chore: update vulnerable dependencies

package.json

@@ -40,7 +40,8 @@
       "@nestjs/graphql>ws": "8.17.1",
       "braces": "3.0.3",
       "express": "4.19.2",
-      "pug": "3.0.3"
+      "pug": "3.0.3",
+      "micromatch@<4.0.8": "4.0.8"
     },
     "packageExtensions": {
       "@hoppscotch/httpsnippet": {

packages/hoppscotch-backend/package.json

@@ -67,7 +67,7 @@
     "passport-jwt": "4.0.1",
     "passport-local": "1.0.0",
     "passport-microsoft": "1.0.0",
-    "posthog-node": "3.6.3",
+    "posthog-node": "4.2.0",
     "prisma": "5.8.1",
     "reflect-metadata": "0.1.13",
     "rimraf": "3.0.2",

packages/hoppscotch-cli/package.json

@@ -41,7 +41,7 @@
   "license": "MIT",
   "private": false,
   "dependencies": {
-    "axios": "1.6.7",
+    "axios": "1.7.5",
     "chalk": "5.3.0",
     "commander": "11.1.0",
     "isolated-vm": "4.7.2",

packages/hoppscotch-common/package.json

@@ -48,7 +48,7 @@
     "@vitejs/plugin-legacy": "4.1.1",
     "@vueuse/core": "10.7.0",
     "acorn-walk": "8.3.0",
-    "axios": "1.6.2",
+    "axios": "1.7.5",
     "buffer": "6.0.3",
     "cookie-es": "1.0.0",
     "dioc": "3.0.2",

packages/hoppscotch-selfhost-desktop/package.json

@@ -22,7 +22,7 @@
     "@tauri-apps/api": "1.5.1",
     "@tauri-apps/cli": "1.5.6",
     "@vueuse/core": "10.5.0",
-    "axios": "0.21.4",
+    "axios": "1.7.5",
     "buffer": "6.0.3",
     "dioc": "3.0.2",
     "environments.api": "link:@platform/environments/environments.api",

packages/hoppscotch-selfhost-web/package.json

@@ -30,7 +30,7 @@
     "@hoppscotch/data": "workspace:^",
     "@hoppscotch/ui": "0.1.0",
     "@import-meta-env/unplugin": "0.4.10",
-    "axios": "1.6.2",
+    "axios": "1.7.5",
     "buffer": "6.0.3",
     "fp-ts": "2.16.1",
     "process": "0.11.10",

packages/hoppscotch-sh-admin/package.json

@@ -25,7 +25,7 @@
     "@urql/exchange-auth": "2.1.6",
     "@urql/vue": "1.1.2",
     "@vueuse/core": "9.12.0",
-    "axios": "0.21.4",
+    "axios": "1.7.5",
     "cors": "2.8.5",
     "date-fns": "2.29.3",
     "express": "4.18.2",

pnpm-lock.yaml

@@ -12,6 +12,7 @@ overrides:
   braces: 3.0.3
   express: 4.19.2
   pug: 3.0.3
+  micromatch@<4.0.8: 4.0.8
 
 packageExtensionsChecksum: da57d58cd55bf5e7924e59ad5f1485b8
 
@@ -195,8 +196,8 @@ importers:
         specifier: 1.0.0
         version: 1.0.0
       posthog-node:
-        specifier: 3.6.3
+        specifier: 4.2.0
-        version: 3.6.3
+        version: 4.2.0
       prisma:
         specifier: 5.8.1
         version: 5.8.1
@@ -319,8 +320,8 @@ importers:
   packages/hoppscotch-cli:
     dependencies:
       axios:
-        specifier: 1.6.7
+        specifier: 1.7.5
-        version: 1.6.7
+        version: 1.7.5
       chalk:
         specifier: 5.3.0
         version: 5.3.0
@@ -464,8 +465,8 @@ importers:
         specifier: 8.3.0
         version: 8.3.0
       axios:
-        specifier: 1.6.2
+        specifier: 1.7.5
-        version: 1.6.2
+        version: 1.7.5
       buffer:
         specifier: 6.0.3
         version: 6.0.3
@@ -938,8 +939,8 @@ importers:
         specifier: 10.5.0
         version: 10.5.0(vue@3.3.9(typescript@4.9.5))
       axios:
-        specifier: 0.21.4
+        specifier: 1.7.5
-        version: 0.21.4
+        version: 1.7.5
       buffer:
         specifier: 6.0.3
         version: 6.0.3
@@ -1134,8 +1135,8 @@ importers:
         specifier: 0.4.10
         version: 0.4.10(@import-meta-env/cli@0.6.3)(dotenv@16.3.1)
       axios:
-        specifier: 1.6.2
+        specifier: 1.7.5
-        version: 1.6.2
+        version: 1.7.5
       buffer:
         specifier: 6.0.3
         version: 6.0.3
@@ -1321,8 +1322,8 @@ importers:
         specifier: 9.12.0
         version: 9.12.0(vue@3.3.9(typescript@4.9.3))
       axios:
-        specifier: 0.21.4
+        specifier: 1.7.5
-        version: 0.21.4
+        version: 1.7.5
       cors:
         specifier: 2.8.5
         version: 2.8.5
@@ -3538,8 +3539,8 @@ packages:
     resolution: {integrity: sha512-4ttr/FNO29w+kBbU7HZ/U0Lzuh2cRDhP8UlWOtV9ERcjHzuyXVZmjyleESK6eVP60tGC9QtQW9yZE+JeRhDHkg==}
     engines: {node: '>= 14'}
 
