Bump artifact dependencies if CODEQL_ACTION_ARTIFACT_V2_UPGRADE enabled (#2482)

Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
Co-authored-by: Henry Mercer <henrymercer@github.com>

node_modules/tmp/CHANGELOG.md

@@ -1,5 +1,21 @@
 
 
+## v0.2.2 (2024-02-28)
+
+#### :bug: Bug Fix
+* [#278](https://github.com/raszi/node-tmp/pull/278) Closes [#268](https://github.com/raszi/node-tmp/issues/268): Revert "fix #246: remove any double quotes or single quotes… ([@mbargiel](https://github.com/mbargiel))
+
+#### :memo: Documentation
+* [#279](https://github.com/raszi/node-tmp/pull/279) Closes [#266](https://github.com/raszi/node-tmp/issues/266): move paragraph on graceful cleanup to the head of the documentation ([@silkentrance](https://github.com/silkentrance))
+
+#### Committers: 5
+- Carsten Klein ([@silkentrance](https://github.com/silkentrance))
+- Dave Nicolson ([@dnicolson](https://github.com/dnicolson))
+- KARASZI István ([@raszi](https://github.com/raszi))
+- Maxime Bargiel ([@mbargiel](https://github.com/mbargiel))
+- [@robertoaceves](https://github.com/robertoaceves)
+
+
 ## v0.2.1 (2020-04-28)
 
 #### :rocket: Enhancement

node_modules/tmp/README.md

@@ -2,8 +2,8 @@
 
 A simple temporary file and directory creator for [node.js.][1]
 
-[![Build Status](https://travis-ci.org/raszi/node-tmp.svg?branch=master)](https://travis-ci.org/raszi/node-tmp)
-[![Dependencies](https://david-dm.org/raszi/node-tmp.svg)](https://david-dm.org/raszi/node-tmp)
+[![Build Status](https://img.shields.io/github/actions/workflow/status/raszi/node-tmp/node.js.yml?branch=master)](https://github.com/raszi/node-tmp/actions/workflows/node.js.yml)
+[![Dependencies](https://img.shields.io/librariesio/github/raszi/node-tmp)](https://libraries.io/github/raszi/node-tmp)
 [![npm version](https://badge.fury.io/js/tmp.svg)](https://badge.fury.io/js/tmp)
 [![API documented](https://img.shields.io/badge/API-documented-brightgreen.svg)](https://raszi.github.io/node-tmp/)
 [![Known Vulnerabilities](https://snyk.io/test/npm/tmp/badge.svg)](https://snyk.io/test/npm/tmp)
@@ -27,10 +27,41 @@ not.
 If you do not want to store your temporary directories and files in the
 standard OS temporary directory, then you are free to override that as well.
 
+## An Important Note on Previously Undocumented Breaking Changes
+
+All breaking changes that had been introduced, i.e.
+
+- tmpdir must be located under the system defined tmpdir root.
+- Spaces being collapsed into single spaces
+- Removal of all single and double quote characters
+
+have been reverted in v0.2.2 and tmp should now behave as it did before the
+introduction of these breaking changes.
+
+Other breaking changes, i.e.
+
+- template must be relative to tmpdir
+- name must be relative to tmpdir
+- dir option must be relative to tmpdir
+
+are still in place.
+
+In order to override the system's tmpdir, you will have to use the newly
+introduced tmpdir option.
+
 ## An Important Note on Compatibility
 
 See the [CHANGELOG](./CHANGELOG.md) for more information.
 
+### Version 0.2.3
+
+- Node version <= 14.4 has been dropped.
+- rimraf has been dropped from the dependencies
+
+### Version 0.2.2
+
+Since version 0.2.2, all support for node version <= 14 has been dropped.
+
 ### Version 0.1.0
 
 Since version 0.1.0, all support for node versions < 0.10.0 has been dropped.
@@ -60,6 +91,18 @@ npm install tmp
 
 Please also check [API docs][4].
 
+## Graceful cleanup
+
+If graceful cleanup is set, tmp will remove all controlled temporary objects on process exit, otherwise the temporary objects will remain in place, waiting to be cleaned up on system restart or otherwise scheduled temporary object removal.
+
+To enforce this, you can call the `setGracefulCleanup()` method:
+
+```javascript
+const tmp = require('tmp');
+
+tmp.setGracefulCleanup();
+```
+
 ### Asynchronous file creation
 
