[Chore] Security vulnerabilities audit

CHANGELOG.md

@@ -13,11 +13,15 @@ Our versioning strategy is as follows:
 
 ### 🛠 Breaking Changes
 
-[sitecore-jss] Switch to edge site query for XP and gets config sites + sxa sites (ignoring website)
+* [sitecore-jss] Switch to edge site query for XP and gets config sites + sxa sites (ignoring website)
   * Previously introduced Boolean `useSiteQuery` switch for XMCloud users has been removed.
   * Search query usage has been removed.
   * If you have any non-nextjs sites they should filter them out in multisite config plugin
 
+### 🧹 Chores
+
+* Security vulnerabilities audit ([1778](https://github.com/Sitecore/jss/pull/1778))
+
 ## 21.7.1
 
 ### 🐛 Bug Fixes

packages/create-sitecore-jss/src/templates/node-headless-ssr-proxy/package.json

@@ -23,7 +23,7 @@
     "@sitecore-jss/sitecore-jss-proxy": "~21.8.0-canary",
     "agentkeepalive": "^4.2.1",
     "compression": "~1.7.4",
-    "express": "~4.18.2",
+    "express": "~4.19.2",
     "memory-cache": "^0.2.0",
     "dotenv": "^16.0.3"
   },

packages/sitecore-jss-dev-tools/.vscode/launch.json

@@ -1,21 +1,21 @@
-{
-  "version": "0.2.0",
-  "configurations": [
-    {
-      "name": "Run mocha",
-      "type": "node2",
-      "request": "launch",
-      "program": "${workspaceRoot}/node_modules/mocha/bin/_mocha",
-      "stopOnEntry": false,
-      "args": [
-        "--compilers",
-        "js:babel-core/register",
-        "./src/**/*.test.js",
-        "--no-timeouts",
-        "./dist/test"
-      ],
-      "cwd": "${workspaceRoot}",
-      "runtimeExecutable": null
-    }
-  ]
+{
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Run mocha",
+      "type": "node",
+      "request": "launch",
+      "program": "${workspaceRoot}/node_modules/mocha/bin/_mocha",
+      "stopOnEntry": false,
+      "args": [
+        "--require",
+        "@babel/register",
+        "./src/**/*.test.js",
+        "--no-timeouts",
+        "./dist/test"
+      ],
+      "cwd": "${workspaceRoot}",
+      "runtimeExecutable": null
+    }
+  ]
 }

packages/sitecore-jss-dev-tools/package.json

@@ -56,6 +56,8 @@
     "yargs": "^17.6.2"
   },
   "devDependencies": {
+    "@babel/core": "^7.24.4",
+    "@babel/register": "^7.23.7",
     "@types/chai": "^4.3.4",
     "@types/chokidar": "^2.1.3",
     "@types/del": "^4.0.0",
@@ -71,7 +73,6 @@
     "@types/url-join": "^4.0.1",
     "@types/uuid": "^9.0.0",
     "@types/yargs": "^17.0.22",
-    "babel-core": "^6.26.3",
     "chai": "^4.3.7",
     "cross-env": "^7.0.3",
     "del-cli": "^5.0.0",

packages/sitecore-jss-dev-tools/src/pipelines/runner.ts

@@ -14,7 +14,7 @@ pipeline.addProcessor({
 });
 
 pipeline
-  .runWithCompilers(['babel-core/register'])
+  .runWithCompilers(['@babel/register'])
   .then((result) => {
     console.log(JSON.stringify(result, null, 2));
   })
@@ -23,7 +23,7 @@ pipeline
   });
 
 const runner = async () => {
-  const compilers = ['babel-core/register'];
+  const compilers = ['@babel/register'];
   return initCompilers(compilers)
     .then(() =>
       configLoader({ fileGlobs: ['../test/pipelines/**/*.config.js'], workingDirectory: __dirname })

packages/sitecore-jss-vue/package.json

@@ -27,13 +27,11 @@
     "url": "https://github.com/sitecore/jss/issues"
   },
   "devDependencies": {
-    "@babel/core": "^7.20.12",
     "@types/jest": "^29.2.6",
     "@types/node": "^18.11.18",
     "@vue/compiler-dom": "^3.2.45",
     "@vue/test-utils": "2.2.7",
     "@vue/vue3-jest": "^29.2.2",
-    "babel-core": "^6.26.3",
     "babel-jest": "^29.5.0",
     "del-cli": "^5.0.0",
     "eslint": "^8.32.0",