-  '@intlify/message-compiler@10.0.0-beta.5':
+  '@intlify/message-compiler@10.0.0-beta.6':
-    resolution: {integrity: sha512-hLLchnM1dmtSEruerkzvU9vePsLqBXz3RU85SCx/Vd12fFQiymP+/5Rn9MJ8MyfLmIOLDEx4PRh+/GkIQP6oog==}
+    resolution: {integrity: sha512-zsChZ15nY73vJMHJPAK5yGM/w9EJxnDiiT+br+7F6052exRUrUUvKrLkvoP3daeMwsE768zVhKqqS439cd4aZw==}
     engines: {node: '>= 16'}
 
   '@intlify/message-compiler@9.13.1':
@@ -3558,8 +3559,8 @@ packages:
     resolution: {integrity: sha512-McnYWhcoYmDJvssVu6QGR0shqlkJuL1HHdi5lK7fNqvQqRYaQ4lSLjYmZxwc8tRNMdIe9/KUKfyPxU9M6yCtNQ==}
     engines: {node: '>= 16'}
 
-  '@intlify/shared@10.0.0-beta.5':
+  '@intlify/shared@10.0.0-beta.6':
-    resolution: {integrity: sha512-g9bq5Y1bOcC9qxtNk4UWtF3sXm6Wh0fGISb7vD5aLyF7yQv7ZFjxQjJzBP2GqG/9+PAGYutqjP1GGadNqFtyAQ==}
+    resolution: {integrity: sha512-Bz5aiS62ovE/27EpKDT+oFhr2ZYLkjKHuVI4NWz2C+bOuqBkFR20CJgBcmdm2GiAHMdyQfuhY+ThBv1XyHXk3A==}
     engines: {node: '>= 16'}
 
   '@intlify/shared@9.13.1':
@@ -5761,14 +5762,8 @@ packages:
     resolution: {integrity: sha512-wvUjBtSGN7+7SjNpq/9M2Tg350UZD3q62IFZLbRAR1bSMlCo1ZaeW+BJ+D090e4hIIZLBcTDWe4Mh4jvUDajzQ==}
     engines: {node: '>= 0.4'}
 
-  axios@0.21.4:
+  axios@1.7.5:
-    resolution: {integrity: sha512-ut5vewkiu8jjGBdqpM44XxjuCjq9LAKeHVmoVfHVzy8eHgxxq8SbAVQNovDA8mVi05kP0Ea/n/UzcSHcTJQfNg==}
+    resolution: {integrity: sha512-fZu86yCo+svH3uqJ/yTdQ0QHpQu5oL+/QE+QPSv6BZSkDAoky9vytxp7u5qk83OJFS3kEBcesWni9WTZAv3tSw==}
-
-  axios@1.6.2:
-    resolution: {integrity: sha512-7i24Ri4pmDRfJTR7LDBhsOTtcm+9kjX5WiY1X3wIisx6G9So3pfMkEiU7emUBe46oceVImccTEM3k6C5dbVW8A==}
-
-  axios@1.6.7:
-    resolution: {integrity: sha512-/hDJGff6/c7u0hDkvkGxR/oy6CbCs8ziCsC7SqmhjfozqiJGc8Z11wrv9z9lYfY4K8l+H9TpjcMDX0xOZmx+RA==}
 
   babel-jest@29.7.0:
     resolution: {integrity: sha512-BrvGY3xZSwEcCzKvKsCi2GgHqDqsYkOP4/by5xCgIwGXQxIEh+8ew3gmrE1y7XRR6LHZIj6yLYnUi/mm2KXKBg==}
@@ -9191,8 +9186,8 @@ packages:
     resolution: {integrity: sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==}
     engines: {node: '>= 0.6'}
 
-  micromatch@4.0.5:
+  micromatch@4.0.8:
-    resolution: {integrity: sha512-DMy+ERcEW2q8Z2Po+WNXuw3c5YaUSFjAO5GsJqfEl7UjvtIuFKO6ZrKvcItdy98dwFI2N1tg3zNIdKaQT+aNdA==}
+    resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==}
     engines: {node: '>=8.6'}
 
   mime-db@1.52.0:
@@ -10148,8 +10143,8 @@ packages:
     resolution: {integrity: sha512-YF2kKIUzAofPMpfH6hOi2cGnv/HrUlfucspc7pDyvv7kGdqXrfj8SCl/t8owkEgKEuu8ZcRjSOxFxVLqwChZ2Q==}
     engines: {node: ^10 || ^12 || >=14}
 
-  posthog-node@3.6.3:
+  posthog-node@4.2.0:
-    resolution: {integrity: sha512-JB+ei0LkwE+rKHyW5z79Nd1jUaGxU6TvkfjFqY9vQaHxU5aU8dRl0UUaEmZdZbHwjp3WmXCBQQRNyimwbNQfCw==}
+    resolution: {integrity: sha512-hgyCYMyzMvuF3qWMw6JvS8gT55v7Mtp5wKWcnDrw+nu39D0Tk9BXD7I0LOBp0lGlHEPaXCEVYUtviNKrhMALGA==}
     engines: {node: '>=15.0.0'}
 
   posthtml-parser@0.11.0:
@@ -12611,18 +12606,6 @@ packages:
       utf-8-validate:
         optional: true
 
-  ws@7.5.9:
-    resolution: {integrity: sha512-F+P9Jil7UiSKSkppIiD94dN07AwvFixvLIj1Og1Rl9GGMuNipJnV9JzjD6XuqmAeiswGvUmNLjr5cFuXwNS77Q==}
-    engines: {node: '>=8.3.0'}
-    peerDependencies:
-      bufferutil: ^4.0.1
-      utf-8-validate: ^5.0.2
-    peerDependenciesMeta:
-      bufferutil:
-        optional: true
-      utf-8-validate:
-        optional: true
-
   ws@8.13.0:
     resolution: {integrity: sha512-x9vcZYTrFPC7aSIbj7sRCYo7L/Xb8Iy+pW0ng0wt2vCJv7M9HOMy0UoN3rr+IFC7hb7vXoqS+P9ktyLLLhO+LA==}
     engines: {node: '>=10.0.0'}
@@ -14459,7 +14442,7 @@ snapshots:
       json-to-pretty-yaml: 1.2.2
       listr2: 4.0.5
       log-symbols: 4.1.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       shell-quote: 1.8.1
       string-env-interpolation: 1.0.1
       ts-log: 2.2.5
@@ -14506,7 +14489,7 @@ snapshots:
       json-to-pretty-yaml: 1.2.2
       listr2: 4.0.5
       log-symbols: 4.1.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       shell-quote: 1.8.1
       string-env-interpolation: 1.0.1
       ts-log: 2.2.5
@@ -15188,7 +15171,7 @@ snapshots:
       '@graphql-tools/utils': 9.2.1(graphql@16.6.0)
       graphql: 16.6.0
       is-glob: 4.0.3
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       tslib: 2.6.2
       unixify: 1.0.0
     transitivePeerDependencies:
@@ -15201,7 +15184,7 @@ snapshots:
       '@graphql-tools/utils': 10.2.0(graphql@16.8.1)
       graphql: 16.8.1
       is-glob: 4.0.3
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       tslib: 2.6.2
       unixify: 1.0.0
     transitivePeerDependencies:
@@ -15869,8 +15852,8 @@ snapshots:
 
   '@intlify/bundle-utils@3.4.0(vue-i18n@9.8.0(vue@3.3.9(typescript@5.3.2)))':
     dependencies:
-      '@intlify/message-compiler': 10.0.0-beta.5
+      '@intlify/message-compiler': 10.0.0-beta.6
-      '@intlify/shared': 10.0.0-beta.5
+      '@intlify/shared': 10.0.0-beta.6
       jsonc-eslint-parser: 1.4.1
       source-map: 0.6.1
       yaml-eslint-parser: 0.3.2
@@ -15923,9 +15906,9 @@ snapshots:
     dependencies:
       '@intlify/shared': 9.2.2
 
