security/bitwarden-cli: update to 2024.10.0

Changelog: https://github.com/bitwarden/clients/releases/tag/cli-v2024.10.0

Reported by:	GitHub (watch releases)

security/bitwarden-cli/Makefile

@@ -1,6 +1,6 @@
 PORTNAME=	bitwarden-cli
 DISTVERSIONPREFIX=	cli-v
-DISTVERSION=	2024.9.0
+DISTVERSION=	2024.10.0
 CATEGORIES=	security
 MASTER_SITES=	https://nodejs.org/dist/v${PKG_NODE_VER}/:node
 DISTFILES=	node-v${PKG_NODE_VER}${EXTRACT_SUFX}:node \
@@ -50,7 +50,7 @@ OPTIONS_DEFINE=	DOCS
 
 PREFETCH_FILE=	${PORTNAME}-${DISTVERSION}-node-modules${EXTRACT_SUFX}
 PREFETCH_TIMESTAMP=	61171200
-PKG_NODE_VER=	20.11.1
+PKG_NODE_VER=	20.17.0
 PKG_FETCH_VER=	3.5
 PKG_NODE_CONFIGURE_ARGS=--openssl-use-def-ca-store \
 			--shared-brotli \

security/bitwarden-cli/distinfo

@@ -1,7 +1,7 @@
-TIMESTAMP = 1727141885
+TIMESTAMP = 1729674634
-SHA256 (node-v20.11.1.tar.gz) = 4af1ba6ea848cc05908b8a62b02fb27684dd52b2a7988ee82b0cfa72deb90b94
+SHA256 (node-v20.17.0.tar.gz) = 409bda5f1896c7c20866610d778d1760991884ad2e7940837cd3f2854cf73747
-SIZE (node-v20.11.1.tar.gz) = 87513887
+SIZE (node-v20.17.0.tar.gz) = 87312235
-SHA256 (bitwarden-cli-2024.9.0-node-modules.tar.gz) = 7ec8ceaac195010b1f1511d1b17345dedcbc20b1853137c4265e965e7fe103ae
+SHA256 (bitwarden-cli-2024.10.0-node-modules.tar.gz) = 342ba15f6a621f5e94561eb61300d81b19cabd540cfc11fc2f847fe645849498
-SIZE (bitwarden-cli-2024.9.0-node-modules.tar.gz) = 215205227
+SIZE (bitwarden-cli-2024.10.0-node-modules.tar.gz) = 214773031
-SHA256 (bitwarden-clients-cli-v2024.9.0_GH0.tar.gz) = 72a87d4eccbf80b31b5fe80c485bff90792018de7c983ff5e93911f2201d3684
+SHA256 (bitwarden-clients-cli-v2024.10.0_GH0.tar.gz) = 1396b949f482f398bca4f59a4a7e0c2d9549f9b461bf6af5a9db04dd9b6bcb64
-SIZE (bitwarden-clients-cli-v2024.9.0_GH0.tar.gz) = 23507768
+SIZE (bitwarden-clients-cli-v2024.10.0_GH0.tar.gz) = 23779807

security/bitwarden-cli/files/node/patch-common.gypi

@@ -1,6 +1,6 @@
---- common.gypi.orig	2024-02-13 21:43:28 UTC
+--- common.gypi.orig	2024-08-21 12:35:22 UTC
 +++ common.gypi
-@@ -466,7 +466,7 @@
+@@ -491,7 +491,7 @@
                  'ldflags': [ '-m32' ],
                }],
                [ 'host_arch=="ppc64" and OS not in "aix os400"', {
@@ -9,7 +9,7 @@
                  'ldflags': [ '-m64' ],
                }],
                [ 'host_arch=="s390x" and OS=="linux"', {
-@@ -490,7 +490,7 @@
+@@ -515,7 +515,7 @@
                  'ldflags': [ '-m32' ],
                }],
                [ 'target_arch=="ppc64" and OS not in "aix os400"', {

