Merge pull request #512 from ejarocki-cloudlinux/master

JS: add Svelte and Ember 4.12.13

Author: ejarocki-cloudlinux

docs/.vuepress/components/ELSTechnology.vue

@@ -648,7 +648,7 @@ const techData = [
       },
       {
         name: "Ember.js",
-        versions: "0.2.7 | 2.18.2 | 3.28.6",
+        versions: "0.2.7 | 2.18.2 | 3.28.6 | 4.12.13",
         link: "./ember/",
       },
       {
@@ -1106,6 +1106,11 @@ const techData = [
         versions: "0.0.4 | 0.0.5",
         link: "./javascript-libraries/",
       },
+      {
+        name: "Svelte",
+        versions: "0.3.0 | 1.64.1 | 2.16.1 | 3.59.2 | 4.2.20",
+        link: "./svelte/",
+      },
       {
         name: "swiper",
         versions: "11.2.10",

docs/.vuepress/config-client/sidebar.ts

@@ -429,6 +429,10 @@ export default {
                     path: '/els-for-libraries/requirejs/',
                     icon: '/images/requirejs-logo.webp',
                 },
+                {
+                    path: '/els-for-libraries/svelte/',
+                    icon: '/images/svelte-logo.webp',
+                },
                 {
                     path: '/els-for-libraries/tailwindcss/',
                     icon: '/images/tailwindcss-logo.webp',

docs/.vuepress/public/images/svelte-logo.webp

@@ -4,7 +4,7 @@ Endless Lifecycle Support (ELS) for Ember.js from TuxCare provides security fixe
 
 ## Supported Ember.js Versions
 
-* Ember.js 0.2.7, 2.18.2, 3.28.6
+* Ember.js 0.2.7, 2.18.2, 3.28.6, 4.12.13
 
 ## Connection to ELS for Ember.js Library
 
@@ -242,6 +242,52 @@ TuxCare publishes patched **transitive** dependencies for supported Ember.js ver
 
     </template>
 
+    <template #ember_4.12.13>
+
+    * **Option 1: Manual update**
+
+      ```text
+      "dependencies": {
+        "@babel/runtime": "npm:@els-js/babel-runtime@>=7.12.18-tuxcare.1",
+        "tmp": "npm:@els-js/tmp@>=0.0.28-tuxcare.1"
+      },
+      "overrides": {
+        "@babel/[email protected]": "npm:@els-js/babel-runtime@>=7.12.18-tuxcare.1",
+        "[email protected]": "npm:@els-js/tmp@>=0.0.28-tuxcare.1"
+      }
+      ```
+
+    * **Option 2: TuxCare Patcher (Automated)**
+
+      ```text
+      npm install -g @els-js/tuxcare-patcher --userconfig ./.npmrc
+      tuxcare-patch-js
+      ```
+
+      The patcher will update your `package.json`, for example, from:
+
+      ```text
+      "dependencies": {
+        "@babel/runtime": "7.12.18",
+        "tmp": "0.0.28"
+      }
+      ```
+
+      to:
+
+      ```text
+      "dependencies": {
+        "@babel/runtime": "npm:@els-js/babel-runtime@>=7.12.18-tuxcare.1",
+        "tmp": "npm:@els-js/tmp@>=0.0.28-tuxcare.1"
+      },
+      "overrides": {
+        "@babel/[email protected]": "npm:@els-js/babel-runtime@>=7.12.18-tuxcare.1",
+        "[email protected]": "npm:@els-js/tmp@>=0.0.28-tuxcare.1"
+      }
+      ```
+
+    </template>
+
    </TableTabs>
 
 5. You need to remove the `node_modules` directory and the `package-lock.json` file, and also clear the `npm cache` before installing the patched packages. Use the following commands:
@@ -390,6 +436,15 @@ Fixes for the following **transitive** vulnerabilities are available in ELS for
 
 </template>
 
+<template #ember_4.12.13>
+
+| CVE ID | CVE Type | Severity | Affected Libraries | Vulnerable Versions |
+| :------------: | :------: |:--------:|:------------------:| :----------------: |
+| CVE-2025-27789 | Transitive | Medium | @babel/runtime | < 7.26.10 |
+| CVE-2025-54798 | Transitive | Low | tmp | <= 0.2.3 |
+
+</template>
+
 </TableTabs>
 
 If you are interested in the TuxCare Endless Lifecycle Support, contact [[email protected]](mailto:[email protected]).

docs/els-for-libraries/ember/README.md

@@ -169,6 +169,7 @@ Fixes for the following vulnerabilities are available in ELS for Nuxt from TuxCa
 
 |    CVE ID     | CVE Type  | Severity | Affected Libraries | Vulnerable Versions |
 |:-------------:|:---------:|:--------:|:------------------:|:-------------------:|
+| CVE-2024-34343 | Direct | Medium   | nuxt               |       < 3.12.4      |
 | CVE-2020-7608 | Transitive | Medium   | yargs-parser | < 5.0.1, >= 6.0.0 < 13.1.2, >= 14.0.0 < 15.0.1 |
 | CVE-2024-37890 | Transitive | High     | ws | < 5.2.4, >= 6.0.0 < 6.2.3, >= 7.0.0 < 7.5.10, >= 8.0.0 < 8.17.1 |
 | CVE-2024-29180 | Transitive | High     | webpack-dev-middleware | < 5.3.4, >= 6.0.0 < 6.1.2, >= 7.0.0 < 7.1.0 |