Merge remote-tracking branch 'origin/beta-releases' into ga-releases

Author: github-actions[bot]

.depalignrc.json

@@ -6,11 +6,7 @@
       "^4.3.1"
     ],
     "semver": [
-      "^7.1.1",
-      "^5.4.1",
-      "^5.1.0",
-      "^5.7.1",
-      "^7.3.5",
+      "^5.7.2",
       "^7.6.0"
     ],
     "eslint-config-mongodb-js": [

.github/dependabot.yml

@@ -39,15 +39,6 @@ updates:
           - "system-ca"
           - "saslprep"
 
-      electron:
-        patterns:
-          - "electron"
-          - "@electron/remote"
-          - "@electron/rebuild"
-          - "browserslist"
-          - "node-abi"
-        update-types: ["minor", "patch"]
-
       devtools-shared-prod:
         patterns:
           - "@mongodb-js/get-os-info"

.github/workflows/authors-and-third-party-notices.yaml

@@ -23,14 +23,14 @@ jobs:
           fetch-depth: '0'
 
 
-      - uses: actions/setup-node@v2
+      - uses: actions/setup-node@v3
         with:
-          node-version: ^16.20.2
+          node-version: 18.19.1
           cache: 'npm'
 
-      - name: Install npm@8
+      - name: Install npm@10.2.4
         run: |
-          npm install -g npm@8
+          npm install -g npm@10.2.4
 
       - name: Install Dependencies
         run: |
@@ -44,7 +44,8 @@ jobs:
         run: npm run update-third-party-notices
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v4
+        id: cpr
+        uses: peter-evans/create-pull-request@v6
         with:
           commit-message: Update report
           branch: ci/update-3rd-party-notices-and-authors

.github/workflows/bump-packages.yaml

@@ -24,14 +24,14 @@ jobs:
           git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
           git config --local user.name "github-actions[bot]"
 
-      - uses: actions/setup-node@v2
+      - uses: actions/setup-node@v3
         with:
-          node-version: ^16.20.2
+          node-version: 18.19.1
           cache: 'npm'
 
-      - name: Install npm@8.19.4
+      - name: Install npm@10.2.4
         run: |
-          npm install -g npm@8.19.4
+          npm install -g npm@10.2.4
 
       - name: Install Dependencies
         run: |
@@ -49,7 +49,7 @@ jobs:
 
       - name: Create Pull Request
         id: cpr
-        uses: peter-evans/create-pull-request@v4
+        uses: peter-evans/create-pull-request@v6
         with:
           token: ${{ secrets.SVC_DEVTOOLSBOT_TOKEN }}
           commit-message: 'chore(release): bump package versions'

.github/workflows/publish-compass.yaml

@@ -17,17 +17,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Setup Node.js Environment
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v3
         with:
-          node-version: ^16.20.2
+          node-version: 18.19.1
           cache: 'npm'
 
-      - name: Install npm@8
+      - name: Install npm@10.2.4
         run: |
-          npm install -g npm@8
+          npm install -g npm@10.2.4
 
       - name: Install Dependencies
         run: |

.github/workflows/publish-packages.yaml

@@ -32,12 +32,12 @@ jobs:
         git config --local user.name "github-actions[bot]"
 
     - name: "Use Node.js 14"
-      uses: actions/setup-node@v2
+      uses: actions/setup-node@v3
       with:
-        node-version: ^16.20.2
+        node-version: 18.19.1
 
-    - name: Install npm@8
-      run: npm install -g npm@8
+    - name: Install npm@10.2.4
+      run: npm install -g npm@10.2.4
 
     - name: Install Dependencies
       run: |

.github/workflows/start-beta.yml

@@ -29,12 +29,12 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: ^16.x
+          node-version: 18.19.1
           cache: 'npm'
 
-      - name: Install npm@8.19.4
+      - name: Install npm@10.2.4
         run: |
-          npm install -g npm@8.19.4
+          npm install -g npm@10.2.4
 
       - name: Install Dependencies
         run: |

.github/workflows/start-ga.yaml

@@ -29,12 +29,12 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: ^16.x
+          node-version: 18.19.1
           cache: 'npm'
 
-      - name: Install npm@8.19.4
+      - name: Install npm@10.2.4
         run: |
-          npm install -g npm@8.19.4
+          npm install -g npm@10.2.4
 
       - name: Install Dependencies
         run: |

.github/workflows/update-electron.yaml

@@ -0,0 +1,53 @@
+name: Update electron
+
+# Runs nightly and manually
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 0 * * *"
+
+jobs:
+  update_generated_files:
+    name: Update Electron
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          # don't checkout a detatched HEAD
+          ref: ${{ github.head_ref }}
+
+          # this is important so git log can pick up on
+          # the whole history to generate the list of AUTHORS
+          fetch-depth: '0'
+
+      - name: Setup git
+        run: |
+          git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git config --local user.name "github-actions[bot]"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 18.19.1
+          cache: 'npm'
+
+      - name: Install [email protected]
+        run: |
+          npm install -g [email protected]
+      - name: Install Dependencies
+        run: |
+          npm -v
+          npm ci
+      - name: Bump packages
+        run: |
+          node scripts/update-electron.js
+          git add .
+          git commit --no-allow-empty -m "chore: update electron" || true
+      - name: Create Pull Request
+        id: cpr
+        uses: peter-evans/create-pull-request@v6
+        with:
+          token: ${{ secrets.SVC_DEVTOOLSBOT_TOKEN }}
+          commit-message: 'chore: update electron'
+          branch: ci/update-electron
+          title: 'chore: update electron'
+          body: |
+            - Update electron

.snyk

@@ -2,14 +2,6 @@
 version: v1.25.0
 # ignores vulnerabilities until expiry date; change duration by modifying expiry date
 ignore:
-  SNYK-JS-SEMVER-3247795:
-    - '*':
-        reason: >-
-          Security patches released for semver 5.x (5.7.2) and 6.x (6.3.1) are
-          not yet known to Snyk which is why we would like to ignore this
-          vulnerability until the mentioned expiry.
-        expires: 2023-08-11T09:00:55.553Z
-        created: 2023-07-12T09:00:55.557Z
   SNYK-JS-AGGRIDCOMMUNITY-1932011:
     - '*':
         reason: None Given