chore(deps): bump the dependencies group across 1 directory with 4 updates

[dependabot[bot]]

Bumps the dependencies group with 4 updates in the / directory: @nodesecure/js-x-ray, @nodesecure/rc, @nodesecure/scanner and @topcli/spinner.

Updates @nodesecure/js-x-ray from 8.2.0 to 10.1.0

Release notes

Sourced from @​nodesecure/js-x-ray's releases.

@​nodesecure/js-x-ray@​10.1.0

Minor Changes

• #407 71c96d1 Thanks @​fraxken! - Update FrequencySet to v2.1.x

Patch Changes

• Updated dependencies [71c96d1]:
  • @​nodesecure/sec-literal@​1.3.0

@​nodesecure/js-x-ray@​10.0.0

Major Changes

• #383 09c3575 Thanks @​clemgbld! - feat(tracer): support tracking function return values

Minor Changes

• #399 857308c Thanks @​clemgbld! - feat(probes) add minimal implementation of data-exfiltration

• #392 02a2d05 Thanks @​fraxken! - Simplify tracing validation & add new spread test for the probe

• #398 b6d2474 Thanks @​fraxken! - Implement new pipeline mechanism with a built-in deobfuscate

• #382 bc62d3e Thanks @​clemgbld! - feat(probes): add finalize callback

• #397 283d5b6 Thanks @​fraxken! - Integrate estree-walker natively using meriyah ESTree types

• #387 4d097cc Thanks @​fraxken! - Move trojan-source detection from SourceFile to AstAnalyser

• #396 f66af80 Thanks @​fraxken! - Move Signals into probe.main context

• #380 99fd4fe Thanks @​clemgbld! - refactor(probes): isFetch detect fetch re-assigment

• #395 fad019f Thanks @​fraxken! - Implement context for Probe and ProbeRunner

• #389 f037105 Thanks @​clemgbld! - feat(probes): isLiteral detect api.ipify.org with shady link

• #384 728d744 Thanks @​fraxken! - move ProbeRunner from SourceFile to AstAnalyser class

Patch Changes

• #376 d5b98de Thanks @​tony-go! - Handle uname as unsafe-command

• #400 14cb982 Thanks @​fraxken! - Properly deep clone and reset probe context

• #381 ca954d8 Thanks @​tony-go! - Handle curl and ping for unsafe-command probe

• Updated dependencies [91031f8, 7927535, 09c3575, facb858, 53b25a4]:

  • @​nodesecure/tracer@​3.0.0
  • @​nodesecure/estree-ast-utils@​4.2.0

... (truncated)

Commits

• f4da076 chore: update versions (#408)
• 07dc2a4 chore(deps): bump openai in the dependencies group across 1 directory (#409)
• 71c96d1 chore: update frequency-set to v2.1.x (#407)
• b52c5c2 chore(deps): bump the github-actions group with 6 updates (#405)
• 8ba1aa2 feat(js-x-ray-ai): implement a workspace to combine ai + js-X-ray (#404)
• 4a4154b chore(deps): bump string-width in the dependencies group (#403)
• 683b5fe chore(deps): bump the github-actions group with 2 updates (#402)
• f5b9964 chore(scripts): replace all clean script by open-ally clear-ts-build script (...
• f61651b chore: update versions (#378)
• 857308c feat(probes): add minimal implementation of data exfiltration (#399)
• Additional commits viewable in compare view

Updates @nodesecure/rc from 4.1.0 to 5.0.1

Release notes

Sourced from @​nodesecure/rc's releases.

@​nodesecure/rc@​5.0.1

Patch Changes

• #472 9ef1ee6 Thanks @​fraxken! - Upgrade JS-X-Ray to v9.2.0 and fix related TS breaking changes

@​nodesecure/rc@​5.0.0

Major Changes

• #442 41b1de2 Thanks @​fraxken! - Update all interfaces to start with a Maj

Commits

• See full diff in compare view

Updates @nodesecure/scanner from 6.12.1 to 7.2.0

Release notes

Sourced from @​nodesecure/scanner's releases.

@​nodesecure/scanner@​7.2.0

Minor Changes

• #544 281c720 Thanks @​clemgbld! - feat(scanner): add npm token based on registry for sdk calls

• #542 49c5bbb Thanks @​fraxken! - Improve type-squatting global-warning by removing it on remote scan and also when there is to much similar packages

@​nodesecure/scanner@​7.1.0

Minor Changes

• #535 746c0fd Thanks @​clemgbld! - feat(scanner): implement dependency confusion detection

• #540 6105c7f Thanks @​clemgbld! - feat(scanner): add dependency warning only when getting a 404 from the public npm registry

• #541 dadb7fb Thanks @​fraxken! - Keep NPM provenance (attestations) in Dependency version

Patch Changes

• Updated dependencies [02f111e, b989ceb]:
  • @​nodesecure/tarball@​2.2.0
  • @​nodesecure/conformance@​1.2.0

@​nodesecure/scanner@​7.0.0

Major Changes

• #509 979c469 Thanks @​fraxken! - Extend global warning with multi-properties objects

Patch Changes

• Updated dependencies [06b599f, 045c378]:
  • @​nodesecure/npm-types@​1.3.0
  • @​nodesecure/mama@​2.0.2

Commits

• b12281b chore: update versions (#543)
• 281c720 feat(scanner): add npm token based on registry for sdk calls (#544)
• 49c5bbb refactor(typo-squatting): remove on local scan or when similar >= 3 (#542)
• 5765023 chore: update versions (#527)
• dadb7fb feat(scanner): keep NPM provenance (attestations) in the dependency version (...
• 728e2a1 chore(deps-dev): bump the development-dependencies group across 1 directory w...
• cfce49e chore(deps): bump the dependencies group across 1 directory with 4 updates (#...
• 6105c7f feat(scanner): add dependency warning only when getting a 404 from the public...
• a02664f Merge pull request #538 from NodeSecure/upt-frequency-set
• d20e27a chore: update frequency-set to v2.x
• Additional commits viewable in compare view

Updates @topcli/spinner from 3.0.0 to 4.0.0

Release notes

Sourced from @​topcli/spinner's releases.

v4.0.0

What's Changed

• chore(dependabot): use groups by @​fraxken in TopCli/Spinner#202
• chore: update & pin (save-exact) cli-spinners dependency by @​fraxken in TopCli/Spinner#210
• fix: spinner name always shows the default one by @​sistemico in TopCli/Spinner#212

New Contributors

• @​sistemico made their first contribution in TopCli/Spinner#212

Full Changelog: https://github.com/TopCli/Spinner/compare/v3.0.0...v4.0.0

Commits

• e40fe47 4.0.0
• 1451b71 fix: spinner name always shows the default one (#212)
• 67f7b4d chore(deps): bump the github-actions group with 4 updates (#211)
• c05cdfa chore: update & pin (save-exact) cli-spinners dependency (#210)
• 49ef286 chore(deps): bump the github-actions group with 4 updates (#209)
• 6060299 chore(deps): bump the github-actions group with 4 updates (#208)
• 5f6e67d chore(dependabot): use groups (#202)
• c70fc44 chore(deps-dev): bump @​types/node in the development-dependencies group (#199)
• 09e6bd5 chore(deps): bump github/codeql-action from 3.28.18 to 3.29.11 (#206)
• 51d0acc refactor!: rename interface starting with I Maj (#203)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions