[WTF-2591]: Fix vulnerabilities in transitive dependencies of PWT (#174)

The main objective of this PR is to ensure widget developers don't
install vulnerable packages through the pluggable-widgets-tools. It
accomplishes this with the following methods:

- Upgrade outdated dependencies
- Add an `audit` command that adds overrides for transitive dependencies
of the PWT

Additionally this PR:

- Moves linting & formatting to monorepo root for widgets-tools
development
- Migrated generator-widget and command-tests to ESM
- Improved logging of command-tests
- Removed node 18 tests
- Updated migration script to handle non-npm package managers gracefully

## Testing

When installing this version of the PWT it should have significantly
less vulnerabilities reported by `npm audit`. Running `npx
pluggable-widgets-tools audit:fix` should eliminate all of them.

Existing widgets should continue to function. Depending on the
configuration it may require some upgrade work.

Author: mlaponder

.github/workflows/CreateGWRelease.yml

@@ -25,8 +25,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda #v4.1.0
-        with:
-          version: 10
 
       - name: "Defining node version"
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0

.github/workflows/CreatePWTRelease.yml

@@ -25,8 +25,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda #v4.1.0
-        with:
-          version: 10
 
       - name: "Defining node version"
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0

.github/workflows/PublishNpm.yml

@@ -53,8 +53,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda #v4.1.0
-        with:
-          version: 10
 
       - name: Setup node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0

.github/workflows/TestPWTCommands.yml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        node: [18, 20]
+        node: [20]
         os: [windows-latest, ubuntu-latest]
     steps:
       - name: "Checking-out code"
@@ -34,13 +34,10 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda #v4.1.0
-        with:
-          version: 10
 
       - name: "Defining node version"
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
-          node-version: ${{ matrix.node == 18 && '18.15.0' || matrix.node }}
           cache: 'pnpm'
 
       - name: "Installing dependencies"

.github/workflows/UnitTests.yml

@@ -25,8 +25,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda #v4.1.0
-        with:
-          version: 10
 
       - name: "Defining node version"
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -41,5 +39,4 @@ jobs:
         run: pnpm -r test
 
       - name: "Linting packages"
-        working-directory: ./packages/generator-widget
-        run: pnpm -r lint
+        run: pnpm lint

.nvmrc

@@ -1 +1 @@
-18.15.0
+20.20.2

CONTRIBUTING.md

@@ -9,6 +9,8 @@ $ git clone https://github.com/mendix/widgets-tools.git
 $ cd widgets-tools
 ```
 
-2. Open the folder of the package you want to change and read the README.md for details on how to install and run.
+2. Setup `pnpm` using `npm run dev:prepare`.
 
-3. Go make it!
+3. Open the folder of the package you want to change and read the README.md for details on how to install and run.
+
+4. Go make it!

eslint.config.js

@@ -0,0 +1,38 @@
+import js from "@eslint/js";
+import globals from "globals";
+import { defineConfig, globalIgnores } from "eslint/config";
+import jest from "eslint-plugin-jest";
+import tseslint from "typescript-eslint";
+import prettierRecommended from "eslint-plugin-prettier/recommended";
+
+export default defineConfig(
+    globalIgnores([
+        "packages/generator-widget/generators/app/templates/**",
+        "packages/pluggable-widgets-tools/dist/**"
+    ]),
+    {
+        files: ["**/*.js", "**/*.mjs"],
+        ignores: ["packages/release-tools/utils/changelog-parser/changelog.js"],
+        plugins: { js },
+        extends: ["js/recommended"],
+        languageOptions: { globals: globals.node },
+        rules: {
+            "no-unused-vars": ["error", { argsIgnorePattern: "^_" }]
+        }
+    },
+    {
+        files: ["**/*.ts"],
+        plugins: { tseslint },
+        extends: ["tseslint/recommended"],
+        languageOptions: { globals: globals.node },
+        rules: {
+            "@typescript-eslint/no-unused-vars": ["error", { argsIgnorePattern: "^_" }]
+        }
+    },
+    {
+        files: ["**/__mocks__/**/*.js", "**/__tests__/**/*.js", "packages/pluggable-widgets-tools/test-config/**"],
+        plugins: { jest },
+        languageOptions: { globals: jest.environments.globals.globals }
+    },
+    { ...prettierRecommended, rules: { "prettier/prettier": process.env.CI ? "error" : "warn" } }
+);

package.json

@@ -1,19 +1,32 @@
 {
   "name": "widgets-tools",
   "engines": {
-    "node": ">=16"
+    "node": ">=20"
   },
-  "overrides": {
-    "cheerio": "1.0.0-rc.12",
-    "colors": "1.4.0",
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0",
-    "react-native": "~0.77.3"
+  "private": "true",
+  "type": "module",
+  "scripts": {
+    "dev:prepare": "corepack enable && corepack prepare",
+    "lint": "eslint"
   },
   "license": "Apache-2.0",
   "copyright": "© Mendix Technology BV 2022. All rights reserved.",
   "repository": {
     "type": "git",
     "url": "https://github.com/mendix/widgets-tools.git"
+  },
+  "packageManager": "pnpm@10.33.4+sha512.1c67b3b359b2d408119ba1ed289f34b8fc3c6873412bec6fd264fbdc82489e510fcbecb9ce9d22dae7f3b76269d8441046014bdca53b9979cd7a561ad631b800",
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@prettier/plugin-xml": "^3.4.2",
+    "@typescript-eslint/eslint-plugin": "^8.59.0",
+    "@typescript-eslint/parser": "^8.59.0",
+    "eslint": "^10.4.0",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-jest": "^29.15.2",
+    "eslint-plugin-prettier": "^5.5.5",
+    "globals": "^17.6.0",
+    "prettier": "^3.8.3",
+    "typescript-eslint": "^8.59.3"
   }
 }