chore: update packages to fix vulns (see description)

also github actions now

[CVE-2024-27303](https://github.com/electron-userland/electron-builder/security/advisories/GHSA-r4pf-3v7r-hh55)
This commit is contained in:
2024-03-07 17:39:52 +00:00
parent f3e882f89c
commit c36a4494a8
4 changed files with 760 additions and 1243 deletions

View File

@@ -1,50 +0,0 @@
version: 2.1
jobs:
build_windows:
docker:
- image: electronuserland/builder:wine
steps:
- checkout
- run: yarn
- run: yarn build-electron-win
- run: mkdir /tmp/artifacts
- run: mv -t /tmp/artifacts dist/*.exe
- store_artifacts:
path: /tmp/artifacts
build_linux:
docker:
- image: node:lts
steps:
- checkout
- run: yarn
- run: yarn build-electron-linux
- run: mkdir /tmp/artifacts
- run: mv -t /tmp/artifacts dist/*.AppImage
- store_artifacts:
path: /tmp/artifacts
build_macos:
macos:
xcode: 14.2.0
steps:
- checkout
- run: yarn
- run: yarn build-electron-mac
- run: mkdir /tmp/artifacts
- run: mv dist/*.dmg /tmp/artifacts
- store_artifacts:
path: /tmp/artifacts
workflows:
build:
jobs:
- hold:
type: approval
- build_windows:
requires:
- hold
- build_linux:
requires:
- hold
- build_macos:
requires:
- hold

View File

@@ -16,8 +16,6 @@ jobs:
- name: Install Node.js, NPM and Yarn
uses: actions/setup-node@v1
with:
node-version: 18
- name: Install packages
run: yarn
@@ -25,6 +23,22 @@ jobs:
- name: Build electron index.ts file
run: yarn electron-build
- name: Move artifacts
run: |
mkdir -p /tmp/artifacts
if [ ${{ matrix.os }} == 'windows-latest' ]; then
mv dist/*.exe /tmp/artifacts
elif [ ${{ matrix.os }} == 'macos-latest' ]; then
mv dist/*.dmg /tmp/artifacts
else
mv dist/*.AppImage /tmp/artifacts
fi
- name: Upload artifacts
uses: actions/upload-artifact@v1
with:
name: application
path: /tmp/artifacts
- name: Build/release Electron app
uses: samuelmeuli/action-electron-builder@v1
with:

View File

@@ -43,7 +43,7 @@
"@vitejs/plugin-react-swc": "^3.3.2",
"concurrently": "^8.2.2",
"electron": "^28.1.0",
"electron-builder": "^24.4.0",
"electron-builder": "^24.13.3",
"eslint": "^8.44.0",
"eslint-plugin-react-hooks": "^4.6.0",
"eslint-plugin-react-refresh": "^0.4.1",

1933
yarn.lock

File diff suppressed because it is too large Load Diff