update dependencies, nail down node-ical version to 0.18.0 (#3566)

- node-ical use `0.18.0` instead of `^0.18.0` in `package.json`
- cleanup `package-lock.json`

.github/workflows/dep-review.yaml

@@ -16,3 +16,5 @@ jobs:
         uses: actions/checkout@v4
       - name: "Dependency Review"
         uses: actions/dependency-review-action@v4
+        with:
+          allow-ghsas: GHSA-8hc4-vh64-cxmj

CHANGELOG.md

@@ -31,6 +31,7 @@ _This release is scheduled to be released on 2024-10-01._
 
 - [weather] Updated `apiVersion` default from 2.5 to 3.0 (#3424)
 - [core] Updated dependencies including stylistic-eslint
+- [core] nail down `node-ical` version to `0.18.0` with exception `allow-ghsas: GHSA-8hc4-vh64-cxmj` in `dep-review.yaml` (which should removed after next `node-ical` update)
 - [core] Updated SocketIO catch all to new API
 - [core] Allow custom modules positions by scanning index.html for the defined regions, instead of hard coded (PR #3518 fixes issue #3504)
 - [core] Detail optimizations in `config_check.js`

package.json

@@ -68,9 +68,9 @@
 		"iconv-lite": "^0.6.3",
 		"module-alias": "^2.2.3",
 		"moment": "^2.30.1",
-		"node-ical": "^0.18.0",
+		"node-ical": "0.18.0",
 		"pm2": "^5.4.2",
-		"socket.io": "^4.7.5",
+		"socket.io": "^4.8.0",
 		"suncalc": "^1.9.0",
 		"systeminformation": "^5.23.5"
 	},
@@ -79,14 +79,14 @@
 		"@stylistic/eslint-plugin": "^2.8.0",
 		"cspell": "^8.14.4",
 		"eslint-plugin-jest": "^28.8.3",
-		"eslint-plugin-jsdoc": "^50.2.4",
+		"eslint-plugin-jsdoc": "^50.3.0",
 		"eslint-plugin-package-json": "^0.15.3",
 		"express-basic-auth": "^1.2.1",
 		"husky": "^9.1.6",
 		"jest": "^29.7.0",
-		"jsdom": "^25.0.0",
+		"jsdom": "^25.0.1",
 		"lint-staged": "^15.2.10",
-		"playwright": "^1.47.1",
+		"playwright": "^1.47.2",
 		"prettier": "^3.3.3",
 		"sinon": "^19.0.2",
 		"stylelint": "^16.9.0",

vendor/package-lock.json

@@ -11,7 +11,7 @@
 			"dependencies": {
 				"@fortawesome/fontawesome-free": "^6.6.0",
 				"animate.css": "^4.1.1",
-				"croner": "^8.1.1",
+				"croner": "^8.1.2",
 				"moment": "^2.30.1",
 				"moment-timezone": "^0.5.45",
 				"nunjucks": "^3.2.4",
@@ -56,9 +56,9 @@
 			}
 		},
 		"node_modules/croner": {
-			"version": "8.1.1",
-			"resolved": "https://registry.npmjs.org/croner/-/croner-8.1.1.tgz",
-			"integrity": "sha512-1VdUuRnQP4drdFkS8NKvDR1NBgevm8TOuflcaZEKsxw42CxonjW/2vkj1AKlinJb4ZLwBcuWF9GiPr7FQc6AQA==",
+			"version": "8.1.2",
+			"resolved": "https://registry.npmjs.org/croner/-/croner-8.1.2.tgz",
+			"integrity": "sha512-ypfPFcAXHuAZRCzo3vJL6ltENzniTjwe/qsLleH1V2/7SRDjgvRQyrLmumFTLmjFax4IuSxfGXEn79fozXcJog==",
 			"license": "MIT",
 			"engines": {
 				"node": ">=18.0"

vendor/package.json

@@ -13,7 +13,7 @@
 	"dependencies": {
 		"@fortawesome/fontawesome-free": "^6.6.0",
 		"animate.css": "^4.1.1",
-		"croner": "^8.1.1",
+		"croner": "^8.1.2",
 		"moment": "^2.30.1",
 		"moment-timezone": "^0.5.45",
 		"nunjucks": "^3.2.4",