Upgrade various dependencies (#838)

* upgrade aws dependencies

* migrate the npm-upgrade config file to an npm-check-updates config file

* upgrade better-npm-audit

* upgrade redocly and spectral

* minor updates of serveral libraries

* upgrade serverless to latest 3.x version and ignore in the future

* upgrade express

* upgrade winston and zod

* upgrade webpack dependencies

* upgrade nock

* upgrade linting

Author: philvarner

.husky/pre-commit

@@ -5,3 +5,4 @@ npm run audit-prod
 npm run test:unit
 npm run test:system
 npm run build
+npm run build-api-docs

.ncurc.json

@@ -1,4 +1,13 @@
 {
   "upgrade": false,
-  "reject": ["@types/node", "got", "ava", "@ava/typescript", "eslint"]
+  "reject": [
+    "@types/node",
+    "got",
+    "ava",
+    "@ava/typescript",
+    "eslint",
+    "@opensearch-project/opensearch",
+    "serverless",
+    "serverless-offline"
+  ]
 }

package-lock.json

@@ -58,9 +58,9 @@
     "@aws-sdk/s3-request-presigner": "^3.758.0",
     "@mapbox/extent": "^0.4.0",
     "@opensearch-project/opensearch": "^2.13.0",
-    "@redocly/cli": "^1.12.2",
+    "@redocly/cli": "^1.34.0",
     "cors": "^2.8.5",
-    "express": "^4.19.2",
+    "express": "^4.21.2",
     "got": "^13.0",
     "http-errors": "^2.0.0",
     "lodash-es": "^4.17.21",
@@ -69,54 +69,54 @@
     "p-filter": "^4.1.0",
     "serverless-http": "^3.2.0",
     "through2": "^4.0.2",
-    "ts-loader": "^9.5.1",
-    "winston": "^3.13.0",
+    "ts-loader": "^9.5.2",
+    "winston": "^3.17.0",
     "xml2js": "0.6.2",
-    "zod": "^3.23.8"
+    "zod": "^3.24.2"
   },
   "devDependencies": {
     "@ava/typescript": "^4.1.0",
-    "@stoplight/spectral-cli": "^6.11.1",
+    "@stoplight/spectral-cli": "^6.14.3",
     "@tsconfig/node20": "^20.1.4",
     "@types/aws-lambda": "^8.10.147",
     "@types/cors": "^2.8.17",
-    "@types/express": "^4.17.21",
+    "@types/express": "^5.0.1",
     "@types/http-errors": "^2.0.4",
     "@types/luxon": "^3.4.2",
     "@types/memorystream": "^0.3.4",
     "@types/morgan": "^1.9.9",
     "@types/node": "^20.14",
-    "@types/sinon": "^17.0.3",
-    "@typescript-eslint/eslint-plugin": "^7.9.0",
-    "@typescript-eslint/parser": "^7.9.0",
+    "@types/sinon": "^17.0.4",
+    "@typescript-eslint/eslint-plugin": "^8.27.0",
+    "@typescript-eslint/parser": "^8.27.0",
     "ava": "^5.3",
     "aws-event-mocks": "^0.0.0",
     "aws-sdk-client-mock": "^4.1.0",
-    "better-npm-audit": "^3.7.3",
-    "c8": "^9.1.0",
-    "copy-webpack-plugin": "^12.0.2",
+    "better-npm-audit": "^3.11.0",
+    "c8": "^10.1.3",
+    "copy-webpack-plugin": "^13.0.0",
     "crypto-random-string": "^5.0.0",
-    "eslint": "^8.56.0",
+    "eslint": "^8.57.0",
     "eslint-config-airbnb": "^19.0.4",
-    "eslint-plugin-import": "^2.29.1",
-    "eslint-plugin-jsdoc": "^48.2.4",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jsdoc": "^50.6.8",
     "husky": "^9.1.7",
-    "luxon": "^3.4.4",
-    "nock": "^13.5.4",
-    "nodemon": "^3.1.0",
-    "prettier": "^3.2.5",
+    "luxon": "^3.5.0",
+    "nock": "^14.0.1",
+    "nodemon": "^3.1.9",
+    "prettier": "^3.5.3",
     "prettier-eslint": "^16.3.0",
     "prettier-eslint-cli": "^8.0.1",
     "proxyquire": "^2.1.3",
-    "serverless": "^3.38.0",
-    "serverless-offline": "^13.5.0",
+    "serverless": "^3.40.0",
+    "serverless-offline": "^13.9.0",
     "sinon": "^19.0.4",
     "ts-node": "^10.9.2",
-    "tslib": "^2.6.2",
-    "typescript": "^5.4.5",
-    "webpack": "^5.91.0",
-    "webpack-cli": "^5.1.4",
-    "zip-webpack-plugin": "^4.0.1"
+    "tslib": "^2.8.1",
+    "typescript": "^5.8.2",
+    "webpack": "^5.98.0",
+    "webpack-cli": "^6.0.1",
+    "zip-webpack-plugin": "^4.0.3"
   },
   "name": "stac-server"
 }

