Skip to content

chore(deps): scoped npm overrides for the audit backlog + parent replacement #291

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Prekzursil wants to merge 5 commits into
base: main
Choose a base branch
from
Open

chore(deps): scoped npm overrides for the audit backlog + parent replacement #291

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
a38daa0
chore(deps): scoped npm overrides for the audit backlog + parent repl…
Prekzursil Nov 4, 2026
52bb9cc
Merge remote-tracking branch 'origin/main' into chore/npm-security-ov…
Nov 4, 2026
1bf293e
style: biome-format the tree after the #289/#290 merges
Prekzursil Nov 4, 2026
a537240
fix(deps): mobile overrides — node-forge ^1.4.3 (4 advisories), minim…
Prekzursil Nov 13, 2026
d4f7d08
Merge main: scoped root overrides from #298 replace the global minima…
Prekzursil Nov 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
170 changes: 96 additions & 74 deletions e2e/mock-api/server.mjs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -213,33 +213,33 @@ const apiTokenState = { key: null };
// SUPPORTED_LANGUAGES minus the mandatory English source), plus the
// stateful proposal store the propose → curate → visible spec drives.
const TRANSLATABLE_LANGUAGES = [
{ code: 'ro', endonym: 'Română', english: 'Romanian' },
{ code: 'es', endonym: 'Español', english: 'Spanish' },
{ code: 'fr', endonym: 'Français', english: 'French' },
{ code: 'de', endonym: 'Deutsch', english: 'German' },
{ code: 'pt', endonym: 'Português', english: 'Portuguese' },
{ code: 'it', endonym: 'Italiano', english: 'Italian' },
{ code: 'ca', endonym: 'Català', english: 'Catalan' },
{ code: 'pl', endonym: 'Polski', english: 'Polish' },
{ code: 'hu', endonym: 'Magyar', english: 'Hungarian' },
{ code: 'hr', endonym: 'Hrvatski', english: 'Croatian' },
{ code: 'sr-Latn', endonym: 'Srpski (latinica)', english: 'Serbian (Latin)' },
{ code: 'ru', endonym: 'Русский', english: 'Russian' },
{ code: 'uk', endonym: 'Українська', english: 'Ukrainian' },
{ code: 'bg', endonym: 'Български', english: 'Bulgarian' },
{ code: 'el', endonym: 'Ελληνικά', english: 'Greek' },
{ code: 'zh-Hans', endonym: '简体中文', english: 'Chinese (Simplified)' },
{ code: 'zh-Hant', endonym: '繁體中文', english: 'Chinese (Traditional)' },
{ code: 'ja', endonym: '日本語', english: 'Japanese' },
{ code: 'ko', endonym: '한국어', english: 'Korean' },
{ code: 'hi', endonym: 'हिन्दी', english: 'Hindi' },
{ code: 'vi', endonym: 'Tiếng Việt', english: 'Vietnamese' },
{ code: 'th', endonym: 'ไทย', english: 'Thai' },
{ code: 'id', endonym: 'Bahasa Indonesia', english: 'Indonesian' },
{ code: 'tr', endonym: 'Türkçe', english: 'Turkish' },
{ code: 'kk', endonym: 'Қазақша', english: 'Kazakh' },
{ code: 'ar', endonym: 'العربية', english: 'Arabic' },
{ code: 'fa', endonym: 'فارسی', english: 'Persian' },
{ code: "ro", endonym: "Română", english: "Romanian" },
{ code: "es", endonym: "Español", english: "Spanish" },
{ code: "fr", endonym: "Français", english: "French" },
{ code: "de", endonym: "Deutsch", english: "German" },
{ code: "pt", endonym: "Português", english: "Portuguese" },
{ code: "it", endonym: "Italiano", english: "Italian" },
{ code: "ca", endonym: "Català", english: "Catalan" },
{ code: "pl", endonym: "Polski", english: "Polish" },
{ code: "hu", endonym: "Magyar", english: "Hungarian" },
{ code: "hr", endonym: "Hrvatski", english: "Croatian" },
{ code: "sr-Latn", endonym: "Srpski (latinica)", english: "Serbian (Latin)" },
{ code: "ru", endonym: "Русский", english: "Russian" },
{ code: "uk", endonym: "Українська", english: "Ukrainian" },
{ code: "bg", endonym: "Български", english: "Bulgarian" },
{ code: "el", endonym: "Ελληνικά", english: "Greek" },
{ code: "zh-Hans", endonym: "简体中文", english: "Chinese (Simplified)" },
{ code: "zh-Hant", endonym: "繁體中文", english: "Chinese (Traditional)" },
{ code: "ja", endonym: "日本語", english: "Japanese" },
{ code: "ko", endonym: "한국어", english: "Korean" },
{ code: "hi", endonym: "हिन्दी", english: "Hindi" },
{ code: "vi", endonym: "Tiếng Việt", english: "Vietnamese" },
{ code: "th", endonym: "ไทย", english: "Thai" },
{ code: "id", endonym: "Bahasa Indonesia", english: "Indonesian" },
{ code: "tr", endonym: "Türkçe", english: "Turkish" },
{ code: "kk", endonym: "Қазақша", english: "Kazakh" },
{ code: "ar", endonym: "العربية", english: "Arabic" },
{ code: "fa", endonym: "فارسی", english: "Persian" },
];
const translationsState = { nextId: 1, proposals: [] };

