[Snyk] Upgrade: jsonc-parser, semver, node-filter-async, request-light, rxjs, stream, tmp, vscode-debugprotocol, vscode-extension-telemetry, vscode-languageserver-protocol

[ashly1111111]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

jsonc-parser
from 3.0.0 to 3.3.1 | 5 versions ahead of your current version | 2 months ago
on 2024-06-24
semver
from 5.6.0 to 5.7.2 | 3 versions ahead of your current version | a year ago
on 2023-07-10
node-filter-async
from 1.1.1 to 1.1.4 | 3 versions ahead of your current version | 5 years ago
on 2019-12-21
request-light
from 0.2.4 to 0.8.0 | 15 versions ahead of your current version | 2 months ago
on 2024-07-02
rxjs
from 6.4.0 to 6.6.7 | 13 versions ahead of your current version | 3 years ago
on 2021-03-28
stream
from 0.0.2 to 0.0.3 | 1 version ahead of your current version | 2 months ago
on 2024-06-26
tmp
from 0.0.33 to 0.2.3 | 5 versions ahead of your current version | 6 months ago
on 2024-02-29
vscode-debugprotocol
from 1.33.0 to 1.51.0 | 39 versions ahead of your current version | 3 years ago
on 2021-12-02
vscode-extension-telemetry
from 0.1.6 to 0.4.5 | 20 versions ahead of your current version | 3 years ago
on 2022-01-11
vscode-languageserver-protocol
from 3.15.3 to 3.17.5 | 56 versions ahead of your current version | a year ago
on 2023-09-26

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	696	Proof of Concept

Release notes

Package name: jsonc-parser

• 3.3.1 - 2024-06-24
  

  Changes:

  • #92: remove exports, prepare 3.3.1

  This list of changes was auto generated.

• 3.3.0 - 2024-06-24
  

  Changes:

  Feature Requests:

  • #11: Can we have a "insertFinalNewline" option in "FormattingOptions"?
  • #4: Source map referenced but not included in published package

  Bugs:

  • #33: Formatting valid json content is causing an invalid json
  • #40: parseTree() returns undefined on empty string input

  Others:

  • #90: prepare 3.3.0
  • #88: Allow the visitor to cease callbacks
  • #89: Bump braces from 3.0.2 to 3.0.3
  See More

  • #84: prepare 3.2.1
  • #81: perf(format): cache breaklines and spaces as much as possible
  • #79: update dependencies
  • #75: ci: add batch
  • #72: delete pr-chat action
  • #71: add publish pipeline & cleanup ci
  • #70: set preserveConstEnums: true, switch to es2020
  • #69: sort edits in applyEdits
  • #66: An additional parameter keepLines has been added into the formatting options which allows to keep the original line formatting
  • #64: Adding Microsoft SECURITY.MD
  • #62: Add JSON path supplier parameter to visitor functions
  • #44: findNodeAtLocation does not handle incomplete property pair
  • #61: Update API section in README
  • #53: Clarify whether / how Edit[] can be concatenated
  • #46: Non-standard whitespace handling
  • #47: Improve README
  • #54: readme: improve ParseOptions documentation
  • #43: Add file extenstion to typings property value
  • #34: Optimize parseLiteral for number-heavy JSON files (ala GeoJSON)
  • #39: Bump lodash from 4.17.15 to 4.17.19
  • #35: Allow for array modifications, add inPlace formatting option.
  • #32: Parse errors make parsed tree useless
  • #31: Upgrading from 2.1.1 to 2.2.0 has diagnostic for file with only comments
  • #25: Fix typo in README
  • #24: parse function should include properties with empty string as their keys
  • #21: Update README.md
  • #18: JavaScipt -> JavaScript
  • #17: add line and column information to scanner and visitor
  • #15: Fix a few typos in doc comments
  • #12: Do not mutate the given path
  • #9: Refactor computeIndentLevel method
  • #8: Fix typo of token
  • #6: Allow trailing commas in array
  • #5: add JSON formatter and editor from VS Code
  • #1: Error objects should also contain location information

  This list of changes was auto generated.

• 3.2.1 - 2024-01-22
  

  prepare 3.2.1 (#84)

• 3.2.0 - 2022-08-30
  

  set preserveConstEnums: true, switch to es2020 (#70)

• 3.1.0 - 2022-07-11
  

  …options which allows to keep the original line formatting (#66)

  • An additional parameter keepLines has been added into the formatting options which allows to keep the original line formatting

  • Resolving the reviews and simplifying the code with the function multipleLineBreaks

  • Reverting back to the previous commit and applying the review changes

  • cleaning the code, simplifying the if/else cases

  • Updating the dependencies of package.json to their latest versions. Changed withFormatting so that keepLines option is always false.

