chore: Bump package versions to address security vulnerabilities (#3845)

packages/medusa/package.json

@@ -54,7 +54,7 @@
     "bullmq": "^3.5.6",
     "chokidar": "^3.4.2",
     "class-transformer": "^0.5.1",
-    "class-validator": "^0.13.2",
+    "class-validator": "^0.14.0",
     "compression": "^1.7.4",
     "connect-redis": "^5.0.0",
     "cookie-parser": "^1.4.6",
@@ -62,23 +62,23 @@
     "cors": "^2.8.5",
     "cross-spawn": "^7.0.3",
     "dotenv": "^16.0.3",
-    "express": "^4.17.1",
+    "express": "^4.18.2",
     "express-session": "^1.17.3",
     "fs-exists-cached": "^1.0.0",
     "glob": "^7.1.6",
     "ioredis": "^5.2.5",
     "ioredis-mock": "8.4.0",
     "iso8601-duration": "^1.3.0",
-    "jsonwebtoken": "^8.5.1",
+    "jsonwebtoken": "^9.0.0",
     "lodash": "^4.17.21",
     "medusa-core-utils": "^1.2.0",
     "medusa-telemetry": "^0.0.16",
     "medusa-test-utils": "^1.1.40",
     "morgan": "^1.9.1",
-    "multer": "^1.4.4",
+    "multer": "^1.4.5-lts.1",
     "node-schedule": "^2.1.1",
     "papaparse": "^5.3.2",
-    "passport": "^0.4.1",
+    "passport": "^0.6.0",
     "passport-http-bearer": "^1.0.1",
     "passport-jwt": "^4.0.1",
     "passport-local": "^1.0.0",
@@ -89,7 +89,7 @@
     "request-ip": "^2.1.3",
     "scrypt-kdf": "^2.0.1",
     "ulid": "^2.3.0",
-    "uuid": "^8.3.2",
+    "uuid": "^9.0.0",
     "winston": "^3.8.2"
   },
   "gitHead": "cd1f5afa5aa8c0b15ea957008ee19f1d695cbd2e"

packages/medusa/src/api/routes/admin/discounts/__tests__/create-discount.js

@@ -4,6 +4,7 @@ import { DiscountServiceMock } from "../../../../../services/__mocks__/discount"
 
 const validRegionId = IdMap.getId("region-france")
 
+jest.setTimeout(30000)
 describe("POST /admin/discounts", () => {
   const adminSession = {
     jwt: {

packages/medusa/src/api/routes/admin/orders/__tests__/create-claim.js

@@ -81,7 +81,9 @@ describe("POST /admin/orders/:id/claims", () => {
 
     it("throws an error", () => {
       expect(subject.status).toEqual(400)
-      expect(subject.body.message).toEqual("type must be a valid enum value")
+      expect(subject.body.message).toEqual(
+        "type must be one of the following values: refund, replace"
+      )
     })
   })
 
@@ -166,7 +168,7 @@ describe("POST /admin/orders/:id/claims", () => {
       it("throws an error", () => {
         expect(subject.status).toEqual(400)
         expect(subject.body.message).toEqual(
-          "reason must be a valid enum value"
+          "reason must be one of the following values: missing_item, wrong_item, production_failure, other"
         )
       })
     })

packages/medusa/src/api/routes/admin/price-lists/__tests__/create-price-list.ts

@@ -112,7 +112,7 @@ describe("POST /price-lists", () => {
     it("returns descriptive error that several fields are missing", () => {
       expect(subject.body.type).toEqual("invalid_data")
       expect(subject.body.message).toEqual(
-        "name must be a string, type must be a valid enum value, prices must be an array"
+        "name must be a string, type must be one of the following values: sale, override, prices must be an array"
       )
     })
   })