⬆️ Update dependencies (#5694)

* ⬆️ Update system dependencies on devenv

* ⬆️ Update partially frontend dependencies

* ⬆️ Update application dependencies

* ⬆️ Update storybook dependency

.nvmrc

@@ -1 +1 @@
-v20.11.1
+v22.13.1

backend/deps.edn

@@ -6,7 +6,7 @@
   org.clojure/clojure {:mvn/version "1.12.0"}
   org.clojure/tools.namespace {:mvn/version "1.5.0"}
 
-  com.github.luben/zstd-jni {:mvn/version "1.5.6-6"}
+  com.github.luben/zstd-jni {:mvn/version "1.5.6-9"}
 
   io.prometheus/simpleclient {:mvn/version "0.16.0"}
   io.prometheus/simpleclient_hotspot {:mvn/version "0.16.0"}
@@ -17,7 +17,7 @@
 
   io.prometheus/simpleclient_httpserver {:mvn/version "0.16.0"}
 
-  io.lettuce/lettuce-core {:mvn/version "6.4.0.RELEASE"}
+  io.lettuce/lettuce-core {:mvn/version "6.5.2.RELEASE"}
   java-http-clj/java-http-clj {:mvn/version "0.4.3"}
 
   funcool/yetti
@@ -26,13 +26,14 @@
    :git/url "https://github.com/funcool/yetti.git"
    :exclusions [org.slf4j/slf4j-api]}
 
-  com.github.seancorfield/next.jdbc {:mvn/version "1.3.955"}
+  com.github.seancorfield/next.jdbc
+  {:mvn/version "1.3.994"}
   metosin/reitit-core {:mvn/version "0.7.2"}
-  nrepl/nrepl {:mvn/version "1.3.0"}
+  nrepl/nrepl {:mvn/version "1.3.1"}
-  cider/cider-nrepl {:mvn/version "0.50.2"}
+  cider/cider-nrepl {:mvn/version "0.52.0"}
 
-  org.postgresql/postgresql {:mvn/version "42.7.4"}
+  org.postgresql/postgresql {:mvn/version "42.7.5"}
-  org.xerial/sqlite-jdbc {:mvn/version "3.46.1.3"}
+  org.xerial/sqlite-jdbc {:mvn/version "3.48.0.0"}
 
   com.zaxxer/HikariCP {:mvn/version "6.0.0"}
 
@@ -41,9 +42,9 @@
   buddy/buddy-hashers {:mvn/version "2.0.167"}
   buddy/buddy-sign {:mvn/version "3.6.1-359"}
 
-  com.github.ben-manes.caffeine/caffeine {:mvn/version "3.1.8"}
+  com.github.ben-manes.caffeine/caffeine {:mvn/version "3.2.0"}
 
-  org.jsoup/jsoup {:mvn/version "1.18.1"}
+  org.jsoup/jsoup {:mvn/version "1.18.3"}
   org.im4java/im4java
   {:git/tag "1.4.0-penpot-2"
    :git/sha "e2b3e16"
@@ -54,11 +55,11 @@
   org.clojars.pntblnk/clj-ldap {:mvn/version "0.0.17"}
 
   dawran6/emoji {:mvn/version "0.1.5"}
-  markdown-clj/markdown-clj {:mvn/version "1.12.1"}
+  markdown-clj/markdown-clj {:mvn/version "1.12.2"}
 
   ;; Pretty Print specs
   pretty-spec/pretty-spec {:mvn/version "0.1.4"}
-  software.amazon.awssdk/s3 {:mvn/version "2.28.26"}
+  software.amazon.awssdk/s3 {:mvn/version "2.30.7"}
   }
 
  :paths ["src" "resources" "target/classes"]
@@ -74,7 +75,7 @@
 
   :build
   {:extra-deps
-   {io.github.clojure/tools.build {:git/tag "v0.10.5" :git/sha "2a21b7a"}}
+   {io.github.clojure/tools.build {:git/tag "v0.10.6" :git/sha "52cf7d6"}}
    :ns-default build}
 
   :test
@@ -88,8 +89,8 @@
 
   :jmx-remote
   {:jvm-opts ["-Dcom.sun.management.jmxremote"
-              "-Dcom.sun.management.jmxremote.port=9091"
+              "-Dcom.sun.management.jmxremote.port=9090"
-              "-Dcom.sun.management.jmxremote.rmi.port=9091"
+              "-Dcom.sun.management.jmxremote.rmi.port=9090"
               "-Dcom.sun.management.jmxremote.local.only=false"
               "-Dcom.sun.management.jmxremote.authenticate=false"
               "-Dcom.sun.management.jmxremote.ssl=false"

backend/scripts/repl

@@ -70,20 +70,17 @@ export PENPOT_OBJECTS_STORAGE_S3_ENDPOINT=http://minio:9000
 export PENPOT_OBJECTS_STORAGE_S3_BUCKET=penpot
 export PENPOT_OBJECTS_STORAGE_FS_DIRECTORY="assets"
 
-export OPTIONS="
+export JAVA_OPTS="--enable-preview \
-       -A:jmx-remote -A:dev \
+       -Djava.util.logging.manager=org.apache.logging.log4j.jul.LogManager \
-       -J-Djava.util.logging.manager=org.apache.logging.log4j.jul.LogManager \
+       -Djdk.attach.allowAttachSelf \
-       -J-Djdk.attach.allowAttachSelf \
+       -Dlog4j2.configurationFile=log4j2-devenv-repl.xml \
-       -J-Dpolyglot.engine.WarnInterpreterOnly=false \
+       -Djdk.tracePinnedThreads=full \
-       -J-Dlog4j2.configurationFile=log4j2-devenv-repl.xml \
+       -XX:+EnableDynamicAgentLoading \
-       -J-XX:+EnableDynamicAgentLoading \
+       -XX:-OmitStackTraceInFastThrow \
-       -J-XX:-OmitStackTraceInFastThrow \
+       -XX:+UnlockDiagnosticVMOptions \
-       -J-XX:+UnlockDiagnosticVMOptions \
+       -XX:+DebugNonSafepoints";
-       -J-XX:+DebugNonSafepoints \
-       -J-Djdk.tracePinnedThreads=full"
 
-# Enable preview
+export OPTIONS="-A:jmx-remote -A:dev"
-export OPTIONS="$OPTIONS -J--enable-preview"
 
 # Setup HEAP
 # export OPTIONS="$OPTIONS -J-Xms50m -J-Xmx1024m"

common/deps.edn

@@ -1,25 +1,25 @@
 {:deps
  {org.clojure/clojure {:mvn/version "1.12.0"}
-  org.clojure/data.json {:mvn/version "2.5.0"}
+  org.clojure/data.json {:mvn/version "2.5.1"}
   org.clojure/tools.cli {:mvn/version "1.1.230"}
   org.clojure/clojurescript {:mvn/version "1.11.132"}
   org.clojure/test.check {:mvn/version "1.1.1"}
   org.clojure/data.fressian {:mvn/version "1.1.0"}
 
   ;; Logging
-  org.apache.logging.log4j/log4j-api {:mvn/version "2.24.1"}
+  org.apache.logging.log4j/log4j-api {:mvn/version "2.24.3"}
-  org.apache.logging.log4j/log4j-core {:mvn/version "2.24.1"}
+  org.apache.logging.log4j/log4j-core {:mvn/version "2.24.3"}
-  org.apache.logging.log4j/log4j-web {:mvn/version "2.24.1"}
+  org.apache.logging.log4j/log4j-web {:mvn/version "2.24.3"}
-  org.apache.logging.log4j/log4j-jul {:mvn/version "2.24.1"}
+  org.apache.logging.log4j/log4j-jul {:mvn/version "2.24.3"}
-  org.apache.logging.log4j/log4j-slf4j2-impl {:mvn/version "2.24.1"}
+  org.apache.logging.log4j/log4j-slf4j2-impl {:mvn/version "2.24.3"}
   org.slf4j/slf4j-api {:mvn/version "2.0.16"}
   pl.tkowalcz.tjahzi/log4j2-appender {:mvn/version "0.9.32"}
 
   selmer/selmer {:mvn/version "1.12.61"}
   criterium/criterium {:mvn/version "0.4.6"}
 
-  metosin/jsonista {:mvn/version "0.3.11"}
+  metosin/jsonista {:mvn/version "0.3.13"}
-  metosin/malli {:mvn/version "0.16.4"}
+  metosin/malli {:mvn/version "0.17.0"}
 
   expound/expound {:mvn/version "0.9.0"}
   com.cognitect/transit-clj {:mvn/version "1.0.333"}
@@ -47,11 +47,10 @@
   org.la4j/la4j {:mvn/version "0.6.0"}
 
   ;; exception printing
-  fipp/fipp {:mvn/version "0.6.26"}
+  fipp/fipp {:mvn/version "0.6.27"}
+
+  me.flowthing/pp {:mvn/version "2024-11-13.77"}
 
-  io.github.eerohele/pp
-  {:git/tag "2024-09-09.69"
-   :git/sha "de4b20f"}
 
   io.aviso/pretty {:mvn/version "1.4.4"}
   environ/environ {:mvn/version "1.2.0"}}
@@ -60,7 +59,7 @@
  {:dev
   {:extra-deps
    {org.clojure/tools.namespace {:mvn/version "RELEASE"}
-    thheller/shadow-cljs {:mvn/version "2.28.18"}
+    thheller/shadow-cljs {:mvn/version "2.28.20"}
     com.clojure-goes-fast/clj-async-profiler {:mvn/version "RELEASE"}
     com.bhauman/rebel-readline {:mvn/version "RELEASE"}
     criterium/criterium {:mvn/version "RELEASE"}
@@ -69,7 +68,7 @@
 
   :build
   {:extra-deps
-   {io.github.clojure/tools.build {:git/tag "v0.10.5" :git/sha "2a21b7a"}}
+   {io.github.clojure/tools.build {:git/tag "v0.10.6" :git/sha "52cf7d6"}}
    :ns-default build}
 
   :test

common/package.json

@@ -17,7 +17,7 @@
   "devDependencies": {
     "concurrently": "^9.0.1",
     "nodemon": "^3.1.7",
-    "shadow-cljs": "2.28.18",
+    "shadow-cljs": "2.28.20",
     "source-map-support": "^0.5.21",
     "ws": "^8.17.0"
   },

docker/devenv/Dockerfile

@@ -3,11 +3,11 @@ LABEL maintainer="Penpot <docker@penpot.app>"
 
 ARG DEBIAN_FRONTEND=noninteractive
 
-ENV NODE_VERSION=v20.11.1 \
+ENV NODE_VERSION=v22.13.1 \
-    CLOJURE_VERSION=1.11.1.1435 \
+    CLOJURE_VERSION=1.12.0.1501 \
-    CLJKONDO_VERSION=2024.03.13 \
+    CLJKONDO_VERSION=2025.01.16 \
-    BABASHKA_VERSION=1.3.189 \
+    BABASHKA_VERSION=1.12.196 \
-    CLJFMT_VERSION=0.12.0 \
+    CLJFMT_VERSION=0.13.0 \
     RUSTUP_VERSION=1.27.1 \
     RUST_VERSION=1.82.0 \
     LANG=en_US.UTF-8 \
@@ -107,12 +107,12 @@ RUN set -eux; \
     ARCH="$(dpkg --print-architecture)"; \
     case "${ARCH}" in \
        aarch64|arm64) \
-         ESUM='7d3ab0e8eba95bd682cfda8041c6cb6fa21e09d0d9131316fd7c96c78969de31'; \
+         ESUM='fb43ae1202402842559cb6223886ec1663b90ffbec48479abbcb92c92c9012eb'; \
-         BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.3%2B9/OpenJDK21U-jdk_aarch64_linux_hotspot_21.0.3_9.tar.gz'; \
+         BINARY_URL='https://github.com/adoptium/temurin23-binaries/releases/download/jdk-23.0.2%2B7/OpenJDK23U-jdk_aarch64_linux_hotspot_23.0.2_7.tar.gz'; \
          ;; \
        amd64|x86_64) \
-         ESUM='fffa52c22d797b715a962e6c8d11ec7d79b90dd819b5bc51d62137ea4b22a340'; \
+         ESUM='870ac8c05c6fe563e7a3878a47d0234b83c050e83651d2c47e8b822ec74512dd'; \
-         BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.3%2B9/OpenJDK21U-jdk_x64_linux_hotspot_21.0.3_9.tar.gz'; \
+         BINARY_URL='https://github.com/adoptium/temurin23-binaries/releases/download/jdk-23.0.2%2B7/OpenJDK23U-jdk_x64_linux_hotspot_23.0.2_7.tar.gz'; \
          ;; \
        *) \
          echo "Unsupported arch: ${ARCH}"; \
@@ -162,7 +162,7 @@ RUN set -eux; \
     tar -xf /tmp/nodejs.tar.gz --strip-components=1; \
     chown -R root /usr/local/nodejs; \
     corepack enable; \
-    corepack install -g yarn@4.2.2; \
+    corepack install -g yarn@4.3.1; \
     npx playwright install --with-deps chromium; \
     rm -rf /tmp/nodejs.tar.gz;
 

