Release 0.0.16 (#21)

* Update vulnerable dependencies
Fix critical valnurable dependecies

* Upgrade webpack from 4.x to 5.x

* Upgrade multiple dependencies to latest versions

* fix Explorer operation name input width

* Update dependencies and fix tests

Author: no1seman

.eslintrc.json

@@ -1,8 +1,7 @@
 {
     "parser": "babel-eslint",
     "extends": [
-      "prettier",
-      "standard"
+      "prettier"
     ],
     "plugins": [
       "flowtype",

.github/workflows/publish.yaml

@@ -24,7 +24,7 @@ jobs:
 
       - uses: actions/setup-node@v1
         with:
-          node-version: '17.0.1'
+          node-version: '17.1.0'
 
       - uses: tarantool/setup-tarantool@v1
         with:

.github/workflows/test_on_push.yaml

@@ -23,7 +23,7 @@ jobs:
       - name: Install npm
         uses: actions/setup-node@v1
         with:
-          node-version: '17.0.1'
+          node-version: '17.1.0'
       - name: Install sdk
         run: make sdk
       - name: Install rocks

CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.0.16
+
+- `update [email protected] to [email protected]`
+- `update [email protected] to [email protected]`
+- `update [email protected] to [email protected]`
+- `update [email protected] to [email protected]`
+- `update [email protected] to [email protected]`
+- `update [email protected] to [email protected]`
+- `update [email protected] to [email protected]`
+- `update @babel/*@7.10.*-7.11.* to @babel/*@7.16.*`
+- `update [email protected] to [email protected] and all related dependencies`
+- `replace [email protected] with @emotion/[email protected]`
+- `update [email protected] to [email protected]`
+- `update multiple dependencies to latest versions`
+
 ## 0.0.15
 
 - `update @tarantool.io/[email protected] to @tarantool.io/[email protected]`

Makefile

@@ -1,6 +1,6 @@
 SHELL := /bin/bash
 
-BUNDLE_VERSION=2.8.2-0-gfc96d10f5-r428
+BUNDLE_VERSION=2.8.2-0-gfc96d10f5-r429
 
 .PHONY: .rocks
 .rocks: graphqlide-scm-1.rockspec Makefile
@@ -10,7 +10,7 @@ BUNDLE_VERSION=2.8.2-0-gfc96d10f5-r428
 		tarantoolctl rocks install luatest 0.5.6
 		tarantoolctl rocks install luacov 0.13.0
 		tarantoolctl rocks install luacheck 0.26.0
-		tarantoolctl rocks install cartridge 2.7.2
+		tarantoolctl rocks install cartridge 2.7.3
 		tarantoolctl rocks make graphqlide-scm-1.rockspec
 
 .PHONY: all install

README.md

@@ -8,7 +8,7 @@ Based on:
 - [Tarantool Cartridge 2.6.0+](https://github.com/tarantool/cartridge) (optional, module can work without Tarantool Cartridge)
 - [Tarantool Frontend Core 7.12.0](https://github.com/tarantool/frontend-core)
 - [Tarantool Http 1.1.0](https://github.com/tarantool/http/tree/1.1.0)
-- [GraphiQL 1.4.6](https://github.com/graphql/graphiql)
+- [GraphiQL 1.5.1](https://github.com/graphql/graphiql)
 - [GraphiQL Explorer 0.6.3](https://github.com/OneGraph/graphiql-explorer)
 
 GraphQL IDE interface:

config/webpack.config.dev.js

@@ -4,7 +4,6 @@ const webpack = require('webpack');
 const HtmlWebpackPlugin = require('html-webpack-plugin');
 const CaseSensitivePathsPlugin = require('case-sensitive-paths-webpack-plugin');
 const InterpolateHtmlPlugin = require('react-dev-utils/InterpolateHtmlPlugin');
-const WatchMissingNodeModulesPlugin = require('react-dev-utils/WatchMissingNodeModulesPlugin');
 const eslintFormatter = require('react-dev-utils/eslintFormatter');
 const ModuleScopePlugin = require('react-dev-utils/ModuleScopePlugin');
 const getClientEnvironment = require('./env');
@@ -102,7 +101,14 @@ module.exports = {
       // please link the files into your node_modules/ and let module-resolution kick in.
       // Make sure your source files are compiled, as they will not be processed in any way.
       new ModuleScopePlugin(paths.appSrc, [paths.appPackageJson])
-    ]
+    ],
+    fallback: {
+          dgram: false,
+          fs: false,
+          net: false,
+          tls: false,
+          child_process: false
+        }
   },
   externals: {
     react: 'react',
@@ -118,7 +124,13 @@ module.exports = {
       // First, run the linter.
       // It's important to do this before Babel processes the JS.
       {
-        test: /\.(js|jsx|mjs)$/,
+        test: /\.m?js/,
+        resolve: {
+          fullySpecified: false
+        }
+      },
+      {
+        test: /\.(js|jsx|m?js)$/,
         enforce: 'pre',
         use: [
           {
@@ -287,6 +299,9 @@ module.exports = {
       // Make sure to add the new loader(s) before the "file" loader.
     ]
   },
+  optimization: {
+    moduleIds: 'named'
+  },
   plugins: [
     // Generates an `index.html` file with the <script> injected.
     new HtmlWebpackPlugin({
@@ -299,7 +314,7 @@ module.exports = {
     // In development, this will be an empty string.
     new InterpolateHtmlPlugin(HtmlWebpackPlugin, env.raw),
     // Add module names to factory functions so they appear in browser profiler.
-    new webpack.NamedModulesPlugin(),
+    //new webpack.NamedModulesPlugin(),
     // Makes some environment variables available to the JS code, for example:
     // if (process.env.NODE_ENV === 'development') { ... }. See `./env.js`.
     new webpack.DefinePlugin(env.stringified),
@@ -313,23 +328,16 @@ module.exports = {
     // to restart the development server for Webpack to discover it. This plugin
     // makes the discovery automatic so you don't have to restart.
     // See https://github.com/facebookincubator/create-react-app/issues/186
-    new WatchMissingNodeModulesPlugin(paths.appNodeModules),
+    // new WatchMissingNodeModulesPlugin(paths.appNodeModules),
     // Moment.js is an extremely popular library that bundles large locale files
     // by default due to how Webpack interprets its code. This is a practical
     // solution that requires the user to opt into importing specific locales.
     // https://github.com/jmblog/how-to-optimize-momentjs-with-webpack
     // You can remove this if you don't use Moment.js:
-    new webpack.IgnorePlugin(/^\.\/locale$/, /moment$/)
+    new webpack.IgnorePlugin({
+      resourceRegExp: /^\.\/locale$/,
+      contextRegExp: /moment$/}),
   ],
-  // Some libraries import Node modules but don't use them in the browser.
-  // Tell Webpack to provide empty mocks for them so importing them works.
-  node: {
-    dgram: 'empty',
-    fs: 'empty',
-    net: 'empty',
-    tls: 'empty',
-    child_process: 'empty'
-  },
   // Turn off performance hints during development because we don't do any
   // splitting or minification in interest of speed. These warnings become
   // cumbersome.

