[Snyk] Upgrade @tensorflow/tfjs-converter from 3.12.0 to 4.20.0 #558

aravindvnair99 · 2024-06-26T04:31:49Z

This PR was automatically created by Snyk using the credentials of a real user.

![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade @tensorflow/tfjs-converter from 3.12.0 to 4.20.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

The recommended version is 39 versions ahead of your current version.
The recommended version was released on 22 days ago.

Release notes

Package name: @tensorflow/tfjs-converter

4.20.0 - 2024-06-03
Core (4.19.0 ==> 4.20.0)

Misc
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Data (4.19.0 ==> 4.20.0)

Misc
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Layers (4.19.0 ==> 4.20.0)

Misc
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Converter (4.19.0 ==> 4.20.0)

Misc
- Update lockfiles branch tfjs_4.20.0_lockfiles lock files. (#8296). Thanks, @ dbcp1.
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Node (4.19.0 ==> 4.20.0)

Misc
- Update lockfiles branch tfjs_4.20.0_lockfiles lock files. (#8296). Thanks, @ dbcp1.
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
- Update tar package version for tfjs-node & tfjs-node-gpu (#8280). Thanks, @ gaikwadrahul8.
Wasm (4.19.0 ==> 4.20.0)

Misc
- Update lockfiles branch tfjs_4.20.0_lockfiles lock files. (#8296). Thanks, @ dbcp1.
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Cpu (4.19.0 ==> 4.20.0)

Misc
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Webgl (4.19.0 ==> 4.20.0)

Misc
- Update lockfiles branch tfjs_4.20.0_lockfiles lock files. (#8296). Thanks, @ dbcp1.
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
WebGPU (4.19.0 ==> 4.20.0)

Misc
- Update lockfiles branch tfjs_4.20.0_lockfiles lock files. (#8296). Thanks, @ dbcp1.
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
4.20.0-rc.0 - 2024-05-28
- Update lockfiles branch tfjs_4.20.0-rc.0_lockfiles lock files.
- Update verdaccio.yaml
4.19.0 - 2024-04-30
Core (4.18.0 ==> 4.19.0)

Misc
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
Data (4.18.0 ==> 4.19.0)

Misc
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
Layers (4.18.0 ==> 4.19.0)

Features
- Add support for GELU and approximate activation functions (#8224). Thanks, @ Vectorrent.
Bug fixes
- Update exception logic in convolutional.ts (#8248). Thanks, @ gaikwadrahul8.
Misc
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
Converter (4.18.0 ==> 4.19.0)

Misc
- Update lockfiles branch tfjs_4.19.0_lockfiles lock files. (#8264). Thanks, @ dbcp1.
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
Node (4.18.0 ==> 4.19.0)

Misc
- Update lockfiles branch tfjs_4.19.0_lockfiles lock files. (#8264). Thanks, @ dbcp1.
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
- Update installation steps for Windows / Mac OS X for tfjs-node in README.md (#8101). Thanks, @ gaikwadrahul8.
Wasm (4.18.0 ==> 4.19.0)

Misc
- Update lockfiles branch tfjs_4.19.0_lockfiles lock files. (#8264). Thanks, @ dbcp1.
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
- Fixing typos in READMEs (#8213). Thanks, @ Branchverse.
Cpu (4.18.0 ==> 4.19.0)

Misc
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
Webgl (4.18.0 ==> 4.19.0)

Misc
- Update lockfiles branch tfjs_4.19.0_lockfiles lock files. (#8264). Thanks, @ dbcp1.
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
WebGPU (4.18.0 ==> 4.19.0)

Misc
- Update lockfiles branch tfjs_4.19.0_lockfiles lock files. (#8264). Thanks, @ dbcp1.
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
- Export WebGPUProgram as type to fix g3 isolatedModules issue (#8252).
4.19.0-rc.0 - 2024-04-24
- Update lockfiles branch tfjs_4.19.0-rc.0_lockfiles lock files.
- Update verdaccio.yaml
4.18.0 - 2024-04-17
Core (4.17.0 ==> 4.18.0)

Misc
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Data (4.17.0 ==> 4.18.0)

Misc
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Layers (4.17.0 ==> 4.18.0)

Misc
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Converter (4.17.0 ==> 4.18.0)

Misc
- Update lockfiles branch tfjs_4.18.0_lockfiles lock files. (#8251). Thanks, @ dbcp1.
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
- nightly test fix (#8214).
- Fixed typos in documentation string. (#7782). Thanks, @ shmishra99.
Node (4.17.0 ==> 4.18.0)

Misc
- Update lockfiles branch tfjs_4.18.0_lockfiles lock files. (#8251). Thanks, @ dbcp1.
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Wasm (4.17.0 ==> 4.18.0)

Misc
- Update lockfiles branch tfjs_4.18.0_lockfiles lock files. (#8251). Thanks, @ dbcp1.
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Cpu (4.17.0 ==> 4.18.0)

Misc
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Webgl (4.17.0 ==> 4.18.0)

Misc
- Update lockfiles branch tfjs_4.18.0_lockfiles lock files. (#8251). Thanks, @ dbcp1.
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
WebGPU (4.17.0 ==> 4.18.0)

Misc
- Update lockfiles branch tfjs_4.18.0_lockfiles lock files. (#8251). Thanks, @ dbcp1.
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
4.18.0-rc.0 - 2024-04-11
- Update lockfiles branch tfjs_4.18.0-rc.0_lockfiles lock files.
- Update verdaccio.yaml
4.17.0 - 2024-01-30
Core (4.16.0 ==> 4.17.0)

Misc
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
Data (4.16.0 ==> 4.17.0)

Misc
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
Layers (4.16.0 ==> 4.17.0)

Misc
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
Converter (4.16.0 ==> 4.17.0)

Misc
- Update lockfiles branch tfjs_4.17.0_lockfiles lock files. (#8162). Thanks, @ dbcp1.
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
- merge g3 cl (#8138).
Node (4.16.0 ==> 4.17.0)

Misc
- Update lockfiles branch tfjs_4.17.0_lockfiles lock files. (#8162). Thanks, @ dbcp1.
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
- Fix for windows installation #7341 (#8122). Thanks, @ vicmmg.
- Update broken link for MacOS Catalina guide in README.md (#8032). Thanks, @ gaikwadrahul8.
Wasm (4.16.0 ==> 4.17.0)

Misc
- Update lockfiles branch tfjs_4.17.0_lockfiles lock files. (#8162). Thanks, @ dbcp1.
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
Cpu (4.16.0 ==> 4.17.0)

Misc
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
Webgl (4.16.0 ==> 4.17.0)

Misc
- Update lockfiles branch tfjs_4.17.0_lockfiles lock files. (#8162). Thanks, @ dbcp1.
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
WebGPU (4.16.0 ==> 4.17.0)

Misc
- Update lockfiles branch tfjs_4.17.0_lockfiles lock files. (#8162). Thanks, @ dbcp1.
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
4.17.0-rc.0 - 2024-01-23
- Update lockfiles branch tfjs_4.17.0-rc.0_lockfiles lock files.
- Update verdaccio.yaml
4.16.0 - 2024-01-11
Core (4.15.0 ==> 4.16.0)

Misc
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Data (4.15.0 ==> 4.16.0)

Misc
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Layers (4.15.0 ==> 4.16.0)

Misc
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Converter (4.15.0 ==> 4.16.0)

Bug fixes
- apply g3 fixes for jax (#8099).
Misc
- Update lockfiles branch tfjs_4.16.0_lockfiles lock files. (#8137). Thanks, @ dbcp1.
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
- Add support for complex64 data type in parseDtypeParam function (#8083). Thanks, @ Lutra-Fs.
Node (4.15.0 ==> 4.16.0)

Misc
- Update lockfiles branch tfjs_4.16.0_lockfiles lock files. (#8137). Thanks, @ dbcp1.
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Wasm (4.15.0 ==> 4.16.0)

Misc
- Update lockfiles branch tfjs_4.16.0_lockfiles lock files. (#8137). Thanks, @ dbcp1.
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Cpu (4.15.0 ==> 4.16.0)

Misc
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Webgl (4.15.0 ==> 4.16.0)

Misc
- Update lockfiles branch tfjs_4.16.0_lockfiles lock files. (#8137). Thanks, @ dbcp1.
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
WebGPU (4.15.0 ==> 4.16.0)

Misc
- Update lockfiles branch tfjs_4.16.0_lockfiles lock files. (#8137). Thanks, @ dbcp1.
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
4.16.0-rc.0 - 2024-01-09
- Update lockfiles branch tfjs_4.16.0-rc.0_lockfiles lock files.
- Update verdaccio.yaml
4.15.0 - 2023-12-12
4.15.0-rc.0 - 2023-12-05
4.14.0 - 2023-11-30
4.14.0-rc.0 - 2023-11-17
4.13.0 - 2023-11-07
4.13.0-rc.0 - 2023-10-30
4.12.0 - 2023-10-18
4.12.0-rc.0 - 2023-10-11
4.11.0 - 2023-09-13
4.10.0 - 2023-08-01
4.9.0 - 2023-07-18
4.8.0 - 2023-06-20
4.7.0 - 2023-06-06
4.6.0 - 2023-05-17
4.5.0 - 2023-05-05
4.4.0 - 2023-04-06
4.3.0 - 2023-03-17
4.2.0 - 2023-01-03
4.1.0 - 2022-11-20
4.0.0 - 2022-10-13
3.21.0 - 2022-10-06
3.20.0 - 2022-08-23
3.19.0 - 2022-07-22
3.18.0 - 2022-05-20
3.17.0 - 2022-05-12
3.16.0 - 2022-04-19
3.15.0 - 2022-03-22
3.14.0 - 2022-03-03
3.13.0 - 2022-01-12
3.12.0 - 2021-12-08

from @tensorflow/tfjs-converter GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @tensorflow/tfjs-converter from 3.12.0 to 4.20.0. See this package in npm: @tensorflow/tfjs-converter See this project in Snyk: https://app.snyk.io/org/aravindvnair99-github-marketplace/project/3e229b24-b2de-4c21-9d58-eebf425f44fc?utm_source=github&utm_medium=referral&page=upgrade-pr

guardrails · 2024-06-26T04:32:17Z

⚠️ We detected 8 security issues in this pull request:

Insecure File Management (1)

Severity

Details

Docs

High

Title: Path Traversal from user input

Spot-the-Hole/functions/index.js

Line 562 in b3ccebb

path.join(os.tmpdir(), path.basename(req.files.file[0].fieldname)),

📚

More info on how to fix Insecure File Management in JavaScript.

Insecure Use of Crypto (1)

Severity

Details

Docs

Medium

Title: Insecure use of random generator

Spot-the-Hole/functions/index.js

Line 204 in b3ccebb

result += characters.charAt(Math.floor(Math.random() * charactersLength));

📚

More info on how to fix Insecure Use of Crypto in JavaScript.

Vulnerable Libraries (6)

Severity	Details
Medium	pkg:npm/axios@0.25.0 upgrade to: 1.6.0
High	pkg:npm/busboy@0.3.1 upgrade to: > 0.3.1
Critical	pkg:npm/firebase-admin@11.3.0 upgrade to: > 11.3.0
High	pkg:npm/firebase-functions@4.2.1 upgrade to: > 4.2.1
Critical	pkg:npm/@tensorflow/tfjs-node@3.14.0 upgrade to: > 3.14.0
N/A	pkg:npm/ejs@3.1.7 upgrade to: 3.1.10

More info on how to fix Vulnerable Libraries in JavaScript.

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

stale · 2024-07-10T06:02:01Z

Automatically marked as stale due to lack of recent activity. Will be closed if no further activity occurs. Thank you for your contributions.

stale · 2024-07-20T19:15:05Z

Automatically closed due to lack of recent activity. Tag @aravindvnair99 to reopen. Thank you for your contributions.

stale · 2024-07-21T05:45:50Z

No longer marked as stale.

stale · 2024-08-04T13:34:18Z

Automatically marked as stale due to lack of recent activity. Will be closed if no further activity occurs. Thank you for your contributions.

stale · 2024-08-12T06:24:15Z

Automatically closed due to lack of recent activity. Tag @aravindvnair99 to reopen. Thank you for your contributions.

stale · 2024-08-13T05:19:52Z

No longer marked as stale.

stale · 2024-08-28T01:52:28Z

Automatically marked as stale due to lack of recent activity. Will be closed if no further activity occurs. Thank you for your contributions.

stale · 2024-09-07T07:11:35Z

Automatically closed due to lack of recent activity. Tag @aravindvnair99 to reopen. Thank you for your contributions.

stale · 2024-09-08T07:24:12Z

No longer marked as stale.

sonarcloud · 2024-09-08T07:24:42Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

stale · 2024-09-29T14:12:58Z

Automatically marked as stale due to lack of recent activity. Will be closed if no further activity occurs. Thank you for your contributions.

stale · 2024-10-19T09:54:17Z

Automatically closed due to lack of recent activity. Tag @aravindvnair99 to reopen. Thank you for your contributions.

pull-request-size bot added the size/XS label Jun 26, 2024

stale bot added the stale label Jul 10, 2024

stale bot closed this Jul 20, 2024

aravindvnair99 reopened this Jul 21, 2024

stale bot removed the stale label Jul 21, 2024

stale bot added the stale label Aug 4, 2024

stale bot closed this Aug 12, 2024

aravindvnair99 reopened this Aug 13, 2024

stale bot removed the stale label Aug 13, 2024

stale bot added the stale label Aug 28, 2024

stale bot closed this Sep 7, 2024

aravindvnair99 reopened this Sep 8, 2024

stale bot removed the stale label Sep 8, 2024

stale bot added the stale label Sep 29, 2024

stale bot closed this Oct 19, 2024

[Snyk] Upgrade @tensorflow/tfjs-converter from 3.12.0 to 4.20.0 #558

[Snyk] Upgrade @tensorflow/tfjs-converter from 3.12.0 to 4.20.0 #558

Conversation

aravindvnair99 commented Jun 26, 2024

Snyk has created this PR to upgrade @tensorflow/tfjs-converter from 3.12.0 to 4.20.0.

Core (4.19.0 ==> 4.20.0)

Misc

Data (4.19.0 ==> 4.20.0)

Misc

Layers (4.19.0 ==> 4.20.0)

Misc

Converter (4.19.0 ==> 4.20.0)

Misc

Node (4.19.0 ==> 4.20.0)

Misc

Wasm (4.19.0 ==> 4.20.0)

Misc

Cpu (4.19.0 ==> 4.20.0)

Misc

Webgl (4.19.0 ==> 4.20.0)

Misc

WebGPU (4.19.0 ==> 4.20.0)

Misc

Core (4.18.0 ==> 4.19.0)

Misc

Data (4.18.0 ==> 4.19.0)

Misc

Layers (4.18.0 ==> 4.19.0)

Features

Bug fixes

Misc

Converter (4.18.0 ==> 4.19.0)

Misc

Node (4.18.0 ==> 4.19.0)

Misc

Wasm (4.18.0 ==> 4.19.0)

Misc

Cpu (4.18.0 ==> 4.19.0)

Misc

Webgl (4.18.0 ==> 4.19.0)

Misc

WebGPU (4.18.0 ==> 4.19.0)

Misc

Core (4.17.0 ==> 4.18.0)

Misc

Data (4.17.0 ==> 4.18.0)

Misc

Layers (4.17.0 ==> 4.18.0)

Misc

Converter (4.17.0 ==> 4.18.0)

Misc

Node (4.17.0 ==> 4.18.0)

Misc

Wasm (4.17.0 ==> 4.18.0)

Misc

Cpu (4.17.0 ==> 4.18.0)

Misc

Webgl (4.17.0 ==> 4.18.0)

Misc

WebGPU (4.17.0 ==> 4.18.0)

Misc

Core (4.16.0 ==> 4.17.0)

Misc

Data (4.16.0 ==> 4.17.0)

Misc

Layers (4.16.0 ==> 4.17.0)

Misc

Converter (4.16.0 ==> 4.17.0)

Misc

Node (4.16.0 ==> 4.17.0)

Misc

Wasm (4.16.0 ==> 4.17.0)

Misc

Cpu (4.16.0 ==> 4.17.0)

Misc

Webgl (4.16.0 ==> 4.17.0)

Misc

WebGPU (4.16.0 ==> 4.17.0)

Misc

Core (4.15.0 ==> 4.16.0)