exporter/deps.edn

@@ -14,7 +14,7 @@
 
   :dev
   {:extra-deps
-   {thheller/shadow-cljs {:mvn/version "2.28.18"}}}
+   {thheller/shadow-cljs {:mvn/version "2.28.20"}}}
 
   :shadow-cljs
   {:main-opts ["-m" "shadow.cljs.devtools.cli"]}

exporter/package.json

@@ -14,16 +14,16 @@
     "cookies": "^0.9.1",
     "generic-pool": "^3.9.0",
     "inflation": "^2.1.0",
-    "ioredis": "^5.4.1",
+    "ioredis": "^5.4.2",
     "luxon": "^3.5.0",
-    "playwright": "^1.48.1",
+    "playwright": "^1.50.0",
     "raw-body": "^3.0.0",
     "svgo": "penpot/svgo#v3",
     "xml-js": "^1.6.11",
     "xregexp": "^5.1.1"
   },
   "devDependencies": {
-    "shadow-cljs": "2.28.18",
+    "shadow-cljs": "2.28.20",
     "source-map-support": "^0.5.21"
   },
   "scripts": {

exporter/yarn.lock

@@ -892,11 +892,11 @@ __metadata:
     cookies: "npm:^0.9.1"
     generic-pool: "npm:^3.9.0"
     inflation: "npm:^2.1.0"
-    ioredis: "npm:^5.4.1"
+    ioredis: "npm:^5.4.2"
     luxon: "npm:^3.5.0"
-    playwright: "npm:^1.48.1"
+    playwright: "npm:^1.50.0"
     raw-body: "npm:^3.0.0"
-    shadow-cljs: "npm:2.28.18"
+    shadow-cljs: "npm:2.28.20"
     source-map-support: "npm:^0.5.21"
     svgo: "penpot/svgo#v3"
     xml-js: "npm:^1.6.11"
@@ -1203,9 +1203,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"ioredis@npm:^5.4.1":
+"ioredis@npm:^5.4.2":
-  version: 5.4.1
+  version: 5.4.2
-  resolution: "ioredis@npm:5.4.1"
+  resolution: "ioredis@npm:5.4.2"
   dependencies:
     "@ioredis/commands": "npm:^1.1.1"
     cluster-key-slot: "npm:^1.1.0"
@@ -1216,7 +1216,7 @@ __metadata:
     redis-errors: "npm:^1.2.0"
     redis-parser: "npm:^3.0.0"
     standard-as-callback: "npm:^2.1.0"
-  checksum: 10c0/5d28b7c89a3cab5b76d75923d7d4ce79172b3a1ca9be690133f6e8e393a7a4b4ffd55513e618bbb5504fed80d9e1395c9d9531a7c5c5c84aa4c4e765cca75456
+  checksum: 10c0/e59d2cceb43ed74b487d7b50fa91b93246e734e5d4835c7e62f64e44da072f12ab43b044248012e6f8b76c61a7c091a2388caad50e8ad69a8ce5515a730b23b8
   languageName: node
   linkType: hard
 
@@ -1726,27 +1726,27 @@ __metadata:
   languageName: node
   linkType: hard
 
-"playwright-core@npm:1.48.1":
+"playwright-core@npm:1.50.0":
-  version: 1.48.1
+  version: 1.50.0
-  resolution: "playwright-core@npm:1.48.1"
+  resolution: "playwright-core@npm:1.50.0"
   bin:
     playwright-core: cli.js
-  checksum: 10c0/2f75532b9b7dfa0e586f5660ac1d8ea729bbdbd28dd2c0711e7cfc1adfe5cf7448d7f15a018ec9851a8f50c0743c3990cb9df23064bed603627baeac4dce3915
+  checksum: 10c0/b0cc7fadcb2db68a7b8d730b26c7a7d17baad454a0697c781e08074a619e57779a90be9b57c4c741ff4895390bdfd093d8393a746e8bf68ae57ac452f4c1cdb2
   languageName: node
   linkType: hard
 
-"playwright@npm:^1.48.1":
+"playwright@npm:^1.50.0":
-  version: 1.48.1
+  version: 1.50.0
-  resolution: "playwright@npm:1.48.1"
+  resolution: "playwright@npm:1.50.0"
   dependencies:
     fsevents: "npm:2.3.2"
-    playwright-core: "npm:1.48.1"
+    playwright-core: "npm:1.50.0"
   dependenciesMeta:
     fsevents:
       optional: true
   bin:
     playwright: cli.js
-  checksum: 10c0/96280ae656226e52015c0c69c4c19e9f594c19353a79012a19bd7b7175d7b409c1aed289a629df49ef897a57ccd24668ad15b86c283db10f76212a4db90a94ac
+  checksum: 10c0/0076a536433819b7122066a07c5fcfa56d40d09cbbec0a39061bbfa832c8a1f626df5e4fe206fbeba56b3a61f0e2b26d4ad3c2b402852d6f147a266fd18e4ddf
   languageName: node
   linkType: hard
 
@@ -2042,9 +2042,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"shadow-cljs@npm:2.28.18":
+"shadow-cljs@npm:2.28.20":
-  version: 2.28.18
+  version: 2.28.20
-  resolution: "shadow-cljs@npm:2.28.18"
+  resolution: "shadow-cljs@npm:2.28.20"
   dependencies:
     node-libs-browser: "npm:^2.2.1"
     readline-sync: "npm:^1.4.7"
@@ -2054,7 +2054,7 @@ __metadata:
     ws: "npm:^7.4.6"
   bin:
     shadow-cljs: cli/runner.js
-  checksum: 10c0/4732cd11a5722644a0a91ae5560a55f62432ae5317bd2d1fd5bf12af8354c81776f4fcfce5c477b43af1ac2ecd4a216887337e1b92cca37a1b8cb9c157a393c1
+  checksum: 10c0/f4aaa5127ffd7b717f00fec0b3e1d01df5f31effbaa741e4980a87432783d09a400807c39e3dcaeb4d7b3c13f432f55e96ead22291a9b90d437c8994d72fb2c2
   languageName: node
   linkType: hard
 