config/webpack.config.prod.js

@@ -1,7 +1,7 @@
 const autoprefixer = require('autoprefixer');
 const path = require('path');
 const webpack = require('webpack');
-const ManifestPlugin = require('webpack-manifest-plugin');
+const { WebpackManifestPlugin } = require('webpack-manifest-plugin');
 const eslintFormatter = require('react-dev-utils/eslintFormatter');
 const ModuleScopePlugin = require('react-dev-utils/ModuleScopePlugin');
 const BundleAnalyzerPlugin = require('webpack-bundle-analyzer').BundleAnalyzerPlugin;
@@ -99,7 +99,14 @@ module.exports = {
       // please link the files into your node_modules/ and let module-resolution kick in.
       // Make sure your source files are compiled, as they will not be processed in any way.
       new ModuleScopePlugin(paths.appSrc, [paths.appPackageJson])
-    ]
+    ],
+    fallback: {
+          dgram: false,
+          fs: false,
+          net: false,
+          tls: false,
+          child_process: false
+        }
   },
   externals: {
     react: 'react',
@@ -123,7 +130,13 @@ module.exports = {
           }
       },
       {
-        test: /\.(js|jsx|mjs)$/,
+        test: /\.m?js/,
+        resolve: {
+          fullySpecified: false
+        }
+      },
+      {
+        test: /\.(js|jsx|m?js)$/,
         enforce: 'pre',
         use: [
           {
@@ -329,7 +342,7 @@ module.exports = {
     // Generate a manifest file which contains a mapping of all asset filenames
     // to their corresponding output file so that tools can pick it up without
     // having to parse `index.html`.
-    new ManifestPlugin({
+    new WebpackManifestPlugin ({
       fileName: 'asset-manifest.json'
     }),
     // Generate a service worker script that will precache, and keep up to date,
@@ -339,23 +352,16 @@ module.exports = {
     // solution that requires the user to opt into importing specific locales.
     // https://github.com/jmblog/how-to-optimize-momentjs-with-webpack
     // You can remove this if you don't use Moment.js:
-    new webpack.IgnorePlugin(/^\.\/locale$/, /moment$/),
+    new webpack.IgnorePlugin({
+      resourceRegExp: /^\.\/locale$/,
+      contextRegExp: /moment$/}),
     new BundleAnalyzerPlugin({
       analyzerMode: 'static',
       reportFilename: 'bundle-analyzer-report.html',
       openAnalyzer: false
     }),
     new LuaBundlerPlugin({ namespace: moduleConfig.namespace }),
   ],
-  // Some libraries import Node modules but don't use them in the browser.
-  // Tell Webpack to provide empty mocks for them so importing them works.
-  node: {
-    dgram: 'empty',
-    fs: 'empty',
-    net: 'empty',
-    tls: 'empty',
-    child_process: 'empty'
-  },
   performance: {
     maxEntrypointSize: 4000000,
     maxAssetSize: 4000000

config/webpackDevServer.config.js

@@ -15,85 +15,24 @@ const host = process.env.HOST || '0.0.0.0';
 
