fix: Patch workflow and packages (#15)

* fix: patch vulnerabilities and add arm64 support (#13)

* fix: update vite version for directus/extension (#12)

Co-authored-by: Kristoffer <zs-ko@users.noreply.github.com>

* update lock

* fix: add override for vite dependency

* fix: add error messages on cache

* fix: add blank to username/password if undefined

* fix: add missing configurations to redis. add more catch statemsnts

* doc: add REDIS_JWT_DB

* add arm64

* fix: resolve vulnerabilities in get-func-name,postcss,zod

* fix: update chai

* disable default attestations

* fix: correct image build for arm

* fix: remove quemu

* fix: typo in runner name

* fix runner

* fix: add platform to build and push resolves arm64

* fix: resolve invalid lock file

---------

Co-authored-by: Kristoffer <zs-ko@users.noreply.github.com>

* fix: bump directus sdk (#14)

Co-authored-by: zs-ko <zs-ko@users.noreply.github.com>

* ci: add audit to ci

---------

Co-authored-by: Kristoffer <zs-ko@users.noreply.github.com>

.github/workflows/pr.yml

@@ -31,6 +31,8 @@ jobs:
         name: linting
       - run: pnpm test:coverage
         name: testing
+      - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
+        run: pnpm audit signatures
       - run: pnpm build
         name: build package
       - name: 'Report Coverage'

package.json

@@ -95,35 +95,35 @@
 	},
 	"devDependencies": {
 		"@directus/errors": "^0.0.2",
-		"@directus/extensions-sdk": "^10.1.9",
-		"@directus/tsconfig": "^1.0.0",
-		"@directus/types": "^10.1.5",
-		"@directus/utils": "^10.0.9",
+		"@directus/extensions-sdk": "^10.1.14",
+		"@directus/tsconfig": "^1.0.1",
+		"@directus/types": "^10.1.6",
+		"@directus/utils": "^10.0.11",
 		"@istanbuljs/nyc-config-typescript": "^1.0.2",
 		"@semantic-release/changelog": "^6.0.3",
 		"@semantic-release/commit-analyzer": "^10.0.4",
 		"@semantic-release/exec": "^6.0.3",
-		"@semantic-release/github": "^9.0.4",
-		"@semantic-release/npm": "^10.0.5",
-		"@types/chai": "^4.3.5",
-		"@types/chai-as-promised": "^7.1.5",
-		"@types/config": "^3.3.0",
+		"@semantic-release/github": "^9.2.3",
+		"@semantic-release/npm": "^10.0.6",
+		"@types/chai": "^4.3.10",
+		"@types/chai-as-promised": "^7.1.8",
+		"@types/config": "^3.3.3",
 		"@types/expect": "^24.3.0",
-		"@types/express": "^4.17.17",
-		"@types/fs-extra": "^11.0.1",
-		"@types/js-yaml": "^4.0.5",
-		"@types/jsonwebtoken": "^9.0.2",
-		"@types/lodash-es": "^4.17.8",
-		"@types/mocha": "^10.0.1",
-		"@types/node": "^20.5.7",
+		"@types/express": "^4.17.21",
+		"@types/fs-extra": "^11.0.4",
+		"@types/js-yaml": "^4.0.9",
+		"@types/jsonwebtoken": "^9.0.5",
+		"@types/lodash-es": "^4.17.11",
+		"@types/mocha": "^10.0.4",
+		"@types/node": "^20.9.0",
 		"@typescript-eslint/eslint-plugin": "^5.62.0",
-		"@vitest/coverage-istanbul": "^0.34.3",
-		"axios": "^1.5.0",
+		"@vitest/coverage-istanbul": "^0.34.6",
+		"axios": "^1.6.2",
 		"config": "^3.3.9",
 		"dotenv": "^16.3.1",
-		"eslint": "^8.48.0",
+		"eslint": "^8.53.0",
 		"eslint-config-standard-with-typescript": "^37.0.0",
-		"eslint-plugin-import": "^2.28.1",
+		"eslint-plugin-import": "^2.29.0",
 		"eslint-plugin-n": "^15.7.0",
 		"eslint-plugin-no-loops": "^0.3.0",
 		"eslint-plugin-promise": "^6.1.1",
@@ -132,26 +132,25 @@
 		"knex": "^2.5.1",
 		"lodash-es": "^4.17.21",
 		"nyc": "^15.1.0",
-		"semantic-release": "^21.1.1",
+		"semantic-release": "^21.1.2",
 		"sqlite3": "^5.1.6",
 		"ts-mocha": "^10.0.0",
 		"ts-node": "^10.9.1",
 		"typescript": "^5.2.2",
-		"vitest": "^0.34.3"
+		"vitest": "^0.34.6"
 	},
 	"dependencies": {
-		"@keyv/redis": "^2.7.0",
+		"@keyv/redis": "^2.8.0",
 		"jsonwebtoken": "^9.0.2",
-		"jwks-rsa": "^3.0.1",
-		"keyv": "^4.5.3",
-		"openid-client": "^5.4.3"
+		"jwks-rsa": "^3.1.0",
+		"keyv": "^4.5.4",
+		"openid-client": "^5.6.1"
 	},
 	"pnpm": {
 		"overrides": {
 			"vite": "^4.3.9",
-			"get-func-name@<2.0.1": ">=2.0.1",
 			"zod@<=3.22.2": ">=3.22.3",
-			"postcss@<8.4.31": ">=8.4.31"
+			"axios@<=1.4.0": ">=1.4.1"
 		}
 	}
 }