frontend/package.json

@@ -50,18 +50,18 @@
   },
   "devDependencies": {
     "@playwright/test": "1.48.1",
-    "@storybook/addon-essentials": "^8.4.6",
+    "@storybook/addon-essentials": "^8.5.2",
-    "@storybook/addon-interactions": "^8.4.6",
+    "@storybook/addon-interactions": "^8.5.2",
-    "@storybook/addon-themes": "^8.4.6",
+    "@storybook/addon-themes": "^8.5.2",
-    "@storybook/blocks": "^8.4.6",
+    "@storybook/blocks": "^8.5.2",
-    "@storybook/react": "^8.4.6",
+    "@storybook/react": "^8.5.2",
-    "@storybook/react-vite": "^8.4.6",
+    "@storybook/react-vite": "^8.5.2",
-    "@storybook/test": "^8.4.6",
+    "@storybook/test": "^8.5.2",
     "@storybook/test-runner": "^0.21.0",
-    "@types/node": "^22.7.7",
+    "@types/node": "^22.12.0",
     "autoprefixer": "^10.4.20",
-    "concurrently": "^9.0.1",
+    "concurrently": "^9.1.2",
-    "esbuild": "^0.24.0",
+    "esbuild": "^0.24.2",
     "express": "^4.21.1",
     "fancy-log": "^2.0.0",
     "getopts": "^2.3.0",
@@ -71,32 +71,31 @@
     "gulp-mustache": "^5.0.0",
     "gulp-postcss": "^10.0.0",
     "gulp-rename": "^2.0.0",
-    "gulp-sass": "^5.1.0",
     "gulp-sourcemaps": "^3.0.0",
     "gulp-svg-sprite": "^2.0.3",
     "jsdom": "^25.0.1",
     "map-stream": "0.0.7",
-    "marked": "^14.1.3",
+    "marked": "^14.1.4",
     "mkdirp": "^3.0.1",
     "mustache": "^4.2.0",
-    "nodemon": "^3.1.7",
+    "nodemon": "^3.1.9",
     "npm-run-all": "^4.1.5",
-    "p-limit": "^6.1.0",
+    "p-limit": "^6.2.0",
-    "postcss": "^8.4.47",
+    "postcss": "^8.5.1",
     "postcss-clean": "^1.2.2",
-    "prettier": "3.3.3",
+    "prettier": "3.4.2",
     "pretty-time": "^1.1.0",
     "prop-types": "^15.8.1",
     "rimraf": "^6.0.1",
-    "sass": "^1.80.3",
+    "sass": "^1.83.4",
-    "sass-embedded": "^1.80.3",
+    "sass-embedded": "^1.83.4",
-    "shadow-cljs": "2.28.18",
+    "shadow-cljs": "2.28.20",
-    "storybook": "^8.4.6",
+    "storybook": "^8.5.2",
     "svg-sprite": "^2.0.4",
-    "typescript": "^5.6.3",
+    "typescript": "^5.7.3",
-    "vite": "^5.4.9",
+    "vite": "^6.0.11",
-    "vitest": "^2.1.3",
+    "vitest": "^3.0.4",
-    "wasm-pack": "^0.13.0",
+    "wasm-pack": "^0.13.1",
     "watcher": "^2.3.1",
     "workerpool": "^9.2.0"
   },
@@ -107,7 +106,7 @@
     "@penpot/svgo": "penpot/svgo#c6fba7a4dcfbc27b643e7fc0c94fc98cf680b77b",
     "@penpot/text-editor": "portal:./text-editor",
     "@tokens-studio/sd-transforms": "^0.16.1",
-    "compression": "^1.7.4",
+    "compression": "^1.7.5",
     "date-fns": "^4.1.0",
     "eventsource-parser": "^3.0.0",
     "js-beautify": "^1.15.1",
@@ -116,19 +115,19 @@
     "lodash.debounce": "^4.0.8",
     "luxon": "^3.5.0",
     "opentype.js": "^1.3.4",
-    "postcss-modules": "^6.0.0",
+    "postcss-modules": "^6.0.1",
     "randomcolor": "^0.6.2",
     "react": "18.3.1",
     "react-dom": "18.3.1",
-    "react-error-boundary": "^4.1.2",
+    "react-error-boundary": "^5.0.0",
-    "react-virtualized": "^9.22.5",
+    "react-virtualized": "^9.22.6",
     "rxjs": "8.0.0-alpha.14",
     "sax": "^1.4.1",
     "source-map-support": "^0.5.21",
     "style-dictionary": "4.0.0-prerelease.36",
     "tdigest": "^0.1.2",
-    "tinycolor2": "npm:^1.6.0",
+    "tinycolor2": "^1.6.0",
-    "ua-parser-js": "2.0.0-rc.1",
+    "ua-parser-js": "2.0.0",
     "xregexp": "^5.1.1"
   }
 }