fix(security): resolve 2026 vulnerability backlog

.babelrc

@@ -1,6 +1,6 @@
 {
   "presets": [
-    ["topcoder-react-utils/config/babel/node-ssr", {
+    ["./config/babel/node", {
       "baseAssetsOutputPath": "/community-app-assets"
     }]
   ]

.circleci/config.yml

@@ -111,11 +111,11 @@ jobs:
   # Jest unit-tests).
   test:
     docker:
-      - image: circleci/node:10.24.1
+      - image: cimg/node:24.18.0@sha256:4a638ad75f8601fec1f193e71df584639e6accb1771cea23f3d9d3857bca480c
     steps:
       - checkout
       - restore_cache:
-          key: test-node-modules-{{ checksum "package-lock.json" }}
+          key: test-node24-modules-{{ checksum "package-lock.json" }}
       - run:
           name: Config Git
           command: git config --global url."https://git@".insteadOf git://
@@ -124,15 +124,14 @@ jobs:
           command: npm ci
           no_output_timeout: 20m
       - save_cache:
-          key: test-node-modules-{{ checksum "package-lock.json" }}
+          key: test-node24-modules-{{ checksum "package-lock.json" }}
           paths:
             - node_modules
-      - run: npm test
+      - run: npm run lint && npm run jest:ci
 
   Performance-Testing:
     docker:
-      # specify the version you desire here
-      - image: circleci/openjdk:8-jdk
+      - image: cimg/openjdk:17.0.19@sha256:09490c4b3e6e85f8b382c7ce0ef70aa8e940ee3a3567a11d2aede0ed094dc525
 
       # Specify service dependencies here if necessary
       # CircleCI maintains a library of pre-built images
@@ -151,16 +150,16 @@ jobs:
       # Download and cache dependencies
       - restore_cache:
           keys:
-            - v1-dependencies-{{ checksum "pom.xml" }}
+            - performance-jdk17-maven3-{{ checksum "pom.xml" }}
             # fallback to using the latest cache if no exact match is found
-            - v1-dependencies-
+            - performance-jdk17-maven3-
 
       - run: mvn dependency:go-offline
 
       - save_cache:
           paths:
             - ~/.m2
-          key: v1-dependencies-{{ checksum "pom.xml" }}
+          key: performance-jdk17-maven3-{{ checksum "pom.xml" }}
 
       - run: mvn verify
 

.dockerignore

@@ -1,3 +1,40 @@
-__coverage__/
-.git/
-node_modules/
+# Version-control and local editor state
+.git
+.github
+.circleci
+.idea
+.vscode
+*.swp
+*.swo
+
+# Local dependencies, generated output, and test artifacts
+node_modules
+automated-smoke-test
+build
+.build-info
+target
+coverage
+__coverage__
+.nyc_output
+*.log
+npm-debug.log*
+
+# Local environment and deployment material must never enter the build context
+.env
+.env.*
+!.env.example
+*.key
+*.pem
+awsenvconf
+buildvar_env
+deployvar_env
+
+# Files that are not needed to install, test, or build the application
+docs
+README.md
+CHANGELOG.md
+CONTRIBUTING.md
+LICENSE
+CODEOWNERS
+pom.xml
+*.patch

.eslintignore

@@ -1,3 +1,4 @@
 __coverage__
+automated-smoke-test/temp
 build
-node_modules
+node_modules

