJKfgZREXrF0Qc2SmLII7W2AD8FfiZ9Wjd+rD/iRuf5s5dWrr1GgwXCvPqOuDquOowA==", "cpu": [ "arm" ], @@ -2372,9 +2372,9 @@ ] }, "node_modules/@rollup/rollup-android-arm64": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.52.3.tgz", - "integrity": "sha512-wd+u7SLT/u6knklV/ifG7gr5Qy4GUbH2hMWcDauPFJzmCZUAJ8L2bTkVXC2niOIxp8lk3iH/QX8kSrUxVZrOVw==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.60.1.tgz", + "integrity": "sha512-YjG/EwIDvvYI1YvYbHvDz/BYHtkY4ygUIXHnTdLhG+hKIQFBiosfWiACWortsKPKU/+dUwQQCKQM3qrDe8c9BA==", "cpu": [ "arm64" ], @@ -2386,9 +2386,9 @@ ] }, "node_modules/@rollup/rollup-darwin-arm64": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.52.3.tgz", - "integrity": "sha512-lj9ViATR1SsqycwFkJCtYfQTheBdvlWJqzqxwc9f2qrcVrQaF/gCuBRTiTolkRWS6KvNxSk4KHZWG7tDktLgjg==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.60.1.tgz", + "integrity": "sha512-mjCpF7GmkRtSJwon+Rq1N8+pI+8l7w5g9Z3vWj4T7abguC4Czwi3Yu/pFaLvA3TTeMVjnu3ctigusqWUfjZzvw==", "cpu": [ "arm64" ], @@ -2400,9 +2400,9 @@ ] }, "node_modules/@rollup/rollup-darwin-x64": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.52.3.tgz", - "integrity": "sha512-+Dyo7O1KUmIsbzx1l+4V4tvEVnVQqMOIYtrxK7ncLSknl1xnMHLgn7gddJVrYPNZfEB8CIi3hK8gq8bDhb3h5A==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.60.1.tgz", + "integrity": "sha512-haZ7hJ1JT4e9hqkoT9R/19XW2QKqjfJVv+i5AGg57S+nLk9lQnJ1F/eZloRO3o9Scy9CM3wQ9l+dkXtcBgN5Ew==", "cpu": [ "x64" ], @@ -2414,9 +2414,9 @@ ] }, "node_modules/@rollup/rollup-freebsd-arm64": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.52.3.tgz", - "integrity": "sha512-u9Xg2FavYbD30g3DSfNhxgNrxhi6xVG4Y6i9Ur1C7xUuGDW3banRbXj+qgnIrwRN4KeJ396jchwy9bCIzbyBEQ==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.60.1.tgz", + "integrity": "sha512-czw90wpQq3ZsAVBlinZjAYTKduOjTywlG7fEeWKUA7oCmpA8xdTkxZZlwNJKWqILlq0wehoZcJYfBvOyhPTQ6w==", "cpu": [ "arm64" ], @@ -2428,9 +2428,9 @@ ] }, "node_modules/@rollup/rollup-freebsd-x64": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.52.3.tgz", - "integrity": "sha512-5M8kyi/OX96wtD5qJR89a/3x5x8x5inXBZO04JWhkQb2JWavOWfjgkdvUqibGJeNNaz1/Z1PPza5/tAPXICI6A==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.60.1.tgz", + "integrity": "sha512-KVB2rqsxTHuBtfOeySEyzEOB7ltlB/ux38iu2rBQzkjbwRVlkhAGIEDiiYnO2kFOkJp+Z7pUXKyrRRFuFUKt+g==", "cpu": [ "x64" ], @@ -2442,9 +2442,9 @@ ] }, "node_modules/@rollup/rollup-linux-arm-gnueabihf": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.52.3.tgz", - "integrity": "sha512-IoerZJ4l1wRMopEHRKOO16e04iXRDyZFZnNZKrWeNquh5d6bucjezgd+OxG03mOMTnS1x7hilzb3uURPkJ0OfA==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.60.1.tgz", + "integrity": "sha512-L+34Qqil+v5uC0zEubW7uByo78WOCIrBvci69E7sFASRl0X7b/MB6Cqd1lky/CtcSVTydWa2WZwFuWexjS5o6g==", "cpu": [ "arm" ], @@ -2456,9 +2456,9 @@ ] }, "node_modules/@rollup/rollup-linux-arm-musleabihf": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.52.3.tgz", - "integrity": "sha512-ZYdtqgHTDfvrJHSh3W22TvjWxwOgc3ThK/XjgcNGP2DIwFIPeAPNsQxrJO5XqleSlgDux2VAoWQ5iJrtaC1TbA==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.60.1.tgz", + "integrity": "sha512-n83O8rt4v34hgFzlkb1ycniJh7IR5RCIqt6mz1VRJD6pmhRi0CXdmfnLu9dIUS6buzh60IvACM842Ffb3xd6Gg==", "cpu": [ "arm" ], @@ -2470,9 +2470,9 @@ ] }, "node_modules/@rollup/rollup-linux-arm64-gnu": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.52.3.tgz", - "integrity": "sha512-NcViG7A0YtuFDA6xWSgmFb6iPFzHlf5vcqb2p0lGEbT+gjrEEz8nC/EeDHvx6mnGXnGCC1SeVV+8u+smj0CeGQ==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.60.1.tgz", + "integrity": "sha512-Nql7sTeAzhTAja3QXeAI48+/+GjBJ+QmAH13snn0AJSNL50JsDqotyudHyMbO2RbJkskbMbFJfIJKWA6R1LCJQ==", "cpu": [ "arm64" ], @@ -2484,9 +2484,9 @@ ] }, "node_modules/@rollup/rollup-linux-arm64-musl": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.52.3.tgz", - "integrity": "sha512-d3pY7LWno6SYNXRm6Ebsq0DJGoiLXTb83AIPCXl9fmtIQs/rXoS8SJxxUNtFbJ5MiOvs+7y34np77+9l4nfFMw==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.60.1.tgz", + "integrity": "sha512-+pUymDhd0ys9GcKZPPWlFiZ67sTWV5UU6zOJat02M1+PiuSGDziyRuI/pPue3hoUwm2uGfxdL+trT6Z9rxnlMA==", "cpu": [ "arm64" ], @@ -2498,9 +2498,23 @@ ] }, "node_modules/@rollup/rollup-linux-loong64-gnu": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.52.3.tgz", - "integrity": "sha512-3y5GA0JkBuirLqmjwAKwB0keDlI6JfGYduMlJD/Rl7fvb4Ni8iKdQs1eiunMZJhwDWdCvrcqXRY++VEBbvk6Eg==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.60.1.tgz", + "integrity": "sha512-VSvgvQeIcsEvY4bKDHEDWcpW4Yw7BtlKG1GUT4FzBUlEKQK0rWHYBqQt6Fm2taXS+1bXvJT6kICu5ZwqKCnvlQ==", + "cpu": [ + "loong64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-loong64-musl": { + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.60.1.tgz", + "integrity": "sha512-4LqhUomJqwe641gsPp6xLfhqWMbQV04KtPp7/dIp0nzPxAkNY1AbwL5W0MQpcalLYk07vaW9Kp1PBhdpZYYcEw==", "cpu": [ "loong64" ], @@ -2512,9 +2526,23 @@ ] }, "node_modules/@rollup/rollup-linux-ppc64-gnu": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.52.3.tgz", - "integrity": "sha512-AUUH65a0p3Q0Yfm5oD2KVgzTKgwPyp9DSXc3UA7DtxhEb/WSPfbG4wqXeSN62OG5gSo18em4xv6dbfcUGXcagw==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.60.1.tgz", + "integrity": "sha512-tLQQ9aPvkBxOc/EUT6j3pyeMD6Hb8QF2BTBnCQWP/uu1lhc9AIrIjKnLYMEroIz/JvtGYgI9dF3AxHZNaEH0rw==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-ppc64-musl": { + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.60.1.tgz", + "integrity": "sha512-RMxFhJwc9fSXP6PqmAz4cbv3kAyvD1etJFjTx4ONqFP9DkTkXsAMU4v3Vyc5BgzC+anz7nS/9tp4obsKfqkDHg==", "cpu": [ "ppc64" ], @@ -2526,9 +2554,9 @@ ] }, "node_modules/@rollup/rollup-linux-riscv64-gnu": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.52.3.tgz", - "integrity": "sha512-1makPhFFVBqZE+XFg3Dkq+IkQ7JvmUrwwqaYBL2CE+ZpxPaqkGaiWFEWVGyvTwZace6WLJHwjVh/+CXbKDGPmg==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.60.1.tgz", + "integrity": "sha512-QKgFl+Yc1eEk6MmOBfRHYF6lTxiiiV3/z/BRrbSiW2I7AFTXoBFvdMEyglohPj//2mZS4hDOqeB0H1ACh3sBbg==", "cpu": [ "riscv64" ], @@ -2540,9 +2568,9 @@ ] }, "node_modules/@rollup/rollup-linux-riscv64-musl": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.52.3.tgz", - "integrity": "sha512-OOFJa28dxfl8kLOPMUOQBCO6z3X2SAfzIE276fwT52uXDWUS178KWq0pL7d6p1kz7pkzA0yQwtqL0dEPoVcRWg==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.60.1.tgz", + "integrity": "sha512-RAjXjP/8c6ZtzatZcA1RaQr6O1TRhzC+adn8YZDnChliZHviqIjmvFwHcxi4JKPSDAt6Uhf/7vqcBzQJy0PDJg==", "cpu": [ "riscv64" ], @@ -2554,9 +2582,9 @@ ] }, "node_modules/@rollup/rollup-linux-s390x-gnu": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.52.3.tgz", - "integrity": "sha512-jMdsML2VI5l+V7cKfZx3ak+SLlJ8fKvLJ0Eoa4b9/vCUrzXKgoKxvHqvJ/mkWhFiyp88nCkM5S2v6nIwRtPcgg==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.60.1.tgz", + "integrity": "sha512-wcuocpaOlaL1COBYiA89O6yfjlp3RwKDeTIA0hM7OpmhR1Bjo9j31G1uQVpDlTvwxGn2nQs65fBFL5UFd76FcQ==", "cpu": [ "s390x" ], @@ -2568,9 +2596,9 @@ ] }, "node_modules/@rollup/rollup-linux-x64-gnu": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.52.3.tgz", - "integrity": "sha512-tPgGd6bY2M2LJTA1uGq8fkSPK8ZLYjDjY+ZLK9WHncCnfIz29LIXIqUgzCR0hIefzy6Hpbe8Th5WOSwTM8E7LA==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.60.1.tgz", + "integrity": "sha512-77PpsFQUCOiZR9+LQEFg9GClyfkNXj1MP6wRnzYs0EeWbPcHs02AXu4xuUbM1zhwn3wqaizle3AEYg5aeoohhg==", "cpu": [ "x64" ], @@ -2582,9 +2610,9 @@ ] }, "node_modules/@rollup/rollup-linux-x64-musl": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.52.3.tgz", - "integrity": "sha512-BCFkJjgk+WFzP+tcSMXq77ymAPIxsX9lFJWs+2JzuZTLtksJ2o5hvgTdIcZ5+oKzUDMwI0PfWzRBYAydAHF2Mw==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.60.1.tgz", + "integrity": "sha512-5cIATbk5vynAjqqmyBjlciMJl1+R/CwX9oLk/EyiFXDWd95KpHdrOJT//rnUl4cUcskrd0jCCw3wpZnhIHdD9w==", "cpu": [ "x64" ], @@ -2595,10 +2623,24 @@ "linux" ] }, + "node_modules/@rollup/rollup-openbsd-x64": { + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.60.1.tgz", + "integrity": "sha512-cl0w09WsCi17mcmWqqglez9Gk8isgeWvoUZ3WiJFYSR3zjBQc2J5/ihSjpl+VLjPqjQ/1hJRcqBfLjssREQILw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openbsd" + ] + }, "node_modules/@rollup/rollup-openharmony-arm64": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.52.3.tgz", - "integrity": "sha512-KTD/EqjZF3yvRaWUJdD1cW+IQBk4fbQaHYJUmP8N4XoKFZilVL8cobFSTDnjTtxWJQ3JYaMgF4nObY/+nYkumA==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.60.1.tgz", + "integrity": "sha512-4Cv23ZrONRbNtbZa37mLSueXUCtN7MXccChtKpUnQNgF010rjrjfHx3QxkS2PI7LqGT5xXyYs1a7LbzAwT0iCA==", "cpu": [ "arm64" ], @@ -2610,9 +2652,9 @@ ] }, "node_modules/@rollup/rollup-win32-arm64-msvc": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.52.3.tgz", - "integrity": "sha512-+zteHZdoUYLkyYKObGHieibUFLbttX2r+58l27XZauq0tcWYYuKUwY2wjeCN9oK1Um2YgH2ibd6cnX/wFD7DuA==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.60.1.tgz", + "integrity": "sha512-i1okWYkA4FJICtr7KpYzFpRTHgy5jdDbZiWfvny21iIKky5YExiDXP+zbXzm3dUcFpkEeYNHgQ5fuG236JPq0g==", "cpu": [ "arm64" ], @@ -2624,9 +2666,9 @@ ] }, "node_modules/@rollup/rollup-win32-ia32-msvc": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.52.3.tgz", - "integrity": "sha512-of1iHkTQSo3kr6dTIRX6t81uj/c/b15HXVsPcEElN5sS859qHrOepM5p9G41Hah+CTqSh2r8Bm56dL2z9UQQ7g==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.60.1.tgz", + "integrity": "sha512-u09m3CuwLzShA0EYKMNiFgcjjzwqtUMLmuCJLeZWjjOYA3IT2Di09KaxGBTP9xVztWyIWjVdsB2E9goMjZvTQg==", "cpu": [ "ia32" ], @@ -2638,9 +2680,9 @@ ] }, "node_modules/@rollup/rollup-win32-x64-gnu": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.52.3.tgz", - "integrity": "sha512-s0hybmlHb56mWVZQj8ra9048/WZTPLILKxcvcq+8awSZmyiSUZjjem1AhU3Tf4ZKpYhK4mg36HtHDOe8QJS5PQ==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.60.1.tgz", + "integrity": "sha512-k+600V9Zl1CM7eZxJgMyTUzmrmhB/0XZnF4pRypKAlAgxmedUA+1v9R+XOFv56W4SlHEzfeMtzujLJD22Uz5zg==", "cpu": [ "x64" ], @@ -2652,9 +2694,9 @@ ] }, "node_modules/@rollup/rollup-win32-x64-msvc": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.52.3.tgz", - "integrity": "sha512-zGIbEVVXVtauFgl3MRwGWEN36P5ZGenHRMgNw88X5wEhEBpq0XrMEZwOn07+ICrwM17XO5xfMZqh0OldCH5VTA==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.60.1.tgz", + "integrity": "sha512-lWMnixq/QzxyhTV6NjQJ4SFo1J6PvOX8vUx5Wb4bBPsEb+8xZ89Bz6kOXpfXj9ak9AHTQVQzlgzBEc1SyM27xQ==", "cpu": [ "x64" ], @@ -5790,9 +5832,9 @@ } }, "node_modules/rollup": { - "version": "4.52.3", - "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.52.3.tgz", - "integrity": "sha512-RIDh866U8agLgiIcdpB+COKnlCreHJLfIhWC3LVflku5YHfpnsIKigRZeFfMfCc4dVcqNVfQQ5gO/afOck064A==", + "version": "4.60.1", + "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.60.1.tgz", + "integrity": "sha512-VmtB2rFU/GroZ4oL8+ZqXgSA38O6GR8KSIvWmEFv63pQ0G6KaBH9s07PO8XTXP4vI+3UJUEypOfjkGfmSBBR0w==", "dev": true, "license": "MIT", "peer": true, @@ -5807,28 +5849,31 @@ "npm": ">=8.0.0" }, "optionalDependencies": { - "@rollup/rollup-android-arm-eabi": "4.52.3", - "@rollup/rollup-android-arm64": "4.52.3", - "@rollup/rollup-darwin-arm64": "4.52.3", - "@rollup/rollup-darwin-x64": "4.52.3", - "@rollup/rollup-freebsd-arm64": "4.52.3", - "@rollup/rollup-freebsd-x64": "4.52.3", - "@rollup/rollup-linux-arm-gnueabihf": "4.52.3", - "@rollup/rollup-linux-arm-musleabihf": "4.52.3", - "@rollup/rollup-linux-arm64-gnu": "4.52.3", - "@rollup/rollup-linux-arm64-musl": "4.52.3", - "@rollup/rollup-linux-loong64-gnu": "4.52.3", - "@rollup/rollup-linux-ppc64-gnu": "4.52.3", - "@rollup/rollup-linux-riscv64-gnu": "4.52.3", - "@rollup/rollup-linux-riscv64-musl": "4.52.3", - "@rollup/rollup-linux-s390x-gnu": "4.52.3", - "@rollup/rollup-linux-x64-gnu": "4.52.3", - "@rollup/rollup-linux-x64-musl": "4.52.3", - "@rollup/rollup-openharmony-arm64": "4.52.3", - "@rollup/rollup-win32-arm64-msvc": "4.52.3", - "@rollup/rollup-win32-ia32-msvc": "4.52.3", - "@rollup/rollup-win32-x64-gnu": "4.52.3", - "@rollup/rollup-win32-x64-msvc": "4.52.3", + "@rollup/rollup-android-arm-eabi": "4.60.1", + "@rollup/rollup-android-arm64": "4.60.1", + "@rollup/rollup-darwin-arm64": "4.60.1", + "@rollup/rollup-darwin-x64": "4.60.1", + "@rollup/rollup-freebsd-arm64": "4.60.1", + "@rollup/rollup-freebsd-x64": "4.60.1", + "@rollup/rollup-linux-arm-gnueabihf": "4.60.1", + "@rollup/rollup-linux-arm-musleabihf": "4.60.1", + "@rollup/rollup-linux-arm64-gnu": "4.60.1", + "@rollup/rollup-linux-arm64-musl": "4.60.1", + "@rollup/rollup-linux-loong64-gnu": "4.60.1", + "@rollup/rollup-linux-loong64-musl": "4.60.1", + "@rollup/rollup-linux-ppc64-gnu": "4.60.1", + "@rollup/rollup-linux-ppc64-musl": "4.60.1", + "@rollup/rollup-linux-riscv64-gnu": "4.60.1", + "@rollup/rollup-linux-riscv64-musl": "4.60.1", + "@rollup/rollup-linux-s390x-gnu": "4.60.1", + "@rollup/rollup-linux-x64-gnu": "4.60.1", + "@rollup/rollup-linux-x64-musl": "4.60.1", + "@rollup/rollup-openbsd-x64": "4.60.1", + "@rollup/rollup-openharmony-arm64": "4.60.1", + "@rollup/rollup-win32-arm64-msvc": "4.60.1", + "@rollup/rollup-win32-ia32-msvc": "4.60.1", + "@rollup/rollup-win32-x64-gnu": "4.60.1", + "@rollup/rollup-win32-x64-msvc": "4.60.1", "fsevents": "~2.3.2" } }, diff --git a/sdk/javascript/packages/core/package.json b/sdk/javascript/packages/core/package.json index b23e52030..cd61d8fde 100644 --- a/sdk/javascript/packages/core/package.json +++ b/sdk/javascript/packages/core/package.json @@ -22,9 +22,9 @@ "@types/jest": "^30.0.0", "@types/node": "^24.6.1", "babel-jest": "^30.2.0", - "jest": "^30.2.0", "https-proxy-agent": "^7.0.6", - "rollup": "^4.52.3", + "jest": "^30.2.0", + "rollup": "^4.60.1", "rollup-plugin-sourcemaps2": "^0.5.4", "rollup-plugin-typescript2": "^0.36.0", "rollup-plugin-version-injector": "^1.3.3", From 2e70856dbb11c0eba9f76a36de7c48aeaf8f45ca Mon Sep 17 00:00:00 2001 From: Stas Schaller Date: Tue, 14 Apr 2026 17:33:44 -0400 Subject: [PATCH 6/8] ci: add path filter to test.js.yml; expand Node.js matrix to 20/22/24 --- .github/workflows/test.js.yml | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/.github/workflows/test.js.yml b/.github/workflows/test.js.yml index e93af7353..5960bb7ec 100644 --- a/.github/workflows/test.js.yml +++ b/.github/workflows/test.js.yml @@ -3,20 +3,27 @@ name: Test-JS on: pull_request: branches: [ master ] + paths: + - 'sdk/javascript/packages/core/**' + - '.github/workflows/test.js.yml' jobs: test-js: runs-on: ubuntu-latest + strategy: + matrix: + node-version: [ '20', '22', '24' ] + name: KSM test with Node.js ${{ matrix.node-version }} defaults: run: working-directory: ./sdk/javascript/packages/core steps: - uses: actions/checkout@v4 - - - name: Use Node.js 20 + + - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v4 with: - node-version: 20 + node-version: ${{ matrix.node-version }} - run: npm install env: From 7afcf709399afb3dd6f2d6c906ff0990cf9cd050 Mon Sep 17 00:00:00 2001 From: Stas Schaller Date: Tue, 14 Apr 2026 17:34:54 -0400 Subject: [PATCH 7/8] ci: drop EOL Node.js 20 from test matrix (EOL Apr 30 2026) --- .github/workflows/test.js.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.js.yml b/.github/workflows/test.js.yml index 5960bb7ec..210c2c388 100644 --- a/.github/workflows/test.js.yml +++ b/.github/workflows/test.js.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest strategy: matrix: - node-version: [ '20', '22', '24' ] + node-version: [ '22', '24' ] name: KSM test with Node.js ${{ matrix.node-version }} defaults: run: From f4bd59aabe53505ccb4af686d89d4e08506e7bc4 Mon Sep 17 00:00:00 2001 From: Stas Schaller Date: Tue, 14 Apr 2026 17:42:05 -0400 Subject: [PATCH 8/8] ci: pin action SHAs, add permissions block, persist-credentials: false --- .github/workflows/test.js.yml | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test.js.yml b/.github/workflows/test.js.yml index 210c2c388..8db20ddf7 100644 --- a/.github/workflows/test.js.yml +++ b/.github/workflows/test.js.yml @@ -7,6 +7,9 @@ on: - 'sdk/javascript/packages/core/**' - '.github/workflows/test.js.yml' +permissions: + contents: read + jobs: test-js: runs-on: ubuntu-latest @@ -18,10 +21,12 @@ jobs: run: working-directory: ./sdk/javascript/packages/core steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v4 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: ${{ matrix.node-version }}