[Snyk] Upgrade @crowdin/cli from 3.17.0 to 3.19.4 #4

ASISBusiness · 2024-08-16T18:02:50Z

Snyk has created this PR to upgrade @crowdin/cli from 3.17.0 to 3.19.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 6 versions ahead of your current version.
The recommended version was released on 3 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	646	Proof of Concept

Release notes

Package name: @crowdin/cli

3.19.4 - 2024-05-16
What's Changed
- fix: correct detection of obsolete files with double asterisk pattern by @ anbraten in #794
Full Changelog: 3.19.3...3.19.4
3.19.3 - 2024-05-09
What's Changed
- fix: correct detection of obsolete files by @ anbraten in #776
- ci: migrate from deprecated gradle/gradle-build-action gh action by @ andrii-bodnar in #769
- chore(deps): bump tar from 6.2.0 to 6.2.1 by @ dependabot in #770
New Contributors
- @ anbraten made their first contribution in #776
Full Changelog: 3.19.2...3.19.3
3.19.2 - 2024-04-02
What's Changed
- fix: ignore pattern with language mapping in config by @ katerina20 in #753
- ci: upgrade actions by @ andrii-bodnar in #754
- docs: improve descriptions for the upload sources command by @ andrii-bodnar in #752
- docs: exit codes article by @ andrii-bodnar in #757
Full Changelog: 3.19.1...3.19.2
3.19.1 - 2024-03-27
What's Changed
- fix: empty asterisks in translation by @ katerina20 in #750
- chore: update messages.properties by @ Andrulko in #749
Full Changelog: 3.19.0...3.19.1
3.19.0 - 2024-03-19
What's Changed
- feat: --label option for screenshot upload command by @ katerina20 in #721
- feat: --label option for string list command by @ katerina20 in #722
- feat: possibility to add plural strings by @ katerina20 in #731
- feat: multilingual option by @ katerina20 in #725
- feat: set HTTP timeout for API requests by @ yevheniyJ in #734
- fix: message for strings-based project when download by @ katerina20 in #729
- fix: double asterisks in paths by @ katerina20 in #733
- build: update dependencies by @ andrii-bodnar in #727
- docs: update installation.md by @ guoyunhe in #728
New Contributors
- @ guoyunhe made their first contribution in #728
Full Changelog: 3.18.0...3.19.0
3.18.0 - 2024-02-07
What's Changed
- feat: string-based project support by @ katerina20 in #714
  
  In string-based projects, the focus is on managing translatable content as individual strings rather than source files. In this project type, after uploading source files, Crowdin parses them into source strings. Unlike file-based projects, source files aren’t stored, and the emphasis is on managing the content at the string level. This approach is beneficial when dealing with projects that involve continuous content updates, dynamic content, or where a string-oriented structure is preferred.
- docs: update the Files Management article by @ andrii-bodnar in #720
Full Changelog: 3.17.0...3.18.0
3.17.0 - 2024-01-30
What's Changed

App
- feat: file command by @ katerina20 in #708 (Documentation)
  
  ℹ️ Help us to improve the new command - leave your feedback - #713
Documentation
- docs: Files management article by @ andrii-bodnar in #712
- docs: update zip package Readme by @ andrii-bodnar in #711
Build
- chore: add codecov.yml by @ andrii-bodnar in #715
- build(deps): remove findsecbugs-plugin by @ andrii-bodnar in #716
Full Changelog: 3.16.1...3.17.0

from @crowdin/cli GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"","from":"crowdin/cli","to":"crowdin/cli"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-TAR-6476909","issue_id":"SNYK-JS-TAR-6476909","priority_score":646,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.5","score":325},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Uncontrolled Resource Consumption ('Resource Exhaustion')"}],"prId":"ee9e7fdf-6f65-48c0-b703-ee835d9c5c9b","prPublicId":"ee9e7fdf-6f65-48c0-b703-ee835d9c5c9b","packageManager":"npm","priorityScoreList":[646],"projectPublicId":"d1eb8424-287d-4e47-a1f3-f32b859ad827","projectUrl":"https://app.snyk.io/org/enterpriseasisbusiness/project/d1eb8424-287d-4e47-a1f3-f32b859ad827?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-TAR-6476909"],"upgradeInfo":{"versionsDiff":6,"publishedDate":"2024-05-16T09:06:29.503Z"},"vulns":["SNYK-JS-TAR-6476909"]}'

Snyk has created this PR to upgrade @crowdin/cli from 3.17.0 to 3.19.4. See this package in npm: @crowdin/cli See this project in Snyk: https://app.snyk.io/org/enterpriseasisbusiness/project/d1eb8424-287d-4e47-a1f3-f32b859ad827?utm_source=github&utm_medium=referral&page=upgrade-pr

stackblitz · 2024-08-16T18:02:53Z

Run & review this pull request in StackBlitz Codeflow.

github-actions · 2024-08-16T18:03:02Z