build: update ui: all non-major dependencies

This MR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@apidevtools/swagger-parser (source)	10.0.3 -> 10.1.0					dependencies	minor
@​commonground/design-system	21.1.13 -> 21.1.14					dependencies	patch
@types/jest (source)	29.0.3 -> 29.1.1					dependencies	minor
node	18.9.0-alpine -> 18.10.0-alpine					stage	minor
react-router-dom	6.4.0 -> 6.4.1					dependencies	patch
styled-components (source)	5.3.5 -> 5.3.6					dependencies	patch
typescript (source)	4.8.3 -> 4.8.4					dependencies	patch
usehooks-ts (source)	2.7.0 -> 2.7.2					dependencies	patch

---

Release Notes

APIDevTools/swagger-parser

v10.1.0

Compare Source

nodejs/node

v18.10.0

Compare Source

Notable changes

• doc:
  • (SEMVER-MINOR) deprecate modp1, modp2, and modp5 groups (Tobias Nießen) #​44588
  • add legendecas to TSC list (Michael Dawson) #​44662
  • move policy docs to the permissions scope (Rafael Gonzaga) #​44222
• gyp:
  • libnode for ios app embedding (chexiongsheng) #​44210
• http:
  • (SEMVER-MINOR) throw error on content-length mismatch (sidwebworks) #​44588
• stream:
  • (SEMVER-MINOR) add ReadableByteStream.tee() (Daeyeon Jeong) #​44505

Commits

• [f497368679] - benchmark: fix startup benchmark (Evan Lucas) #​44727
• [0c9a94684e] - benchmark: add stream destroy benchmark (SindreXie) #​44533
• [9c5c1459a8] - bootstrap: clean up inspector console methods during serialization (Joyee Cheung) #​44279
• [19f67dba8a] - bootstrap: remove unused global parameter in per-context scripts (Joyee Cheung) #​44472
• [9da11426f6] - build: remove redundant entry in crypto (Jiawen Geng) #​44604
• [70898b4e67] - build: rewritten the Android build system (BuShe Pie) #​44207
• [a733f7faac] - Revert "build: go faster, drop -fno-omit-frame-pointer" (Ben Noordhuis) #​44566
• [1315a83333] - build: fix bad upstream merge (Stephen Gallagher) #​44642
• [993bd9b134] - crypto: restrict PBKDF2 args to signed int (Tobias Nießen) #​44575
• [ca5fb67b4e] - deps: update to ngtcp2 0.8.1 and nghttp3 0.7.0 (Tobias Nießen) #​44622
• [8da1d6ebc4] - deps: update corepack to 0.14.1 (Node.js GitHub Bot) #​44704
• [d36c4a3088] - deps: update ngtcp2 update instructions (Tobias Nießen) #​44619
• [7129106aa0] - deps: upgrade npm to 8.19.2 (npm team) #​44632
• [3cc8f4bb56] - deps: update to uvwasi 0.0.13 (Colin Ihrig) #​44524
• [4686579d4b] - dns: remove unnecessary parameter from validateOneOf (Yagiz Nizipli) #​44635
• [729dd95f1f] - dns: refactor default resolver (Joyee Cheung) #​44541
• [6dc038262a] - doc: mention git node backport (RafaelGSS) #​44764
• [fd971f5176] - doc: ensure to revert node_version changes (Rafael Gonzaga) #​44760
• [f274b08f8e] - doc: fix description for napi_get_cb_info() in n-api.md (Daeyeon Jeong) #​44761
• [2502f2353d] - doc: update the deprecation for exit code to clarify its scope (Daeyeon Jeong) #​44714
• [064543d0ae] - doc: update guidance for adding new modules (Michael Dawson) #​44576
• [33a2f17534] - doc: add registry number for Electron 22 (Keeley Hammond) #​44748
• [10a0d75c26] - doc: include code examples for webstreams consumers (Lucas Santos) #​44387
• [4dbe4a010c] - doc: mention where to push security commits (RafaelGSS) #​44691
• [82cb8151ad] - doc: remove extra space on threadpool usage (Connor Burton) #​44734
• [6ef9af2748] - doc: make legacy banner slightly less bright (Rich Trott) #​44665
• [b209c83e66] - doc: improve building doc for Windows Powershell (Brian Muenzenmeyer) #​44625
• [05b17e9250] - doc: maintain only one list of MODP groups (Tobias Nießen) #​44644
• [ec1cbdb69b] - doc: add legendecas to TSC list (Michael Dawson) #​44662
• [9341fb4446] - doc: remove comma in README.md (Taha-Chaudhry) #​44599
• [3dabb44dda] - doc: use serial comma in report docs (Daeyeon Jeong) #​44608
• [226d90a95a] - doc: use serial comma in stream docs (Daeyeon Jeong) #​44609
• [3f710fa636] - doc: remove empty line in YAML block (Claudio Wunder) #​44617
• [4ad1b0abc3] - (SEMVER-MINOR) doc: deprecate modp1, modp2, and modp5 groups (Tobias Nießen) #​44588
• [2d92610525] - doc: remove old OpenSSL ENGINE constants (Tobias Nießen) #​44589
• [03705639c4] - doc: fix heading levels for test runner hooks (Fabian Meyer) #​44603
• [6c557346a7] - doc: fix errors in http.md (Luigi Pinca) #​44587
• [48d944b71c] - doc: fix vm.Script createCachedData example (Chengzhong Wu) #​44487
• [2813323120] - doc: mention how to get commit release (Rafael Gonzaga) #​44572
• [ea7b44d474] - doc: fix link in process.md (Antoine du Hamel) #​44594
• [39b65d2fb7] - doc: do not use weak MODP group in example (Tobias Nießen) #​44585
• [f5549afd90] - doc: remove ebpf from supported tooling list (Rafael Gonzaga) #​44549
• [a3360b1f4f] - doc: emphasize that createCipher is never secure (Tobias Nießen) #​44538
• [4e6f7862ba] - doc: document attribute Script.cachedDataRejected (Chengzhong Wu) #​44451
• [01e584ecab] - doc: move policy docs to the permissions scope (Rafael Gonzaga) #​44222
• [57dac53c22] - doc,crypto: cleanup removed pbkdf2 behaviours (Filip Skokan) #​44733
• [c209bd6fb9] - doc,inspector: document changes of inspector.close (Chengzhong Wu) #​44628
• [9b3b7d6978] - esm,loader: tidy ESMLoader internals (Jacob Smith) #​44701
• [daf63d2fa3] - fs: fix typo in mkdir example (SergeyTsukanov) #​44791
• [85ab2f857f] - fs: remove unused option in fs.fstatSync() (Livia Medeiros) #​44613
• [a6091f5496] - gyp: libnode for ios app embedding (chexiongsheng) #​44210
• [f158656e4c] - (SEMVER-MINOR) http: throw error on content-length mismatch (sidwebworks) #​44378
• [1b160517f5] - inspector: expose inspector.close on workers (Chengzhong Wu) #​44489
• [a2eb55a2c9] - lib: don't match sourceMappingURL in strings (Alan Agius) #​44658
• [2baf532518] - lib: fix reference leak (falsandtru) #​44499
• [d8d34ae6bc] - lib: reset RegExp statics before running user code (Antoine du Hamel) #​44247
• [eb3635184b] - lib,test: fix bug in InternalSocketAddress (Tobias Nießen) #​44618
• [74dc4d198f] - meta: update AUTHORS (Node.js GitHub Bot) #​44777
• [97d2ed7296] - meta: add mailmap entry for dnlup (Rich Trott) #​44716
• [35fbd2cc14] - meta: update AUTHORS (Node.js GitHub Bot) #​44705
• [c5c1bc40a2] - meta: move dnlup to emeriti (dnlup) #​44667
• [c62dfe0427] - meta: update test_runner in label-pr-config (Shrujal Shah) #​44615
• [fe56efd0bc] - meta: update AUTHORS (Node.js GitHub Bot) #​44591
• [4436ffb536] - module: open stat/readPackage to mutations (Maël Nison) #​44537
• [f8ec946c82] - module: exports & imports map invalid slash deprecation (Guy Bedford) #​44477
• [64cb43a2b6] - node-api: add deprecation code of uncaught exception (Chengzhong Wu) #​44624
• [ce1704c2c7] - src: avoid using v8 on Isolate termination (Santiago Gimeno) #​44669
• [3036b85d71] - src: remove <unistd.h> from node_os.cc (Tobias Nießen) #​44668
• [29f57b7899] - src: avoid copy when creating Blob (Tobias Nießen) #​44616
• [75cfb13ea6] - src: make ReqWrap weak (Rafael Gonzaga) #​44074
• [c12abb5ece] - src: make NearHeapLimitCallback() more robust (Joyee Cheung) #​44581
• [81ea507e8e] - src: dump isolate stats when process exits (daomingq) #​44534
• [687844822f] - src: consolidate environment cleanup queue (Chengzhong Wu) #​44379
• [3d42aaaac0] - stream: handle a pending pull request from a released reader (Daeyeon Jeong) #​44702
• [73ad9db6c5] - stream: refactor use es2020 statement (SindreXie) #​44533
• [0af6e420b3] - stream: remove abortReason from WritableStreamDefaultController (Daeyeon Jeong) #​44540
• [2f2f8d5821] - (SEMVER-MINOR) stream: add ReadableByteStream.tee() (Daeyeon Jeong) #​44505
• [667e8bf3fb] - stream: fix writableStream.abort() (Daeyeon Jeong) #​44327
• [3112d5dae0] - test: verify napi_remove_wrap with napi_delete_reference (Chengzhong Wu) #​44754
• [b512436841] - test: change promises to async/await (Madhulika Sharma) #​44683
• [858631f720] - test: use async/await in test-debugger-invalid-args (Nupur Chauhan) #​44678
• [6c9ded810c] - test: update test-debugger-low-level to use await/async (Meghana Ramesh) #​44688
• [945aa74e57] - test: check that sysconf returns a positive value (Tobias Nießen) #​44666
• [79f0f48a6f] - test: change promise to async/await in debugger-watcher (“Pooja) #​44687
• [a56cb65bd6] - test: fix addon tests compilation with OpenSSL 1.1.1 (Adam Majer) #​44725
• [8a68a80a06] - test: fix test-performance-measure (smitley) #​44637
• [55de0136b3] - test: improve lib/readline.js coverage (MURAKAMI Masahiko) #​42686
• [a3095d217f] - test: fix test-repl not validating leaked globals properly (Antoine du Hamel) #​44640
• [7db2974692] - test: ignore stale process cleanup failures on Windows (Joyee Cheung) #​44480
• [6c35f338c3] - test: use python3 instead of python (Luigi Pinca) #​44545
• [20e04c6d44] - test: fix DebugSymbolsTest.ReqWrapList on PPC64LE (Daniel Bevenius) #​44341
• [eb25fe73b0] - test: add more cases for parse-encoding (Tony Gorez) #​44427
• [5ab3bc9419] - test_runner: include stack of uncaught exceptions (Moshe Atlow) #​44614
• [752e1472e1] - tls: fix out-of-bounds read in ClientHelloParser (Tobias Nießen) #​44580
• [0cddb0af99] - tools: add update-llhttp.sh (Paolo Insogna) #​44652
• [ef0dc47df9] - tools: fix typo in update-nghttp2.sh (Luigi Pinca) #​44664
• [0df181a5a1] - tools: add timezone update workflow (Lenvin Gonsalves) #​43988
• [dd4348900d] - tools: update eslint to 8.23.1 (Node.js GitHub Bot) #​44639
• [b9cfb71e12] - tools: update lint-md-dependencies to @​rollup/plugin-node-resolve@​14.1.0 (Node.js GitHub Bot) #​44638
• [5ae142d7ad] - tools: update gyp-next to v0.13.0 (Jiawen Geng) #​44605
• [5dd86c3faf] - tools: update lint-md-dependencies to @​rollup/plugin-node-resolve@​14.0.1 (Node.js GitHub Bot) #​44590
• [caad4748cf] - tools: increase timeout of running WPT (Joyee Cheung) #​44574
• [5db9779f14] - tools: fix shebang to use python3 by default (Himself65) #​44531
• [9aa6a560e9] - v8: add setHeapSnapshotNearHeapLimit (theanarkh) #​44420
• [360b74e94f] - win: fix fs.realpath.native for long paths (StefanStojanovic) #​44536

v18.9.1

Compare Source

This is a security release.

Notable changes

The following CVEs are fixed in this release:

• CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
  • Insufficient fix for macOS devices on v18.5.0
• CVE-2022-32222: Node 18 reads openssl.cnf from /home/iojs/build/ upon startup on MacOS (Medium)
• CVE-2022-32213: HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)
  • Insufficient fix on v18.5.0
• CVE-2022-32215: HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)
  • Insufficient fix on v18.5.0
• CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields (Medium)
• CVE-2022-35255: Weak randomness in WebCrypto keygen

More detailed information on each of the vulnerabilities can be found in September 22nd 2022 Security Releases blog post.

llhttp updated to 6.0.10

llhttp is updated to 6.0.10 which includes fixes for the following vulnerabilities.

• HTTP Request Smuggling - CVE-2022-32213 bypass via obs-fold mechanic (Medium)(CVE-2022-32213 ): The llhttp parser in the http module does not correctly parse and validate Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).
• HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215): The llhttp parser in the http module does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).
• HTTP Request Smuggling - Incorrect Parsing of Header Fields (Medium)(CVE-35256): The llhttp parser in the http does not correctly handle header fields that are not terminated with CLRF. This can lead to HTTP Request Smuggling (HRS).

Commits

• [0c2a5723be] - crypto: fix weak randomness in WebCrypto keygen (Ben Noordhuis) nodejs-private/node-private#
• [ffb6f4d51d] - deps: MacOS - fix location of OpenSSL config file (Michael Dawson) nodejs-private/node-private#​345
• [01bffcdd93] - http: disable chunked encoding when OBS fold is used (Paolo Insogna) nodejs-private/node-private#​341
• [2c379d341d] - src: fix IPv4 non routable validation (RafaelGSS) nodejs-private/node-private#​337

remix-run/react-router

v6.4.1

Compare Source

Patch Changes

• Updated dependencies:
  • react-router@6.4.1
  • @remix-run/router@1.0.1

styled-components/styled-components

v5.3.6

Compare Source

What's Changed

• Fix statement on Ukraine by @​Fer0x in https://github.com/styled-components/styled-components/pull/3724
• Fix/nonce in ssr by @​samimakicc in https://github.com/styled-components/styled-components/pull/3755

New Contributors

• @​samimakicc made their first contribution in https://github.com/styled-components/styled-components/pull/3755

Full Changelog: https://github.com/styled-components/styled-components/compare/v5.3.5...v5.3.6

Microsoft/TypeScript

v4.8.4

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 4.8.0 (Beta).
• fixed issues query for Typescript 4.8.1 (RC).
• fixed issues query for Typescript 4.8.2 (Stable).
• fixed issues query for Typescript 4.8.3 (Stable).
• fixed issues query for Typescript 4.8.4 (Stable).

Downloads are available on:

• npm
• Visual Studio 2022/2019 (Select new version in project options)
• NuGet package

juliencrn/usehooks-ts

v2.7.2

Compare Source

Added

• Added useDocumentTitle (#​218 by @​curtvict)

Updated

• Removed import React line (not needed since react 17)

Fixes

• Fixed misspelling (thanks to @​alexisoney and @​JoshuaCS94)

v2.7.1

Compare Source

Added

• Support React 18 (#​214 by @​sharvit)

Updated

• Remove hooks index files
• Remove source-map

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this MR, click this checkbox.

---

This MR has been generated by Renovate Bot.