  • Solving "Invalid: lock file's ... does not satisfy"

  • testing if higher node version in .travis.yml will solve the failing of CI

  • formatting and let-> const, avoid modification of options

  Co-authored-by: Martin Aeschlimann martinae@microsoft.com

• 3.0.0 - 2020-11-13
  

  3.0.0

from jsonc-parser GitHub release notes

Package name: semver

• 5.7.2 - 2023-07-10
  

  5.7.2 (2023-07-10)

  Bug Fixes

  • 2f8fd41 #585 better handling of whitespace (#585) (@ joaomoreno, @ lukekarrys)
• 5.7.1 - 2019-08-12
• 5.7.0 - 2019-03-26
• 5.6.0 - 2018-10-10

from semver GitHub release notes

Package name: node-filter-async

• 1.1.4 - 2019-12-21
  

  v1.1.4

• 1.1.3 - 2019-06-14
  

  v1.1.3

• 1.1.2 - 2019-04-04
  

  v1.1.2

• 1.1.1 - 2018-12-25
  

  v1.1.1

from node-filter-async GitHub release notes

Package name: request-light

• 0.8.0 - 2024-07-02
  

  Changes:

  • #25: Add package exports
  • #32: update dependencies and prepare 0.8.0
  • #31: chore: add suppression file
  • #30: Bump braces from 3.0.2 to 3.0.3
  • #28: chore: bump to Node 18
  • #29: test: fix test
  • #26: update dependencies
  • #22: Bump webpack from 5.75.0 to 5.76.0
  • #21: ci: add batch
  • #20: prepare 0.7.0
  See More

  • #14: Add status 502
  • #18: delete pr-chat action
  • #19: Remove PR Chat
  • #16: adopt publish pipeline
  • #15: Add cancellation support
  • #17: update dependencies
  • #6: Add documentation to README
  • #9: fix request should failed when invaild proxy provided
  • #8: Fix redirects in case of relative URL
  • #2: Response stream need error handling

  This list of changes was auto generated.

• 0.7.0 - 2023-01-23
• 0.6.0 - 2022-11-03
• 0.5.8 - 2022-04-12
  

  0.5.8

• 0.5.7 - 2022-01-07
  

  0.5.7

• 0.5.6 - 2021-12-30
  

  0.5.6

• 0.5.5 - 2021-11-17
  

  0.5.5

• 0.5.4 - 2021-07-15
  

  0.5.4

• 0.5.3 - 2021-07-14
  

  0.5.3

• 0.5.2 - 2021-07-12
  

  0.5.2

• 0.5.1 - 2021-07-12
  

  0.5.1

• 0.5.0 - 2021-07-12
  

  0.5.0

• 0.4.0 - 2020-06-17
• 0.3.0 - 2020-02-28
• 0.2.5 - 2019-10-30
• 0.2.4 - 2018-09-13

from request-light GitHub release notes

Package name: rxjs

• 6.6.7 - 2021-03-28
• 6.6.6 - 2021-02-25
• 6.6.4 - 2021-02-24
• 6.6.3 - 2020-09-06
• 6.6.2 - 2020-07-31
• 6.6.1 - 2020-07-31
• 6.6.0 - 2020-07-02
• 6.5.5 - 2020-04-03
• 6.5.4 - 2019-12-27
• 6.5.3 - 2019-09-03
• 6.5.2 - 2019-05-10
• 6.5.1 - 2019-04-23
• 6.5.0 - 2019-04-23
• 6.4.0 - 2019-01-30

from rxjs GitHub release notes

Package name: stream

• 0.0.3 - 2024-06-26
• 0.0.2 - 2014-12-03
  

  0.0.2

from stream GitHub release notes

Package name: tmp

• 0.2.3 - 2024-02-29
  

  Tagging the release

• 0.2.2 - 2024-02-28
  

  Tagging v0.2.2

• 0.2.1 - 2020-04-29
  

  0.2.1

• 0.2.0 - 2020-04-25
  

  0.2.0

• 0.1.0 - 2019-03-25
  

  Tagging v0.1.0

• 0.0.33 - 2017-08-12
  

  Tagging v0.0.33

from tmp GitHub release notes

Package name: vscode-debugprotocol

• 1.51.0 - 2021-12-02
• 1.51.0-pre.0 - 2021-11-24
• 1.50.1 - 2021-10-27
• 1.50.0 - 2021-10-27
• 1.50.0-pre.0 - 2021-10-27
• 1.49.0 - 2021-08-25
• 1.49.0-pre.0 - 2021-08-17
• 1.48.0 - 2021-07-26
• 1.48.0-pre.0 - 2021-07-14
• 1.47.0 - 2021-04-22
• 1.47.0-pre.0 - 2021-04-19
• 1.46.0 - 2021-03-24
• 1.46.0-pre.0 - 2021-03-10
• 1.45.0 - 2021-02-25
• 1.45.0-pre.0 - 2021-02-10
• 1.44.0 - 2021-01-28
• 1.43.0 - 2020-12-03
• 1.43.0-pre.1 - 2020-11-30
• 1.43.0-pre.0 - 2020-11-23
• 1.42.0 - 2020-09-23
• 1.42.0-pre.0 - 2020-09-21
• 1.41.0 - 2020-06-03
• 1.41.0-pre.0 - 2020-05-14
• 1.40.0 - 2020-04-01
• 1.40.0-pre.1 - 2020-03-19
• 1.40.0-pre.0 - 2020-03-13
• 1.39.0 - 2020-02-26
• 1.39.0-pre.0 - 2020-02-19
• 1.38.0 - 2020-02-05
• 1.37.0 - 2019-09-19
• 1.37.0-pre.3 - 2019-09-12
• 1.37.0-pre.2 - 2019-09-11
• 1.37.0-pre.1 - 2019-09-05
• 1.37.0-pre.0 - 2019-09-05
• 1.36.0 - 2019-08-28
• 1.36.0-pre.0 - 2019-08-20
• 1.35.0 - 2019-05-28
• 1.34.0 - 2019-02-26
• 1.34.0-pre.0 - 2019-02-12
• 1.33.0 - 2018-12-05

