feat(core): Update some packages to address CVE-2022-29622 (no-change…

…log) (#8877)

package.json

@@ -45,7 +45,7 @@
     "@n8n_io/eslint-config": "workspace:*",
     "@ngneat/falso": "^6.4.0",
     "@types/jest": "^29.5.3",
-    "@types/supertest": "^2.0.12",
+    "@types/supertest": "^6.0.2",
     "@vitest/coverage-v8": "^1.2.1",
     "cross-env": "^7.0.3",
     "cypress": "^13.6.2",
@@ -62,7 +62,7 @@
     "rimraf": "^5.0.1",
     "run-script-os": "^1.0.7",
     "start-server-and-test": "^2.0.3",
-    "supertest": "^6.3.3",
+    "supertest": "^6.3.4",
     "ts-jest": "^29.1.1",
     "tsc-alias": "^1.8.7",
     "tsc-watch": "^6.0.4",
@@ -81,6 +81,7 @@
       "@types/node": "^18.16.16",
       "axios": "1.6.7",
       "chokidar": "3.5.2",
+      "formidable": "3.5.1",
       "ip": "2.0.1",
       "jsonwebtoken": "9.0.0",
       "prettier": "^3.1.0",

packages/@n8n/nodes-langchain/package.json

@@ -120,7 +120,7 @@
     "@types/basic-auth": "^1.1.3",
     "@types/express": "^4.17.6",
     "@types/html-to-text": "^9.0.1",
-    "@types/json-schema": "^7.0.12",
+    "@types/json-schema": "^7.0.15",
     "@types/temp": "^0.9.1",
     "eslint-plugin-n8n-nodes-base": "^1.16.0",
     "gulp": "^4.0.2",
@@ -152,7 +152,7 @@
     "epub2": "3.0.1",
     "form-data": "4.0.0",
     "html-to-text": "9.0.5",
-    "json-schema-to-zod": "1.2.0",
+    "json-schema-to-zod": "2.0.14",
     "langchain": "0.1.25",
     "lodash": "4.17.21",
     "mammoth": "1.6.0",
@@ -167,6 +167,6 @@
     "sqlite3": "5.1.7",
     "temp": "0.9.4",
     "zod": "3.22.4",
-    "zod-to-json-schema": "3.22.0"
+    "zod-to-json-schema": "3.22.4"
   }
 }

packages/cli/package.json

@@ -68,15 +68,15 @@
     "@types/convict": "^6.1.1",
     "@types/cookie-parser": "^1.4.2",
     "@types/express": "^4.17.21",
-    "@types/formidable": "^3.4.0",
+    "@types/formidable": "^3.4.5",
     "@types/json-diff": "^1.0.0",
     "@types/jsonwebtoken": "^9.0.1",
     "@types/lodash": "^4.14.195",
     "@types/psl": "^1.1.0",
     "@types/replacestream": "^4.0.1",
     "@types/shelljs": "^0.8.11",
     "@types/sshpk": "^1.17.1",
-    "@types/superagent": "4.1.13",
+    "@types/superagent": "^8.1.4",
     "@types/swagger-ui-express": "^4.1.6",
     "@types/syslog-client": "^1.1.2",
     "@types/uuid": "^8.3.2",
@@ -124,7 +124,7 @@
     "express-rate-limit": "7.2.0",
     "fast-glob": "3.2.12",
     "flatted": "3.2.7",
-    "formidable": "3.5.0",
+    "formidable": "3.5.1",
     "google-timezones-json": "1.1.0",
     "handlebars": "4.7.7",
     "infisical-node": "1.3.0",

packages/cli/test/integration/ldap/ldap.api.test.ts

@@ -497,7 +497,7 @@ describe('POST /login', () => {
 
 		expect(response.statusCode).toBe(200);
 		expect(response.headers['set-cookie']).toBeDefined();
-		expect(response.headers['set-cookie'][0] as string).toContain('n8n-auth=');
+		expect(response.headers['set-cookie'][0]).toContain('n8n-auth=');
 
 		// Make sure the changes in the "LDAP server" were persisted in the database
 		const localLdapIdentities = await getLdapIdentities();