security/bitwarden-cli/files/node/patch-deps_v8_src_inspector_string-16.cc

@@ -0,0 +1,31 @@
+--- deps/v8/src/inspector/string-16.cc.orig	2024-08-21 12:35:26 UTC
++++ deps/v8/src/inspector/string-16.cc
+@@ -27,7 +27,7 @@ bool isSpaceOrNewLine(UChar c) {
+   return isASCII(c) && c <= ' ' && (c == ' ' || (c <= 0xD && c >= 0x9));
+ }
+ 
+-int64_t charactersToInteger(const UChar* characters, size_t length,
++int64_t charactersToInteger(const uint16_t* characters, size_t length,
+                             bool* ok = nullptr) {
+   std::vector<char> buffer;
+   buffer.reserve(length + 1);
+@@ -50,6 +50,8 @@ String16::String16(const UChar* characters, size_t siz
+ 
+ String16::String16(const UChar* characters, size_t size)
+     : m_impl(characters, size) {}
++String16::String16(const uint16_t* characters, size_t size)
++    : m_impl(reinterpret_cast<const UChar*>(characters), size) {}
+ 
+ String16::String16(const UChar* characters) : m_impl(characters) {}
+ 
+@@ -239,6 +241,10 @@ String16 String16::fromUTF16LE(const UChar* stringStar
+   // No need to do anything on little endian machines.
+   return String16(stringStart, length);
+ #endif  // V8_TARGET_BIG_ENDIAN
++}
++
++String16 String16::fromUTF16LE(const uint16_t* stringStart, size_t length) {
++  return fromUTF16LE(reinterpret_cast<const UChar*>(stringStart), length);
+ }
+ 
+ std::string String16::utf8() const {

security/bitwarden-cli/files/node/patch-deps_v8_src_inspector_string-16.h

@@ -0,0 +1,47 @@
+--- deps/v8/src/inspector/string-16.h.orig	2024-08-21 12:35:26 UTC
++++ deps/v8/src/inspector/string-16.h
+@@ -6,6 +6,7 @@
+ #define V8_INSPECTOR_STRING_16_H_
+ 
+ #include <stdint.h>
++#include <uchar.h>
+ 
+ #include <cctype>
+ #include <climits>
+@@ -17,7 +18,7 @@ namespace v8_inspector {
+ 
+ namespace v8_inspector {
+ 
+-using UChar = uint16_t;
++using UChar = char16_t;
+ 
+ class String16 {
+  public:
+@@ -27,6 +28,7 @@ class String16 {
+   String16(const String16&) V8_NOEXCEPT = default;
+   String16(String16&&) V8_NOEXCEPT = default;
+   String16(const UChar* characters, size_t size);
++  String16(const uint16_t* characters, size_t size);
+   V8_EXPORT String16(const UChar* characters);
+   V8_EXPORT String16(const char* characters);
+   String16(const char* characters, size_t size);
+@@ -48,7 +50,9 @@ class String16 {
+   int toInteger(bool* ok = nullptr) const;
+   std::pair<size_t, size_t> getTrimmedOffsetAndLength() const;
+   String16 stripWhiteSpace() const;
+-  const UChar* characters16() const { return m_impl.c_str(); }
++  const uint16_t* characters16() const {
++    return reinterpret_cast<const uint16_t*>(m_impl.c_str());
++  }
+   size_t length() const { return m_impl.length(); }
+   bool isEmpty() const { return !m_impl.length(); }
+   UChar operator[](size_t index) const { return m_impl[index]; }
+@@ -77,6 +81,8 @@ class String16 {
+   // Instantiates a String16 in native endianness from UTF16 LE.
+   // On Big endian architectures, byte order needs to be flipped.
+   V8_EXPORT static String16 fromUTF16LE(const UChar* stringStart,
++                                        size_t length);
++  V8_EXPORT static String16 fromUTF16LE(const uint16_t* stringStart,
+                                         size_t length);
+ 
+   std::size_t hash() const {

security/bitwarden-cli/files/node/patch-deps_v8_src_inspector_v8-string-conversions.cc

@@ -0,0 +1,29 @@
+--- deps/v8/src/inspector/v8-string-conversions.cc.orig	2024-08-21 12:35:26 UTC
++++ deps/v8/src/inspector/v8-string-conversions.cc
+@@ -12,7 +12,7 @@ namespace {
+ 
+ namespace v8_inspector {
+ namespace {
+-using UChar = uint16_t;
++using UChar = char16_t;
+ using UChar32 = uint32_t;
+ 
+ bool isASCII(UChar c) { return !(c & ~0x7F); }
+@@ -386,7 +386,7 @@ std::basic_string<UChar> UTF8ToUTF16(const char* strin
+ 
+ std::basic_string<UChar> UTF8ToUTF16(const char* stringStart, size_t length) {
+   if (!stringStart || !length) return std::basic_string<UChar>();
+-  std::vector<uint16_t> buffer(length);
++  std::vector<UChar> buffer(length);
+   UChar* bufferStart = buffer.data();
+ 
+   UChar* bufferCurrent = bufferStart;
+@@ -395,7 +395,7 @@ std::basic_string<UChar> UTF8ToUTF16(const char* strin
+                          reinterpret_cast<const char*>(stringStart + length),
+                          &bufferCurrent, bufferCurrent + buffer.size(), nullptr,
+                          true) != conversionOK)
+-    return std::basic_string<uint16_t>();
++    return std::basic_string<UChar>();
+   size_t utf16Length = bufferCurrent - bufferStart;
+   return std::basic_string<UChar>(bufferStart, bufferStart + utf16Length);
+ }

security/bitwarden-cli/files/node/patch-deps_v8_src_inspector_v8-string-conversions.h

@@ -0,0 +1,21 @@
+--- deps/v8/src/inspector/v8-string-conversions.h.orig	2024-08-21 12:35:26 UTC
++++ deps/v8/src/inspector/v8-string-conversions.h
+@@ -5,14 +5,16 @@
+ #ifndef V8_INSPECTOR_V8_STRING_CONVERSIONS_H_
+ #define V8_INSPECTOR_V8_STRING_CONVERSIONS_H_
+ 
++#include <uchar.h>
++
+ #include <cstdint>
+ #include <string>
+ 
+ // Conversion routines between UT8 and UTF16, used by string-16.{h,cc}. You may
+ // want to use string-16.h directly rather than these.
+ namespace v8_inspector {
+-std::basic_string<uint16_t> UTF8ToUTF16(const char* stringStart, size_t length);
+-std::string UTF16ToUTF8(const uint16_t* stringStart, size_t length);
++std::basic_string<char16_t> UTF8ToUTF16(const char* stringStart, size_t length);
++std::string UTF16ToUTF8(const char16_t* stringStart, size_t length);
+ }  // namespace v8_inspector
+ 
+ #endif  // V8_INSPECTOR_V8_STRING_CONVERSIONS_H_

security/bitwarden-cli/files/node/patch-deps_v8_third__party_inspector__protocol_crdtp_test__platform__v8.cc

@@ -0,0 +1,22 @@
+--- deps/v8/third_party/inspector_protocol/crdtp/test_platform_v8.cc.orig	2024-08-21 12:35:28 UTC
++++ deps/v8/third_party/inspector_protocol/crdtp/test_platform_v8.cc
+@@ -11,13 +11,16 @@ std::string UTF16ToUTF8(span<uint16_t> in) {
+ namespace v8_crdtp {
+ 
+ std::string UTF16ToUTF8(span<uint16_t> in) {
+-  return v8_inspector::UTF16ToUTF8(in.data(), in.size());
++  return v8_inspector::UTF16ToUTF8(reinterpret_cast<const char16_t*>(in.data()),
++                                   in.size());
+ }
+ 
+ std::vector<uint16_t> UTF8ToUTF16(span<uint8_t> in) {
+-  std::basic_string<uint16_t> utf16 = v8_inspector::UTF8ToUTF16(
++  std::basic_string<char16_t> utf16 = v8_inspector::UTF8ToUTF16(
+       reinterpret_cast<const char*>(in.data()), in.size());
+-  return std::vector<uint16_t>(utf16.begin(), utf16.end());
++  return std::vector<uint16_t>(
++      reinterpret_cast<const uint16_t*>(utf16.data()),
++      reinterpret_cast<const uint16_t*>(utf16.data()) + utf16.size());
+ }
+ 
+ }  // namespace v8_crdtp

security/bitwarden-cli/files/node/patch-node.gypi

@@ -1,6 +1,6 @@
---- node.gypi.orig	2023-03-05 06:42:54 UTC
+--- node.gypi.orig	2024-08-21 12:35:29 UTC
 +++ node.gypi
-@@ -349,6 +349,9 @@
+@@ -350,6 +350,9 @@
      [ 'node_use_openssl=="true"', {
        'defines': [ 'HAVE_OPENSSL=1' ],
        'conditions': [

security/bitwarden-cli/files/node/patch-tools_v8__gypfiles_v8.gyp

@@ -1,6 +1,6 @@
---- tools/v8_gypfiles/v8.gyp.orig	2024-02-13 21:43:34 UTC
+--- tools/v8_gypfiles/v8.gyp.orig	2024-08-21 12:35:32 UTC
 +++ tools/v8_gypfiles/v8.gyp
-@@ -1083,7 +1083,7 @@
+@@ -1095,7 +1095,7 @@
          }],
          # Platforms that don't have Compare-And-Swap (CAS) support need to link atomic library
          # to implement atomic memory access

security/bitwarden-cli/files/packagejsons/apps/browser/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitwarden/browser",
-  "version": "2024.9.1",
+  "version": "2024.10.1",
   "scripts": {
     "build": "cross-env MANIFEST_VERSION=3 webpack",
     "build:mv2": "webpack",

security/bitwarden-cli/files/packagejsons/apps/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bitwarden/cli",
   "description": "A secure and free password manager for all of your devices.",
-  "version": "2024.9.0",
+  "version": "2024.10.0",
   "keywords": [
     "bitwarden",
     "password",
@@ -59,14 +59,14 @@
     "@koa/multer": "3.0.2",
     "@koa/router": "12.0.1",
     "argon2": "0.40.1",
-    "big-integer": "1.6.51",
+    "big-integer": "1.6.52",
     "browser-hrtime": "1.1.8",
     "chalk": "4.1.2",
     "commander": "11.1.0",
     "form-data": "4.0.0",
-    "https-proxy-agent": "7.0.2",
+    "https-proxy-agent": "7.0.5",
     "inquirer": "8.2.6",
-    "jsdom": "24.1.3",
+    "jsdom": "25.0.1",
     "jszip": "3.10.1",
     "koa": "2.15.0",
     "koa-bodyparser": "4.4.1",
@@ -80,7 +80,7 @@
     "papaparse": "5.4.1",
     "proper-lockfile": "4.1.2",
     "rxjs": "7.8.1",
-    "tldts": "6.1.41",
+    "tldts": "6.1.48",
     "zxcvbn": "4.4.2"
   }
 }

security/bitwarden-cli/files/packagejsons/apps/desktop/desktop_native/napi/package.json

@@ -3,15 +3,13 @@
   "version": "0.1.0",
   "description": "",
   "scripts": {
-    "build": "napi build --release --platform --js false",
+    "build": "napi build --platform --js false",
-    "build:debug": "napi build --platform --js false",
-    "build:cross-platform": "node build.js",
     "test": "cargo test"
   },
   "author": "",
   "license": "GPL-3.0",
   "devDependencies": {
-    "@napi-rs/cli": "2.16.2"
+    "@napi-rs/cli": "2.18.4"
   },
   "napi": {
     "name": "desktop_napi",

security/bitwarden-cli/files/packagejsons/apps/desktop/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bitwarden/desktop",
   "description": "A secure and free password manager for all of your devices.",
-  "version": "2024.9.0",
+  "version": "2024.10.0",
   "keywords": [
     "bitwarden",
     "password",
@@ -18,7 +18,7 @@
   "scripts": {
     "postinstall": "electron-rebuild",
     "start": "cross-env ELECTRON_IS_DEV=0 ELECTRON_NO_UPDATER=1 electron ./build",
-    "build-native": "cd desktop_native/napi && npm run build",
+    "build-native": "cd desktop_native && node build.js",
     "build": "concurrently -n Main,Rend,Prel -c yellow,cyan \"npm run build:main\" \"npm run build:renderer\" \"npm run build:preload\"",
     "build:dev": "concurrently -n Main,Rend -c yellow,cyan \"npm run build:main:dev\" \"npm run build:renderer:dev\"",
     "build:preload": "cross-env NODE_ENV=production webpack --config webpack.preload.js",

security/bitwarden-cli/files/packagejsons/apps/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitwarden/web-vault",
-  "version": "2024.9.1",
+  "version": "2024.10.2",
   "scripts": {
     "build:oss": "webpack",
     "build:bit": "webpack -c ../../bitwarden_license/bit-web/webpack.config.js",

security/bitwarden-cli/files/packagejsons/libs/key-management/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@bitwarden/key-management",
+  "version": "0.0.0",
+  "description": "Common code used across Bitwarden JavaScript projects.",
+  "keywords": [
+    "bitwarden"
+  ],
+  "author": "Bitwarden Inc.",
+  "homepage": "https://bitwarden.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/bitwarden/clients"
+  },
+  "license": "GPL-3.0",
+  "scripts": {
+    "clean": "rimraf dist",
+    "build": "npm run clean && tsc",
+    "build:watch": "npm run clean && tsc -watch"
+  },
+  "dependencies": {
+    "@bitwarden/angular": "file:../angular",
+    "@bitwarden/common": "file:../common",
+    "@bitwarden/components": "file:../components"
+  }
+}

security/bitwarden-cli/files/packagejsons/package.json

@@ -44,7 +44,7 @@
     "@babel/core": "7.24.9",
     "@babel/preset-env": "7.24.8",
     "@compodoc/compodoc": "1.1.25",
-    "@electron/notarize": "2.4.0",
+    "@electron/notarize": "2.5.0",
     "@electron/rebuild": "3.6.0",
     "@ngtools/webpack": "16.2.14",
     "@storybook/addon-a11y": "8.2.9",
@@ -57,8 +57,8 @@
     "@storybook/manager-api": "8.2.9",
     "@storybook/theming": "8.2.9",
     "@types/argon2-browser": "1.18.4",
-    "@types/chrome": "0.0.270",
+    "@types/chrome": "0.0.272",
-    "@types/firefox-webext-browser": "111.0.5",
+    "@types/firefox-webext-browser": "120.0.4",
     "@types/inquirer": "8.2.10",
     "@types/jest": "29.5.12",
     "@types/jquery": "3.5.30",
@@ -70,7 +70,7 @@
     "@types/koa-json": "2.0.23",
     "@types/lowdb": "1.0.15",
     "@types/lunr": "2.3.7",
-    "@types/node": "20.16.4",
+    "@types/node": "20.16.10",
     "@types/node-fetch": "2.6.4",
     "@types/node-forge": "1.3.11",
     "@types/node-ipc": "9.2.3",
@@ -81,17 +81,17 @@
     "@typescript-eslint/eslint-plugin": "7.16.1",
     "@typescript-eslint/parser": "7.16.1",
     "@webcomponents/custom-elements": "1.6.0",
-    "@yao-pkg/pkg": "5.12.1",
+    "@yao-pkg/pkg": "5.14.0",
     "autoprefixer": "10.4.20",
     "babel-loader": "9.1.3",
     "base64-loader": "1.0.0",
     "browserslist": "4.23.2",
-    "chromatic": "11.7.1",
+    "chromatic": "11.10.2",
-    "concurrently": "8.2.2",
+    "concurrently": "9.0.1",
     "copy-webpack-plugin": "12.0.2",
     "cross-env": "7.0.3",
     "css-loader": "7.1.2",
-    "electron": "32.0.1",
+    "electron": "32.1.1",
     "electron-builder": "24.13.3",
     "electron-log": "5.0.1",
     "electron-reload": "2.0.0-alpha.1",
@@ -119,29 +119,29 @@
     "jest-mock-extended": "3.0.7",
     "jest-preset-angular": "14.1.1",
     "lint-staged": "15.2.8",
-    "mini-css-extract-plugin": "2.8.1",
+    "mini-css-extract-plugin": "2.9.1",
     "node-ipc": "9.2.1",
     "postcss": "8.4.38",
     "postcss-loader": "8.1.1",
     "prettier": "3.3.3",
-    "prettier-plugin-tailwindcss": "0.6.6",
+    "prettier-plugin-tailwindcss": "0.6.8",
     "process": "0.11.10",
-    "regedit": "^3.0.3",
+    "regedit": "3.0.3",
     "remark-gfm": "4.0.0",
     "rimraf": "6.0.1",
     "sass": "1.74.1",
-    "sass-loader": "14.2.1",
+    "sass-loader": "16.0.1",
     "storybook": "8.2.9",
     "style-loader": "3.3.4",
-    "tailwindcss": "3.4.10",
+    "tailwindcss": "3.4.11",
     "ts-jest": "29.2.2",
     "ts-loader": "9.5.1",
     "tsconfig-paths-webpack-plugin": "4.1.0",
     "type-fest": "2.19.0",
     "typescript": "5.1.6",
-    "url": "0.11.3",
+    "url": "0.11.4",
     "util": "0.12.5",
-    "wait-on": "8.0.0",
+    "wait-on": "8.0.1",
     "webpack": "5.94.0",
     "webpack-cli": "5.1.4",
     "webpack-dev-server": "5.0.4",
@@ -157,6 +157,8 @@
     "@angular/platform-browser": "16.2.12",
     "@angular/platform-browser-dynamic": "16.2.12",
     "@angular/router": "16.2.12",
+    "@bitwarden/sdk-internal": "0.1.3",
+    "@electron/fuses": "1.8.0",
     "@koa/multer": "3.0.2",
     "@koa/router": "12.0.1",
     "@microsoft/signalr": "8.0.7",
@@ -164,7 +166,7 @@
     "@ng-select/ng-select": "11.2.0",
     "argon2": "0.40.1",
     "argon2-browser": "1.18.0",
-    "big-integer": "1.6.51",
+    "big-integer": "1.6.52",
     "bootstrap": "4.6.0",
     "braintree-web-drop-in": "1.43.0",
     "buffer": "6.0.3",
@@ -173,10 +175,10 @@
     "commander": "11.1.0",
     "core-js": "3.36.1",
     "form-data": "4.0.0",
-    "https-proxy-agent": "7.0.2",
+    "https-proxy-agent": "7.0.5",
     "inquirer": "8.2.6",
     "jquery": "3.7.1",
-    "jsdom": "24.1.3",
+    "jsdom": "25.0.1",
     "jszip": "3.10.1",
     "koa": "2.15.0",
     "koa-bodyparser": "4.4.1",
@@ -199,7 +201,7 @@
     "qrious": "4.0.2",
     "rxjs": "7.8.1",
     "tabbable": "6.2.0",
-    "tldts": "6.1.41",
+    "tldts": "6.1.48",
     "utf-8-validate": "6.0.4",
     "zone.js": "0.13.3",
     "zxcvbn": "4.4.2"
@@ -209,7 +211,10 @@
     "@storybook/angular": {
       "zone.js": "$zone.js"
     },
-    "replacestream": "4.0.3"
+    "replacestream": "4.0.3",
+    "@electron/asar": {
+      "@types/glob": "7.1.3"
+    }
   },
   "lint-staged": {
     "*": "prettier --cache --ignore-unknown --write",