IBX-11797: [3.3/4.6] Bump Node to 20

.github/workflows/ci.yaml

@@ -27,16 +27,16 @@ jobs:
                 include:
                     - php: "7.3"
                       product-version: "~3.3.x-dev"
-                      node: "14"
+                      node: "20"
                     - php: "7.4"
                       product-version: "~3.3.x-dev"
-                      node: "16"
+                      node: "20"
                     - php: "8.3"
                       product-version: "~3.3.x-dev"
-                      node: "18"
+                      node: "20"
                     - php: "7.4"
                       product-version: "~4.6.x-dev"
-                      node: "18"
+                      node: "20"
                     - php: "8.0"
                       product-version: "~4.6.x-dev"
                       node: "20"

bin/ci/test.sh

@@ -46,6 +46,58 @@ if [ "$REUSE_VOLUME" = "0" ]; then
         bash -c "
         composer --version &&
         composer create-project --no-progress --no-interaction $COMPOSER_OPTIONS ibexa/website-skeleton /var/www $PRODUCT_VERSION &&
+        cd /var/www
+
+        add_audit_ignores() {
+          local reason=\$1
+          shift
+
+          for advisory in \"\$@\"; do
+            composer config audit.ignore --json --merge \"{\\\"\$advisory\\\":\\\"\$reason\\\"}\"
+          done
+        }
+
+        PHP74_ADVISORIES=(
+          PKSA-xwpn-zs9j-6wy5
+          PKSA-sf9j-1gs7-xzvx
+          PKSA-7h5p-prw9-w5nr
+        )
+
+        PHP74_PHP80_ADVISORIES=(
+          PKSA-5k7f-wvjj-jrgw
+          PKSA-sjvz-tbbr-vwth
+          PKSA-h8hf-ytnd-5t9q
+          PKSA-wwb1-81rc-pd65
+          PKSA-hgmw-wn4d-hpcy
+          PKSA-kvv6-36cr-fkzb
+          PKSA-n14z-jjjg-g8vd
+          PKSA-3mcc-k66d-pydb
+          PKSA-gw7n-z4yx-7xjt
+          PKSA-dpx1-78wg-1kqs
+          PKSA-21g2-dzjv-sky5
+          PKSA-v3kg-5xkr-pykw
+          PKSA-yhcn-xrg3-68b1
+          PKSA-2wrf-1xmk-1pky
+          PKSA-6319-ffpf-gx66
+          PKSA-n7sg-8f52-pqtf
+          PKSA-8kk8-h2xr-h5nx
+          PKSA-2rbx-bjdx-4d4d
+          PKSA-fs5b-x5k4-1h39
+        )
+
+        PHP_VERSION=\"\$(php -r \"echo PHP_MAJOR_VERSION . \\\".\\\" . PHP_MINOR_VERSION;\")\"
+
+        if [ \"\$PHP_VERSION\" = \"7.4\" ]; then
+          add_audit_ignores \
+            \"The affected version of 3rd party component is installed on PHP 7.4. There is no alternative supporting PHP 7.4. Consider upgrading to PHP 8.1+\" \
+            \"\${PHP74_ADVISORIES[@]}\"
+        fi
+
+        if [ \"\$PHP_VERSION\" = \"7.3\" ] || [ \"\$PHP_VERSION\" = \"7.4\" ] || [ \"\$PHP_VERSION\" = \"8.0\" ]; then
+          add_audit_ignores \
+            \"The affected version of 3rd party component is installed on PHP \${PHP_VERSION}. There is no alternative supporting PHP \${PHP_VERSION}. Consider upgrading to PHP 8.1+\" \
+            \"\${PHP74_PHP80_ADVISORIES[@]}\"
+        fi &&
         composer require ibexa/oss:$PRODUCT_VERSION -W  --no-scripts $COMPOSER_OPTIONS
         git init && git add . && git commit -m 'Init'
         composer recipes:install ibexa/oss --force --reset -v