MLE-29694 fixes for vulnerabilities and flaky tests

package.json

@@ -44,7 +44,7 @@
     "form-data": "4.0.4",
     "json-text-sequence": "4.0.2",
     "multipart-stream": "2.0.1",
-    "qs": "6.15.0",
+    "qs": "6.15.2",
     "through2": "4.0.2"
   },
   "repository": {

test-app/build.gradle

@@ -56,7 +56,7 @@ tasks.register("curlPeople", Exec) {
     '-X', 'POST',
     '--data-binary', '@./src/main/turtle/people/people.ttl',
     '-H', 'Content-type: text/turtle',
-    'http://localhost:8079/v1/graphs?graph=/people'
+    "http://${mlHost}:8079/v1/graphs?graph=/people"
   ]
 }
 
@@ -69,7 +69,7 @@ tasks.register("curlCompanies", Exec) {
     '-X', 'POST',
     '--data-binary', '@./src/main/turtle/companies/companies_100.ttl',
     '-H', 'Content-type: text/turtle',
-    'http://localhost:8079/v1/graphs?graph=/optic/sparql/test/companies.ttl'
+    "http://${mlHost}:8079/v1/graphs?graph=/optic/sparql/test/companies.ttl"
   ]
 }
 

test-basic/plan-search.js

@@ -320,27 +320,28 @@ describe('search', function() {
         xdmp:document-insert("range-prop-2.json", $jsondoc2, xdmp:default-permissions(), ("elemCol","jsondoc-range")),
         xdmp:document-insert("range-prop-3.json", $jsondoc3, xdmp:default-permissions(), ("elemCol","jsondoc-range")),
         xdmp:document-set-properties("range-prop-1.json", (<my-prop>opticfragmentpropvalue</my-prop>)),
-        xdmp:lock-acquire("range-prop-1.json", "exclusive", "0", "dog rose",  xs:unsignedLong(120)),
-        xdmp:lock-acquire("range-prop-2.json", "exclusive", "0", "cat tulip", xs:unsignedLong(120)),
-        xdmp:lock-acquire("range-prop-3.json", "exclusive", "0", "duck lily", xs:unsignedLong(120))
+        (: 300s required for CI pipelines where after-hook may run well after setup :)
+        xdmp:lock-acquire("range-prop-1.json", "exclusive", "0", "dog rose",  xs:unsignedLong(300)),
+        xdmp:lock-acquire("range-prop-2.json", "exclusive", "0", "cat tulip", xs:unsignedLong(300)),
+        xdmp:lock-acquire("range-prop-3.json", "exclusive", "0", "duck lily", xs:unsignedLong(300))
       )
     `;
 
     const teardownReleaseLocks = `
       xquery version "1.0-ml";
       (
-        xdmp:lock-release("range-prop-1.json"),
-        xdmp:lock-release("range-prop-2.json"),
-        xdmp:lock-release("range-prop-3.json")
+        try { xdmp:lock-release("range-prop-1.json") } catch ($e) { if ($e/error:code = "XDMP-NOTLOCKED") then () else xdmp:rethrow() },
+        try { xdmp:lock-release("range-prop-2.json") } catch ($e) { if ($e/error:code = "XDMP-NOTLOCKED") then () else xdmp:rethrow() },
+        try { xdmp:lock-release("range-prop-3.json") } catch ($e) { if ($e/error:code = "XDMP-NOTLOCKED") then () else xdmp:rethrow() }
       )
     `;
 
     const teardownDeleteDocs = `
       xquery version "1.0-ml";
       (
-        xdmp:document-delete("range-prop-1.json"),
-        xdmp:document-delete("range-prop-2.json"),
-        xdmp:document-delete("range-prop-3.json")
+        try { xdmp:document-delete("range-prop-1.json") } catch ($e) { if ($e/error:code = "XDMP-DOCNOTFOUND") then () else xdmp:rethrow() },
+        try { xdmp:document-delete("range-prop-2.json") } catch ($e) { if ($e/error:code = "XDMP-DOCNOTFOUND") then () else xdmp:rethrow() },
+        try { xdmp:document-delete("range-prop-3.json") } catch ($e) { if ($e/error:code = "XDMP-DOCNOTFOUND") then () else xdmp:rethrow() }
       )
     `;