Fixed critical CVE for npm packages

r0h0gg6 · r0h0gg6 · commit 3e902e36789e · 2026-04-29T08:42:18.000-07:00
diff --git a/ern-api-gen/package.json b/ern-api-gen/package.json
@@ -45,10 +45,10 @@
     "lodash": "^4.17.21",
     "minimatch": "^3.0.4",
     "mustache": "^4.2.0",
-    "semver": "^7.3.5",
+    "semver": "^7.5.2",
     "shelljs": "^0.8.4",
     "swagger-methods": "^1.0.8",
-    "sway": "^1.0.0"
+    "ern-sway": "^2.0.8"
   },
   "devDependencies": {
     "ern-util-dev": "1000.0.0"
diff --git a/ern-api-gen/src/java/Swagger.ts b/ern-api-gen/src/java/Swagger.ts
@@ -2,16 +2,16 @@
 /* tslint:disable:max-classes-per-file */
 import { newHashMap } from './javaUtil';
 import factory from '../models/factory';
-import Response from 'sway/lib/types/response';
-import SwaggerApi from 'sway/lib/types/api';
-import Path from 'sway/lib/types/path';
-import Operation from 'sway/lib/types/operation';
+import Response from 'ern-sway/lib/types/response';
+import SwaggerApi from 'ern-sway/lib/types/api';
+import Path from 'ern-sway/lib/types/path';
+import Operation from 'ern-sway/lib/types/operation';
 import parameterFactory from '../models/parameters';
 import { apply, beanify } from './beanUtils';
 import { Property } from '../models/properties';
 import { toModel } from '../models/PropertyBuilder';
 import authFactory from '../models/auth';
-import Sway from 'sway';
+import Sway from 'ern-sway';
 import { upperFirst } from './StringUtils';
 import supportedHttpMethods from 'swagger-methods';
 
diff --git a/ern-api-impl-gen/package.json b/ern-api-impl-gen/package.json
@@ -47,7 +47,7 @@
     "mustache": "^4.2.0",
     "semver": "^7.5.2",
     "xcode": "^3.0.1",
-    "xcode-ern": "^1.0.13"
+    "ern-xcode": "^1.0.14"
   },
   "devDependencies": {
     "ern-util-dev": "1000.0.0"
diff --git a/ern-api-impl-gen/src/generators/ios/ApiImplIosGenerator.ts b/ern-api-impl-gen/src/generators/ios/ApiImplIosGenerator.ts
@@ -9,7 +9,7 @@ import {
 import { ApiImplGeneratable } from '../../ApiImplGeneratable';
 import fs from 'fs-extra';
 import path from 'path';
-import xcode from 'xcode-ern';
+import xcode from 'ern-xcode';
 import readDir from 'fs-readdir-recursive';
 
 export const ROOT_DIR = shell.pwd();
diff --git a/ern-api-impl-gen/typings/modules.d.ts b/ern-api-impl-gen/typings/modules.d.ts
@@ -1 +1 @@
-declare module 'xcode-ern';
+declare module 'ern-xcode';
diff --git a/ern-cauldron-api/package.json b/ern-cauldron-api/package.json
@@ -40,7 +40,7 @@
     "ern-core": "1000.0.0",
     "fs-extra": "^10.0.0",
     "lodash": "^4.17.21",
-    "semver": "^7.3.5",
+    "semver": "^7.5.2",
     "uuid": "^8.3.2"
   },
   "devDependencies": {
diff --git a/ern-composite-gen/package.json b/ern-composite-gen/package.json
@@ -38,7 +38,7 @@
     "fs-readdir-recursive": "^1.1.0",
     "js-beautify": "^1.13.13",
     "mustache": "^4.2.0",
-    "semver": "^7.3.5",
+    "semver": "^7.5.2",
     "uuid": "^8.3.2"
   },
   "devDependencies": {
diff --git a/ern-container-gen-android/package.json b/ern-container-gen-android/package.json
@@ -42,7 +42,7 @@
     "fs-readdir-recursive": "^1.1.0",
     "glob": "^7.1.7",
     "lodash": "^4.17.21",
-    "semver": "^7.3.5"
+    "semver": "^7.5.2"
   },
   "devDependencies": {
     "copyfiles": "^2.4.1",
diff --git a/ern-container-gen-ios/package.json b/ern-container-gen-ios/package.json
@@ -41,8 +41,8 @@
     "fs-extra": "^10.0.0",
     "fs-readdir-recursive": "^1.1.0",
     "lodash": "^4.17.21",
-    "semver": "^7.3.5",
-    "xcode-ern": "^1.0.13"
+    "semver": "^7.5.2",
+    "ern-xcode": "^1.0.14"
   },
   "devDependencies": {
     "copyfiles": "^2.4.1",
diff --git a/ern-container-gen-ios/src/IosGenerator.ts b/ern-container-gen-ios/src/IosGenerator.ts
@@ -28,7 +28,7 @@ import {
 
