Development Dependency updates and tightening security (#1405)

Author: MaxAake

package.json

@@ -3,13 +3,13 @@
   "private": true,
   "type": "module",
   "devDependencies": {
-    "@types/node": "^24.0.10",
-    "husky": "^8.0.3",
-    "lerna": "^9.0.3",
-    "lint-staged": "^16.2.3",
-    "standard": "^17.1.2",
-    "ts-standard": "^12.0.2",
-    "typescript": "^5.9.2"
+    "@types/node": "^24.12.2",
+    "husky": "8.0.3",
+    "lerna": "9.0.7",
+    "lint-staged": "16.4.0",
+    "standard": "17.1.2",
+    "ts-standard": "12.0.2",
+    "typescript": "5.9.3"
   },
   "lint-staged": {
     "*.{js,html}": [

packages/bolt-connection/package.json

@@ -34,11 +34,11 @@
   "devDependencies": {
     "@types/jest": "^29.5.3",
     "@types/node": "^24.3.0",
-    "fast-check": "^3.10.0",
-    "jest": "^29.6.2",
-    "lolex": "^6.0.0",
-    "ts-jest": "^29.1.1",
-    "typescript": "^5.9.2"
+    "fast-check": "3.23.2",
+    "jest": "29.7.0",
+    "@sinonjs/fake-timers": "15.3.2",
+    "ts-jest": "29.4.9",
+    "typescript": "5.9.3"
   },
   "dependencies": {
     "buffer": "^6.0.3",

packages/bolt-connection/test/rediscovery/rediscovery.test.js

@@ -19,7 +19,7 @@ import { RawRoutingTable } from '../../src/bolt'
 import Rediscovery from '../../src/rediscovery'
 import RoutingTable from '../../src/rediscovery/routing-table'
 import FakeConnection from '../fake-connection'
-import lolex from 'lolex'
+import lolex from '@sinonjs/fake-timers'
 import { newError, error, int, internal } from 'neo4j-driver-core'
 
 const {

packages/core/package.json

@@ -37,14 +37,14 @@
   "devDependencies": {
     "@types/jest": "^29.5.10",
     "@types/node": "^24.3.0",
-    "esdoc": "^1.1.0",
-    "esdoc-importpath-plugin": "^1.0.2",
-    "esdoc-standard-plugin": "^1.0.0",
-    "fast-check": "^3.14.0",
-    "jest": "^29.7.0",
+    "esdoc": "1.1.0",
+    "esdoc-importpath-plugin": "1.0.2",
+    "esdoc-standard-plugin": "1.0.0",
+    "fast-check": "3.23.2",
+    "jest": "29.7.0",
     "source-map": "0.7.4",
-    "ts-jest": "^29.1.1",
-    "ts-node": "^10.9.1",
-    "typescript": "^5.9.2"
+    "ts-jest": "29.4.9",
+    "ts-node": "10.9.2",
+    "typescript": "5.9.3"
   }
 }

packages/neo4j-driver-lite/package.json

@@ -48,21 +48,20 @@
     "@rollup/plugin-commonjs": "^21.1.0",
     "@rollup/plugin-node-resolve": "^13.3.0",
     "@types/jest": "^29.5.10",
-    "browser-resolve": "^2.0.0",
-    "browserify-sign": "^4.2.2",
-    "esdoc": "^1.1.0",
-    "esdoc-importpath-plugin": "^1.0.2",
-    "esdoc-standard-plugin": "^1.0.0",
-    "isomorphic-ws": "^4.0.1",
-    "jest": "^29.7.0",
-    "rollup": "^2.77.4-1",
-    "rollup-plugin-polyfill-node": "^0.11.0",
-    "testcontainers": "^8.16.0",
-    "ts-jest": "^29.1.1",
-    "ts-node": "^10.9.1",
-    "typescript": "^5.9.2",
-    "uglify-js": "^3.17.4",
-    "ws": "^8.14.2"
+    "browser-resolve": "2.0.0",
+    "esdoc": "1.1.0",
+    "esdoc-importpath-plugin": "1.0.2",
+    "esdoc-standard-plugin": "1.0.0",
+    "isomorphic-ws": "4.0.1",
+    "jest": "29.7.0",
+    "rollup": "2.80.0",
+    "rollup-plugin-polyfill-node": "0.13.0",
+    "testcontainers": "8.16.0",
+    "ts-jest": "29.4.9",
+    "ts-node": "10.9.2",
+    "typescript": "5.9.3",
+    "uglify-js": "3.19.3",
+    "ws": "8.20.0"
   },
   "dependencies": {
     "neo4j-driver-bolt-connection": "workspace:*",