Expand Down Expand Up @@ -843,37 +843,45 @@ const server = createServer((req, res) => {
const translationRow = (proposal) => ({
id: proposal.id,
problem_id: proposal.problem_id,
problem_title_en: (MOCK_PROBLEMS.find((p) => p.id === proposal.problem_id) || {}).title_i18n?.en ?? `Problem ${proposal.problem_id}`,
problem_title_en:
(MOCK_PROBLEMS.find((p) => p.id === proposal.problem_id) || {}).title_i18n?.en ??
`Problem ${proposal.problem_id}`,
language: proposal.language,
language_name: (TRANSLATABLE_LANGUAGES.find((l) => l.code === proposal.language) || {}).english ?? proposal.language,
language_name:
(TRANSLATABLE_LANGUAGES.find((l) => l.code === proposal.language) || {}).english ??
proposal.language,
title: proposal.title,
statement: proposal.statement,
status: proposal.status,
contributor_username: proposal.contributor_username,
reviewer_username: proposal.reviewer_username,
review_note: proposal.review_note,
reviewed_at: proposal.reviewed_at,
ai_verdict: '',
ai_verdict: "",
ai_confidence: null,
ai_notes: '',
ai_notes: "",
created_at: proposal.created_at,
updated_at: proposal.reviewed_at ?? proposal.created_at,
});
const isVerifier = (req) => {
const session = sessionUser(req);
return session !== null
&& (session.role === 'ADMIN' || session.role === 'PROBLEM_VERIFIER' || session.role === 'VERIFIER');
return (
session !== null &&
(session.role === "ADMIN" ||
session.role === "PROBLEM_VERIFIER" ||
session.role === "VERIFIER")
);
};

if (req.method === 'GET' && path === '/api/v1/translations/languages/') {
if (req.method === "GET" && path === "/api/v1/translations/languages/") {
json(res, 200, { results: TRANSLATABLE_LANGUAGES });
return;
}

if (req.method === 'GET' && path === '/api/v1/translations/proposals/mine/') {
if (req.method === "GET" && path === "/api/v1/translations/proposals/mine/") {
const session = sessionUser(req);
if (!session) {
json(res, 401, { detail: 'Authentication credentials were not provided.' });
json(res, 401, { detail: "Authentication credentials were not provided." });
return;
}
const mine = translationsState.proposals
Expand All @@ -883,15 +891,15 @@ const server = createServer((req, res) => {
return;
}

if (req.method === 'GET' && path === '/api/v1/translations/proposals/') {
if (req.method === "GET" && path === "/api/v1/translations/proposals/") {
if (!isVerifier(req)) {
json(res, 403, { detail: 'Only verifiers and admins can manage translations.' });
json(res, 403, { detail: "Only verifiers and admins can manage translations." });
return;
}
const listUrl = new URL(req.url, `http://${HOST}:${PORT}`);
const statusFilter = listUrl.searchParams.get('status');
const languageFilter = listUrl.searchParams.get('language');
const problemFilter = listUrl.searchParams.get('problem');
const statusFilter = listUrl.searchParams.get("status");
const languageFilter = listUrl.searchParams.get("language");
const problemFilter = listUrl.searchParams.get("problem");
let rows = translationsState.proposals;
if (statusFilter) rows = rows.filter((p) => p.status === statusFilter);
if (languageFilter) rows = rows.filter((p) => p.language === languageFilter);
Expand All @@ -900,45 +908,53 @@ const server = createServer((req, res) => {
return;
}

if (req.method === 'POST' && path === '/api/v1/translations/proposals/') {
if (req.method === "POST" && path === "/api/v1/translations/proposals/") {
const session = sessionUser(req);
if (!session) {
json(res, 401, { detail: 'Authentication credentials were not provided.' });
json(res, 401, { detail: "Authentication credentials were not provided." });
return;
}
readBody(req, (body) => {
const problem = MOCK_PROBLEMS.find((p) => p.id === Number(body.problem));
const language = String(body.language ?? '');
const language = String(body.language ?? "");
if (!problem) {
json(res, 400, { detail: 'Only published (APPROVED) problems accept community translations.' });
json(res, 400, {
detail: "Only published (APPROVED) problems accept community translations.",
});
return;
}
if (!TRANSLATABLE_LANGUAGES.some((l) => l.code === language)) {
json(res, 400, { detail: '"language" is not a valid choice.' });
return;
}
if (problem.title_i18n[language]) {
json(res, 400, { detail: 'There is already an approved translation for this language.' });
json(res, 400, { detail: "There is already an approved translation for this language." });
return;
}
const dup = translationsState.proposals.find(
(p) => p.problem_id === problem.id && p.language === language
&& p.contributor_username === session.username && p.status === 'PENDING'
(p) =>
p.problem_id === problem.id &&
p.language === language &&
p.contributor_username === session.username &&
p.status === "PENDING",
);
if (dup) {
json(res, 409, { detail: 'You already have a pending proposal for this problem and language — wait for a decision before proposing again.' });
json(res, 409, {
detail:
"You already have a pending proposal for this problem and language — wait for a decision before proposing again.",
});
return;
}
const proposal = {
id: translationsState.nextId++,
problem_id: problem.id,
language,
title: String(body.title ?? ''),
statement: String(body.statement ?? ''),
status: 'PENDING',
title: String(body.title ?? ""),
statement: String(body.statement ?? ""),
status: "PENDING",
contributor_username: session.username,
reviewer_username: null,
review_note: '',
review_note: "",
reviewed_at: null,
created_at: new Date().toISOString(),
};
Expand All @@ -948,39 +964,45 @@ const server = createServer((req, res) => {
return;
}

const decisionMatch = path.match(/^\/api\/v1\/translations\/proposals\/(\d+)\/(approve|reject)\/$/);
if (req.method === 'POST' && decisionMatch) {
const decisionMatch = path.match(
/^\/api\/v1\/translations\/proposals\/(\d+)\/(approve|reject)\/$/,
);
if (req.method === "POST" && decisionMatch) {
if (!isVerifier(req)) {
json(res, 403, { detail: 'Only verifiers and admins can manage translations.' });
json(res, 403, { detail: "Only verifiers and admins can manage translations." });
return;
}
readBody(req, (body) => {
const proposal = translationsState.proposals.find((p) => p.id === Number(decisionMatch[1]));
if (!proposal) {
json(res, 404, { detail: 'Not found.' });
json(res, 404, { detail: "Not found." });
return;
}
if (proposal.status !== 'PENDING') {
if (proposal.status !== "PENDING") {
json(res, 400, { detail: `Only pending proposals can be decided.` });
return;
}
const reviewer = sessionUser(req).username;
proposal.reviewer_username = reviewer;
proposal.review_note = decisionMatch[2] === 'reject' ? String(body.note ?? '') : '';
proposal.review_note = decisionMatch[2] === "reject" ? String(body.note ?? "") : "";
proposal.reviewed_at = new Date().toISOString();
if (decisionMatch[2] === 'approve') {
proposal.status = 'APPROVED';
if (decisionMatch[2] === "approve") {
proposal.status = "APPROVED";
const problem = MOCK_PROBLEMS.find((p) => p.id === proposal.problem_id);
if (problem) {
problem.title_i18n[proposal.language] = proposal.title;
problem.statement_i18n[proposal.language] = proposal.statement;
problem.translations = [
...(problem.translations ?? []).filter((row) => row.language !== proposal.language),
{ language: proposal.language, contributor_username: proposal.contributor_username, reviewed_at: proposal.reviewed_at },
{
language: proposal.language,
contributor_username: proposal.contributor_username,
reviewed_at: proposal.reviewed_at,
},
];
}
} else {
proposal.status = 'REJECTED';
proposal.status = "REJECTED";
}
json(res, 200, translationRow(proposal));
});
Expand Down Expand Up @@ -1035,33 +1057,33 @@ const server = createServer((req, res) => {
// pair: uid=mock-uid & token=mock-token confirm; anything else 400s so
// the expired-link UI path is drivable in mock mode. The request
// answers 200 regardless of the address (no account enumeration).
if (req.method === 'POST' && path === '/api/v1/auth/password/reset/') {
json(res, 200, { detail: 'Password reset e-mail has been sent.' });
if (req.method === "POST" && path === "/api/v1/auth/password/reset/") {
json(res, 200, { detail: "Password reset e-mail has been sent." });
return;
}

if (req.method === 'POST' && path === '/api/v1/auth/password/reset/confirm/') {
let raw = '';
req.on('data', (chunk) => {
if (req.method === "POST" && path === "/api/v1/auth/password/reset/confirm/") {
let raw = "";
req.on("data", (chunk) => {
raw += chunk;
});
req.on('end', () => {
req.on("end", () => {
let body = {};
try {
body = JSON.parse(raw || '{}');
body = JSON.parse(raw || "{}");
} catch {
body = {};
}
if (body.uid === 'mock-uid' && body.token === 'mock-token') {
json(res, 200, { detail: 'Password has been reset.' });
if (body.uid === "mock-uid" && body.token === "mock-token") {
json(res, 200, { detail: "Password has been reset." });
} else {
json(res, 400, { uid: ['Invalid value.'], token: ['Invalid value.'] });
json(res, 400, { uid: ["Invalid value."], token: ["Invalid value."] });
}
});
return;
}

if (req.method === 'POST' && path === '/api/v1/auth/token/refresh/') {
if (req.method === "POST" && path === "/api/v1/auth/token/refresh/") {
// dj-rest-auth cookie refresh: empty body, wc_refresh cookie in play.
if (!cookieValue(req, 'wc_refresh')) {
json(res, 401, { detail: 'No valid refresh token found.' });
Expand Down
Loading
Loading