 import fs from 'fs-extra';
 import path from 'path';
-import xcode from 'xcode-ern';
+import xcode from 'ern-xcode';
 import _ from 'lodash';
 import readDir from 'fs-readdir-recursive';
 import { Composite } from 'ern-composite-gen';
diff --git a/ern-container-gen-ios/typings/modules.d.ts b/ern-container-gen-ios/typings/modules.d.ts
@@ -1 +1 @@
-declare module 'xcode-ern';
+declare module 'ern-xcode';
diff --git a/ern-container-gen/package.json b/ern-container-gen/package.json
@@ -43,8 +43,8 @@
     "fs-extra": "^10.0.0",
     "fs-readdir-recursive": "^1.1.0",
     "mustache": "^4.2.0",
-    "semver": "^7.3.5",
-    "xcode-ern": "^1.0.13"
+    "semver": "^7.5.2",
+    "ern-xcode": "^1.0.14"
   },
   "devDependencies": {
     "copyfiles": "^2.3.0",
diff --git a/ern-core/package.json b/ern-core/package.json
@@ -43,10 +43,10 @@
     "@yarnpkg/lockfile": "^1.1.0",
     "adm-zip": "^0.5.10",
     "archiver": "^5.3.0",
-    "bugsnag-sourcemaps": "^1.3.0",
+    "@bugsnag/source-maps": "^2.3.3",
     "chalk": "^4.1.1",
     "cli-table": "^0.3.6",
-    "code-push": "4.0.5",
+    "code-push": "4.2.3",
     "cross-spawn": "^7.0.3",
     "form-data": "^4.0.0",
     "fs-extra": "^10.0.0",
@@ -62,15 +62,15 @@
     "node-fetch": "^2.6.1",
     "node-ipc": "9.2.1",
     "node-simctl": "^6.4.1",
-    "semver": "^7.3.5",
+    "semver": "^7.5.2",
     "shelljs": "^0.8.4",
     "simple-git": "^3.25.0",
     "tmp": "^0.2.1",
     "treeify": "^1.1.0",
     "tunnel": "^0.0.6",
     "untildify": "^4.0.0",
     "uuid": "^8.3.2",
-    "xcode-ern": "^1.0.13",
+    "ern-xcode": "^1.0.14",
     "yarn": "^1.22.10",
     "yauzl": "^2.10.0",
     "yazl": "^2.5.1"
diff --git a/ern-core/src/bugsnagUpload.ts b/ern-core/src/bugsnagUpload.ts
@@ -1,12 +1,13 @@
 import { createProxyAgentFromErnConfig } from './createProxyAgent';
 import log from './log';
 import kax from './kax';
-import * as bugsnag from 'bugsnag-sourcemaps';
+import { reactNative } from '@bugsnag/source-maps';
 
