[Snyk] Upgrade redux-thunk from 2.2.0 to 2.4.2

[harrisonho99]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade redux-thunk from 2.2.0 to 2.4.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released a year ago, on 2022-11-04.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-1023599	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ES5EXT-6095076	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-INI-1048974	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Command Injection SNYK-JS-LODASH-1040724	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-608086	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536528	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536531	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579147	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579155	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-610226	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Remote Memory Exposure SNYK-JS-NODEADDONAPI-571001	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JS-NODEFETCH-2342118	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Denial of Service SNYK-JS-NODEFETCH-674311	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JS-NODEFETCH-2342118	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Denial of Service SNYK-JS-NODEFETCH-674311	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JS-NODEFETCH-2342118	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Denial of Service SNYK-JS-NODEFETCH-674311	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Improper Authorization SNYK-JS-REACTDEVTOOLSCORE-6023999	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-1072471	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: redux-thunk

• 2.4.2 - 2022-11-04
  

  This release removes an unused TS type that caused errors when users were type-checking libraries in node_modules.

  What's Changed

  • Remove unused type by @ antoniopresto in #328

  Full Changelog: v2.4.1...v2.4.2

• 2.4.1 - 2021-11-26
  

  This release adds an explicit plain action overload to the ThunkDispatch TS type to better handle inference of the return value in some cases.

  What's Changed

  • Improve action return value resolution by @ markerikson in #327

  Full Changelog: v2.4.0...v2.4.1

• 2.4.0 - 2021-10-26
  Read more
• 2.3.0 - 2018-05-28
  

  Hello! There's a new sheriff in town...

  This is only an update to the TypeScript typings for Redux 4.0 compatibility. After some discussion on the issues/PRs, we're going to be removing the typings completely in a 3.0 release soon. They will instead live in DefinitelyTyped, where they can be updated to match newer version of TypeScript and Redux at whatever pace they want to take. Farewell, typings! 🖖

  • Updated TypeScript typings for Redux 4.0 (#180 by @ Cryrivers)
• 2.2.0 - 2017-01-18
  
  • Adds TypeScript definitions (#77)

from redux-thunk GitHub release notes

Commit messages

Package name: redux-thunk

• 6f392f1 Merge pull request Bump lodash from 4.17.15 to 4.17.21 in /examples/Notepad kusti8/proton-native#331 from fires3as0n/fix-typo-in-readme
• ac9beb2 Fixed typo in README.md
• 84128f0 Remove unused type (Bump lodash from 4.17.15 to 4.17.21 in /examples/CatApi kusti8/proton-native#328)
• 876c893 2.4.1
• 5631c2d Merge pull request Bump ua-parser-js from 0.7.18 to 0.7.28 in /examples/CatApi kusti8/proton-native#327 from reduxjs/feature/return-action-resolution
• 931b5bb Add TS 4.5 to the matrix
• ba38cc9 README cleanup
• eb9ba09 Re-add explicit overload for a plain action
• ce76464 2.4.0
• d40a51f Update README
• 1ca950b Remove some T's
• 35595ad This already defaults to any
• 014936e Move up the type assertion
• 7fb5a23 Remove Webpack config and try test build (How do you log to the console? kusti8/proton-native#324)
• 2289e99 Remove some unused packaages
• 16f6c09 Fix the rootdir stuff
• 78e03e4 Give up on this override attempt
• 6bca90c Lint the type tests
• a4c9d52 Run formatting on type tests
• 2c3822f Referenced the wrong path
• 106f90f Format check the type tests as well
• 4b72fc3 Fix latest linting errors
• b56b83d Add a format checking script
• 70460b1 Clean up the Actions workflow

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs