chore: Upgrade packages to resolve Dependabot issues

[riodeuno]

Description

• Fix XSS issue by upgrading packages such that the serialize-javascript dependency resolves to v6.0.2
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/376

• Fix XSS issue by upgrading esbuild to v0.25.1
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/367

• Fix vite vulnerability by upgrading vite to v6.2.1 (this is a major version upgrade and effects the storybook package)
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/364
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/334
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/336

• Fixes TinyMCE XSS vulnerabilities by upgrading tinymce to v7.7.1 and tinymce-react to v6.0.0 (Major version upgrade)
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/347
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/348
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/290

• Fix vulnerability in webpack by upgrading to v5.98.0
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/324

• Fix vulnerability in @sentry/browser by upgrading @sentry/react to v7.120.3 (Major version upgrade)
  Note: Severity enum has been deprecated
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/345

• Fix vulnerability in axios by upgrading to v1.8.3
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/391

• Fix vulnerability in @babel/runtime by upgrading to v7.26.10
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/393

• Fix vulnerability in @babel/helper by upgrading @babel/core to v7.26.10
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/392

• Fix vulnerability in prismjs by upgrading to v1.30.0
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/390

• Fix vulnerability in cookie by upgrading to v0.7.0
  Fixes https://github.com/appsmithorg/appsmith/security/dependabot/346

Automation

/ok-to-test tags="@tag.All"

🔍 Cypress test results

Tip

🟢 🟢 🟢 All cypress tests have passed! 🎉 🎉 🎉
Workflow run: https://github.com/appsmithorg/appsmith/actions/runs/13967528524
Commit: 6a36c97
Cypress dashboard.
Tags: @tag.All
Spec:

---

Thu, 20 Mar 2025 12:03:08 UTC

Communication

Should the DevRel and Marketing teams inform users about this change?

• Yes
• No

Summary by CodeRabbit

Summary by CodeRabbit

• New Features
  • Enhanced the text editor experience by introducing quick markdown-style shortcuts for headings, lists, and quotes.
• Chores
  • Upgraded numerous underlying libraries and tools for improved performance and stability.
  • Streamlined error logging by refining how errors are categorized and reported.
  • Improved accessibility by updating element selectors to use aria-label attributes.

[coderabbitai]

Walkthrough

This pull request updates various dependency versions across several package.json files and adjusts error logging in multiple source files by replacing imported enum values with their corresponding string literals. Additionally, the Rich Text Editor configuration is enhanced by refining plugin declarations and adding new text pattern triggers for markdown-like formatting. The changes are confined to dependency upgrades and minor modifications in error handling and editor configuration.

Changes

File(s)	Change Summary
app/client/package.json, app/client/packages/design-system/widgets/package.json, app/client/packages/rts/package.json, app/client/packages/storybook/package.json	Upgraded dependency versions (e.g., @sentry/react, @tinymce/tinymce-react, axios, prismjs, tinymce, @babel/core, etc.). Added new resolutions (e.g., for webpack and esbuild) where applicable.
app/client/src/{components/editorComponents/CodeEditor/EvaluatedValuePopup.tsx, pages/UserAuth/Login.tsx, pages/UserAuth/SignUp.tsx, sagas/AppThemingSaga.tsx, sagas/EvalErrorHandler.ts}	Removed imports of Severity from @sentry/react and replaced enum references with equivalent string literals ("debug", "error", "fatal", "warning") in error logging.
app/client/src/widgets/RichTextEditorWidget/component/index.tsx	Updated TinyMCE editor configuration by clarifying plugin usage (e.g., for lists), removing extraneous spaces in plugin names, and adding new text_patterns configuration for markdown-style formatting triggers.
app/client/src/PluginActionEditor/components/PluginActionResponse/components/Visualization/Visualization.tsx	Modified the ErrorBoundary component's fallback prop to use a React fragment for rendering the fallback message.
app/client/src/ce/pages/AppIDE/layouts/routers/MainPane/MainPane.tsx, app/client/src/ce/pages/AppIDE/layouts/routers/MainPane/constants.ts	Added type annotations for route variables to enhance type safety and clarity.
app/client/src/components/formControls/utils.ts	Changed parameter and return types in fixActionPayloadForMongoQuery function to broaden type acceptance.
app/client/src/sagas/ActionSagas.ts	Included type assertion for the action variable in updateActionSaga to clarify expected type after transformation.
app/client/cypress/support/Objects/CommonLocators.ts	Updated selectors for _richText_Heading and _richText_color to use aria-label attributes instead of title attributes for improved accessibility.

Sequence Diagram(s)

sequenceDiagram
    participant U as User
    participant RTE as Rich Text Editor
    participant T as TinyMCE Engine

    U->>RTE: Type text with markdown pattern (e.g., "# " for heading)
    RTE->>T: Evaluate text patterns
    alt Pattern Match Found
        T->>RTE: Trigger formatting command (e.g., apply heading style)
    else No Match
        T->>RTE: Process input normally
    end

Loading

Possibly related PRs

• ci: Added code for PR comment results with repeat command #35921 – The changes in the main PR, which involve updates to various dependencies in the package.json file, are related to the retrieved PR as both involve modifications to the app/client/package.json file, specifically updating dependencies.
• chore(deps): bump axios from 1.7.2 to 1.7.4 in /app/client #35681 – The changes in the main PR and the retrieved PR are related as both involve updates to the axios dependency in their respective package.json files.

Suggested labels

Dependencies

Suggested reviewers

• ApekshaBhosale
• sagar-qa007
• ankitakinger
• jsartisan

Poem

Dependencies dance in JSON files,
Severity enums replaced with string styles.
TinyMCE now listens to markdown cues,
Alerts and logs receive simplified views.
Code flows lighter with every update, cheers! 🎉

---

📜 Recent review details

Configuration used: .coderabbit.yaml
Review profile: CHILL
Plan: Pro (Legacy)

📥 Commits

Reviewing files that changed from the base of the PR and between a7f8fab and 46a88a5.

⛔ Files ignored due to path filters (1)

• app/client/yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (2)

• app/client/packages/design-system/headless/src/components/Popover/stories/Popover.stories.tsx (0 hunks)
• app/client/packages/design-system/widgets/src/components/Modal/stories/Modal.stories.tsx (0 hunks)

💤 Files with no reviewable changes (2)

• app/client/packages/design-system/widgets/src/components/Modal/stories/Modal.stories.tsx
• app/client/packages/design-system/headless/src/components/Popover/stories/Popover.stories.tsx

⏰ Context from checks skipped due to timeout of 90000ms (12)

• GitHub Check: perform-test / server-build / server-unit-tests
• GitHub Check: perform-test / client-build / client-build
• GitHub Check: perform-test / rts-build / build
• GitHub Check: client-unit-tests / client-unit-tests
• GitHub Check: client-lint / client-lint
• GitHub Check: client-build / client-build
• GitHub Check: client-check-cyclic-deps / check-cyclic-dependencies
• GitHub Check: client-prettier / prettier-check
• GitHub Check: chromatic-deployment
• GitHub Check: build
• GitHub Check: chromatic-deployment
• GitHub Check: storybook-tests

---

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[riodeuno]

/build-deploy-preview skip-tests=true

[github-actions]

Deploying Your Preview: https://github.com/appsmithorg/appsmith/actions/runs/13852275514.
Workflow: On demand build Docker image and deploy preview.
skip-tests: true.
env: ``.
PR: 39710.
recreate: .

[github-actions]

🔴🔴🔴 Cyclic Dependency Check:

This PR has increased the number of cyclic dependencies by 1, when compared with the release branch.

Refer this document to identify the cyclic dependencies introduced by this PR.

You can view the dependency diff in the run log. Look for the check-cyclic-dependencies job in the run.

[github-actions]

🔴🔴🔴 Cyclic Dependency Check:

This PR has increased the number of cyclic dependencies by 1, when compared with the release branch.

Refer this document to identify the cyclic dependencies introduced by this PR.

You can view the dependency diff in the run log. Look for the check-cyclic-dependencies job in the run.

[riodeuno]

/build-deploy-preview skip-tests=true

[github-actions]

Deploying Your Preview: https://github.com/appsmithorg/appsmith/actions/runs/13916143252.
Workflow: On demand build Docker image and deploy preview.
skip-tests: true.
env: ``.
PR: 39710.
recreate: .

[github-actions]

Deploy-Preview-URL: https://ce-39710.dp.appsmith.com

[KelvinOm]

Could you also add esbuild here?