 module.exports = function(proxy, allowedHost) {
   return {
-    // WebpackDevServer 2.4.3 introduced a security fix that prevents remote
-    // websites from potentially accessing local content through DNS rebinding:
-    // https://github.com/webpack/webpack-dev-server/issues/887
-    // https://medium.com/webpack/webpack-dev-server-middleware-security-issues-1489d950874a
-    // However, it made several existing use cases such as development in cloud
-    // environment or subdomains in development significantly more complicated:
-    // https://github.com/facebookincubator/create-react-app/issues/2271
-    // https://github.com/facebookincubator/create-react-app/issues/2233
-    // While we're investigating better solutions, for now we will take a
-    // compromise. Since our WDS configuration only serves files in the `public`
-    // folder we won't consider accessing them a vulnerability. However, if you
-    // use the `proxy` feature, it gets more dangerous because it can expose
-    // remote code execution vulnerabilities in backends like Django and Rails.
-    // So we will disable the host check normally, but enable it if you have
-    // specified the `proxy` setting. Finally, we let you override it if you
-    // really know what you're doing with a special environment variable.
-    disableHostCheck:
-      !proxy || process.env.DANGEROUSLY_DISABLE_HOST_CHECK === 'true',
     // Enable gzip compression of generated files.
     compress: true,
-    // Silence WebpackDevServer's own logs since they're generally not useful.
-    // It will still show compile warnings and errors with this setting.
-    clientLogLevel: 'none',
-    // By default WebpackDevServer serves physical files from current directory
-    // in addition to all the virtual build products that it serves from memory.
-    // This is confusing because those files won’t automatically be available in
-    // production build folder unless we copy them. However, copying the whole
-    // project directory is dangerous because we may expose sensitive files.
-    // Instead, we establish a convention that only files in `public` directory
-    // get served. Our build script will copy `public` into the `build` folder.
-    // In `index.html`, you can get URL of `public` folder with %PUBLIC_URL%:
-    // <link rel="shortcut icon" href="%PUBLIC_URL%/favicon.ico">
-    // In JavaScript code, you can access it with `process.env.PUBLIC_URL`.
-    // Note that we only recommend to use `public` folder as an escape hatch
-    // for files like `favicon.ico`, `manifest.json`, and libraries that are
-    // for some reason broken when imported through Webpack. If you just want to
-    // use an image, put it in `src` and `import` it from JavaScript instead.
-    contentBase: paths.appPublic,
-    // By default files from `contentBase` will not trigger a page reload.
-    watchContentBase: true,
     // Enable hot reloading server. It will provide /sockjs-node/ endpoint
     // for the WebpackDevServer client so it can learn when the files were
     // updated. The WebpackDevServer client is included as an entry point
     // in the Webpack development configuration. Note that only changes
     // to CSS are currently hot reloaded. JS changes will refresh the browser.
     hot: true,
-    // It is important to tell WebpackDevServer to use the same "root" path
-    // as we specified in the config. In development, we always serve from /.
-    publicPath: config.output.publicPath,
-    // WebpackDevServer is noisy by default so we emit custom message instead
-    // by listening to the compiler events with `compiler.plugin` calls above.
-    quiet: true,
-    // Reportedly, this avoids CPU overload on some systems.
-    // https://github.com/facebookincubator/create-react-app/issues/293
-    // src/node_modules is not ignored to support absolute imports
-    // https://github.com/facebookincubator/create-react-app/issues/1065
-    watchOptions: {
-      ignored: ignoredFiles(paths.appSrc)
-    },
     // Enable HTTPS if the HTTPS environment variable is set to 'true'
     https: protocol === 'https',
     host: host,
-    overlay: false,
+    // overlay: false,
     historyApiFallback: {
       // Paths with dots should still use the history fallback.
       // See https://github.com/facebookincubator/create-react-app/issues/387.
       disableDotRule: true
     },
-    public: allowedHost,
+    // public: allowedHost,
     proxy,
-    before(app) {
-      // This lets us open files from the runtime error overlay.
-      app.use(errorOverlayMiddleware());
-      // This service worker file is effectively a 'no-op' that will reset any
-      // previous service worker registered for the same host:port combination.
-      // We do this in development to avoid hitting the production cache if
-      // it used the same host and port.
-      // https://github.com/facebookincubator/create-react-app/issues/2272#issuecomment-302832432
-      app.use(noopServiceWorkerMiddleware('/'));
-    }
   };
 };

deps.sh

@@ -5,8 +5,8 @@ set -e
 
 tarantoolctl rocks install http 1.1.0
 tarantoolctl rocks install checks
-tarantoolctl rocks install frontend-core 7.11.0
+tarantoolctl rocks install frontend-core 7.12.0
 tarantoolctl rocks install luatest 0.5.6
 tarantoolctl rocks install luacov 0.13.0
 tarantoolctl rocks install luacheck 0.26.0
-tarantoolctl rocks install cartridge 2.7.2
+tarantoolctl rocks install cartridge 2.7.3

graphqlide.lua

@@ -115,10 +115,13 @@ end
 
 local function get_cartridge_api_endpoint()
     local path = 'admin/api'
-    local webui_prefix = argparse.parse().webui_prefix
-    if webui_prefix ~= nil then
-        webui_prefix = remove_side_slashes(webui_prefix)
-        path = webui_prefix..'/'..path
+    local args = argparse.parse()
+    if args ~= nil then
+        local webui_prefix = args.webui_prefix
+        if webui_prefix ~= nil then
+            webui_prefix = remove_side_slashes(webui_prefix)
+            path = webui_prefix..'/'..path
+        end
     end
     return path
 end