Issues/406 latest cves

[parksjr]

Related Issue(s):

• Resolve latest round of vite CVEs (5 moderate) #406

Proposed Changes:

1. Resolves moderate CVEs by upgrading a few dev dependencies
2. Adds cross-env package to set NODE_ENV before running tests, which was a fix for a side effect of upgrading vite to latest 5.1.x patch

PR Checklist:

• I have added my changes to the CHANGELOG or a CHANGELOG entry is not required.

[parksjr]

While the other changes to packages in here were directly related to CVEs, this change, along with the adding of the cross-env package, was a result of a side effect after patch upgrading vite.

In the pre-commit hook, tests were running in production env, and resulting in this error:

act(...) is not supported in production builds of React

Setting NODE_ENV=test before running ensure it runs in test environment, and doesn't have an issue with act(...). Using the cross-env package for that is to make setting the variable as platform agnostic as possible.

Thanks to this github issue discussion: Github issue discussion

[ircwaves]

This all looks good, but under the green check marks, we do have a pipeline warning:

The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, actions/setup-node@v3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

Maybe that is just another ticket for the backlog.

[parksjr]

Closes #406

[parksjr]

New issue to address the pipeline node version warning here: #408