Task 14447552: Fix Component Governance vulnerabilities (#1839)

microsoft · May 20, 2022 · 1622d0a · 1622d0a
1 parent fd33bde
commit 1622d0a
Show file tree

Hide file tree

Showing 29 changed files with 954 additions and 857 deletions.
diff --git a/AISKU/package.json b/AISKU/package.json
@@ -41,7 +41,7 @@
         "sinon": "^7.3.1",
         "@microsoft/api-extractor": "^7.18.1",
         "finalhandler": "^1.1.1",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "grunt-contrib-qunit": "^5.0.1",
         "@nevware21/grunt-ts-plugin": "^0.4.3",

diff --git a/AISKU/rollup.config.js b/AISKU/rollup.config.js
@@ -45,6 +45,12 @@ const browserRollupConfigFactory = (isProduction, libVersion = '2', format = 'um
       freeze: false,
       sourcemap: true
     },
+    treeshake: {
+      propertyReadSideEffects: false,
+      moduleSideEffects: false,
+      tryCatchDeoptimization: false,
+      correctVarValueBeforeDeclaration: false
+    },
     plugins: [
       dynamicRemove(),
       replace({
@@ -94,7 +100,13 @@ const nodeUmdRollupConfigFactory = (isProduction) => {
       name: "Microsoft.ApplicationInsights",
       extend: true,
       freeze: false,
-      sourcemap: true,
+      sourcemap: true    
+    },
+    treeshake: {
+      propertyReadSideEffects: false,
+      moduleSideEffects: false,
+      tryCatchDeoptimization: false,
+      correctVarValueBeforeDeclaration: false
     },
     plugins: [
       dynamicRemove(),

diff --git a/AISKULight/package.json b/AISKULight/package.json
@@ -28,7 +28,7 @@
         "@microsoft/applicationinsights-rollup-plugin-uglify3-js": "1.0.0",
         "@microsoft/applicationinsights-rollup-es3": "1.1.3",
         "@microsoft/api-extractor": "^7.18.1",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "grunt-contrib-qunit": "^5.0.1",
         "@nevware21/grunt-ts-plugin": "^0.4.3",

diff --git a/channels/applicationinsights-channel-js/package.json b/channels/applicationinsights-channel-js/package.json
@@ -26,7 +26,7 @@
         "@microsoft/applicationinsights-rollup-es3": "1.1.3",
         "@microsoft/api-extractor": "^7.18.1",
         "@types/sinon": "4.3.3",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "@nevware21/grunt-ts-plugin": "^0.4.3",
         "@nevware21/grunt-eslint-ts": "^0.2.2",

diff --git a/common/Tests/Framework/package.json b/common/Tests/Framework/package.json
@@ -31,7 +31,7 @@
     "devDependencies": {
         "@types/qunit": "^2.5.3",
         "@types/sinon": "4.3.3",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-contrib-qunit": "^5.0.1",
         "@nevware21/grunt-ts-plugin": "^0.4.3",
         "@rollup/plugin-commonjs": "^18.0.0",

diff --git a/common/config/rush/npm-shrinkwrap.json b/common/config/rush/npm-shrinkwrap.json
diff --git a/common/scripts/install-run-rush.js b/common/scripts/install-run-rush.js
diff --git a/common/scripts/install-run.js b/common/scripts/install-run.js
diff --git a/extensions/applicationinsights-analytics-js/package.json b/extensions/applicationinsights-analytics-js/package.json
@@ -39,7 +39,7 @@
         "@rollup/plugin-replace": "^2.3.3",
         "rollup-plugin-cleanup": "^3.2.1",
         "rollup": "^2.32.0",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "grunt-contrib-qunit": "^5.0.1",
         "@nevware21/grunt-ts-plugin": "^0.4.3",

diff --git a/extensions/applicationinsights-clickanalytics-js/package.json b/extensions/applicationinsights-clickanalytics-js/package.json
@@ -32,7 +32,7 @@
         "@rollup/plugin-replace": "^2.3.3",
         "rollup-plugin-cleanup": "^3.2.1",
         "rollup": "^2.32.0",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "grunt-contrib-qunit": "^5.0.1",
         "@nevware21/grunt-ts-plugin": "^0.4.3",

