Skip to content

Conversation

alegauss
Copy link
Member

No description provided.

alegauss and others added 30 commits September 7, 2024 11:24
Rename local variables to match camelCase. Remove () in (filter) -> ...
Bumps the react group in /turing-react with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.12` | `29.5.13` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.5.4` | `22.5.5` |
| [eslint](https://github.com/eslint/eslint) | `5.16.0` | `9.10.0` |
| [react-scripts](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts) | `3.0.1` | `5.0.1` |
| [styled-components](https://github.com/styled-components/styled-components) | `5.3.11` | `6.1.13` |
| [typescript](https://github.com/microsoft/TypeScript) | `4.9.5` | `5.6.2` |
| [web-vitals](https://github.com/GoogleChrome/web-vitals) | `2.1.4` | `4.2.3` |


Updates `@types/jest` from 29.5.12 to 29.5.13
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

Updates `@types/node` from 22.5.4 to 22.5.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 5.16.0 to 9.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v5.16.0...v9.10.0)

Updates `react-scripts` from 3.0.1 to 5.0.1
- [Release notes](https://github.com/facebook/create-react-app/releases)
- [Changelog](https://github.com/facebook/create-react-app/blob/main/CHANGELOG-3.x.md)
- [Commits](https://github.com/facebook/create-react-app/commits/react-scripts@5.0.1/packages/react-scripts)

Updates `styled-components` from 5.3.11 to 6.1.13
- [Release notes](https://github.com/styled-components/styled-components/releases)
- [Commits](styled-components/styled-components@v5.3.11...v6.1.13)

Updates `typescript` from 4.9.5 to 5.6.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v4.9.5...v5.6.2)

Updates `web-vitals` from 2.1.4 to 4.2.3
- [Changelog](https://github.com/GoogleChrome/web-vitals/blob/main/CHANGELOG.md)
- [Commits](GoogleChrome/web-vitals@v2.1.4...v4.2.3)

---
updated-dependencies:
- dependency-name: "@types/jest"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: react
- dependency-name: "@types/node"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: react
- dependency-name: eslint
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: react
- dependency-name: react-scripts
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: react
- dependency-name: styled-components
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: react
- dependency-name: typescript
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: react
- dependency-name: web-vitals
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: react
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the java group with 3 updates: [org.springframework:spring-web](https://github.com/spring-projects/spring-framework), org.apache.solr:solr-solrj and [org.apache.nutch:nutch](https://github.com/apache/nutch).


Updates `org.springframework:spring-web` from 6.1.12 to 6.1.13
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.1.12...v6.1.13)

Updates `org.apache.solr:solr-solrj` from 9.6.1 to 9.7.0

Updates `org.apache.nutch:nutch` from 1.20 to 2.4
- [Changelog](https://github.com/apache/nutch/blob/master/CHANGES.md)
- [Commits](apache/nutch@release-1.20...release-2.4)

---
updated-dependencies:
- dependency-name: org.springframework:spring-web
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.solr:solr-solrj
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.apache.nutch:nutch
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the angular group in /turing-ui with 17 updates:

| Package | From | To |
| --- | --- | --- |
| [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `18.2.3` | `18.2.4` |
| [@angular/cdk](https://github.com/angular/components) | `18.2.3` | `18.2.4` |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `18.2.3` | `18.2.4` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `18.2.3` | `18.2.4` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `18.2.3` | `18.2.4` |
| [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `18.2.3` | `18.2.4` |
| [@angular/localize](https://github.com/angular/angular) | `18.2.3` | `18.2.4` |
| [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `18.2.3` | `18.2.4` |
| [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `18.2.3` | `18.2.4` |
| [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `18.2.3` | `18.2.4` |
| [angular-notifier-updated](https://github.com/fast-facts/angular-notifier) | `16.0.0` | `16.1.0` |
| [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `18.2.3` | `18.2.4` |
| [@angular/cli](https://github.com/angular/angular-cli) | `18.2.3` | `18.2.4` |
| [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `18.2.3` | `18.2.4` |
| [@angular/language-service](https://github.com/angular/angular/tree/HEAD/packages/language-service) | `18.2.3` | `18.2.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.5.4` | `22.5.5` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.5.4` | `5.6.2` |


Updates `@angular/animations` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.4/packages/animations)

Updates `@angular/cdk` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/components/releases)
- [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md)
- [Commits](angular/components@18.2.3...18.2.4)

Updates `@angular/common` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.4/packages/common)

Updates `@angular/compiler` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.4/packages/compiler)

Updates `@angular/core` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.4/packages/core)

Updates `@angular/forms` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.4/packages/forms)

Updates `@angular/localize` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](angular/angular@18.2.3...18.2.4)

Updates `@angular/platform-browser` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.4/packages/platform-browser)

Updates `@angular/platform-browser-dynamic` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.4/packages/platform-browser-dynamic)

Updates `@angular/router` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.4/packages/router)

Updates `angular-notifier-updated` from 16.0.0 to 16.1.0
- [Release notes](https://github.com/fast-facts/angular-notifier/releases)
- [Changelog](https://github.com/fast-facts/angular-notifier/blob/master/CHANGELOG.md)
- [Commits](fast-facts/angular-notifier@v16.0.0...v16.1.0)

