chore: upgrade luxon

Mitigation for CVE-2023-22467 (see moment/moment#6015 (comment))
votingworks · Mar 20, 2023 · a368f66 · a368f66
1 parent 142a108
commit a368f66
Show file tree

Hide file tree

Showing 9 changed files with 26 additions and 39 deletions.
diff --git a/apps/central-scan/backend/package.json b/apps/central-scan/backend/package.json
@@ -65,7 +65,7 @@
     "jest-diff": "^26.6.2",
     "js-sha256": "^0.9.0",
     "jszip": "^3.9.1",
-    "luxon": "^1.27.0",
+    "luxon": "^3.0.0",
     "memory-streams": "^0.1.3",
     "multer": "^1.4.2",
     "ora": "^5.2.0",

diff --git a/apps/mark/frontend/package.json b/apps/mark/frontend/package.json
@@ -93,7 +93,7 @@
     "history": "^4.10.1",
     "http-proxy-middleware": "1.0.6",
     "lodash.camelcase": "^4.3.0",
-    "luxon": "^1.26.0",
+    "luxon": "^3.0.0",
     "mini-css-extract-plugin": "0.11.3",
     "mockdate": "^3.0.2",
     "normalize.css": "^8.0.1",

diff --git a/apps/scan/backend/package.json b/apps/scan/backend/package.json
@@ -63,7 +63,7 @@
     "got": "^11.8.2",
     "js-sha256": "^0.9.0",
     "jszip": "^3.9.1",
-    "luxon": "^1.27.0",
+    "luxon": "^3.0.0",
     "memory-streams": "^0.1.3",
     "rxjs": "^7.5.5",
     "tmp": "^0.2.1",

diff --git a/libs/ballot-interpreter-nh/package.json b/libs/ballot-interpreter-nh/package.json
@@ -33,7 +33,7 @@
     "he": "^1.2.0",
     "js-sha256": "^0.9.0",
     "jsdom": "^20.0.1",
-    "luxon": "^2.3.0",
+    "luxon": "^3.0.0",
     "tmp": "^0.2.1",
     "zod": "3.14.4"
   },

diff --git a/libs/test-utils/package.json b/libs/test-utils/package.json
@@ -43,7 +43,7 @@
     "fast-check": "^2.18.0",
     "jest-diff": "^27.3.1",
     "js-sha256": "^0.9.0",
-    "luxon": "1.26.0",
+    "luxon": "^3.0.0",
     "zip-stream": "^4.1.0"
   },
   "devDependencies": {

diff --git a/libs/types/package.json b/libs/types/package.json
@@ -40,7 +40,7 @@
     "@antongolub/iso8601": "^1.2.1",
     "@votingworks/basics": "workspace:*",
     "js-sha256": "^0.9.0",
-    "luxon": "^2.4.0",
+    "luxon": "^3.0.0",
     "util": "^0.12.4",
     "zod": "3.14.4"
   },

diff --git a/libs/ui/package.json b/libs/ui/package.json
@@ -54,7 +54,7 @@
     "debug": "^4.3.2",
     "deep-eql": "^4.0.0",
     "dompurify": "^2.0.12",
-    "luxon": "1.26.0",
+    "luxon": "^3.0.0",
     "normalize.css": "^8.0.1",
     "pluralize": "^8.0.0",
     "polished": "^4.2.2",

diff --git a/libs/utils/package.json b/libs/utils/package.json
@@ -44,7 +44,7 @@
     "fetch-mock": "^9.11.0",
     "jest-fetch-mock": "^3.0.3",
     "jszip": "^3.9.1",
-    "luxon": "^1.27.0",
+    "luxon": "^3.0.0",
     "moment": "^2.29.1",
     "randombytes": "^2.1.0",
     "readline": "^1.3.0",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml