Update platform security modules (main) #206227

elastic-renovate-prod · 2025-01-10T08:47:50Z

Manual update 2025-01-14:

uuid v11 contains breaking changes. uuid will be bumped to v10 instead.

This PR contains the following updates:

Package	Type	Update	Change	Pending
@types/js-yaml (source)	devDependencies	patch	`^4.0.5` -> `^4.0.9`
@types/lodash (source)	devDependencies	patch	`^4.17.13` -> `^4.17.14`
@types/object-hash (source)	devDependencies	major	`^1.3.0` -> `^3.0.6`
@types/uuid (source)	devDependencies	major	`^9.0.0` -> `^10.0.0`
dependency-cruiser	devDependencies	minor	`^16.4.2` -> `^16.8.0`	`16.9.0`
fast-deep-equal	dependencies	patch	`^3.1.1` -> `^3.1.3`
minimist	devDependencies	patch	`^1.2.6` -> `^1.2.8`
object-hash	dependencies	major	`^1.3.1` -> `^3.0.0`
uuid	dependencies	major	~~`9.0.0` -> `11.0.3`~~`9.0.0` -> `10.0.0`	~~`11.0.5` (+1)~~

Release Notes

sverweij/dependency-cruiser (dependency-cruiser)

`v16.8.0`

Compare Source

✨ features

dd81580 feat: enables matching transitive dependencies in 'required' rules (#975) - thanks to @ThiagoMaia1 for suggesting and testing the feature

🐛 fixes

7bcabe7 refactor: simplifies a few boolean expressions
the dependency bump below (20a7a2f) also bumped watskeburt to latest, which makes both the --affected cli option and the cache work better on ms-windows and other ms-dos based operating systems.

👷 maintenance

20a7a2f build(npm): updates external dependencies

🧹 chores

fdbb72a chore(configs): makes 'unlimited' config inherit individual options from the base config
8595b73 chore(tools): adds a script that prints a readable AST from any tsc-readable file
476c956 chore(npm): updates external devDependencies

`v16.7.0`

Compare Source

✨ feature: recognize type imports in jsdoc

Dependency-cruiser now has the ability to recognize imports in jsdoc - both the new ones introduced in TS5.5 (e.g. /** @import { something } from "blah"; */), as well as the older ones (e.g. /** @type {import('blah').something} */). It's behind an option so it will only detect them if you want it to.

Thanks to @louwers for raising the associated issue and testing a very early version of PR #965

See detectJSDocImports: detect dependencies in JSDoc comments in the options references for more information and some of the caveats (a.o. really needs the TypeScript compiler)
The PR's also grew the dependencyTypes jsdoc, jsdoc-bracket-import and jsdoc-import-tag for use in your rules.

commits:

09e9e41 feat(extract): adds recognition of jsdoc @import type imports (#965)
0d49477 feat(extract): adds recognition of the 'classic' jsdoc 'bracket' imports (#969)
fedead6 feat(init): adds question to enable detection of jsdoc imports (#970)

🐛 fixes

09ae707 fix(npm): shortens the message in the (only) distributed script

👷 maintenance

aae6edd/ b5bfe76 refactor: addresses small linting issues
2d2b0e5 refactor(resolve): uses Maps for the context maps
79e1aa1 build(npm): updates external dependencies
09ae707 fix(npm): shortens the message in the (only) distributed script

🧹 chores

8a288dd chore: migrates to eslint 9 & flat config (#968)
69b59b6 chore: makes ci use node 23 instead of 22
78960d3 build(npm): adds svgo to devDependencies

`v16.6.0`

Compare Source

✨ features

b473be5 feat: adds support for svelte 5 (#963)

👷 maintenance

7683e90 fix(extract): removes extraneous capturing group from a regular expression
65f2748 build(npm): updates external dependencies

`v16.5.0`

Compare Source

✨ features

802ff6f feat(cli): expands the info displayed in --info (#959)

📖 documentation

1ca77ec doc(FAQ): corrects a typo
8269857 doc(cli): clarify when using --max-depth is a good idea (never, that's when 😄)

👷 maintenance

9453f20 build(npm): updates external dependencies

puleos/object-hash (object-hash)

uuidjs/uuid (uuid)

`v11.0.3`

Compare Source

Bug Fixes

apply stricter typing to the v* signatures (#831) (c2d3fed)
export internal uuid types (#833) (341edf4)
remove sourcemaps (#827) (b93ea10)
revert "simplify type for v3 and v5" (#835) (e2dee69)

`v11.0.2`

Compare Source

Bug Fixes

remove wrapper.mjs (#822) (6683ad3)

`v11.0.1`

Compare Source

Bug Fixes

restore package.json#browser field (#817) (ae8f386)

`v11.0.0`

Compare Source

⚠ BREAKING CHANGES

refactor v1 internal state and options logic (#780)
refactor v7 internal state and options logic, fixes #764 (#779)
Port to TypeScript, closes #762 (#763)
update node support matrix (only support node 16-20) (#750)

Features

Port to TypeScript, closes #762 (#763) (1e0f987)
update node support matrix (only support node 16-20) (#750) (883b163)

Bug Fixes

missing v7 expectations in browser spec (#751) (f54a866)
refactor v1 internal state and options logic (#780) (031b3d3)
refactor v7 internal state and options logic, fixes #764 (#779) (9dbd1cd)
remove v4 options default assignment preventing native.randomUUID from being used (#786) (afe6232), closes #763
seq_hi shift for byte 6 (#775) (1d532ca)
tsconfig module type (#778) (7eff835)

`v10.0.0`

Compare Source

⚠ BREAKING CHANGES

update node support (drop node@12, node@14, add node@20) (#750)

Features

support support rfc9562 MAX uuid (new in RFC9562) (#714) (0385cd3)
support rfc9562 v6 uuids (#754) (c4ed13e)
support rfc9562 v7 uuids (#681) (db76a12)
update node support matrix (only support node 16-20) (#750) (883b163)
support rfc9562 v8 uuids (#759) (35a5342)

Bug Fixes

revert "perf: remove superfluous call to toLowerCase (#677)" (#738) (e267b90)

`v9.0.1`

Compare Source

build

Fix CI to work with Node.js 20.x

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

elasticmachine · 2025-01-10T08:47:53Z

Pinging @elastic/kibana-security (Team:Security)

elastic-renovate-prod · 2025-01-11T00:06:58Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

jeramysoucy · 2025-01-13T14:04:08Z

buildkite test this

jeramysoucy · 2025-01-14T11:12:41Z

buildkite test this

jeramysoucy · 2025-01-14T16:22:14Z

buildkite test this

weltenwort · 2025-01-15T14:34:28Z

x-pack/platform/plugins/shared/fields_metadata/common/hashed_cache.ts

@@ -14,7 +14,7 @@ export interface IHashedCache<KeyType, ValueType> {
  reset(): void;
 }

-export class HashedCache<KeyType, ValueType> {
+export class HashedCache<KeyType extends object, ValueType> {


Looking the object-hash changes I wonder if this shouldn't be

Suggested change

export class HashedCache<KeyType extends object, ValueType> {

export class HashedCache<KeyType extends hash.NotUndefined, ValueType> {

?

Thanks! Fixed in 07025e3

…m-security-modules

jeramysoucy · 2025-01-15T16:59:48Z

buildkite test this

elasticmachine · 2025-01-15T18:46:23Z

💚 Build Succeeded

Buildkite Build
Commit: 47e35eb

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id	before	after	diff
`apm`	3.9MB	3.9MB	-689.0B
`controls`	508.4KB	507.7KB	-689.0B
`fieldsMetadata`	63.9KB	63.2KB	-689.0B
`logsExplorer`	223.2KB	222.5KB	-689.0B
`securitySolution`	21.1MB	21.1MB	-689.0B
`ux`	178.5KB	177.8KB	-689.0B
total			-4.0KB

Page load bundle

Size of the bundles that are downloaded on every page load. Target size is below 100kb

id	before	after	diff
`kbnUiSharedDeps-npmDll`	5.9MB	5.9MB	+3.3KB

History

cc @jeramysoucy

jbudz

.buildkite

jeramysoucy · 2025-01-17T13:33:26Z

@weltenwort Could I get a re-review?

weltenwort

Thanks for taking care of this!

kibanamachine · 2025-01-17T15:46:54Z

Starting backport for target branches: 7.17, 8.16, 8.17, 8.x

https://github.com/elastic/kibana/actions/runs/12832312537

kibanamachine · 2025-01-17T15:53:31Z

💔 All backports failed

Status	Branch	Result
❌	7.17	Backport failed because of merge conflicts
❌	8.16	Backport failed because of merge conflicts
❌	8.17	Backport failed because of merge conflicts
❌	8.x	Backport failed because of merge conflicts You might need to backport the following PRs to 8.x: - Update dependency @apidevtools/swagger-parser to ^10.1.1 (main) (#206562)

Manual backport

To create the backport manually run:

node scripts/backport --pr 206227

Questions ?