diff --git a/extensions/applicationinsights-debugplugin-js/package.json b/extensions/applicationinsights-debugplugin-js/package.json
@@ -28,7 +28,7 @@
         "@microsoft/api-extractor": "^7.18.1",
         "typescript": "^4.3.4",
         "tslib": "^2.0.0",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "grunt-contrib-qunit": "^5.0.1",
         "@nevware21/grunt-ts-plugin": "^0.4.3",

diff --git a/extensions/applicationinsights-dependencies-js/package.json b/extensions/applicationinsights-dependencies-js/package.json
@@ -29,7 +29,7 @@
         "@microsoft/api-extractor": "^7.18.1",
         "typescript": "^4.3.4",
         "tslib": "^2.0.0",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "grunt-contrib-qunit": "^5.0.1",
         "@nevware21/grunt-ts-plugin": "^0.4.3",

diff --git a/extensions/applicationinsights-perfmarkmeasure-js/package.json b/extensions/applicationinsights-perfmarkmeasure-js/package.json
@@ -29,7 +29,7 @@
         "@microsoft/api-extractor": "^7.18.1",
         "typescript": "^4.3.4",
         "tslib": "^2.0.0",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "@nevware21/grunt-ts-plugin": "^0.4.3",
         "@nevware21/grunt-eslint-ts": "^0.2.2",

diff --git a/extensions/applicationinsights-properties-js/package.json b/extensions/applicationinsights-properties-js/package.json
@@ -29,7 +29,7 @@
         "@microsoft/api-extractor": "^7.18.1",
         "typescript": "^4.3.4",
         "tslib": "^2.0.0",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "grunt-contrib-qunit": "^5.0.1",
         "@nevware21/grunt-ts-plugin": "^0.4.3",

diff --git a/extensions/applicationinsights-react-js/package.json b/extensions/applicationinsights-react-js/package.json
@@ -37,7 +37,7 @@
         "@types/react": "^16.9.11",
         "@types/react-dom": "^16.9.4",
         "csstype": "~2.6.7",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "jest": "^27.3.1",
         "react": "^17.0.2",

diff --git a/extensions/applicationinsights-react-native/package.json b/extensions/applicationinsights-react-native/package.json
@@ -23,7 +23,7 @@
         "@microsoft/ai-test-framework": "0.0.1",
         "@microsoft/applicationinsights-rollup-es3": "1.1.3",
         "@microsoft/api-extractor": "^7.18.1",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "grunt-contrib-qunit": "^5.0.1",
         "grunt-contrib-uglify": "^5.0.1",

diff --git a/package.json b/package.json
@@ -36,7 +36,7 @@
     },
     "homepage": "https://github.com/microsoft/ApplicationInsights-JS#readme",
     "devDependencies": {
-        "@microsoft/rush": "^5.63.0",
+        "@microsoft/rush": "^5.70.0",
         "@nevware21/grunt-eslint-ts": "^0.2.2",
         "@nevware21/grunt-ts-plugin": "^0.4.3",
         "@typescript-eslint/eslint-plugin": "^4.28.0",
@@ -50,7 +50,7 @@
         "eslint-plugin-node": "^11.1.0",
         "eslint-plugin-promise": "^5.1.0",
         "eslint-plugin-security": "^1.4.0",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "grunt-contrib-connect": "^3.0.0",
         "grunt-contrib-qunit": "^5.0.1",

diff --git a/rush.json b/rush.json
@@ -1,8 +1,8 @@
 {
   "$schema": "https://developer.microsoft.com/json-schemas/rush/v5/rush.schema.json",
 
-  "npmVersion": "8.5.5",
-  "rushVersion": "5.63.0",
+  "npmVersion": "8.10.0",
+  "rushVersion": "5.70.0",
   "projectFolderMaxDepth": 4,
   "projects": [
     {

diff --git a/shared/AppInsightsCommon/package.json b/shared/AppInsightsCommon/package.json
@@ -27,7 +27,7 @@
         "@microsoft/applicationinsights-rollup-plugin-uglify3-js": "1.0.0",
         "@microsoft/applicationinsights-rollup-es3": "1.1.3",
         "@microsoft/api-extractor": "^7.18.1",
-        "grunt": "^1.4.1",
+        "grunt": "^1.5.3",
         "grunt-cli": "^1.4.3",
         "grunt-contrib-qunit": "^5.0.1",
         "@nevware21/grunt-ts-plugin": "^0.4.3",