deps: perform yarn upgrade (#12698)

The commit includes the following changes:
- performs a `yarn upgrade` to better represent what downstream adopters will pull, and resolve known security vulnerabilities
- pins `puppeteer` to prevent `protocolTimeout` errors

Signed-off-by: vince-fugnitto <vincent.fugnitto@ericsson.com>

Author: vince-fugnitto

dependency-check-baseline.json

@@ -1,4 +1,5 @@
 {
+  "npm/npmjs/-/allure-commandline/2.23.0": "Approved https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/issues/9379",
   "npm/npmjs/-/clone/2.1.2": "Under review, license believed to be MIT: https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/issues/7971",
   "npm/npmjs/-/eslint-plugin-deprecation/1.2.1": "Approved as 'works-with': https://dev.eclipse.org/ipzilla/show_bug.cgi?id=22573",
   "npm/npmjs/-/jschardet/2.3.0": "Approved for Eclipse Theia: https://dev.eclipse.org/ipzilla/show_bug.cgi?id=22481",

dev-packages/application-manager/package.json

@@ -37,7 +37,7 @@
     "@theia/ffmpeg": "1.40.0",
     "@theia/native-webpack-plugin": "1.40.0",
     "@types/fs-extra": "^4.0.2",
-    "@types/semver": "^7.3.8",
+    "@types/semver": "^7.5.0",
     "babel-loader": "^8.2.2",
     "buffer": "^6.0.3",
     "compression-webpack-plugin": "^9.0.0",
@@ -51,7 +51,7 @@
     "node-abi": "*",
     "node-loader": "^2.0.0",
     "path-browserify": "^1.0.1",
-    "semver": "^7.3.5",
+    "semver": "^7.5.4",
     "setimmediate": "^1.0.5",
     "source-map": "^0.6.1",
     "source-map-loader": "^2.0.1",

dev-packages/application-package/package.json

@@ -31,14 +31,14 @@
   "dependencies": {
     "@theia/request": "1.40.0",
     "@types/fs-extra": "^4.0.2",
-    "@types/semver": "^5.4.0",
+    "@types/semver": "^7.5.0",
     "@types/write-json-file": "^2.2.1",
     "deepmerge": "^4.2.2",
     "fs-extra": "^4.0.2",
     "is-electron": "^2.1.0",
     "nano": "^9.0.5",
     "resolve-package-path": "^4.0.3",
-    "semver": "^5.4.1",
+    "semver": "^7.5.4",
     "write-json-file": "^2.2.0"
   },
   "devDependencies": {

dev-packages/cli/package.json

@@ -47,9 +47,9 @@
     "limiter": "^2.1.0",
     "log-update": "^4.0.0",
     "mocha": "^10.1.0",
-    "puppeteer": "^19.7.2",
-    "puppeteer-core": "^19.7.2",
-    "puppeteer-to-istanbul": "^1.4.0",
+    "puppeteer": "19.7.2",
+    "puppeteer-core": "19.7.2",
+    "puppeteer-to-istanbul": "1.4.0",
     "temp": "^0.9.1",
     "yargs": "^15.3.1"
   },

dev-packages/ovsx-client/package.json

@@ -30,6 +30,6 @@
   },
   "dependencies": {
     "@theia/request": "1.40.0",
-    "semver": "^5.4.1"
+    "semver": "^7.5.4"
   }
 }

dev-packages/private-re-exports/package.json

@@ -25,7 +25,7 @@
   },
   "dependencies": {
     "mustache": "^4.2.0",
-    "semver": "^7.3.5",
+    "semver": "^7.5.4",
     "yargs": "^15.3.1"
   },
   "devDependencies": {

lerna.json

@@ -1,7 +1,6 @@
 {
-  "lerna": "2.2.0",
+  "$schema": "https://json.schemastore.org/lerna.json",
   "npmClient": "yarn",
-  "useWorkspaces": true,
   "version": "1.40.0",
   "command": {
     "run": {
@@ -10,8 +9,9 @@
     "publish": {
       "forcePublish": true,
       "graphType": "all",
-      "skipGit": true,
-      "registry": "https://registry.npmjs.org/"
+      "registry": "https://registry.npmjs.org/",
+      "push": false,
+      "gitTagVersion": false
     }
   }
 }

package.json

@@ -40,14 +40,14 @@
     "ignore-styles": "^5.0.1",
     "improved-yarn-audit": "^3.0.0",
     "jsdom": "^21.1.1",
-    "lerna": "^6.0.1",
+    "lerna": "^7.1.1",
     "mkdirp": "^0.5.0",
     "node-gyp": "^9.0.0",
     "nsfw": "^2.2.4",
     "nyc": "^15.0.0",
-    "puppeteer": "^19.7.2",
-    "puppeteer-core": "^19.7.2",
-    "puppeteer-to-istanbul": "^1.4.0",
+    "puppeteer": "19.7.2",
+    "puppeteer-core": "19.7.2",
+    "puppeteer-to-istanbul": "1.4.0",
     "rimraf": "^2.6.1",
     "sinon": "^12.0.0",
     "temp": "^0.9.1",

packages/core/package.json

@@ -55,7 +55,7 @@
     "lodash.debounce": "^4.0.8",
     "lodash.throttle": "^4.1.1",
     "markdown-it": "^12.3.2",
-    "msgpackr": "^1.6.1",
+    "msgpackr": "1.6.1",
     "nsfw": "^2.2.4",
     "p-debounce": "^2.1.0",
     "perfect-scrollbar": "^1.3.0",

packages/plugin-ext/package.json

@@ -42,7 +42,7 @@
     "macaddress": "^0.2.9",
     "mime": "^2.4.4",
     "ps-tree": "^1.2.0",
-    "semver": "^5.4.1",
+    "semver": "^7.5.4",
     "uuid": "^8.0.0",
     "vhost": "^3.0.2",
     "vscode-textmate": "^7.0.3"