from vscode-debugprotocol GitHub release notes

Package name: vscode-extension-telemetry

• 0.4.5 - 2022-01-11
• 0.4.4 - 2021-12-27
• 0.4.3 - 2021-11-08
• 0.4.2 - 2021-10-01
• 0.4.1 - 2021-09-23
• 0.4.0 - 2021-09-16
• 0.3.2 - 2021-08-27
• 0.3.1 - 2021-08-27
• 0.3.0 - 2021-08-27
• 0.2.9 - 2021-08-23
• 0.2.8 - 2021-08-10
• 0.2.7 - 2021-08-09
• 0.2.6 - 2021-08-02
• 0.2.5 - 2021-08-02
• 0.2.4 - 2021-07-29
• 0.2.3 - 2021-07-29
• 0.2.2 - 2021-07-26
• 0.2.1 - 2021-07-20
• 0.2.0 - 2021-07-19
• 0.1.7 - 2021-03-09
• 0.1.6 - 2020-05-11

from vscode-extension-telemetry GitHub release notes

Package name: vscode-languageserver-protocol

• 3.17.5 - 2023-09-26
• 3.17.4 - 2023-09-19
• 3.17.4-next.3 - 2023-08-22
• 3.17.4-next.2 - 2023-07-14
• 3.17.4-next.1 - 2023-05-15
• 3.17.4-next.0 - 2023-04-19
• 3.17.3 - 2023-02-14
• 3.17.3-next.6 - 2023-01-16
• 3.17.3-next.5 - 2023-01-11
• 3.17.3-next.4 - 2022-12-15
• 3.17.3-next.3 - 2022-12-09
• 3.17.3-next.2 - 2022-11-07
• 3.17.3-next.1 - 2022-08-31
• 3.17.2 - 2022-07-13
• 3.17.2-next.6 - 2022-06-09
• 3.17.2-next.5 - 2022-06-02
• 3.17.2-next.4 - 2022-06-02
• 3.17.2-next.3 - 2022-05-31
• 3.17.2-next.2 - 2022-05-29
• 3.17.2-next.1 - 2022-05-25
• 3.17.1 - 2022-05-12
• 3.17.0 - 2022-05-10
• 3.17.0-next.20 - 2022-04-29
• 3.17.0-next.19 - 2022-04-29
• 3.17.0-next.18 - 2022-04-27
• 3.17.0-next.17 - 2022-04-21
• 3.17.0-next.16 - 2022-03-17
• 3.17.0-next.15 - 2022-03-01
• 3.17.0-next.14 - 2022-02-01
• 3.17.0-next.13 - 2022-01-31
• 3.17.0-next.12 - 2022-01-17
• 3.17.0-next.11 - 2021-11-23
• 3.17.0-next.10 - 2021-11-22
• 3.17.0-next.9 - 2021-10-08
• 3.17.0-next.8 - 2021-08-09
• 3.17.0-next.7 - 2021-07-09
• 3.17.0-next.6 - 2021-06-16
• 3.17.0-next.5 - 2021-02-18
• 3.17.0-next.4 - 2021-02-17
• 3.17.0-next.3 - 2021-02-16
• 3.17.0-next.2 - 2021-02-16
• 3.17.0-next.1 - 2021-02-12
• 3.16.0 - 2020-12-14
• 3.16.0-next.13 - 2020-12-11
• 3.16.0-next.12 - 2020-12-08
• 3.16.0-next.11 - 2020-11-17
• 3.16.0-next.10 - 2020-10-22
• 3.16.0-next.9 - 2020-10-22
• 3.16.0-next.8 - 2020-10-20
• 3.16.0-next.7 - 2020-08-25
• 3.16.0-next.6 - 2020-07-23
• 3.16.0-next.5 - 2020-06-16
• 3.16.0-next.4 - 2020-05-28
• 3.16.0-next.3 - 2020-05-28
• 3.16.0-next.2 - 2020-04-06
• 3.16.0-next.1 - 2020-03-23
• 3.15.3 - 2020-02-17

from vscode-languageserver-protocol GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs