search

citizenfx / fivem

The source code for the Cfx.re modification frameworks, such as FiveM, RedM and LibertyM, as well as FXServer.
https://cfx.re/
3.47k stars 2.05k forks source link

fix(ext/cfx-ui): updated dependencies #2480

Closed olegmakushev closed 4 months ago

olegmakushev commented 4 months ago

Goal of this PR

Update dependencies to avoid vulnerabilities.

How is this PR achieving the goal

The packages were audited for vulnerabilities. All packages have been updated, except one.

Moderate vulnerabilitie found in tar dependancy of pdfjs-dist package. I tried to update it to a new version but it have API changes that requeres more atantion and I think it will be better to do in a seporate PR.

image

Two packages were removed due to lack of use: imagemin-gifsicle and img-optimize-loader.

This PR applies to the following area(s)

FiveM, RedM

Successfully tested on

Platforms: Windows

Checklist

thorium-cfx commented 4 months ago

I had to revert the changes in this PR due to time constraints, it produced the below build errors. Can you see if you can repro these and make another PR to address them? Thanks

Building UI
yarn install v1.22.5
[1/4] Resolving packages...
[2/4] Fetching packages...
info @swc/core-android-arm-eabi@1.3.6: The platform "win32" is incompatible with this module.
info "@swc/core-android-arm-eabi@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-android-arm-eabi@1.3.6: The CPU architecture "x64" is incompatible with this module.
info @swc/core-android-arm64@1.3.6: The platform "win32" is incompatible with this module.
info "@swc/core-android-arm64@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-android-arm64@1.3.6: The CPU architecture "x64" is incompatible with this module.
info @swc/core-darwin-arm64@1.3.6: The platform "win32" is incompatible with this module.
info "@swc/core-darwin-arm64@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-darwin-arm64@1.3.6: The CPU architecture "x64" is incompatible with this module.
info @swc/core-darwin-x64@1.3.6: The platform "win32" is incompatible with this module.
info "@swc/core-darwin-x64@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-freebsd-x64@1.3.6: The platform "win32" is incompatible with this module.
info "@swc/core-freebsd-x64@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-linux-arm-gnueabihf@1.3.6: The platform "win32" is incompatible with this module.
info "@swc/core-linux-arm-gnueabihf@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-linux-arm-gnueabihf@1.3.6: The CPU architecture "x64" is incompatible with this module.
info @swc/core-linux-arm64-gnu@1.3.6: The platform "win32" is incompatible with this module.
info "@swc/core-linux-arm64-gnu@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-linux-arm64-gnu@1.3.6: The CPU architecture "x64" is incompatible with this module.
info @swc/core-linux-arm64-musl@1.3.6: The platform "win32" is incompatible with this module.
info "@swc/core-linux-arm64-musl@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-linux-arm64-musl@1.3.6: The CPU architecture "x64" is incompatible with this module.
info @swc/core-linux-x64-gnu@1.3.6: The platform "win32" is incompatible with this module.
info "@swc/core-linux-x64-gnu@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-linux-x64-musl@1.3.6: The platform "win32" is incompatible with this module.
info "@swc/core-linux-x64-musl@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-win32-arm64-msvc@1.3.6: The CPU architecture "x64" is incompatible with this module.
info "@swc/core-win32-arm64-msvc@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info @swc/core-win32-ia32-msvc@1.3.6: The CPU architecture "x64" is incompatible with this module.
info "@swc/core-win32-ia32-msvc@1.3.6" is an optional dependency and failed compatibility check. Excluding it from installation.
info fsevents@2.3.3: The platform "win32" is incompatible with this module.
info "fsevents@2.3.3" is an optional dependency and failed compatibility check. Excluding it from installation.
error sharp@0.33.3: The engine "node" is incompatible with this module. Expected version "^18.17.0 || ^20.3.0 || >=21.0.0". Got "16.17.1"
warning sharp@0.33.3: The engine "libvips" appears to be invalid.
error Found incompatible module.
info Visit https://yarnpkg.com/en/docs/cli/install for documentation about this command.
Failed to build CfxUI
BUILD FAILED