Updates `@angular-devkit/build-angular` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@18.2.3...18.2.4)

Updates `@angular/cli` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@18.2.3...18.2.4)

Updates `@angular/compiler-cli` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.4/packages/compiler-cli)

Updates `@angular/language-service` from 18.2.3 to 18.2.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.4/packages/language-service)

Updates `@types/node` from 22.5.4 to 22.5.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `typescript` from 5.5.4 to 5.6.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.5.4...v5.6.2)

---
updated-dependencies:
- dependency-name: "@angular/animations"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/cdk"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/common"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/forms"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/localize"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/platform-browser"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/platform-browser-dynamic"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/router"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: angular-notifier-updated
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: angular
- dependency-name: "@angular-devkit/build-angular"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/cli"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler-cli"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/language-service"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: angular
...

Signed-off-by: dependabot[bot] <support@github.com>
…ng-ui/0.3.9/angular-14a1689d13

Bump the angular group in /turing-ui with 17 updates
…4f7607c739

Bump the java group with 3 updates
…ng-react/0.3.9/react-55c2fcbb0a

Bump the react group in /turing-react with 7 updates
gLeirbag and others added 21 commits September 17, 2024 14:32
Bumps the react group in /turing-react with 2 updates: [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) and [eslint](https://github.com/eslint/eslint).


Updates `@types/react` from 18.3.5 to 18.3.8
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `eslint` from 9.10.0 to 9.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v9.10.0...v9.11.0)

---
updated-dependencies:
- dependency-name: "@types/react"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: react
- dependency-name: eslint
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: react
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the java group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| commons-io:commons-io | `2.16.1` | `2.17.0` |
| [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) | `5.3.1` | `5.4` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.3.3` | `3.3.4` |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `3.3.3` | `3.3.4` |
| [org.apache.nutch:nutch](https://github.com/apache/nutch) | `1.20` | `2.4` |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.3.3` | `3.3.4` |


Updates `commons-io:commons-io` from 2.16.1 to 2.17.0

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.3.1 to 5.4
- [Changelog](https://github.com/apache/httpcomponents-client/blob/master/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.3.1...rel/v5.4)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.3.3 to 3.3.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.3...v3.3.4)

Updates `org.springframework.boot:spring-boot-dependencies` from 3.3.3 to 3.3.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.3...v3.3.4)

Updates `org.springframework.boot:spring-boot-dependencies` from 3.3.3 to 3.3.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.3...v3.3.4)

Updates `org.apache.nutch:nutch` from 1.20 to 2.4
- [Changelog](https://github.com/apache/nutch/blob/master/CHANGES.md)
- [Commits](apache/nutch@release-1.20...release-2.4)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.3.3 to 3.3.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.3...v3.3.4)

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.nutch:nutch
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the angular group in /turing-ui with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `18.2.4` | `18.2.5` |
| [@angular/cdk](https://github.com/angular/components) | `18.2.4` | `18.2.5` |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `18.2.4` | `18.2.5` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `18.2.4` | `18.2.5` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `18.2.4` | `18.2.5` |
| [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `18.2.4` | `18.2.5` |
| [@angular/localize](https://github.com/angular/angular) | `18.2.4` | `18.2.5` |
| [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `18.2.4` | `18.2.5` |
| [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `18.2.4` | `18.2.5` |
| [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `18.2.4` | `18.2.5` |
| [sass](https://github.com/sass/dart-sass) | `1.78.0` | `1.79.3` |
| [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `18.2.4` | `18.2.5` |
| [@angular/cli](https://github.com/angular/angular-cli) | `18.2.4` | `18.2.5` |
| [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `18.2.4` | `18.2.5` |
| [@angular/language-service](https://github.com/angular/angular/tree/HEAD/packages/language-service) | `18.2.4` | `18.2.5` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.5.4` | `5.6.2` |


Updates `@angular/animations` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.5/packages/animations)

Updates `@angular/cdk` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/components/releases)
- [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md)
- [Commits](angular/components@18.2.4...18.2.5)

Updates `@angular/common` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.5/packages/common)

Updates `@angular/compiler` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.5/packages/compiler)

Updates `@angular/core` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.5/packages/core)

Updates `@angular/forms` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.5/packages/forms)

Updates `@angular/localize` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](angular/angular@18.2.4...18.2.5)

Updates `@angular/platform-browser` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.5/packages/platform-browser)

Updates `@angular/platform-browser-dynamic` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.5/packages/platform-browser-dynamic)

Updates `@angular/router` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.5/packages/router)

Updates `sass` from 1.78.0 to 1.79.3
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.78.0...1.79.3)

Updates `@angular-devkit/build-angular` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@18.2.4...18.2.5)

Updates `@angular/cli` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@18.2.4...18.2.5)

Updates `@angular/compiler-cli` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.5/packages/compiler-cli)

Updates `@angular/language-service` from 18.2.4 to 18.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/18.2.5/packages/language-service)

Updates `typescript` from 5.5.4 to 5.6.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.5.4...v5.6.2)

---
updated-dependencies:
- dependency-name: "@angular/animations"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/cdk"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/common"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/forms"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/localize"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/platform-browser"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/platform-browser-dynamic"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/router"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: sass
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: angular
- dependency-name: "@angular-devkit/build-angular"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/cli"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler-cli"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/language-service"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: angular
...

