deps: update vulnerable packages

- Fixes dependabot alert findings: 228, 226, 224, 219, 216, 212, 210,
207, 206, 205, 204, 203, 202 and 201

Refs: KEH-281

Author: tjgofore

package.json

@@ -49,7 +49,7 @@
     "@sentry/react": "^9.22.0",
     "@typescript-eslint/eslint-plugin": "^8.57.1",
     "@typescript-eslint/parser": "^8.57.1",
-    "@vitejs/plugin-react-swc": "^3.7.1",
+    "@vitejs/plugin-react-swc": "^4.3.0",
     "alertifyjs": "^1.13.1",
     "autoprefixer": "^10.4.15",
     "bootstrap-sass": "3.4.3",
@@ -118,10 +118,9 @@
     "updeep": "^1.2.0",
     "url-parse": "^1.5.9",
     "uuid": "^9.0.0",
-    "vite": "^6.4.1",
-    "vite-plugin-eslint": "^1.8.1",
+    "vite": "^8.0.3",
     "vite-plugin-istanbul": "^7.0.0",
-    "vitest": "^3.2.4"
+    "vitest": "^4.1.2"
   },
   "devDependencies": {
     "@commitlint/cli": "^19.8.0",
@@ -130,7 +129,7 @@
     "@testing-library/jest-dom": "^6.3.0",
     "@testing-library/react": "^15.0.7",
     "@testing-library/user-event": "^14.5.2",
-    "@vitest/coverage-istanbul": "^3.2.4",
+    "@vitest/coverage-istanbul": "^4.1.2",
     "husky": "^8.0.3",
     "istanbul-merge": "^2.0.0",
     "jsdom": "^26.1.0",
@@ -140,9 +139,16 @@
     "vitest-fetch-mock": "^0.4.5"
   },
   "resolutions": {
-    "cross-spawn": "^7.0.6",
-    "micromatch": "^4.0.8",
-    "rollup": "^4.24.4"
+    "@draft-js-plugins/drag-n-drop/immutable": "3.8.3",
+    "@draft-js-plugins/editor/immutable": "3.8.3",
+    "@draft-js-plugins/focus/immutable": "3.8.3",
+    "@draft-js-plugins/image/immutable": "3.8.3",
+    "@draft-js-plugins/resizeable/immutable": "3.8.3",
+    "draft-convert/immutable": "3.8.3",
+    "draft-js-export-html/immutable": "3.8.3",
+    "draft-js-utils/immutable": "3.8.3",
+    "draft-js/immutable": "3.8.3",
+    "**/@typescript-eslint/typescript-estree/minimatch": "9.0.7"
   },
   "snyk": true
 }

src/components/Matomo/hooks/__tests__/useMatomo.test.jsx

@@ -36,9 +36,9 @@ describe('useMatomo', () => {
   it('should trackPageView', () => {
     const trackPageViewMock = vi.fn();
 
-    vi.spyOn(MatomoTracker, 'default').mockImplementation(() => ({
-      trackPageView: trackPageViewMock,
-    }));
+    vi.spyOn(MatomoTracker, 'default').mockImplementation(function () {
+      return { trackPageView: trackPageViewMock };
+    });
 
     const instance = new MatomoTracker.default({
       urlBase: MOCK_URL,

src/components/admin/__tests__/HearingEditor.test.jsx

@@ -78,10 +78,12 @@ const renderComponent = (propOverrides) => {
 describe('<HearingEditor />', () => {
   const originalInterSectionObserver = window.IntersectionObserver;
 
-  const intersectionObserverMock = () => ({
-    observe: () => null,
-    disconnect: () => null,
-  });
+  const intersectionObserverMock = function () {
+    return {
+      observe: () => null,
+      disconnect: () => null,
+    };
+  };
 
   beforeAll(() => {
     window.IntersectionObserver = vi

src/components/admin/__tests__/HearingForm.test.jsx

@@ -109,10 +109,12 @@ const renderComponent = (propOverrides, storeOverride) => {
 describe('<HearingForm />', () => {
   const originalInterSectionObserver = window.IntersectionObserver;
 
-  const intersectionObserverMock = () => ({
-    observe: () => null,
-    disconnect: () => null,
-  });
+  const intersectionObserverMock = function () {
+    return {
+      observe: () => null,
+      disconnect: () => null,
+    };
+  };
 
   beforeAll(() => {
     window.IntersectionObserver = vi

src/components/admin/__tests__/HearingFormStep2.test.jsx

@@ -55,10 +55,12 @@ const renderComponent = (propOverrides, storeOverride) => {
 describe('<HearingFormStep2 />', () => {
   const originalInterSectionObserver = window.IntersectionObserver;
 
-  const intersectionObserverMock = () => ({
-    observe: () => null,
-    disconnect: () => null,
-  });
+  const intersectionObserverMock = function () {
+    return {
+      observe: () => null,
+      disconnect: () => null,
+    };
+  };
 
   beforeAll(() => {
     window.IntersectionObserver = vi

src/components/admin/__tests__/SectionForm.test.jsx

@@ -42,10 +42,12 @@ const renderComponent = (propOverrides, storeOverride) => {
 describe('<SectionForm />', () => {
   const originalInterSectionObserver = window.IntersectionObserver;
 
-  const intersectionObserverMock = () => ({
-    observe: () => null,
-    disconnect: () => null,
-  });
+  const intersectionObserverMock = function () {
+    return {
+      observe: () => null,
+      disconnect: () => null,
+    };
+  };
 
   beforeAll(() => {
     window.IntersectionObserver = vi

src/setupTests.js

@@ -10,22 +10,21 @@ import { getCityConfig, getCityPublic } from '../scripts/utils';
 
 const USE_TEST_ENV = process.env.NODE_ENV === 'test';
 const defaultNodeEnv = USE_TEST_ENV ? 'test' : 'development';
-
-/* @ts-ignore */
-import.meta.env = {};
-
-import.meta.env.NODE_ENV = process.env.NODE_ENV || defaultNodeEnv;
+const runtimeEnv = {
+  ...process.env,
+  NODE_ENV: process.env.NODE_ENV || defaultNodeEnv,
+};
 
 dotenv.config({
-  processEnv: import.meta.env,
+  processEnv: runtimeEnv,
   ...(USE_TEST_ENV
     ? { path: ['.env', '.env.test'] }
     : { path: ['.env', '.env.local'] }),
   override: true,
 });
 
-const cityConfig = getCityConfig(import.meta.env);
-const cityPublic = getCityPublic(import.meta.env, cityConfig);
+const cityConfig = getCityConfig(runtimeEnv);
+const cityPublic = getCityPublic(runtimeEnv, cityConfig);
 
 // Load generated runtime configuration to be available in tests
 require(`${cityPublic}/test-env-config`);
@@ -57,6 +56,17 @@ class ResizeObserver {
 // Add ResizeObserver to the global object
 global.ResizeObserver = ResizeObserver;
 
+// Mock IntersectionObserver which is not available in JSDOM
+class IntersectionObserver {
+  constructor() {
+    this.observe = vi.fn();
+    this.unobserve = vi.fn();
+    this.disconnect = vi.fn();
+  }
+}
+
+global.IntersectionObserver = IntersectionObserver;
+
 Object.assign(global, { TextDecoder, TextEncoder });
 
 const originalError = console.error.bind(console.error);

src/utils/__tests__/hearingEditor.test.js

@@ -1,5 +1,3 @@
-import { describe } from 'node:test';
-
 import { prepareSection, validateHearing } from '../hearingEditor';
 import { initNewHearing } from '../hearing';
 

src/utils/__tests__/map.test.jsx

@@ -8,8 +8,12 @@ vi.mock('leaflet', async () => {
 
   return {
     ...mod,
-    LatLng: vi.fn((lat, lng) => ({ lat, lng })),
-    Icon: vi.fn(() => ({})),
+    LatLng: vi.fn(function (lat, lng) {
+      return { lat, lng };
+    }),
+    Icon: vi.fn(function () {
+      return {};
+    }),
   };
 });
 

src/utils/leafletDrawCompat.js

@@ -0,0 +1,3 @@
+import * as leafletDraw from 'leaflet-draw/dist/leaflet.draw.js';
+
+export default leafletDraw;