packages/neo4j-driver/gulpfile.babel.js

@@ -21,11 +21,8 @@ const uglify = require('gulp-uglify')
 const watch = require('gulp-watch')
 const batch = require('gulp-batch')
 const replace = require('gulp-replace')
-const fs = require('fs-extra')
 const path = require('path')
 const minimist = require('minimist')
-const install = require('gulp-install')
-const file = require('gulp-file')
 const rollup = require('rollup')
 const rollupCommonJs = require('@rollup/plugin-commonjs')
 const rollupNodeResolve = require('@rollup/plugin-node-resolve').default
@@ -86,26 +83,6 @@ gulp.task('browser::esm', gulp.series('generate-esm-bundle', 'minify-esm-bundle'
 /** Build all-in-one files for use in the browser */
 gulp.task('browser', gulp.series('nodejs', gulp.parallel('browser::umd', 'browser::esm')))
 
-// prepares directory for package.test.js
-gulp.task(
-  'install-driver-into-sandbox',
-  gulp.series('nodejs', function () {
-    const testDir = path.join('build', 'sandbox')
-    fs.emptyDirSync(testDir)
-
-    const packageJsonContent = JSON.stringify({
-      private: true,
-      dependencies: {
-        'neo4j-driver': __dirname
-      }
-    })
-
-    return file('package.json', packageJsonContent, { src: true })
-      .pipe(gulp.dest(testDir))
-      .pipe(install())
-  })
-)
-
 gulp.task('test-nodejs', () => {
   return runJestTests()
 })

packages/neo4j-driver/package.json

@@ -44,51 +44,46 @@
   "jsdelivr": "lib/browser/neo4j-web.js",
   "types": "types/index.d.ts",
   "devDependencies": {
-    "@babel/core": "^7.20.7",
-    "@babel/plugin-transform-runtime": "^7.19.6",
-    "@babel/preset-env": "^7.20.7",
-    "@babel/register": "^7.18.9",
-    "@babel/runtime": "^7.20.7",
+    "@babel/core": "7.29.0",
+    "@babel/plugin-transform-runtime": "7.29.0",
+    "@babel/preset-env": "7.29.2",
+    "@babel/register": "7.28.6",
+    "@babel/runtime": "7.29.2",
     "@rollup/plugin-commonjs": "^21.1.0",
     "@rollup/plugin-node-resolve": "^13.3.0",
-    "@types/node": "^24.3.0",
-    "@types/vinyl": "^2.0.12",
     "@types/jest": "^29.5.14",
-    "async": "^3.2.5",
-    "browser-resolve": "^2.0.0",
-    "browserify-sign": "^4.2.2",
-    "esdoc": "^1.1.0",
-    "esdoc-importpath-plugin": "^1.0.2",
-    "esdoc-standard-plugin": "^1.0.0",
-    "fancy-log": "^2.0.0",
-    "fs-extra": "^11.1.1",
-    "gulp": "^4.0.2",
-    "gulp-batch": "^1.0.5",
-    "gulp-decompress": "^3.0.0",
-    "gulp-download": "^0.0.1",
-    "gulp-file": "^0.4.0",
-    "gulp-install": "^1.1.0",
-    "gulp-replace": "^1.1.4",
-    "gulp-typescript": "^5.0.1",
-    "gulp-uglify": "^3.0.2",
-    "gulp-watch": "^5.0.1",
-    "isomorphic-ws": "^4.0.1",
-    "jest": "^29.7.0",
-    "jest-environment-jsdom": "^29.7.0",
-    "lolex": "^6.0.0",
-    "minimist": "^1.2.8",
-    "rollup": "^2.77.4-1",
-    "rollup-plugin-polyfill-node": "^0.11.0",
-    "semver": "^7.5.4",
+    "@types/node": "^24.12.2",
+    "@types/vinyl": "^2.0.12",
+    "async": "3.2.6",
+    "browser-resolve": "2.0.0",
+    "esdoc": "1.1.0",
+    "esdoc-importpath-plugin": "1.0.2",
+    "esdoc-standard-plugin": "1.0.0",
+    "fancy-log": "2.0.0",
+    "gulp": "4.0.2",
+    "gulp-batch": "1.0.5",
+    "gulp-decompress": "3.0.0",
+    "gulp-replace": "1.1.4",
+    "gulp-typescript": "5.0.1",
+    "gulp-uglify": "3.0.2",
+    "gulp-watch": "5.0.1",
+    "isomorphic-ws": "4.0.1",
+    "jest": "29.7.0",
+    "jest-environment-jsdom": "29.7.0",
+    "@sinonjs/fake-timers": "15.3.2",
+    "minimist": "1.2.8",
+    "rollup": "2.80.0",
+    "rollup-plugin-polyfill-node": "0.13.0",
+    "semver": "7.7.4",
     "source-map": "0.7.4",
-    "testcontainers": "^8.16.0",
+    "testcontainers": "8.16.0",
     "tmp": "0.2.1",
-    "ts-jest": "^29.1.1",
-    "ts-node": "^10.9.1",
-    "typescript": "^5.9.2",
-    "vinyl-buffer": "^1.0.1",
-    "webpack": "^5.89.0",
-    "ws": "^8.14.2"
+    "ts-jest": "29.4.9",
+    "ts-node": "10.9.2",
+    "typescript": "5.9.3",
+    "vinyl-buffer": "1.0.1",
+    "webpack": "5.106.2",
+    "ws": "8.20.0"
   },
   "dependencies": {
     "neo4j-driver-bolt-connection": "workspace:*",

packages/neo4j-driver/test/driver.test.js

@@ -17,7 +17,7 @@
 
 import neo4j from '../src'
 import sharedNeo4j from './internal/shared-neo4j'
-import lolex from 'lolex'
+import lolex from '@sinonjs/fake-timers'
 import testUtils from './internal/test-utils'
 import { json, internal, bookmarkManager } from 'neo4j-driver-core'
 

packages/neo4j-driver/test/internal/connection-channel.test.js

@@ -25,7 +25,7 @@ import { alloc } from '../../../bolt-connection/lib/channel'
 import { Neo4jError, newError, error, internal } from 'neo4j-driver-core'
 import sharedNeo4j from '../internal/shared-neo4j'
 import { ServerVersion } from '../../src/internal/server-version'
-import lolex from 'lolex'
+import lolex from '@sinonjs/fake-timers'
 import ConnectionErrorHandler from '../../../bolt-connection/lib/connection/connection-error-handler'
 import testUtils from '../internal/test-utils'
 import { WRITE } from '../../src/driver'

packages/neo4j-driver/test/internal/connection-provider-pooled.test.js

@@ -16,7 +16,7 @@
  */
 import PooledConnectionProvider from '../../../bolt-connection/lib/connection-provider/connection-provider-pooled'
 import FakeConnection from './fake-connection'
-import lolex from 'lolex'
+import lolex from '@sinonjs/fake-timers'
 
 describe('#unit PooledConnectionProvider', () => {
   it('should treat closed connections as invalid', async () => {