 Simple temporary file creation, the file will be closed and unlinked on process exit.
@@ -319,20 +362,6 @@ const tmpname = tmp.tmpNameSync(options);
 console.log('Created temporary filename: ', tmpname);
 ```
 
-## Graceful cleanup
-
-If graceful cleanup is set, tmp will remove all controlled temporary objects on process exit, otherwise the
-temporary objects will remain in place, waiting to be cleaned up on system restart or otherwise scheduled temporary
-object removal.
-
-To enforce this, you can call the `setGracefulCleanup()` method:
-
-```javascript
-const tmp = require('tmp');
-
-tmp.setGracefulCleanup();
-```
-
 ## Options
 
 All options are optional :)
@@ -341,11 +370,8 @@ All options are optional :)
   * `mode`: the file mode to create with, falls back to `0o600` on file creation and `0o700` on directory creation
   * `prefix`: the optional prefix, defaults to `tmp`
   * `postfix`: the optional postfix
-  * `template`: [`mkstemp`][3] like filename template, no default, can be either an absolute or a relative path that resolves 
-     to a relative path of the system's default temporary directory, must include `XXXXXX` once for random name generation, e.g.
-     'foo/bar/XXXXXX'. Absolute paths are also fine as long as they are relative to os.tmpdir().
-     Any directories along the so specified path must exist, otherwise a ENOENT error will be thrown upon access, 
-     as tmp will not check the availability of the path, nor will it establish the requested path for you. 
+  * `template`: [`mkstemp`][3] like filename template, no default, must include `XXXXXX` once for random name generation, e.g.
+     'foo-bar-XXXXXX'. 
   * `dir`: the optional temporary directory that must be relative to the system's default temporary directory.
      absolute paths are fine as long as they point to a location under the system's default temporary directory.
      Any directories along the so specified path must exist, otherwise a ENOENT error will be thrown upon access, 

node_modules/tmp/lib/tmp.js

@@ -14,7 +14,6 @@ const os = require('os');
 const path = require('path');
 const crypto = require('crypto');
 const _c = { fs: fs.constants, os: os.constants };
-const rimraf = require('rimraf');
 
 /*
  * The working inner variables.
@@ -43,12 +42,32 @@ const
   _removeObjects = [],
 
   // API change in fs.rmdirSync leads to error when passing in a second parameter, e.g. the callback
-  FN_RMDIR_SYNC = fs.rmdirSync.bind(fs),
-  FN_RIMRAF_SYNC = rimraf.sync;
+  FN_RMDIR_SYNC = fs.rmdirSync.bind(fs);
 
 let
   _gracefulCleanup = false;
 
+/**
+ * Recursively remove a directory and its contents.
+ *
+ * @param {string} dirPath path of directory to remove
+ * @param {Function} callback
+ * @private
+ */
+function rimraf(dirPath, callback) {
+  return fs.rm(dirPath, { recursive: true }, callback);
+}
+
+/**
+ * Recursively remove a directory and its contents, synchronously.
+ *
+ * @param {string} dirPath path of directory to remove
+ * @private
+ */
+function FN_RIMRAF_SYNC(dirPath) {
+  return fs.rmSync(dirPath, { recursive: true });
+}
+
 /**
  * Gets a temporary file name.
  *
@@ -535,7 +554,7 @@ function _assertAndSanitizeOptions(options) {
   options.template = _isBlank(options.template) ? undefined : path.relative(options.dir, options.template);
 
   // for completeness' sake only, also keep (multiple) blanks if the user, purportedly sane, requests us to
-  options.name = _isUndefined(options.name) ? undefined : _sanitizeName(options.name);
+  options.name = _isUndefined(options.name) ? undefined : options.name;
   options.prefix = _isUndefined(options.prefix) ? '' : options.prefix;
   options.postfix = _isUndefined(options.postfix) ? '' : options.postfix;
 }
@@ -552,28 +571,13 @@ function _assertAndSanitizeOptions(options) {
  * @private
  */
 function _resolvePath(name, tmpDir) {
-  const sanitizedName = _sanitizeName(name);
-  if (sanitizedName.startsWith(tmpDir)) {
-    return path.resolve(sanitizedName);
+  if (name.startsWith(tmpDir)) {
+    return path.resolve(name);
   } else {
-    return path.resolve(path.join(tmpDir, sanitizedName));
+    return path.resolve(path.join(tmpDir, name));
   }
 }
 
-/**
- * Sanitize the specified path name by removing all quote characters.
- *
- * @param name
- * @returns {string}
- * @private
- */
-function _sanitizeName(name) {
-  if (_isBlank(name)) {
-    return name;
-  }
-  return name.replace(/["']/g, '');
-}
-
 /**
  * Asserts whether specified name is relative to the specified tmpDir.
  *
@@ -663,7 +667,7 @@ function setGracefulCleanup() {
  * @returns {string} the currently configured tmp dir
  */
 function _getTmpDir(options) {
-  return path.resolve(_sanitizeName(options && options.tmpdir || os.tmpdir()));
+  return path.resolve(options && options.tmpdir || os.tmpdir());
 }
 
 // Install process exit listener

node_modules/tmp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tmp",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Temporary file and directory creator",
   "author": "KARASZI István <github@spam.raszi.hu> (http://raszi.hu/)",
   "contributors": [
@@ -22,17 +22,15 @@
     "url": "http://github.com/raszi/node-tmp/issues"
   },
   "engines": {
-    "node": ">=8.17.0"
-  },
-  "dependencies": {
-    "rimraf": "^3.0.0"
+    "node": ">=14.14"
   },
+  "dependencies": {},
   "devDependencies": {
     "eslint": "^6.3.0",
     "eslint-plugin-mocha": "^6.1.1",
     "istanbul": "^0.4.5",
     "lerna-changelog": "^1.0.1",
-    "mocha": "^6.2.0"
+    "mocha": "^10.2.0"
   },
   "main": "lib/tmp.js",
   "files": [