Merge pull request #659 from CartoDB/update-deps

Update deps

NEWS.md

@@ -16,10 +16,10 @@ Announcements:
 - Adapted test to use adm-zip
 - Update `libxmljs` to version 0.19.7
 - Update `sqlite` to version 4.2.0
-- `pg-copy-from`: When the client closes the request, do not emit error as it closes the internal DB's connection stream and the Pool needs to keep it open to reuse the connection when free.
+- `pg-copy-from`: When the client closes the request, do not emit error as it closes the internal DB's connection stream and the Pool needs to keep it open to reuse the connection when free
 - Updated allowed list of custom headers with the ones for metrics
-- Fix an ogr2ogr export issue when the temporal name is too big [`653`](https://github.com/CartoDB/CartoDB-SQL-API/issues/653).
-
+- Fix an ogr2ogr export issue when the temporal name is too big [`653`](https://github.com/CartoDB/CartoDB-SQL-API/issues/653)
+- Update dependencies to avoid security vulnerabilities
 
 ## 5.0.1
 Released 2020-01-27
@@ -36,7 +36,6 @@ Released 2020-01-27
   - Added missing sections.
 - Remove deprecated coverage tool istanbul, using nyc instead.
 
-
 ## 5.0.0
 Released 2019-11-13
 

lib/server.js

@@ -2,7 +2,6 @@
 
 const express = require('express');
 const fs = require('fs');
-const mkdirp = require('mkdirp');
 const RedisPool = require('redis-mpool');
 const cartodbRedis = require('cartodb-redis');
 const Logger = require('./services/logger');
@@ -49,7 +48,7 @@ module.exports = function createServer (statsClient) {
     // TODO: it's here becouse of testing purposes, try to move to top level
     global.settings.tmpDir = global.settings.tmpDir || '/tmp';
     if (!fs.existsSync(global.settings.tmpDir)) {
-        mkdirp.sync(global.settings.tmpDir);
+        fs.mkdirSync(global.settings.tmpDir, { recursive: true });
     }
 
     app.enable('jsonp callback');

package.json

@@ -39,7 +39,6 @@
     "gc-stats": "^1.4.0",
     "log4js": "cartodb/log4js-node#cdb",
     "lru-cache": "~2.5.0",
-    "mkdirp": "0.5.1",
     "multer": "~1.2.0",
     "node-statsd": "~0.0.7",
     "node-uuid": "^1.4.7",
@@ -54,7 +53,7 @@
     "step-profiler": "~0.3.0",
     "topojson": "0.0.8",
     "underscore": "~1.6.0",
-    "yargs": "~5.0.0"
+    "yargs": "^15.3.1"
   },
   "devDependencies": {
     "adm-zip": "^0.4.14",
@@ -65,7 +64,7 @@
     "eslint-plugin-promise": "^4.2.1",
     "eslint-plugin-standard": "^4.0.1",
     "libxmljs": "^0.19.7",
-    "mocha": "^5.2.0",
+    "mocha": "^7.2.0",
     "mockdate": "^2.0.2",
     "nyc": "^15.0.0",
     "shapefile": "0.3.0",