Version 3.16.0

RELEASE_NOTES.md

@@ -1,3 +1,9 @@
+# 3.16.0
+* Upgrade all NPM dependencies.
+
+# 3.15.1
+* Avoid treating numeric-looking arguments as numbers.
+
 # 3.15.0
 
 * Reinstate preview link

bin/flourish

@@ -57,6 +57,11 @@ process.on("unhandledRejection", function(reason, p) {
 
 function main() {
 	const args = minimist(process.argv.slice(2), OPTS);
+
+	// minimist unhelpfully treats numeric strings as numbers;
+	// which means we have to turn them back into strings.
+	args._ = args._.map(x => "" + x);
+
 	let command = args._[0];
 
 	const server_opts = {

package.json

@@ -1,11 +1,11 @@
 {
   "name": "@flourish/sdk",
-  "version": "3.15.0",
+  "version": "3.16.0",
   "description": "The Flourish SDK",
   "module": "src/index.js",
   "scripts": {
     "prepare": "cd .. && make sdk_clean sdk",
-    "test": "mocha"
+    "test": "mocha --recursive"
   },
   "bin": {
     "flourish": "bin/flourish"
@@ -15,33 +15,34 @@
   "repository": "kiln/flourish-sdk",
   "dependencies": {
     "@flourish/semver": "^1.0.1",
-    "archiver": "^3.0.0",
-    "chokidar": "^3.0.1",
-    "colors": "^1.3.3",
-    "cross-spawn": "^6.0.5",
-    "d3-dsv": "^1.1.1",
+    "@handlebars/allow-prototype-access": "^1.0.3",
+    "archiver": "^5.0.2",
+    "chokidar": "^3.4.3",
+    "colors": "^1.4.0",
+    "cross-spawn": "^7.0.3",
+    "d3-dsv": "^2.0.0",
     "express": "^4.17.1",
-    "handlebars": "^4.1.2",
-    "js-yaml": "^3.13.1",
-    "minimist": "^1.2.0",
+    "handlebars": "^4.7.6",
+    "js-yaml": "^3.14.0",
+    "minimist": "^1.2.5",
     "ncp": "^2.0.0",
-    "parse5": "^5.1.0",
+    "parse5": "^6.0.1",
     "read": "^1.0.7",
-    "request": "^2.88.0",
-    "resolve": "^1.11.1",
+    "request": "^2.88.2",
+    "resolve": "^1.18.1",
     "rewrite-links": "^1.1.0",
-    "shell-quote": "^1.6.1",
-    "tmp": "^0.1.0",
-    "ws": "^7.0.1"
+    "rollup-plugin-terser": "^7.0.2",
+    "shell-quote": "^1.7.2",
+    "tmp": "^0.2.1",
+    "ws": "^7.3.1"
   },
   "devDependencies": {
+    "@rollup/plugin-node-resolve": "^9.0.0",
     "d3-request": "^1.0.6",
-    "mocha": "^6.1.4",
-    "rollup": "^1.16.2",
-    "rollup-plugin-node-resolve": "^5.1.0",
-    "rollup-plugin-uglify": "^6.0.2",
-    "sinon": "^8.1.1",
-    "tempy": "^0.3.0"
+    "mocha": "^8.2.0",
+    "rollup": "^2.32.1",
+    "sinon": "^9.2.0",
+    "tempy": "^1.0.0"
   },
   "engines": {
     "node": ">=8.3"

server/data.js

@@ -109,7 +109,7 @@ function extractData(data_binding, data_by_id) {
 }
 
 function trimTrailingEmptyRows(data) {
-	for (var i = data.length; i-- > 0;) {
+	for (var i = data.length; i-- > 1;) {
 		if (!data[i] || !data[i].length || data[i].findIndex(function(col) { return col !== null && col !== ""; }) == -1) {
 			data.splice(i, 1);
 		}

server/index.js

@@ -9,7 +9,6 @@ const crypto = require("crypto"),
       chokidar = require("chokidar"),
       d3_dsv = require("d3-dsv"),
       express = require("express"),
-      handlebars = require("handlebars"),
       shell_quote = require("shell-quote"),
       ws = require("ws"),
       yaml = require("js-yaml"),
@@ -23,6 +22,9 @@ const crypto = require("crypto"),
       log = require("../lib/log"),
       sdk = require("../lib/sdk");
 
+const { allowInsecurePrototypeAccess } = require("@handlebars/allow-prototype-access");
+const handlebars = allowInsecurePrototypeAccess(require("handlebars"));
+
 const TA = require("parse5/lib/tree-adapters/default.js");
 
 // Generate a static prefix randomly