[Snyk] Upgrade: , , , ajv, glob, eslint, minimist, handlebars, jsdom, katex, moment, prettier, winston, yargs, workbox-cli #534
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @babel/cli from 7.20.7 to 7.25.6.
See this package in npm: https://www.npmjs.com/package/@babel/cli
- @babel/core from 7.20.12 to 7.25.2.
See this package in npm: https://www.npmjs.com/package/@babel/core
- @types/shelljs from 0.8.11 to 0.8.15.
See this package in npm: https://www.npmjs.com/package/@types/shelljs
- ajv from 8.12.0 to 8.17.1.
See this package in npm: https://www.npmjs.com/package/ajv
- glob from 7.1.6 to 7.2.3.
See this package in npm: https://www.npmjs.com/package/glob
- eslint from 8.31.0 to 8.57.0.
See this package in npm: https://www.npmjs.com/package/eslint
- minimist from 1.2.7 to 1.2.8.
See this package in npm: https://www.npmjs.com/package/minimist
- handlebars from 4.7.7 to 4.7.8.
See this package in npm: https://www.npmjs.com/package/handlebars
- jsdom from 16.4.0 to 16.7.0.
See this package in npm: https://www.npmjs.com/package/jsdom
- katex from 0.16.4 to 0.16.11.
See this package in npm: https://www.npmjs.com/package/katex
- moment from 2.29.4 to 2.30.1.
See this package in npm: https://www.npmjs.com/package/moment
- prettier from 2.8.2 to 2.8.8.
See this package in npm: https://www.npmjs.com/package/prettier
- winston from 3.8.2 to 3.14.2.
See this package in npm: https://www.npmjs.com/package/winston
- yargs from 17.6.2 to 17.7.2.
See this package in npm: https://www.npmjs.com/package/yargs
- workbox-cli from 7.0.0 to 7.1.0.
See this package in npm: https://www.npmjs.com/package/workbox-cli
See this project in Snyk:
https://app.snyk.io/org/anushasalian/project/e53fa273-8fc4-48d3-8bdf-56886cf7f09b?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@babel/cli
from 7.20.7 to 7.25.6 | 21 versions ahead of your current version | 23 days ago
on 2024-08-29
@babel/core
from 7.20.12 to 7.25.2 | 41 versions ahead of your current version | 2 months ago
on 2024-07-30
@types/shelljs
from 0.8.11 to 0.8.15 | 4 versions ahead of your current version | 10 months ago
on 2023-11-07
ajv
from 8.12.0 to 8.17.1 | 5 versions ahead of your current version | 2 months ago
on 2024-07-12
glob
from 7.1.6 to 7.2.3 | 4 versions ahead of your current version | 2 years ago
on 2022-05-15
eslint
from 8.31.0 to 8.57.0 | 26 versions ahead of your current version | 7 months ago
on 2024-02-23
minimist
from 1.2.7 to 1.2.8 | 1 version ahead of your current version | 2 years ago
on 2023-02-09
handlebars
from 4.7.7 to 4.7.8 | 1 version ahead of your current version | a year ago
on 2023-08-01
jsdom
from 16.4.0 to 16.7.0 | 6 versions ahead of your current version | 3 years ago
on 2021-08-01
katex
from 0.16.4 to 0.16.11 | 7 versions ahead of your current version | 3 months ago
on 2024-07-02
moment
from 2.29.4 to 2.30.1 | 2 versions ahead of your current version | 9 months ago
on 2023-12-27
prettier
from 2.8.2 to 2.8.8 | 6 versions ahead of your current version | a year ago
on 2023-04-23
winston
from 3.8.2 to 3.14.2 | 10 versions ahead of your current version | a month ago
on 2024-08-14
yargs
from 17.6.2 to 17.7.2 | 3 versions ahead of your current version | a year ago
on 2023-04-27
workbox-cli
from 7.0.0 to 7.1.0 | 1 version ahead of your current version | 5 months ago
on 2024-04-23
Issues fixed by the recommended upgrade:
SNYK-JS-TOUGHCOOKIE-5672873
SNYK-JS-TOUGHCOOKIE-5672873
SNYK-JS-KATEX-6483836
SNYK-JS-REQUEST-3361831
SNYK-JS-SERIALIZEJAVASCRIPT-6147607
SNYK-JS-EJS-6689533
SNYK-JS-KATEX-6483831
SNYK-JS-KATEX-6483834
SNYK-JS-KATEX-6483835
SNYK-JS-WORDWRAP-3149973
SNYK-JS-BABELTRAVERSE-5962462
Release notes
Package name: @babel/cli
-
7.25.6 - 2024-08-29
- #16783 Properly print inner comments in TS array types (@ nicolo-ribaudo)
- #16775 fix: jsx whitespace is not properly preserved when retainLines (@ liuxingbaoyu)
- #16727 fix:
- #16761 fix: improve static canFollowModifier checks (@ JLHwung)
- #16769 Only wrap functions in
- #16780 Do not enforce printing space between
- #16781 Don't throw when enabling both syntax-import-{assertions,attributes} (@ nicolo-ribaudo)
- #16782 TS union/intersection nested in union does not need parens (@ nicolo-ribaudo)
- #16777 Remove unused
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ j4k0xb
- @ liuxingbaoyu
-
7.24.8 - 2024-07-11
-
7.24.7 - 2024-06-05
-
7.24.6 - 2024-05-24
-
7.24.5 - 2024-04-29
-
7.24.1 - 2024-03-19
-
7.23.9 - 2024-01-25
-
7.23.4 - 2023-11-20
-
7.23.0 - 2023-09-25
-
7.22.15 - 2023-09-04
-
7.22.10 - 2023-08-07
-
7.22.9 - 2023-07-12
-
7.22.6 - 2023-07-04
-
7.22.5 - 2023-06-08
-
7.21.5 - 2023-04-28
-
7.21.4-esm.4 - 2023-04-04
-
7.21.4-esm.3 - 2023-04-04
-
7.21.4-esm.2 - 2023-04-04
-
7.21.4-esm.1 - 2023-04-04
-
7.21.4-esm - 2023-04-04
-
7.21.0 - 2023-02-20
-
7.20.7 - 2022-12-22
from @babel/cli GitHub release notesv7.25.6 (2024-08-29)
Thanks @ j4k0xb for your first PR!
🐛 Bug Fix
babel-generatorbabel-traversepath.getAssignmentIdentifiersmay beundefined(@ liuxingbaoyu)babel-parserbabel-helpers,babel-plugin-transform-optional-chaining,babel-runtime-corejs3superPropertyGethelper (@ nicolo-ribaudo)💅 Polish
babel-generator,babel-plugin-transform-async-to-generator,babel-plugin-transform-block-scoping,babel-plugin-transform-class-properties,babel-plugin-transform-classes,babel-plugin-transform-duplicate-named-capturing-groups-regex,babel-plugin-transform-named-capturing-groups-regex,babel-plugin-transform-react-jsx-development,babel-plugin-transform-react-jsx,babel-plugin-transform-react-pure-annotations,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-preset-env(and comments (@ nicolo-ribaudo)babel-plugin-syntax-import-assertions,babel-plugin-syntax-import-attributesbabel-generator🏠 Internal
babel-generatorparentparams in the generator (@ nicolo-ribaudo)Committers: 5
Package name: @babel/core
-
7.25.2 - 2024-07-30
- #16695 Ensure that
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
-
7.24.9 - 2024-07-15
- #16639 Avoid
- #16638 fix: provide legacy typings for TS < 4.1 (@ JLHwung)
- #16617 Avoid extra parens in TS
- #16629 Lazy top-level initializations for module transforms (@ guybedford)
- Babel Bot (@ babel-bot)
- Guy Bedford (@ guybedford)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
-
7.24.8 - 2024-07-11
-
7.24.7 - 2024-06-05
-
7.24.6 - 2024-05-24
-
7.24.5 - 2024-04-29
-
7.24.4 - 2024-04-03
-
7.24.3 - 2024-03-20
-
7.24.1 - 2024-03-19
-
7.24.0 - 2024-02-28
-
7.23.9 - 2024-01-25
-
7.23.7 - 2023-12-29
-
7.23.6 - 2023-12-11
-
7.23.5 - 2023-11-29
-
7.23.3 - 2023-11-09
-
7.23.2 - 2023-10-12
-
7.23.0 - 2023-09-25
-
7.22.20 - 2023-09-16
-
7.22.19 - 2023-09-14
-
7.22.18 - 2023-09-14
-
7.22.17 - 2023-09-08
-
7.22.15 - 2023-09-04
-
7.22.11 - 2023-08-24
-
7.22.10 - 2023-08-07
-
7.22.9 - 2023-07-12
-
7.22.8 - 2023-07-06
-
7.22.7 - 2023-07-06
-
7.22.6 - 2023-07-04
-
7.22.5 - 2023-06-08
-
7.22.1 - 2023-05-26
-
7.22.0 - 2023-05-26
-
7.21.8 - 2023-05-02
-
7.21.5 - 2023-04-28
-
7.21.4 - 2023-03-31
-
7.21.4-esm.4 - 2023-04-04
-
7.21.4-esm.3 - 2023-04-04
-
7.21.4-esm.2 - 2023-04-04
-
7.21.4-esm.1 - 2023-04-04
-
7.21.4-esm - 2023-04-04
-
7.21.3 - 2023-03-14
-
7.21.0 - 2023-02-20
-
7.20.12 - 2023-01-04
from @babel/core GitHub release notesv7.25.2 (2024-07-30)
🐛 Bug Fix
babel-core,babel-traverserequeueComputedKeyAndDecoratorsis available (@ nicolo-ribaudo)Committers: 2
v7.24.9 (2024-07-15)
🐛 Bug Fix
babel-core,babel-standalonerequire()call in@ babel/standalonebundle (@ nicolo-ribaudo)babel-types💅 Polish
babel-generator,babel-plugin-transform-optional-chainingas/satisfies(@ nicolo-ribaudo)🏠 Internal
babel-helper-module-transformsCommitters: 5
Package name: @types/shelljs
-
0.8.15 - 2023-11-07
-
0.8.14 - 2023-10-18
-
0.8.13 - 2023-09-25
-
0.8.12 - 2023-04-12
-
0.8.11 - 2022-01-13
from @types/shelljs GitHub release notesPackage name: ajv
-
8.17.1 - 2024-07-12
- bump version to 8.17.1 by @ jasoniangreen in #2472
-
8.16.0 - 2024-06-04
- Revert fast-uri change by @ jasoniangreen in #2444
-
8.15.0 - 2024-06-03
- Replace
- Bump to 8.15.0 by @ jasoniangreen in #2442
- @ vixalien made their first contribution in #2415
-
8.14.0 - 2024-05-25
- readme: build badge by @ epoberezkin in #2424
- Update workflows by @ rotu in #2410
- docs: add warning to maxLength / minLength by @ jasoniangreen in #2428
- fix: broken link in docs warning by @ jasoniangreen in #2431
- compileAsync a schema with discriminator and $ref, fixes #2427 by @ jasoniangreen in #2433
- bump version to 8.14.0 for publishing by @ jasoniangreen in #2440
- @ rotu made their first contribution in #2410
-
8.13.0 - 2024-04-29
- add named exports
- update dependencies
- update node.js
-
8.12.0 - 2023-01-03
- fix JTD serialisation (remove leading comma in objects with only optional properties) (#2190, @ piliugin-anton)
- empty JTD "values" schema (#2191)
- empty object to work with JTD utility type (#2158, @ erikbrinkman)
- fix JTD "discriminator" schema for objects with more than 8 properties (#2194)
- correctly narrow "number" type to "integer" (#2192, @ JacobLey)
- update Node.js versions in CI to 14, 16, 18 and 19
from ajv GitHub release notesWhat's Changed
Full Changelog: v8.17.0...v8.17.1
Plus everything in 8.17.0 which failed to release
The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.
Revert "Revert fast-uri change (#2444)" by @ gurgunday in #2448
fix: ignore new eslint error for @ typescript-eslint/no-extraneous-class by @ jasoniangreen in #2455
docs: clarify behaviour of addVocabulary by @ jasoniangreen in #2454
docs: refactor to improve legibility by @ blottn in #2432
Fix grammatical typo in managing-schemas.md by @ wetneb in #2305
docs: Fix broken strict-mode link by @ alexanderjsx in #2459
feat: add test for encoded refs and bump fast-uri by @ jasoniangreen in #2449
fix: changes for @ typescript-eslint/array-type rule by @ jasoniangreen in #2467
fixes #2217 - clarify custom keyword naming by @ jasoniangreen in #2457
What's Changed
Full Changelog: v8.15.0...v8.16.0
What's Changed
uri-jswithfast-uriby @ vixalien in #2415New Contributors
Full Changelog: v8.14.0...v8.15.0
What's Changed
New Contributors
Full Changelog: v8.13.0...v8.14.0
Package name: glob
-
7.2.3 - 2022-05-15
-
7.2.2 - 2022-05-13
-
7.2.0 - 2021-09-22
-
7.1.7 - 2021-05-06
-
7.1.6 - 2019-11-06
from glob GitHub release notes7.2.3
7.2.2
7.2.0
7.1.7
7.1.6
Package name: eslint
Features
1120b9bfeat: Add loadESLint() API method for v8 (#18098) (Nicholas C. Zakas)dca7d0ffeat: Enableeslint.config.mjsandeslint.config.cjs(#18066) (Nitin Kumar)Bug Fixes
2196d97fix: handle absolute file paths inFlatRuleTester(#18064) (Nitin Kumar)69dd1d1fix: Ensure config keys are printed for config errors (#18067) (Nitin Kumar)9852a31fix: deep merge behavior in flat config (#18065) (Nitin Kumar)4c7e9b0fix: allow circular references in config (#18056) (Milos Djermanovic)Documentation
84922d0docs: Show prerelease version in dropdown (#18139) (Nicholas C. Zakas)5b8c363docs: Switch to Ethical Ads (#18117) (Milos Djermanovic)77dbfd9docs: show NEXT in version selectors (#18052) (Milos Djermanovic)Chores
1813aecchore: upgrade @ eslint/js@8.57.0 (#18143) (Milos Djermanovic)5c356bbchore: package.json update for @ eslint/js release (Jenkins)f4a1fe2test: add more tests for ignoring files and directories (#18068) (Nitin Kumar)42c0aefci: Enable CI forv8.xbranch (#18047) (Milos Djermanovic)Features
0dd9704feat: Support custom severity when reporting unused disable directives (#17212) (Bryan Mishkin)31a7e3ffeat: fix no-restricted-properties false negatives with unknown objects (#17818) (Arka Pratim Chaudhuri)Bug Fixes
7d5e5f6fix:TypeError: fs.exists is not a functionon read-only file system (#17846) (Francesco Trotta)74739c8fix: suggestion with invalid syntax in no-promise-executor-return rule (#17812) (Bryan Mishkin)Documentation
9007719docs: update link in ways-to-extend.md (#17839) (Amel SELMANE)3a22236docs: Update README (GitHub Actions Bot)54c3ca6docs: fix migration-guide example (#17829) (Tanuj Kanti)4391b71docs: check config comments in rule examples (#17815) (Francesco Trotta)fd28363docs: remove mention about ESLint stylistic rules in readme (#17810) (Zwyx)48ed5a6docs: Update README (GitHub Actions Bot)Chores
ba6af85chore: upgrade @ eslint/js@8.56.0 (#17864) (Milos Djermanovic)60a531achore: package.json update for @ eslint/js release (Jenkins)ba87a06chore: update dependency markdownlint to ^0.32.0 (#17783) (renovate[bot])9271d10chore: add GitHub issue template for docs issues (#17845) (Josh Goldberg ✨)70a686bchore: Convert rule tests to FlatRuleTester (#17819) (Nicholas C. Zakas)f3a599dchore: upgrade eslint-plugin-unicorn to v49.0.0 (#17837) (唯然)905d4b7chore: upgrade eslint-plugin-eslint-plugin v5.2.1 (#17838) (唯然)4d7c3cechore: update eslint-plugin-n v16.4.0 (#17836) (唯然)fd0c60cci: unpin Node.js 21.2.0 (#17821) (Francesco Trotta)Features
8c9e6c1feat: importNamePattern option in no-restricted-imports (#17721) (Tanuj Kanti)Documentation
83ece2adocs: fix typo--rules->--rule(#17806) (OKURA Masafumi)fffca5cdocs: remove "Open in Playground" buttons for removed rules (#17791) (Francesco Trotta)a6d9442docs: fix correct/incorrect examples of rules (#17789) (Tanuj Kanti)383e999docs: update and fix examples forno-unused-vars(#17788) (Tanuj Kanti)5a8efd5docs: add specific stylistic rule for each deprecated rule (#17778) (Etienne)Chores
eb8950cchore: upgrade @ eslint/js@8.55.0 (#17811) (Milos Djermanovic)93df384chore: package.json update for @ eslint/js release (Jenkins)fe4b954chore: upgrade @ eslint/eslintrc@2.1.4 (#17799) (Milos Djermanovic)bd8911dci: pin Node.js 21.2.0 (#17809) (Milos Djermanovic)b29a16bchore: fix severalclitests to run in the intended flat config mode (#17797) (Milos Djermanovic)de165c1chore: remove unused config-extends fixtures (#17781) (Milos Djermanovic)d4304b8chore: remove formatting/stylistic rules from new rule templates (#17780) (Francesco Trotta)21024fechore: check rule examples for syntax errors (#17718) (Francesco Trotta)Features
a7a883bfeat: for-direction rule add check for condition in reverse order (#17755) (Angelo Annunziata)1452dc9feat: Add suggestions to no-console (#17680) (Joel Mathew Koshy)21ebf8afeat: updateno-array-constructorrule (#17711) (Francesco Trotta)Bug Fixes
98926e6fix: Ensure that extra data is not accidentally stored in the cache file (#17760) (Milos Djermanovic)e8cf9f6fix: Make dark scroll bar in dark theme (#17753) (Pavel)3cbeaadfix: Usecwdconstructor option as configbasePathin Linter (