-  '@intlify/message-compiler@10.0.0-beta.5':
+  '@intlify/message-compiler@10.0.0-beta.6':
     dependencies:
-      '@intlify/shared': 10.0.0-beta.5
+      '@intlify/shared': 10.0.0-beta.6
       source-map-js: 1.2.0
 
   '@intlify/message-compiler@9.13.1':
@@ -15948,7 +15931,7 @@ snapshots:
       '@intlify/shared': 9.8.0
       source-map-js: 1.2.0
 
-  '@intlify/shared@10.0.0-beta.5': {}
+  '@intlify/shared@10.0.0-beta.6': {}
 
   '@intlify/shared@9.13.1': {}
 
@@ -15981,7 +15964,7 @@ snapshots:
   '@intlify/vite-plugin-vue-i18n@6.0.1(vite@4.5.0(@types/node@18.18.8)(sass@1.69.5)(terser@5.31.0))(vue-i18n@9.8.0(vue@3.3.9(typescript@4.9.5)))':
     dependencies:
       '@intlify/bundle-utils': 7.0.0(vue-i18n@9.8.0(vue@3.3.9(typescript@4.9.5)))
-      '@intlify/shared': 10.0.0-beta.5
+      '@intlify/shared': 10.0.0-beta.6
       '@rollup/pluginutils': 4.2.1
       debug: 4.3.4(supports-color@9.4.0)
       fast-glob: 3.3.2
@@ -15995,7 +15978,7 @@ snapshots:
   '@intlify/vite-plugin-vue-i18n@7.0.0(vite@4.5.0(@types/node@18.18.8)(sass@1.69.5)(terser@5.31.0))(vue-i18n@9.8.0(vue@3.3.9(typescript@5.3.2)))':
     dependencies:
       '@intlify/bundle-utils': 3.4.0(vue-i18n@9.8.0(vue@3.3.9(typescript@5.3.2)))
-      '@intlify/shared': 10.0.0-beta.5
+      '@intlify/shared': 10.0.0-beta.6
       '@rollup/pluginutils': 4.2.1
       debug: 4.3.4(supports-color@9.4.0)
       fast-glob: 3.3.2
@@ -16068,7 +16051,7 @@ snapshots:
       jest-util: 29.7.0
       jest-validate: 29.7.0
       jest-watcher: 29.7.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       pretty-format: 29.7.0
       slash: 3.0.0
       strip-ansi: 6.0.1
@@ -16103,7 +16086,7 @@ snapshots:
       jest-util: 29.7.0
       jest-validate: 29.7.0
       jest-watcher: 29.7.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       pretty-format: 29.7.0
       slash: 3.0.0
       strip-ansi: 6.0.1
@@ -16222,7 +16205,7 @@ snapshots:
       jest-haste-map: 29.7.0
       jest-regex-util: 29.6.3
       jest-util: 29.7.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       pirates: 4.0.6
       slash: 3.0.0
       write-file-atomic: 4.0.2
@@ -18823,21 +18806,7 @@ snapshots:
     dependencies:
       possible-typed-array-names: 1.0.0
 
-  axios@0.21.4:
+  axios@1.7.5:
-    dependencies:
-      follow-redirects: 1.15.6
-    transitivePeerDependencies:
-      - debug
-
-  axios@1.6.2:
-    dependencies:
-      follow-redirects: 1.15.6
-      form-data: 4.0.0
-      proxy-from-env: 1.1.0
-    transitivePeerDependencies:
-      - debug
-
-  axios@1.6.7:
     dependencies:
       follow-redirects: 1.15.6
       form-data: 4.0.0
@@ -21078,7 +21047,7 @@ snapshots:
       '@nodelib/fs.walk': 1.2.8
       glob-parent: 5.1.2
       merge2: 1.4.1
-      micromatch: 4.0.5
+      micromatch: 4.0.8
 
   fast-glob@3.3.2:
     dependencies:
@@ -21086,7 +21055,7 @@ snapshots:
       '@nodelib/fs.walk': 1.2.8
       glob-parent: 5.1.2
       merge2: 1.4.1
-      micromatch: 4.0.5
+      micromatch: 4.0.8
 
   fast-json-stable-stringify@2.1.0: {}
 
@@ -22390,7 +22359,7 @@ snapshots:
       jest-runner: 29.7.0
       jest-util: 29.7.0
       jest-validate: 29.7.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       parse-json: 5.2.0
       pretty-format: 29.7.0
       slash: 3.0.0
@@ -22421,7 +22390,7 @@ snapshots:
       jest-runner: 29.7.0
       jest-util: 29.7.0
       jest-validate: 29.7.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       parse-json: 5.2.0
       pretty-format: 29.7.0
       slash: 3.0.0
@@ -22452,7 +22421,7 @@ snapshots:
       jest-runner: 29.7.0
       jest-util: 29.7.0
       jest-validate: 29.7.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       parse-json: 5.2.0
       pretty-format: 29.7.0
       slash: 3.0.0
@@ -22483,7 +22452,7 @@ snapshots:
       jest-runner: 29.7.0
       jest-util: 29.7.0
       jest-validate: 29.7.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       parse-json: 5.2.0
       pretty-format: 29.7.0
       slash: 3.0.0
@@ -22554,7 +22523,7 @@ snapshots:
       jest-regex-util: 29.6.3
       jest-util: 29.7.0
       jest-worker: 29.7.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       walker: 1.0.8
     optionalDependencies:
       fsevents: 2.3.3
@@ -22592,7 +22561,7 @@ snapshots:
       '@types/stack-utils': 2.0.3
       chalk: 4.1.2
       graceful-fs: 4.2.11
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       pretty-format: 28.1.3
       slash: 3.0.0
       stack-utils: 2.0.6
@@ -22604,7 +22573,7 @@ snapshots:
       '@types/stack-utils': 2.0.3
       chalk: 4.1.2
       graceful-fs: 4.2.11
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       pretty-format: 29.7.0
       slash: 3.0.0
       stack-utils: 2.0.6
@@ -22862,7 +22831,7 @@ snapshots:
       whatwg-encoding: 1.0.5
       whatwg-mimetype: 2.3.0
       whatwg-url: 8.7.0
-      ws: 7.5.9
+      ws: 7.5.10
       xml-name-validator: 3.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -23066,7 +23035,7 @@ snapshots:
       execa: 5.1.1
       lilconfig: 2.0.4
       listr2: 4.0.5
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       normalize-path: 3.0.0
       object-inspect: 1.13.1
       pidtree: 0.5.0
@@ -23326,7 +23295,7 @@ snapshots:
 
   methods@1.1.2: {}
 
-  micromatch@4.0.5:
+  micromatch@4.0.8:
     dependencies:
       braces: 3.0.3
       picomatch: 2.3.1
@@ -24660,9 +24629,9 @@ snapshots:
       picocolors: 1.0.1
       source-map-js: 1.2.0
 
-  posthog-node@3.6.3:
+  posthog-node@4.2.0:
     dependencies:
-      axios: 1.6.7
+      axios: 1.7.5
       rusha: 0.8.14
     transitivePeerDependencies:
       - debug
@@ -25079,7 +25048,7 @@ snapshots:
 
   remote-content@4.0.0:
     dependencies:
-      axios: 1.6.7
+      axios: 1.7.5
       proxy-from-env: 1.1.0
     transitivePeerDependencies:
       - debug
@@ -25870,7 +25839,7 @@ snapshots:
       is-glob: 4.0.3
       jiti: 1.21.0
       lilconfig: 2.1.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       normalize-path: 3.0.0
       object-hash: 3.0.0
       picocolors: 1.0.0
@@ -25897,7 +25866,7 @@ snapshots:
       is-glob: 4.0.3
       jiti: 1.21.0
       lilconfig: 2.1.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       normalize-path: 3.0.0
       object-hash: 3.0.0
       picocolors: 1.0.0
@@ -25924,7 +25893,7 @@ snapshots:
       is-glob: 4.0.3
       jiti: 1.21.0
       lilconfig: 2.1.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       normalize-path: 3.0.0
       object-hash: 3.0.0
       picocolors: 1.0.0
@@ -26168,7 +26137,7 @@ snapshots:
     dependencies:
       chalk: 4.1.2
       enhanced-resolve: 5.16.0
-      micromatch: 4.0.5
+      micromatch: 4.0.8
       semver: 7.6.0
       typescript: 4.9.3
       webpack: 5.89.0(@swc/core@1.4.2)
@@ -27808,9 +27777,6 @@ snapshots:
 
   ws@7.5.10: {}
 
-  ws@7.5.9:
-    optional: true
-
   ws@8.13.0: {}
 
   ws@8.17.0: {}