npm security audit fixes

ern-api-impl-gen/package.json

@@ -45,7 +45,7 @@
     "fs-extra": "^10.0.0",
     "lodash": "^4.17.21",
     "mustache": "^4.2.0",
-    "semver": "7.3.5",
+    "semver": "^7.5.2",
     "xcode": "^3.0.1",
     "xcode-ern": "^1.0.13"
   },

ern-core/package.json

@@ -36,7 +36,7 @@
   },
   "homepage": "https://www.electrode.io",
   "dependencies": {
-    "@octokit/rest": "18.5.3",
+    "@octokit/rest": "^20.1.1",
     "@react-native-community/cli": "15.0.1",
     "@react-native-community/cli-platform-android": "15.0.1",
     "@react-native-community/cli-platform-ios": "15.0.1",

ern-core/src/GitHubApi.ts

@@ -47,7 +47,7 @@ export class GitHubApi {
     fromSha?: string;
     fromTag?: string;
     name: string;
-  }) {
+  }): Promise<any> {
     if (!fromBranch && !fromSha && !fromTag) {
       fromBranch = await this.getDefaultBranch();
     }
@@ -73,7 +73,7 @@ export class GitHubApi {
    *
    * name: Name of the branch to delete
    */
-  public async deleteBranch({ name }: { name: string }) {
+  public async deleteBranch({ name }: { name: string }): Promise<any> {
     const opts = {
       owner: this.owner,
       ref: this.shortBranchRef(name),
@@ -105,7 +105,7 @@ export class GitHubApi {
     fromSha?: string;
     fromTag?: string;
     name: string;
-  }) {
+  }): Promise<any> {
     if (!fromBranch && !fromSha && !fromTag) {
       fromBranch = await this.getDefaultBranch();
     }
@@ -127,7 +127,7 @@ export class GitHubApi {
    *
    * name: Name of the tag to delete
    */
-  public async deleteTag({ name }: { name: string }) {
+  public async deleteTag({ name }: { name: string }): Promise<any> {
     const opts = {
       owner: this.owner,
       ref: this.shortTagRef(name),
@@ -172,7 +172,7 @@ export class GitHubApi {
 
     log.debug(`repos.getContents(${JSON.stringify(opts, null, 2)})`);
     const res = await this.octokit.repos.getContent(opts);
-    const buff = new Buffer((res.data as any).content, 'base64');
+    const buff = Buffer.from((res.data as any).content, 'base64');
     return buff.toString('utf8');
   }
 
@@ -194,7 +194,7 @@ export class GitHubApi {
     onBranch?: string;
     newContent: string;
     commitMessage: string;
-  }) {
+  }): Promise<any> {
     const sha = (
       (
         await this.octokit.repos.getContent({
@@ -206,7 +206,7 @@ export class GitHubApi {
       ).data as any
     ).sha;
 
-    const buff = new Buffer(newContent);
+    const buff = Buffer.from(newContent);
     const content = buff.toString('base64');
 
     return this.octokit.repos.createOrUpdateFileContents({

ern-orchestrator/package.json

@@ -36,7 +36,7 @@
   },
   "homepage": "https://www.electrode.io",
   "dependencies": {
-    "@octokit/rest": "18.5.3",
+    "@octokit/rest": "^20.1.1",
     "@yarnpkg/lockfile": "^1.1.0",
     "chalk": "^4.1.1",
     "cli-table": "^0.3.6",

package.json

@@ -106,5 +106,15 @@
   },
   "workspaces": [
     "ern-*"
-  ]
+  ],
+  "resolutions": {
+    "plist": "^3.0.5",
+    "simple-plist": "^1.3.1",
+    "deep-extend": "^0.6.0",
+    "ip": "^2.0.1",
+    "validator": "^13.15.22",
+    "trim-newlines": "^3.0.1",
+    "semver": "^7.5.2",
+    "@tootallnate/once": ">=3.0.1"
+  }
 }