.eslintrc

@@ -1,12 +1,69 @@
 {
-  "extends": "./node_modules/topcoder-react-utils/config/eslint/default.json",
+  "extends": "airbnb",
+  "parser": "@babel/eslint-parser",
+  "parserOptions": {
+    "requireConfigFile": false,
+    "sourceType": "module",
+    "babelOptions": {
+      "babelrc": false,
+      "configFile": false,
+      "presets": ["@babel/preset-react"],
+      "plugins": [
+        "@babel/plugin-proposal-export-default-from",
+        "@babel/plugin-transform-class-properties"
+      ]
+    }
+  },
   "rules": {
-    "jsx-a11y/anchor-is-valid": false,
+    "arrow-parens": ["error", "as-needed", { "requireForBlockBody": true }],
+    "class-methods-use-this": "off",
+    "default-param-last": "off",
+    "function-call-argument-newline": "off",
+    "function-paren-newline": ["error", "consistent"],
+    "import/no-import-module-exports": "off",
+    "jsx-a11y/anchor-is-valid": "off",
+    "jsx-a11y/control-has-associated-label": "off",
+    "jsx-a11y/href-no-hash": "off",
+    "max-classes-per-file": "off",
     "import/no-cycle": [2, { "maxDepth": 1 }],
-    "react/forbid-prop-types": false,
-    "react/no-unknown-property": ["error", { "ignore": ["styleName"] }]
+    "no-multiple-empty-lines": ["error", { "max": 2, "maxBOF": 2, "maxEOF": 0 }],
+    "no-promise-executor-return": "off",
+    "no-redeclare": ["error", { "builtinGlobals": false }],
+    "prefer-regex-literals": "off",
+    "react/forbid-prop-types": "off",
+    "react/function-component-definition": "off",
+    "react/jsx-curly-brace-presence": "off",
+    "react/jsx-curly-newline": "off",
+    "react/jsx-fragments": "off",
+    "react/jsx-no-useless-fragment": "off",
+    "react/jsx-one-expression-per-line": "off",
+    "react/jsx-props-no-spreading": "off",
+    "react/no-deprecated": "off",
+    "react/no-invalid-html-attribute": "off",
+    "react/no-unstable-nested-components": "off",
+    "react/no-unused-class-component-methods": "off",
+    "react/no-unknown-property": ["error", { "ignore": ["styleName"] }],
+    "react/sort-comp": "off"
   },
   "env": {
-    "browser": true
-  }
+    "browser": true,
+    "es6": true,
+    "node": true
+  },
+  "settings": {
+    "import/resolver": {
+      "node": {
+        "extensions": [".js", ".jsx"],
+        "moduleDirectory": ["node_modules", "src/shared", "src"]
+      }
+    }
+  },
+  "overrides": [
+    {
+      "files": ["config/**/*.js", "webpack.config.js"],
+      "rules": {
+        "import/no-extraneous-dependencies": ["error", { "devDependencies": true }]
+      }
+    }
+  ]
 }

.github/workflows/commitlint.yml

@@ -1,6 +1,10 @@
 name: Commitlint
 on: [pull_request]
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   commit-lint:
     runs-on: ubuntu-latest
@@ -12,4 +16,4 @@ jobs:
           fetch-depth: 0
       - uses: wagoid/commitlint-github-action@v1.4.0
         with:
-            configFile: './.commitlintrc.yml'
+            configFile: './.commitlintrc.yml'

.github/workflows/trivy.yaml

@@ -24,8 +24,9 @@ jobs:
           ignore-unfixed: true
           format: "sarif"
           output: "trivy-results.sarif"
-          severity: "CRITICAL,HIGH,UNKNOWN"
-          scanners: vuln,secret,misconfig,license
+          severity: "CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN"
+          limit-severities-for-sarif: true
+          scanners: vuln,secret,misconfig
           github-pat: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload Trivy scan results to GitHub Security tab

.npmrc

@@ -0,0 +1,2 @@
+legacy-peer-deps=true
+strict-allow-scripts=true

.nvmrc

@@ -1 +1 @@
-v10.24.1
+v24.18.0

.stylelintrc

@@ -1,11 +1,42 @@
 {
   "extends": "stylelint-config-standard",
   "rules": {
+    "alpha-value-notation": null,
+    "annotation-no-unknown": null,
+    "at-rule-descriptor-value-no-unknown": null,
+    "at-rule-no-vendor-prefix": null,
     "at-rule-no-unknown": [true, {
       "ignoreAtRules": ["content", "extend", "for", "include", "mixin"]
     }],
+    "color-function-alias-notation": null,
+    "color-function-notation": null,
+    "declaration-block-no-duplicate-properties": [true, {
+      "ignore": ["consecutive-duplicates-with-different-values"]
+    }],
+    "declaration-block-no-redundant-longhand-properties": null,
+    "declaration-property-value-keyword-no-deprecated": null,
+    "declaration-property-value-no-unknown": null,
+    "font-family-name-quotes": null,
+    "function-url-quotes": null,
+    "import-notation": null,
+    "keyframes-name-pattern": null,
+    "media-feature-range-notation": null,
+    "media-query-no-invalid": null,
+    "nesting-selector-no-missing-scoping-root": null,
+    "no-descending-specificity": null,
+    "no-invalid-position-at-import-rule": null,
+    "number-max-precision": null,
+    "property-no-deprecated": null,
+    "property-no-vendor-prefix": null,
+    "selector-attribute-quotes": null,
+    "selector-class-pattern": null,
+    "selector-no-vendor-prefix": null,
+    "selector-not-notation": null,
     "selector-pseudo-class-no-unknown": [true, {
       "ignorePseudoClasses": ["global"]
-    }]
+    }],
+    "shorthand-property-no-redundant-values": null,
+    "value-keyword-case": null,
+    "value-no-vendor-prefix": null
   }
 }