Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade gts from 3.1.1 to 4.0.0 #584

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

lholmquist
Copy link
Contributor

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • examples/typescript-ex/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
Yes No Known Exploit
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: gts The new version differs by 49 commits.
  • 0295fa8 chore(main): release 4.0.0 (#684)
  • cab7704 fix: drop update notifier (#706)
  • ddbd24c chore(deps): lock file maintenance (#707)
  • 800cfe7 chore(deps): lock file maintenance (#703)
  • 7edea7d chore(deps): update dependency @ types/inquirer to v8 (#698)
  • e17a67e chore(deps): lock file maintenance (#700)
  • e2803cd chore(deps): update dependency @ types/eslint to v8 (#697)
  • 3c677fd fix(deps): update dependency prettier to ~2.7.0 (#696)
  • 7ae5c8b fix(deps): upgrade to eslint 8.x (#693)
  • 6a738de chore(deps): lock file maintenance (#695)
  • 774c0b4 build: turn off renovate dashboard (#694)
  • 2ac498a test: leave template/index.ts with bad formatting, to demonstrate fixing (#632)
  • 1e4c34c chore(deps): lock file maintenance (#692)
  • 81397e0 feat: generate .editorconfig (Validation is broken #500)
  • aae2304 chore(deps): lock file maintenance (#691)
  • 7c5145f chore(deps): update dependency @ types/node to v16 (#690)
  • 600ea1f chore(deps): update dependency mocha to v10 (#682)
  • b069630 chore(deps): lock file maintenance (#689)
  • 12cd913 build!: drop support for node.js 10.x (#686)
  • f16a3e1 fix(deps): update dependency write-file-atomic to v4 (#687)
  • ed2fd0c fix(deps): update typescript-eslint monorepo to v5 (#688)
  • b23c743 chore(deps): update actions/setup-node action to v3 (#667)
  • 75b65c1 chore(deps): update dependency sinon to v14 (#683)
  • 2feba2c fix(deps): update dependency prettier to ~2.6.0 (#670)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption

Copy link
Contributor

This pull request is stale because it has been open 30 days with no activity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants