fix(snyk): replace request package with node-fetch in subapp-web

.github/workflows/nodejs.yml

@@ -24,16 +24,18 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
-
+        # with: 
+        #   fetch-depth: 0
+
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v3
         with:
           node-version: ${{ matrix.node-version }}
-
+     
       # TODO: enable `rush change -v` after rush migration is completed.
-      # - name: Verify Change Logs
-        # run: node common/scripts/install-run-rush.js change --verify --target-branch upstream/master
-      
+      # - name: Verify Change files and fail build if not available
+      #   run: node common/scripts/install-run-rush.js change --verify
+
       - name: Install
         run: node common/scripts/install-run-rush.js install
 

CONTRIBUTING.md

@@ -157,7 +157,7 @@ Publishing is a three step process. When its time to publish packages (as per re
 - Review the CHANGELOG.md updates at this point
 
 #### **2. Publish Packages**
-- Run `rush publish --include-all --publish`
+- Run `rush publish --include-all --publish --apply`
   - This will publish all the public packages that have version increased.
 - Push the changes as PR to get the `CHANGELOG.md` updated to `master`.
 

packages/xarc-opt-karma/CHANGELOG.json

@@ -1,6 +1,18 @@
 {
   "name": "@xarc/opt-karma",
   "entries": [
+    {
+      "version": "4.0.0",
+      "tag": "@xarc/opt-karma_v4.0.0",
+      "date": "Mon, 17 Jul 2023 19:21:10 GMT",
+      "comments": {
+        "major": [
+          {
+            "comment": "Fix security vulnerabilities - dependencies upgraded"
+          }
+        ]
+      }
+    },
     {
       "version": "3.0.1",
       "tag": "@xarc/opt-karma_v3.0.1",

packages/xarc-opt-karma/CHANGELOG.md

@@ -1,6 +1,13 @@
 # Change Log - @xarc/opt-karma
 
-This log was last generated on Thu, 04 May 2023 21:08:31 GMT and should not be manually modified.
+This log was last generated on Mon, 17 Jul 2023 19:21:10 GMT and should not be manually modified.
+
+## 4.0.0
+Mon, 17 Jul 2023 19:21:10 GMT
+
+### Breaking changes
+
+- Fix security vulnerabilities - dependencies upgraded
 
 ## 3.0.1
 Thu, 04 May 2023 21:08:31 GMT

packages/xarc-opt-karma/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xarc/opt-karma",
-  "version": "3.0.1",
+  "version": "4.0.0",
   "description": "Electrode karma addon for unit tests",
   "main": "xarc-opt-check.js",
   "homepage": "http://www.electrode.io",
@@ -16,10 +16,6 @@
     "plugins",
     "lib"
   ],
-  "publishConfig": {
-    "registry": "https://registry.npmjs.com/",
-    "access": "public"
-  },
   "author": "Electrode (http://www.electrode.io/)",
   "contributors": [
     "Joel Chen <[email protected]>"

rush.json

@@ -213,17 +213,17 @@
      * your PR branch, and in this situation "rush change" will also automatically invoke "git fetch"
      * to retrieve the latest activity for the remote main branch.
      */
-    // "url": "https://github.com/microsoft/rush-example",
+    "url": "https://github.com/electrode-io/electrode",
     /**
      * The default branch name. This tells "rush change" which remote branch to compare against.
      * The default value is "main"
      */
-    // "defaultBranch": "main",
+    "defaultBranch": "master",
     /**
      * The default remote. This tells "rush change" which remote to compare against if the remote URL is
      * not set or if a remote matching the provided remote URL is not found.
      */
-    // "defaultRemote": "origin"
+    "defaultRemote": "origin"
   },
 
   /**