package.json

@@ -67,7 +67,7 @@ export const extractIntersects = function (params) {
     if (typeof intersects === 'string') {
       try {
         geojson = JSON.parse(intersects)
-      } catch (e) {
+      } catch (_) {
         throw new ValidationError('Invalid GeoJSON geometry')
       }
     } else {
@@ -91,7 +91,7 @@ export const extractBbox = function (params, httpMethod = 'GET') {
     if (httpMethod === 'GET' && typeof bbox === 'string') {
       try {
         bboxArray = bbox.split(',').map(parseFloat).filter((x) => !Number.isNaN(x))
-      } catch (e2) {
+      } catch (_) {
         throw new ValidationError('Invalid bbox')
       }
     } else if (httpMethod === 'POST' && Array.isArray(bbox)) {
@@ -121,7 +121,7 @@ export const extractLimit = function (params) {
     let limit
     try {
       limit = parseInt(limitStr)
-    } catch (e) {
+    } catch (_) {
       throw new ValidationError('Invalid limit value')
     }
 
@@ -145,7 +145,7 @@ export const extractPrecision = function (params, name, min, max) {
     let precision
     try {
       precision = parseInt(precisionStr)
-    } catch (e) {
+    } catch (_) {
       throw new ValidationError(`Invalid precision value for ${name}`)
     }
 
@@ -167,7 +167,7 @@ export const extractAggregations = function (params) {
     if (typeof aggregations === 'string') {
       try {
         aggs = JSON.parse(aggregations)
-      } catch (e) {
+      } catch (_) {
         aggs = aggregations.split(',')
       }
     } else {
@@ -184,7 +184,7 @@ export const extractPage = function (params) {
     let page
     try {
       page = parseInt(pageStr)
-    } catch (e) {
+    } catch (_) {
       throw new ValidationError('Invalid page value')
     }
 
@@ -354,7 +354,7 @@ const extractIds = function (params) {
     if (typeof ids === 'string') {
       try {
         idsRules = JSON.parse(ids)
-      } catch (e) {
+      } catch (_) {
         idsRules = ids.split(',')
       }
     } else {
@@ -371,7 +371,7 @@ const extractCollectionIds = function (params) {
     if (typeof collections === 'string') {
       try {
         idsRules = JSON.parse(collections)
-      } catch (e) {
+      } catch (_) {
         idsRules = collections.split(',')
       }
     } else {

src/lib/api.js

@@ -598,7 +598,7 @@ async function populateCollectionToIndexMapping() {
   if (process.env['COLLECTION_TO_INDEX_MAPPINGS']) {
     try {
       collectionToIndexMapping = JSON.parse(process.env['COLLECTION_TO_INDEX_MAPPINGS'])
-    } catch (e) {
+    } catch (_) {
       logger.error('COLLECTION_TO_INDEX_MAPPINGS is not a valid JSON object.')
       collectionToIndexMapping = {}
     }

src/lib/database.js

@@ -85,7 +85,7 @@ export async function testPostIngestSNS(t, record, shouldError = false) {
 
   try {
     await sqsTriggerLambda(t.context.ingestQueueUrl, handler)
-  } catch (e) {
+  } catch (_) {
     if (!shouldError) {
       t.fail('Ingest had error, but should not have.')
     }