Signed-off-by: dependabot[bot] <support@github.com>
…ng-react/0.3.9/react-308e54e670

Bump the react group in /turing-react with 2 updates
…3796f5c4da

Bump the java group with 6 updates
…ng-ui/0.3.9/angular-c83c4f17dd

Bump the angular group in /turing-ui with 16 updates
Merge sprinklr/asset-refactor into 0.3.9
Date date = new Date();
if (isValidUrl(url)) {
try {
HttpURLConnection httpUrlConnection = (HttpURLConnection) url.openConnection();

Check failure

Code scanning / CodeQL

Server-side request forgery Critical

Potential server-side request forgery due to a
user-provided value
.

Copilot Autofix

AI about 1 year ago

To fix the SSRF vulnerability, we need to ensure that the URL provided by the user is validated against a whitelist of allowed domains or restricted to a specific host. This can be achieved by modifying the isValidUrl method to include domain validation and updating the urlToText method to use this enhanced validation.

  1. Update isValidUrl method: Modify it to check if the URL belongs to a predefined list of allowed domains.
  2. Update urlToText method: Ensure it uses the enhanced isValidUrl method to validate the URL before processing.
Suggested changeset 2
turing-filesystem/fs-commons/src/main/java/com/viglet/turing/filesystem/commons/TurFileUtils.java

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/turing-filesystem/fs-commons/src/main/java/com/viglet/turing/filesystem/commons/TurFileUtils.java b/turing-filesystem/fs-commons/src/main/java/com/viglet/turing/filesystem/commons/TurFileUtils.java
--- a/turing-filesystem/fs-commons/src/main/java/com/viglet/turing/filesystem/commons/TurFileUtils.java
+++ b/turing-filesystem/fs-commons/src/main/java/com/viglet/turing/filesystem/commons/TurFileUtils.java
@@ -175,3 +175,9 @@
         UrlValidator urlValidator = new UrlValidator();
-        return urlValidator.isValid(url.toString());
+        if (!urlValidator.isValid(url.toString())) {
+            return false;
+        }
+        // Whitelist of allowed domains
+        List<String> allowedDomains = Arrays.asList("example.com", "trusted.com");
+        String host = url.getHost();
+        return allowedDomains.stream().anyMatch(host::endsWith);
     }
EOF
@@ -175,3 +175,9 @@
UrlValidator urlValidator = new UrlValidator();
return urlValidator.isValid(url.toString());
if (!urlValidator.isValid(url.toString())) {
return false;
}
// Whitelist of allowed domains
List<String> allowedDomains = Arrays.asList("example.com", "trusted.com");
String host = url.getHost();
return allowedDomains.stream().anyMatch(host::endsWith);
}
turing-app/src/main/java/com/viglet/turing/api/ocr/TurOcrAPI.java
Outside changed files

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/turing-app/src/main/java/com/viglet/turing/api/ocr/TurOcrAPI.java b/turing-app/src/main/java/com/viglet/turing/api/ocr/TurOcrAPI.java
--- a/turing-app/src/main/java/com/viglet/turing/api/ocr/TurOcrAPI.java
+++ b/turing-app/src/main/java/com/viglet/turing/api/ocr/TurOcrAPI.java
@@ -47,3 +47,8 @@
         try {
-            return TurFileUtils.urlContentToText(URI.create(turOcrFromUrl.getUrl()).toURL());
+            URL url = URI.create(turOcrFromUrl.getUrl()).toURL();
+            if (TurFileUtils.isValidUrl(url)) {
+                return TurFileUtils.urlContentToText(url);
+            } else {
+                log.error("Invalid URL: {}", turOcrFromUrl.getUrl());
+            }
         }
EOF
@@ -47,3 +47,8 @@
try {
return TurFileUtils.urlContentToText(URI.create(turOcrFromUrl.getUrl()).toURL());
URL url = URI.create(turOcrFromUrl.getUrl()).toURL();
if (TurFileUtils.isValidUrl(url)) {
return TurFileUtils.urlContentToText(url);
} else {
log.error("Invalid URL: {}", turOcrFromUrl.getUrl());
}
}
Copilot is powered by AI and may make mistakes. Always verify output.
Unable to commit as this autofix suggestion is now outdated
try {
tempFile = createTempFile();
FileUtils.copyURLToFile(
url,

Check failure

Code scanning / CodeQL

Server-side request forgery Critical

Potential server-side request forgery due to a
user-provided value
.

Copilot Autofix

AI about 1 year ago

Copilot could not generate an autofix suggestion

Copilot could not generate an autofix suggestion for this alert. Try pushing a new commit or if the problem persists contact support.

@alegauss alegauss merged commit 5190b9e into master Sep 26, 2024
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants