Fix the remaining audit alerts (#33344)

Author: alexslavr

.github/actions/run-qunit-tests/action.yml

@@ -42,44 +42,16 @@ runs:
         echo "MATRIX_ENVS_NAME_SAFE=$MATRIX_ENVS_NAME_SAFE"
         echo "MATRIX_ENVS_NAME_SAFE=$MATRIX_ENVS_NAME_SAFE" >> $GITHUB_ENV
 
-#    - name: Update apt
-#      run: |
-#        sudo apt-get update
-
-#    - name: Setup utils
-#      run: |
-#        sudo apt-get install -y dbus-x11 httping x11vnc xvfb
-
-    - name: Setup Chrome
-      if: ${{ inputs.browser == 'chrome' }}
-      uses: ./.github/actions/setup-chrome-headless-shell
-      with:
-        chrome-version: '145.0.7632.67'
-
-    - name: Setup Firefox profile
-      if: ${{ inputs.browser == 'firefox' }}
-      shell: bash
-      run: |
-        mkdir -p /tmp/firefox-profile
-        for p in \
-        '"browser.shell.checkDefaultBrowser", false' \
-        '"datareporting.policy.dataSubmissionEnabled", false' \
-        '"font.name-list.monospace.x-western", "Liberation Mono"' \
-        '"font.name-list.sans-serif.x-western", "Liberation Sans"' \
-        '"font.name-list.serif.x-western", "Liberation Serif"' ; do echo "user_pref($p);" >> /tmp/firefox-profile/prefs.js; done
-
-    - name: Setup Firefox
-      if: ${{ inputs.browser == 'firefox' }}
-      id: setup-firefox
-      uses: browser-actions/setup-firefox@v1
-      with:
-        firefox-version: '122.0.1'
-
     - name: Use Node.js
       uses: actions/setup-node@v4
       with:
         node-version: '20'
 
+    - uses: pnpm/action-setup@v3
+      with:
+        version: 9
+        run_install: false
+
     - name: Download artifacts
       uses: actions/download-artifact@v4
       with:
@@ -93,11 +65,6 @@ runs:
         rm -rf artifacts/npm
         7z x artifacts.zip
 
-    - uses: pnpm/action-setup@v3
-      with:
-        version: 9
-        run_install: false
-
     - name: Get pnpm store directory
       shell: bash
       run: |
@@ -122,6 +89,31 @@ runs:
       shell: bash
       run: dotnet build build/build-dotnet.sln
 
+    - name: Setup Chrome
+      if: ${{ inputs.browser == 'chrome' }}
+      uses: ./.github/actions/setup-chrome-headless-shell
+      with:
+        chrome-version: '145.0.7632.67'
+
+    - name: Setup Firefox profile
+      if: ${{ inputs.browser == 'firefox' }}
+      shell: bash
+      run: |
+        mkdir -p /tmp/firefox-profile
+        for p in \
+        '"browser.shell.checkDefaultBrowser", false' \
+        '"datareporting.policy.dataSubmissionEnabled", false' \
+        '"font.name-list.monospace.x-western", "Liberation Mono"' \
+        '"font.name-list.sans-serif.x-western", "Liberation Sans"' \
+        '"font.name-list.serif.x-western", "Liberation Serif"' ; do echo "user_pref($p);" >> /tmp/firefox-profile/prefs.js; done
+
+    - name: Setup Firefox
+      if: ${{ inputs.browser == 'firefox' }}
+      id: setup-firefox
+      uses: browser-actions/setup-firefox@v1
+      with:
+        firefox-version: '122.0.1'
+
     - name: Run QUnit tests
       working-directory: ./packages/devextreme
       shell: bash

.github/actions/setup-chrome-headless-shell/action.yml

@@ -18,14 +18,11 @@ runs:
         CHROME_VERSION: ${{ inputs.chrome-version }}
       run: |
         if [ -n "$CHROME_VERSION" ]; then
-          sudo apt-get update
-          sudo apt-get -y install libu2f-udev
-          sudo apt-get -y install dbus
-          
           echo "version to install: $CHROME_VERSION"
-          CHROME_BIN=`npx @puppeteer/browsers install chrome-headless-shell@$CHROME_VERSION | awk '{print $2}'`
-          chmod +x $CHROME_BIN
+          PUPPETEER_CMD="browsers install chrome-headless-shell@$CHROME_VERSION"
+          CHROME_BIN=`pnpm --filter devextreme-angular exec puppeteer $PUPPETEER_CMD | awk '{print $2}'`
           echo "chrome-headless-shell installed in: $CHROME_BIN"
+          chmod +x $CHROME_BIN
           $CHROME_BIN --version
           echo "CHROME_SHELL=$CHROME_BIN" >> $GITHUB_ENV
         else

.github/workflows/build_all.yml

@@ -64,22 +64,30 @@ jobs:
     needs: build
 
     steps:
+      - name: Get sources
+        uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+        with:
+          run_install: false
+
       - name: Download npm packages
         uses: actions/download-artifact@v4
         with:
           name: devextreme-npm-packages
           path: npm
 
       - name: Move devextreme package
-        run: mv ./npm/devextreme-2*.tgz ./devextreme.tgz
+        run: mv ./npm/devextreme-2*.tgz ./e2e/devextreme-bundler/devextreme.tgz
 
       - name: Setup deps
+        working-directory: ./e2e/devextreme-bundler
         run: |
-          npm init -y
-          npm i webpack terser-webpack-plugin
-          npm i ./devextreme.tgz
+          pnpm install --filter devextreme-bundler-test --frozen-lockfile
+          pnpm add --filter devextreme-bundler-test ./devextreme.tgz
 
       - name: Build bundle
+        working-directory: ./e2e/devextreme-bundler
         run: |
-          npx --no-install devextreme-bundler-init custom-bundle
-          npx --no-install devextreme-bundler custom-bundle
+          pnpm exec devextreme-bundler-init custom-bundle
+          pnpm exec devextreme-bundler custom-bundle

.github/workflows/demos_visual_tests.yml

@@ -66,7 +66,7 @@ jobs:
             ${{ runner.os }}-pnpm-store
 
       - name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: DevExtreme - Build
         shell: bash
@@ -125,7 +125,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: DevExtreme - Build
       run: pnpm exec nx build devextreme

.github/workflows/demos_visual_tests_frameworks.yml

@@ -142,12 +142,6 @@ jobs:
       working-directory: apps/demos
       run: pnpm add ../../devextreme-installer.tgz ../../devextreme-dist-installer.tgz ../../devextreme-react-installer.tgz ../../devextreme-vue-installer.tgz ../../devextreme-angular-installer.tgz
 
-#    - name: Build wrappers
-#      run: pnpm exec nx run-many -t pack -p devextreme-angular devextreme-react devetreme-vue
-
-#    - name: Link wrappers packages
-#      run: pnpm install
-
     - name: Prepare bundles
       working-directory: apps/demos
       run: pnpm exec nx prepare-bundles

.github/workflows/wrapper_tests.yml

@@ -57,7 +57,7 @@ jobs:
             ${{ runner.os }}-pnpm-store
 
       - name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: Build devextreme package
         env:
@@ -81,7 +81,9 @@ jobs:
           fi
 
       - name: Angular - Download Browser
-        run: pnpm --filter devextreme-angular exec puppeteer browsers install chrome@130.0.6723.69
+        run: |
+          PUPPETEER_CMD="browsers install chrome@130.0.6723.69"
+          pnpm --filter devextreme-angular exec puppeteer $PUPPETEER_CMD
 
       - name: Angular - Build
         run: pnpm exec nx build devextreme-angular

e2e/devextreme-bundler/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "devextreme-bundler-test",
+  "version": "24.2.14",
+  "description": "Project for testing the \"devextreme-bundler\" commands from \"devextreme\" package. See build_all.yml for details",
+  "scripts": {},
+  "dependencies": {
+    "terser-webpack-plugin": "5.3.10",
+    "webpack": "5.104.1"
+  }
+}

packages/devextreme/testing/tests/DevExpress.ui.widgets.dataGrid/scrolling.integration.tests.js

@@ -990,11 +990,11 @@ QUnit.module('Scrolling', baseModuleConfig, () => {
         scrollable.scrollTo(100.7);
 
         // assert
-        assert.equal(scrollable.scrollLeft(), 100);
-        assert.equal($(scrollable.container()).scrollLeft(), 100);
+        assert.equal(scrollable.scrollLeft(), 101);
+        assert.equal($(scrollable.container()).scrollLeft(), 101);
 
         const $headersScrollable = $dataGrid.find('.dx-datagrid-headers' + ' .dx-datagrid-scroll-container').first();
-        assert.equal($headersScrollable.scrollLeft(), 100);
+        assert.equal($headersScrollable.scrollLeft(), 101);
     });
 
     // T372552