Please refer to the Backport tool documentation

elastic-renovate-prod bot requested a review from a team as a code owner January 10, 2025 08:47

elastic-renovate-prod bot added backport:all-open Backport to all branches that could still receive a release release_note:skip Skip the PR/issue when compiling release notes Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! labels Jan 10, 2025

elastic-renovate-prod bot requested a review from a team January 10, 2025 08:47

jeramysoucy self-requested a review January 10, 2025 13:56

elastic-renovate-prod bot force-pushed the renovate/main-platform-security-modules branch from 9d1076c to fc12e5d Compare January 10, 2025 17:48

Update platform security modules

d213440

elastic-renovate-prod bot force-pushed the renovate/main-platform-security-modules branch from 9eb271d to d213440 Compare January 10, 2025 21:35

Merge branch 'main' into renovate/main-platform-security-modules

c175dc4

Merge branch 'main' into renovate/main-platform-security-modules

af4fd94

jeramysoucy added 2 commits January 14, 2025 11:54

Upgrades uuid to highest v9 patch release instead of v11

4e1b84e

Bump uuid to v10

73a4363

jeramysoucy self-assigned this Jan 14, 2025

Fixes type error

ad42ce4

jeramysoucy requested a review from a team as a code owner January 14, 2025 16:21

weltenwort self-requested a review January 15, 2025 14:34

weltenwort reviewed Jan 15, 2025

View reviewed changes

jeramysoucy added 2 commits January 15, 2025 17:26

Fixes type errors more betterer

07025e3

Merge remote-tracking branch 'origin/main' into renovate/main-platfor…

47e35eb

…m-security-modules

jeramysoucy removed their request for review January 16, 2025 08:40

SiddharthMantri approved these changes Jan 16, 2025

View reviewed changes

jbudz approved these changes Jan 16, 2025

View reviewed changes

jeramysoucy requested a review from weltenwort January 16, 2025 15:07

weltenwort approved these changes Jan 17, 2025

View reviewed changes

jeramysoucy merged commit fdf83cc into main Jan 17, 2025
8 checks passed

jeramysoucy deleted the renovate/main-platform-security-modules branch January 17, 2025 15:46

kibanamachine added the v9.0.0 label Jan 17, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update platform security modules (main) #206227

Update platform security modules (main) #206227

elastic-renovate-prod bot commented Jan 10, 2025 •

edited by kibanamachine

Loading

elasticmachine commented Jan 10, 2025

elastic-renovate-prod bot commented Jan 11, 2025

jeramysoucy commented Jan 13, 2025

jeramysoucy commented Jan 14, 2025

jeramysoucy commented Jan 14, 2025

weltenwort Jan 15, 2025

jeramysoucy Jan 15, 2025

jeramysoucy commented Jan 15, 2025

elasticmachine commented Jan 15, 2025

jbudz left a comment

jeramysoucy commented Jan 17, 2025

weltenwort left a comment

kibanamachine commented Jan 17, 2025

kibanamachine commented Jan 17, 2025

	export class HashedCache<KeyType extends object, ValueType> {
	export class HashedCache<KeyType extends hash.NotUndefined, ValueType> {

Update platform security modules (main) #206227

Update platform security modules (main) #206227

Conversation

elastic-renovate-prod bot commented Jan 10, 2025 • edited by kibanamachine Loading

Manual update 2025-01-14:

This PR contains the following updates:

Release Notes

✨ features

🐛 fixes

👷 maintenance

🧹 chores

✨ feature: recognize type imports in jsdoc

🐛 fixes

👷 maintenance

🧹 chores

✨ features

👷 maintenance

✨ features

📖 documentation

👷 maintenance

Bug Fixes

Bug Fixes

Bug Fixes

⚠ BREAKING CHANGES

Features

Bug Fixes

⚠ BREAKING CHANGES

Features

Bug Fixes

build

Configuration

elasticmachine commented Jan 10, 2025

elastic-renovate-prod bot commented Jan 11, 2025

Edited/Blocked Notification

jeramysoucy commented Jan 13, 2025

jeramysoucy commented Jan 14, 2025

jeramysoucy commented Jan 14, 2025

Choose a reason for hiding this comment

Choose a reason for hiding this comment

jeramysoucy commented Jan 15, 2025

elasticmachine commented Jan 15, 2025

💚 Build Succeeded

Metrics [docs]

Async chunks

Page load bundle

History

jbudz left a comment

Choose a reason for hiding this comment

jeramysoucy commented Jan 17, 2025

weltenwort left a comment

Choose a reason for hiding this comment

kibanamachine commented Jan 17, 2025

kibanamachine commented Jan 17, 2025

💔 All backports failed

Manual backport

Questions ?

elastic-renovate-prod bot commented Jan 10, 2025 •

edited by kibanamachine

Loading