Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade asciinema-player from 3.7.1 to 3.8.0 #8

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

patooworld
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade asciinema-player from 3.7.1 to 3.8.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 8 versions ahead of your current version.

  • The recommended version was released on 21 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
169 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
169 No Known Exploit
Release notes
Package name: asciinema-player
  • 3.8.0 - 2024-06-15

    Notable changes:

    • added support for colons in SGR color sequences - fixes (asciinema/avt#9, #154, #231)
    • added support for auto/<theme-name> specification for theme option (see below)
    • added help overlay, triggered by "?" key
    • improved adaptive buffering algorithm in the websocket driver
    • improved rendering of block drawing characters
    • made text of the time display and marker tooltips bigger
    • made the control bar and markers use terminal theme's foreground and background colors
    • added tooltip for the fullscreen button
    • added "type": "module" to package.json to fix import error with some bundlers (thanks @ MaddyGuthridge)
    • fixed player element focus behavior when clicking on a marker dot or the playback toggle button

    https://www.npmjs.com/package/asciinema-player/v/3.8.0


    Recordings made with asciinema CLI 3.0 or later may embed original terminal theme, which is used by the player when available.

    Before this release the only way to let the player use the embedded theme automatically was not specifying the theme option when initializing the player. When the theme option was not used, the player favored the embedded theme, falling back to asciinema theme. There was no way to specify "use the original theme when available, fall back to monokai".

    This release adds the ability to specify the above wish as { theme: "auto/monokai" }. You can use any built-in theme, e.g. { theme: "auto/dracula" }, and the player will use Dracula theme if the original theme was not captured at the time of recording.

    To always use a specific theme regardless of the presence of the original theme in a recording file, use { theme: "<theme-name>" }, e.g. { theme: "dracula" }.

    Default value of the theme option (when one not specified) is now auto/asciinema.

  • 3.7.2-rc.7 - 2024-06-07
    No content.
  • 3.7.2-rc.6 - 2024-06-02
    No content.
  • 3.7.2-rc.5 - 2024-06-01
    No content.
  • 3.7.2-rc.4 - 2024-05-30
    No content.
  • 3.7.2-rc.3 - 2024-04-27
    No content.
  • 3.7.2-rc.2 - 2024-04-24
    No content.
  • 3.7.2-rc.1 - 2024-04-04
    No content.
  • 3.7.1 - 2024-03-24

    Notable changes:

    • greatly improved rendering (position, alignment, accuracy) of ascii drawing, block elements, braille patterns and Powerline triangle symbols
    • fixed alignment of double-width chars (such as CJK, emoji)
    • new adaptive algorithm for buffering in live (websocket) driver, ensuring smooth playback on high-latency or high-jitter network connections
    • minor rendering performance improvement via UI updates batching
    • improved visibility of play button's drop shadow for themes with light background
    • code refactorings and cleanup

    https://www.npmjs.com/package/asciinema-player/v/3.7.1

    Demo showing the improved rendering in general:

    asciicast

    Screenshots showing the fixes to the character alignment and positioning:

    image

    image

    image

    image

from asciinema-player GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade asciinema-player from 3.7.1 to 3.8.0.

See this package in npm:
asciinema-player

See this project in Snyk:
https://app.snyk.io/org/patooworld/project/b68e2b89-2bcc-460b-95b0-0ea2b62ce916?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

vercel bot commented Jul 6, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
app ❌ Failed (Inspect) Jul 6, 2024 3:06pm
app-78uw ❌ Failed (Inspect) Jul 6, 2024 3:06pm
scoopinstaller-github-io ❌ Failed (Inspect) Jul 6, 2024 3:06pm

Copy link

cr-gpt bot commented Jul 6, 2024

Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information

@vercel vercel bot temporarily deployed to Preview – scoopinstaller-github-io July 6, 2024 15:06 Inactive
@vercel vercel bot temporarily deployed to Preview – app-78uw July 6, 2024 15:06 Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants