fix(deps): update all dependencies j:cdx-227

.github/actions/e2e-clean/action.yml

@@ -7,7 +7,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+    - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3
       with:
         cache: 'npm'
         node-version-file: '.nvmrc'

.github/actions/e2e-login/action.yml

@@ -43,7 +43,7 @@ runs:
       run: |
         echo "${{ env.E2E_TOKEN_PASSPHRASE }}" | gpg -a --batch --passphrase-fd 0 --symmetric --cipher-algo AES256 --output encodedConfig $CLI_CONFIG_PATH
         echo "cliConfigJson=$(base64 -w 0 encodedConfig)" >> $GITHUB_OUTPUT
-    - uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3
+    - uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3
       if: cancelled() || failure() || success()
       with:
         name: login-test-artifacts

.github/actions/e2e-run/action.yml

@@ -37,14 +37,14 @@ runs:
         git config --global core.autocrlf false
         git config --global core.eol lf
         npm i -g npm@10.8.2
-    - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+    - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3
       with:
         cache: 'npm'
         node-version-file: '.nvmrc'
-    - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
+    - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
       with:
         cache: 'pip'
-        python-version: '3.10'
+        python-version: '3.14'
     - name: Install Mitmproxy through pip
       shell: bash
       run: pip install -r packages/cli-e2e/mitmproxy/requirements.txt
@@ -77,7 +77,7 @@ runs:
         npm_config_registry: ${{inputs.npmRegistry}}
       working-directory: packages/cli-e2e
       run: npm run jest:ci -- ${{inputs.spec}} ${{inputs.flag}}
-    - uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3
+    - uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3
       if: cancelled() || failure() || success()
       with:
         name: ${{inputs.os}}-${{inputs.node}}-${{inputs.spec}}-test-artifacts

.github/actions/setup-node/action.yml

@@ -12,7 +12,7 @@ runs:
     # publishing would fail with a misleading `E404 PUT /@coveo%2fcli`
     # instead of an authentication error. All our dependencies come from the
     # public registry, so no credentials are needed to install.
-    - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+    - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3
       with:
         cache: 'npm'
         node-version-file: '.nvmrc'

.github/workflows/build.yml

@@ -11,11 +11,11 @@ jobs:
     runs-on: 'ubuntu-latest'
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
       - uses: ./.github/actions/setup-node
       - name: Lint
         run: npm run lint
@@ -24,11 +24,11 @@ jobs:
     runs-on: 'ubuntu-latest'
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
       - uses: ./.github/actions/setup-node
       - name: Build
         run: npm run build

.github/workflows/codeql-analysis.yml

@@ -32,17 +32,17 @@ jobs:
 
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
       - name: Checkout repository
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3
+        uses: github/codeql-action/init@f3712979fa5f215279b101dd0a2e3bdfb4353324 # v3
         with:
           languages: ${{ matrix.language }}
           config-file: .github/codeql/config.yml
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3
+        uses: github/codeql-action/analyze@f3712979fa5f215279b101dd0a2e3bdfb4353324 # v3

.github/workflows/dependency-review.yml

@@ -11,7 +11,7 @@ permissions:
 jobs:
   dependency-Review:
     name: Review
-    uses: coveo/public-actions/.github/workflows/dependency-review.yml@main
+    uses: coveo/public-actions/.github/workflows/dependency-review.yml@5a3c9311bf6a65f17f02c21d72cccd1a0ad48a3a # main
     with:
       public: true
       distributed: true

.github/workflows/git-lock-fail.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 

.github/workflows/git-lock-success.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 

.github/workflows/merge-bot.yml

@@ -14,10 +14,10 @@ jobs:
       GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
-      - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+      - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3
       - name: Run the Bot
         run: npx @coveo/merge-bot

.github/workflows/package-lock-root-fail.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 

.github/workflows/package-lock-root-success.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 

.github/workflows/package-lock-version-fail.yml

@@ -18,10 +18,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
       - name: Check lockfileVersion of all package-lock.json
         run: node scripts/check-lockfile-versions.js $(find ./ -xdev -wholename '**/package-lock.json')

.github/workflows/package-lock-version-succes.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 

.github/workflows/pr-title-semantic-lint.yml

@@ -10,11 +10,11 @@ jobs:
       GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
 
       - name: Semantic Pull Request
         uses: step-security/action-semantic-pull-request@9142b539761b0ed6761de569f3a5020a7462a7f3

.github/workflows/prbot.yml

@@ -9,14 +9,14 @@ jobs:
       GITHUB_CREDENTIALS: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+      - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3
         with:
           cache: 'npm'
           node-version-file: '.nvmrc'

.github/workflows/release.yml

@@ -20,7 +20,7 @@ jobs:
       id-token: write # required for npm trusted publishing (OIDC)
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
@@ -33,7 +33,7 @@ jobs:
           owner: coveo
           repositories: 'cli'
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
         with:
           fetch-depth: 0
           token: ${{ steps.generate-token.outputs.token }}

.github/workflows/renovate-config-validator.yml

@@ -18,12 +18,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-      - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
+      - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3
         with:
           cache: 'npm'
           node-version-file: '.nvmrc'

.github/workflows/renovate-jest-snap-updater.yml

@@ -18,7 +18,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
@@ -44,10 +44,10 @@ jobs:
           git config --global core.autocrlf false
           git config --global core.eol lf
           npm i -g npm@10.8.2
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3
         with:
           ref: ${{ github.event.workflow_run.head_branch }}
-      - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+      - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3
         with:
           cache: 'npm'
           node-version-file: '.nvmrc'

.nvmrc

@@ -1 +1 @@
-24.15.0
+24.19.0

package.json

@@ -9,51 +9,51 @@
   "license": "Apache-2.0",
   "bugs": "https://github.com/coveo/cli/issues",
   "devDependencies": {
-    "@actions/core": "1.10.0",
+    "@actions/core": "1.11.1",
     "@actions/github": "5.1.1",
     "@changesets/changelog-github": "^0.7.0",
     "@changesets/cli": "^2.31.0",
-    "@commitlint/config-conventional": "17.6.1",
-    "@commitlint/lint": "17.6.1",
-    "@coveo/platform-client": "58.5.0",
-    "@coveo/semantic-monorepo-tools": "2.4.28",
+    "@commitlint/config-conventional": "17.8.1",
+    "@commitlint/lint": "17.8.1",
+    "@coveo/platform-client": "58.21.0",
+    "@coveo/semantic-monorepo-tools": "2.7.1",
     "@coveord/release": "1.0.0",
-    "@npmcli/arborist": "6.2.8",
+    "@npmcli/arborist": "6.5.1",
     "@nrwl/cli": "latest",
     "@nrwl/workspace": "latest",
-    "@types/node": "18.16.3",
-    "@typescript-eslint/eslint-plugin": "5.59.1",
-    "@typescript-eslint/parser": "5.59.1",
-    "abortcontroller-polyfill": "1.7.5",
+    "@types/node": "18.19.130",
+    "@typescript-eslint/eslint-plugin": "5.62.0",
+    "@typescript-eslint/parser": "5.62.0",
+    "abortcontroller-polyfill": "1.7.8",
     "async-retry": "1.3.3",
-    "aws-sdk": "2.1368.0",
-    "chai": "4.3.7",
+    "aws-sdk": "2.1693.0",
+    "chai": "4.5.0",
     "conventional-changelog-angular": "5.0.13",
     "cz-conventional-changelog": "3.3.0",
-    "dotenv": "16.0.3",
-    "eslint": "8.39.0",
-    "eslint-config-prettier": "8.8.0",
+    "dotenv": "16.6.1",
+    "eslint": "8.57.1",
+    "eslint-config-prettier": "8.10.2",
     "eslint-plugin-node": "11.1.0",
-    "eslint-plugin-prettier": "4.2.1",
-    "exponential-backoff": "3.1.1",
-    "fs-extra": "11.1.1",
+    "eslint-plugin-prettier": "4.2.5",
+    "exponential-backoff": "3.1.3",
+    "fs-extra": "11.4.0",
     "gts": "3.1.1",
     "husky": "8.0.3",
     "isomorphic-fetch": "3.0.0",
-    "lint-staged": "13.2.2",
-    "moment": "2.29.4",
+    "lint-staged": "13.3.0",
+    "moment": "2.30.1",
     "npm": "11.19.0",
     "npm-registry-fetch": "^14.0.2",
     "oclif": "3.4.3",
-    "octokit": "2.0.14",
+    "octokit": "2.1.0",
     "patch-package": "6.5.1",
     "prettier": "2.8.8",
     "rimraf": "4.4.1",
-    "semver": "7.5.2",
-    "ts-dedent": "2.2.0",
-    "ts-node": "10.9.1",
+    "semver": "7.8.5",
+    "ts-dedent": "2.3.0",
+    "ts-node": "10.9.2",
     "typescript": "4.9.5",
-    "yargs": "17.7.2"
+    "yargs": "17.7.3"
   },
   "commitlint": {
     "extends": [