 export async function bugsnagUpload({
   apiKey,
   minifiedFile,
   minifiedUrl,
+  platform,
   projectRoot,
   sourceMap,
   uploadNodeModules,
@@ -15,31 +16,32 @@ export async function bugsnagUpload({
   apiKey: string;
   minifiedFile: string;
   minifiedUrl: string;
+  platform?: 'ios' | 'android';
   projectRoot: string;
   sourceMap: string;
   uploadNodeModules?: boolean;
   uploadSources: boolean;
 }) {
-  const agent = createProxyAgentFromErnConfig('bugsnagProxy', { https: true });
+  const proxyAgent = createProxyAgentFromErnConfig('bugsnagProxy', {
+    https: true,
+  });
   const codeBundleId = process.env.ERN_BUGSNAG_CODE_BUNDLE_ID;
   const bugsnagOptions = {
-    addWildcardPrefix: true,
-    agent,
     apiKey,
+    bundle: minifiedFile,
     codeBundleId,
-    minifiedFile,
-    minifiedUrl,
+    dev: false,
+    platform: platform || ('android' as const),
     projectRoot,
+    requestOpts: proxyAgent ? { agent: proxyAgent.agent } : undefined,
     sourceMap,
-    uploadNodeModules,
-    uploadSources,
   };
   log.trace(
     `[bugsnagUpload] options: ${JSON.stringify(bugsnagOptions, null, 2)}`,
   );
   process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
   await kax
     .task(`Uploading source map to Bugsnag (codeBundleId: ${codeBundleId})`)
-    .run(bugsnag.upload(bugsnagOptions));
+    .run(reactNative.uploadOne(bugsnagOptions));
   delete process.env.NODE_TLS_REJECT_UNAUTHORIZED;
 }
diff --git a/ern-core/src/iosUtil.ts b/ern-core/src/iosUtil.ts
@@ -8,7 +8,7 @@ import log from './log';
 import { isDependencyOfType, isDependencyPathNativeApiImpl } from './utils';
 import { JS_API_IMPL } from './ModuleTypes';
 import path from 'path';
-import xcode from 'xcode-ern';
+import xcode from 'ern-xcode';
 import fs from 'fs-extra';
 import _ from 'lodash';
 import kax from './kax';
@@ -177,7 +177,7 @@ export async function fillProjectHull(
             const pathToPbxProj = path.join(pathSpec.outputDir, s.path);
             // Add any missing section in the target pbxproj
             // This is necessary for proper parsing and modification of
-            // the pbxproj with the xcode-ern library
+            // the pbxproj with the ern-xcode library
             xcode.pbxProjFileUtils().addMissingSectionsToPbxProj(pathToPbxProj);
             const iosProj = await getIosProject(pathToPbxProj);
             const buildSettings =
diff --git a/ern-core/typings/modules.d.ts b/ern-core/typings/modules.d.ts
@@ -1,6 +1,5 @@
 declare module 'node-ipc';
 declare module 'code-push';
 declare module 'node-simctl';
-declare module 'xcode-ern';
+declare module 'ern-xcode';
 declare module 'gradle-to-js/lib/parser';
-declare module 'bugsnag-sourcemaps';
diff --git a/ern-local-cli/package.json b/ern-local-cli/package.json
@@ -64,7 +64,7 @@
     "kax": "^3.0.0",
     "lodash": "^4.17.21",
     "node-ipc": "9.2.1",
-    "semver": "^7.3.5",
+    "semver": "^7.5.2",
     "treeify": "^1.1.0",
     "untildify": "^4.0.0",
     "validate-npm-package-name": "^3.0.0",
diff --git a/ern-orchestrator/package.json b/ern-orchestrator/package.json
@@ -60,7 +60,7 @@
     "got": "^11.8.2",
     "kax": "^3.0.0",
     "lodash": "^4.17.21",
-    "semver": "^7.3.5",
+    "semver": "^7.5.2",
     "treeify": "^1.1.0",
     "validate-npm-package-name": "^3.0.0"
   },
diff --git a/ern-runner-gen-ios/package.json b/ern-runner-gen-ios/package.json
@@ -41,7 +41,7 @@
     "fs-extra": "^10.0.0",
     "fs-readdir-recursive": "^1.1.0",
     "mustache": "^4.2.0",
-    "semver": "^7.3.5"
+    "semver": "^7.5.2"
   },
   "devDependencies": {
     "copyfiles": "^2.4.1",
diff --git a/typings/modules.d.ts b/typings/modules.d.ts
@@ -1,4 +1,4 @@
 declare module 'node-ipc';
 declare module 'code-push';
 declare module 'node-simctl';
-declare module 'xcode-ern';
+declare module 'ern-xcode';
diff --git a/yarn.lock b/yarn.lock

Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-declare module 'xcode-ern';`
	`1`	`+declare module 'ern-xcode';`