-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Snyk] Upgrade: , , , , , , , , , , , , , , , , , , , , , , , , agentkeepalive, aws4, azure-devops-node-api, cacache, commander, cron-parser, emoji-regex, emojibase, emojibase-regex, fs-extra, git-url-parse, glob, graph-data-structure, handlebars, ignore, ini, jsonata, luxon, markdown-it, minimatch, nanoid, node-html-parser, openpgp, redis, semver, simple-git, traverse, tslib, validate-npm-package-name, zod #751
base: main
Are you sure you want to change the base?
Conversation
Snyk has created this PR to upgrade: - @aws-sdk/client-codecommit from 3.363.0 to 3.635.0. See this package in npm: https://www.npmjs.com/package/@aws-sdk/client-codecommit - @aws-sdk/client-ec2 from 3.363.0 to 3.636.0. See this package in npm: https://www.npmjs.com/package/@aws-sdk/client-ec2 - @aws-sdk/client-ecr from 3.363.0 to 3.635.0. See this package in npm: https://www.npmjs.com/package/@aws-sdk/client-ecr - @aws-sdk/client-rds from 3.363.0 to 3.635.0. See this package in npm: https://www.npmjs.com/package/@aws-sdk/client-rds - @aws-sdk/client-s3 from 3.363.0 to 3.635.0. See this package in npm: https://www.npmjs.com/package/@aws-sdk/client-s3 - @breejs/later from 4.1.0 to 4.2.0. See this package in npm: https://www.npmjs.com/package/@breejs/later - @cdktf/hcl2json from 0.17.3 to 0.20.8. See this package in npm: https://www.npmjs.com/package/@cdktf/hcl2json - @opentelemetry/api from 1.4.1 to 1.9.0. See this package in npm: https://www.npmjs.com/package/@opentelemetry/api - @opentelemetry/context-async-hooks from 1.15.1 to 1.25.1. See this package in npm: https://www.npmjs.com/package/@opentelemetry/context-async-hooks - @opentelemetry/semantic-conventions from 1.15.1 to 1.25.1. See this package in npm: https://www.npmjs.com/package/@opentelemetry/semantic-conventions - @opentelemetry/resources from 1.15.1 to 1.25.1. See this package in npm: https://www.npmjs.com/package/@opentelemetry/resources - @opentelemetry/sdk-trace-base from 1.15.1 to 1.25.1. See this package in npm: https://www.npmjs.com/package/@opentelemetry/sdk-trace-base - @opentelemetry/exporter-trace-otlp-http from 0.41.1 to 0.52.1. See this package in npm: https://www.npmjs.com/package/@opentelemetry/exporter-trace-otlp-http - @opentelemetry/instrumentation from 0.41.1 to 0.52.1. See this package in npm: https://www.npmjs.com/package/@opentelemetry/instrumentation - @opentelemetry/instrumentation-bunyan from 0.32.0 to 0.40.0. See this package in npm: https://www.npmjs.com/package/@opentelemetry/instrumentation-bunyan - @opentelemetry/instrumentation-http from 0.41.1 to 0.52.1. See this package in npm: https://www.npmjs.com/package/@opentelemetry/instrumentation-http - @opentelemetry/sdk-trace-node from 1.15.1 to 1.25.1. See this package in npm: https://www.npmjs.com/package/@opentelemetry/sdk-trace-node - @renovatebot/osv-offline from 1.3.1 to 1.5.9. See this package in npm: https://www.npmjs.com/package/@renovatebot/osv-offline - @renovatebot/pep440 from 3.0.3 to 3.0.20. See this package in npm: https://www.npmjs.com/package/@renovatebot/pep440 - @renovatebot/ruby-semver from 3.0.10 to 3.0.23. See this package in npm: https://www.npmjs.com/package/@renovatebot/ruby-semver - @types/ms from 0.7.31 to 0.7.34. See this package in npm: https://www.npmjs.com/package/@types/ms - @types/tmp from 0.2.3 to 0.2.6. See this package in npm: https://www.npmjs.com/package/@types/tmp - @yarnpkg/core from 3.5.2 to 3.7.0. See this package in npm: https://www.npmjs.com/package/@yarnpkg/core - @yarnpkg/parsers from 2.5.1 to 2.6.0. See this package in npm: https://www.npmjs.com/package/@yarnpkg/parsers - agentkeepalive from 4.3.0 to 4.5.0. See this package in npm: https://www.npmjs.com/package/agentkeepalive - aws4 from 1.12.0 to 1.13.1. See this package in npm: https://www.npmjs.com/package/aws4 - azure-devops-node-api from 12.1.0 to 12.5.0. See this package in npm: https://www.npmjs.com/package/azure-devops-node-api - cacache from 17.1.3 to 17.1.4. See this package in npm: https://www.npmjs.com/package/cacache - commander from 11.0.0 to 11.1.0. See this package in npm: https://www.npmjs.com/package/commander - cron-parser from 4.8.1 to 4.9.0. See this package in npm: https://www.npmjs.com/package/cron-parser - emoji-regex from 10.2.1 to 10.3.0. See this package in npm: https://www.npmjs.com/package/emoji-regex - emojibase from 15.0.0 to 15.3.1. See this package in npm: https://www.npmjs.com/package/emojibase - emojibase-regex from 15.0.0 to 15.3.2. See this package in npm: https://www.npmjs.com/package/emojibase-regex - fs-extra from 11.1.1 to 11.2.0. See this package in npm: https://www.npmjs.com/package/fs-extra - git-url-parse from 13.1.0 to 13.1.1. See this package in npm: https://www.npmjs.com/package/git-url-parse - glob from 10.3.3 to 10.4.5. See this package in npm: https://www.npmjs.com/package/glob - graph-data-structure from 3.3.0 to 3.5.0. See this package in npm: https://www.npmjs.com/package/graph-data-structure - handlebars from 4.7.7 to 4.7.8. See this package in npm: https://www.npmjs.com/package/handlebars - ignore from 5.2.4 to 5.3.2. See this package in npm: https://www.npmjs.com/package/ignore - ini from 4.1.1 to 4.1.3. See this package in npm: https://www.npmjs.com/package/ini - jsonata from 2.0.3 to 2.0.5. See this package in npm: https://www.npmjs.com/package/jsonata - luxon from 3.3.0 to 3.5.0. See this package in npm: https://www.npmjs.com/package/luxon - markdown-it from 13.0.1 to 13.0.2. See this package in npm: https://www.npmjs.com/package/markdown-it - minimatch from 9.0.3 to 9.0.5. See this package in npm: https://www.npmjs.com/package/minimatch - nanoid from 3.3.6 to 3.3.7. See this package in npm: https://www.npmjs.com/package/nanoid - node-html-parser from 6.1.5 to 6.1.13. See this package in npm: https://www.npmjs.com/package/node-html-parser - openpgp from 5.10.1 to 5.11.2. See this package in npm: https://www.npmjs.com/package/openpgp - redis from 4.6.7 to 4.7.0. See this package in npm: https://www.npmjs.com/package/redis - semver from 7.5.4 to 7.6.3. See this package in npm: https://www.npmjs.com/package/semver - simple-git from 3.19.1 to 3.25.0. See this package in npm: https://www.npmjs.com/package/simple-git - traverse from 0.6.7 to 0.6.9. See this package in npm: https://www.npmjs.com/package/traverse - tslib from 2.6.1 to 2.6.3. See this package in npm: https://www.npmjs.com/package/tslib - validate-npm-package-name from 5.0.0 to 5.0.1. See this package in npm: https://www.npmjs.com/package/validate-npm-package-name - zod from 3.21.4 to 3.23.8. See this package in npm: https://www.npmjs.com/package/zod See this project in Snyk: https://app.snyk.io/org/sammytezzy/project/056d8995-75bd-4eb4-bca0-bc2ecbc2ba91?utm_source=github&utm_medium=referral&page=upgrade-pr
Run & review this pull request in StackBlitz Codeflow. |
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@aws-sdk/client-codecommit
from 3.363.0 to 3.635.0 | 118 versions ahead of your current version | 22 days ago
on 2024-08-20
@aws-sdk/client-ec2
from 3.363.0 to 3.636.0 | 158 versions ahead of your current version | 21 days ago
on 2024-08-21
@aws-sdk/client-ecr
from 3.363.0 to 3.635.0 | 117 versions ahead of your current version | 22 days ago
on 2024-08-20
@aws-sdk/client-rds
from 3.363.0 to 3.635.0 | 143 versions ahead of your current version | 22 days ago
on 2024-08-20
@aws-sdk/client-s3
from 3.363.0 to 3.635.0 | 140 versions ahead of your current version | 22 days ago
on 2024-08-20
@breejs/later
from 4.1.0 to 4.2.0 | 1 version ahead of your current version | 9 months ago
on 2023-11-28
@cdktf/hcl2json
from 0.17.3 to 0.20.8 | 101 versions ahead of your current version | 2 months ago
on 2024-07-01
@opentelemetry/api
from 1.4.1 to 1.9.0 | 5 versions ahead of your current version | 3 months ago
on 2024-06-05
@opentelemetry/context-async-hooks
from 1.15.1 to 1.25.1 | 15 versions ahead of your current version | 3 months ago
on 2024-06-20
@opentelemetry/semantic-conventions
from 1.15.1 to 1.25.1 | 15 versions ahead of your current version | 3 months ago
on 2024-06-20
@opentelemetry/resources
from 1.15.1 to 1.25.1 | 15 versions ahead of your current version | 3 months ago
on 2024-06-20
@opentelemetry/sdk-trace-base
from 1.15.1 to 1.25.1 | 15 versions ahead of your current version | 3 months ago
on 2024-06-20
@opentelemetry/exporter-trace-otlp-http
from 0.41.1 to 0.52.1 | 16 versions ahead of your current version | 3 months ago
on 2024-06-20
@opentelemetry/instrumentation
from 0.41.1 to 0.52.1 | 16 versions ahead of your current version | 3 months ago
on 2024-06-20
@opentelemetry/instrumentation-bunyan
from 0.32.0 to 0.40.0 | 11 versions ahead of your current version | 2 months ago
on 2024-07-04
@opentelemetry/instrumentation-http
from 0.41.1 to 0.52.1 | 16 versions ahead of your current version | 3 months ago
on 2024-06-20
@opentelemetry/sdk-trace-node
from 1.15.1 to 1.25.1 | 15 versions ahead of your current version | 3 months ago
on 2024-06-20
@renovatebot/osv-offline
from 1.3.1 to 1.5.9 | 23 versions ahead of your current version | a month ago
on 2024-08-12
@renovatebot/pep440
from 3.0.3 to 3.0.20 | 17 versions ahead of your current version | 5 months ago
on 2024-04-13
@renovatebot/ruby-semver
from 3.0.10 to 3.0.23 | 13 versions ahead of your current version | 7 months ago
on 2024-01-29
@types/ms
from 0.7.31 to 0.7.34 | 3 versions ahead of your current version | 10 months ago
on 2023-11-07
@types/tmp
from 0.2.3 to 0.2.6 | 3 versions ahead of your current version | 10 months ago
on 2023-11-07
@yarnpkg/core
from 3.5.2 to 3.7.0 | 4 versions ahead of your current version | 7 months ago
on 2024-02-01
@yarnpkg/parsers
from 2.5.1 to 2.6.0 | 1 version ahead of your current version | 10 months ago
on 2023-11-14
agentkeepalive
from 4.3.0 to 4.5.0 | 2 versions ahead of your current version | a year ago
on 2023-08-06
aws4
from 1.12.0 to 1.13.1 | 3 versions ahead of your current version | a month ago
on 2024-08-06
azure-devops-node-api
from 12.1.0 to 12.5.0 | 4 versions ahead of your current version | 6 months ago
on 2024-03-07
cacache
from 17.1.3 to 17.1.4 | 1 version ahead of your current version | a year ago
on 2023-08-14
commander
from 11.0.0 to 11.1.0 | 1 version ahead of your current version | a year ago
on 2023-10-13
cron-parser
from 4.8.1 to 4.9.0 | 1 version ahead of your current version | a year ago
on 2023-08-14
emoji-regex
from 10.2.1 to 10.3.0 | 1 version ahead of your current version | a year ago
on 2023-10-17
emojibase
from 15.0.0 to 15.3.1 | 4 versions ahead of your current version | 3 months ago
on 2024-06-03
emojibase-regex
from 15.0.0 to 15.3.2 | 5 versions ahead of your current version | 3 months ago
on 2024-06-09
fs-extra
from 11.1.1 to 11.2.0 | 1 version ahead of your current version | 9 months ago
on 2023-11-28
git-url-parse
from 13.1.0 to 13.1.1 | 1 version ahead of your current version | a year ago
on 2023-10-19
glob
from 10.3.3 to 10.4.5 | 19 versions ahead of your current version | 2 months ago
on 2024-07-09
graph-data-structure
from 3.3.0 to 3.5.0 | 1 version ahead of your current version | 9 months ago
on 2023-12-06
handlebars
from 4.7.7 to 4.7.8 | 1 version ahead of your current version | a year ago
on 2023-08-01
ignore
from 5.2.4 to 5.3.2 | 3 versions ahead of your current version | a month ago
on 2024-08-12
ini
from 4.1.1 to 4.1.3 | 2 versions ahead of your current version | 4 months ago
on 2024-05-22
jsonata
from 2.0.3 to 2.0.5 | 2 versions ahead of your current version | 4 months ago
on 2024-05-09
luxon
from 3.3.0 to 3.5.0 | 6 versions ahead of your current version | a month ago
on 2024-08-03
markdown-it
from 13.0.1 to 13.0.2 | 1 version ahead of your current version | a year ago
on 2023-09-26
minimatch
from 9.0.3 to 9.0.5 | 2 versions ahead of your current version | 3 months ago
on 2024-06-25
nanoid
from 3.3.6 to 3.3.7 | 1 version ahead of your current version | 10 months ago
on 2023-11-06
node-html-parser
from 6.1.5 to 6.1.13 | 8 versions ahead of your current version | 5 months ago
on 2024-03-29
openpgp
from 5.10.1 to 5.11.2 | 4 versions ahead of your current version | 3 months ago
on 2024-06-19
redis
from 4.6.7 to 4.7.0 | 9 versions ahead of your current version | a month ago
on 2024-07-29
semver
from 7.5.4 to 7.6.3 | 4 versions ahead of your current version | 2 months ago
on 2024-07-16
simple-git
from 3.19.1 to 3.25.0 | 6 versions ahead of your current version | 3 months ago
on 2024-06-10
traverse
from 0.6.7 to 0.6.9 | 2 versions ahead of your current version | 5 months ago
on 2024-04-09
tslib
from 2.6.1 to 2.6.3 | 2 versions ahead of your current version | 3 months ago
on 2024-06-04
validate-npm-package-name
from 5.0.0 to 5.0.1 | 1 version ahead of your current version | 4 months ago
on 2024-05-06
zod
from 3.21.4 to 3.23.8 | 93 versions ahead of your current version | 4 months ago
on 2024-05-08
Issues fixed by the recommended upgrade:
SNYK-JS-IMPORTINTHEMIDDLE-5826054
SNYK-JS-JSONATA-6371513
SNYK-JS-MARKDOWNIT-6483324
SNYK-JS-ZOD-5925617
SNYK-JS-FASTXMLPARSER-7573289
Release notes
Package name: @aws-sdk/client-codecommit
3.635.0(2024-08-20)
Documentation Changes
New Features
For list of updated packages, view updated-packages.md in assets-3.635.0.zip
3.632.0(2024-08-15)
New Features
Bug Fixes
@ smithy/core
dependency in@ aws-sdk/lib-dynamodb
(#6384) (84fd78ba)For list of updated packages, view updated-packages.md in assets-3.632.0.zip
3.631.0(2024-08-14)
New Features
Bug Fixes
For list of updated packages, view updated-packages.md in assets-3.631.0.zip
3.629.0(2024-08-12)
Chores
Documentation Changes
New Features
Bug Fixes
For list of updated packages, view updated-packages.md in assets-3.629.0.zip
Package name: @aws-sdk/client-ec2
3.636.0(2024-08-21)
Chores
Documentation Changes
New Features
For list of updated packages, view updated-packages.md in assets-3.636.0.zip
3.635.0(2024-08-20)
Documentation Changes
New Features
For list of updated packages, view updated-packages.md in assets-3.635.0.zip
3.632.0(2024-08-15)
New Features
Bug Fixes
@ smithy/core
dependency in@ aws-sdk/lib-dynamodb
(#6384) (84fd78ba)For list of updated packages, view updated-packages.md in assets-3.632.0.zip
3.631.0(2024-08-14)
New Features
Bug Fixes
For list of updated packages, view updated-packages.md in assets-3.631.0.zip
3.629.0(2024-08-12)
Chores
Documentation Changes
New Features
Bug Fixes
For list of updated packages, view updated-packages.md in assets-3.629.0.zip
3.627.0(2024-08-08)
Chores
New Features
For list of updated packages, view updated-packages.md in assets-3.627.0.zip
Package name: @aws-sdk/client-ecr
3.635.0(2024-08-20)
Documentation Changes
New Features
For list of updated packages, view updated-packages.md in assets-3.635.0.zip
3.632.0(2024-08-15)
New Features
Bug Fixes
@ smithy/core
dependency in@ aws-sdk/lib-dynamodb
(#6384) (84fd78ba)For list of updated packages, view updated-packages.md in assets-3.632.0.zip
3.631.0(2024-08-14)
New Features
Bug Fixes
For list of updated packages, view updated-packages.md in assets-3.631.0.zip
3.629.0(2024-08-12)
Chores
Documentation Changes
New Features
Bug Fixes
For list of updated packages, view updated-packages.md in assets-3.629.0.zip
Package name: @aws-sdk/client-rds
3.635.0(2024-08-20)
Documentation Changes
New Features