[Snyk] Upgrade twilio from 3.55.1 to 3.66.0 #1

snyk-bot · 2021-08-14T22:05:26Z

Snyk has created this PR to upgrade twilio from 3.55.1 to 3.66.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 12 versions ahead of your current version.
The recommended version was released a month ago, on 2021-07-14.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Command Injection SNYK-JS-LODASH-1040724	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Open Redirect SNYK-JS-URLPARSE-1533425	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Improper Input Validation SNYK-JS-URLPARSE-1078283	467/1000 Why? Proof of Concept exploit, CVSS 7.2	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: twilio

3.66.0 - 2021-07-14
Release Notes

Conversations
- Changed last_read_message_index and unread_messages_count type in User Conversation's resource (breaking change)
- Expose UserConversations resource
Messaging
- Add brand_score field to brand registration responses
Docs
3.65.0 - 2021-06-30
Release Notes

Conversations
- Read-only Conversation Email Binding property binding
Supersim
- Add Billing Period resource for the Super Sim Pilot
- Add List endpoint to Billing Period resource for Super Sim Pilot
- Add Fetch endpoint to Billing Period resource for Super Sim Pilot
Taskrouter
- Update transcribe & transcription_configuration form params in Reservation update endpoint to have private visibility (breaking change)
- Add transcribe & transcription_configuration form params to Reservation update endpoint
Twiml
- Add modify event to statusCallbackEvent for <Conference>.
Docs
3.64.0 - 2021-06-16
Release Notes

Library - Chore
- PR #677: bump lodash and eslint per npm audit. Thanks to @ thinkingserious!
Api
- Update status enum for Messages to include 'canceled'
- Update update_status enum for Messages to include 'canceled'
Trusthub
- Corrected the sid for policy sid in customer_profile_evaluation.json and trust_product_evaluation.json (breaking change)
Docs
3.63.1 - 2021-06-02
Release Notes

Library - Fix
- PR #675: remove @ type/express. Thanks to @ JenniferMah!
Events
- join Sinks and Subscriptions service
Verify
- Improved the documentation of challenge adding the maximum and minimum expected lengths of some fields.
- Improve documentation regarding notification by updating the documentation of the field ttl.
Docs
3.63.0 - 2021-05-19
Release Notes

Library - Chore
- PR #673: resolves jsdoc / underscore security vulnerability. Thanks to @ thinkingserious!
Events
- add query param to return types filtered by Schema Id
- Add query param to return sinks filtered by status
- Add query param to return sinks used/not used by a subscription
Messaging
- Add fetch and delete instance endpoints to us_app_to_person api (breaking change)
- Remove delete list endpoint from us_app_to_person api (breaking change)
- Update read list endpoint to return a list of us_app_to_person compliance objects (breaking change)
- Add sid field to Preregistered US App To Person response
Supersim
- Mark unique_name in Sim, Fleet, NAP resources as not PII
Video
- [Composer] GA maturity level
Docs
3.62.0 - 2021-05-05
Release Notes

Library - Chore
- PR #672: integrate with SonarCloud. Thanks to @ eshanholtz!
Api
- Corrected the data types for feedback summary fields (breaking change)
- Update the conference participant create from and to param to be endpoint type for supporting client identifier and sip address
Bulkexports
- promoting API maturity to GA
Events
- Add endpoint to update description in sink
- Remove beta-feature account flag
Messaging
- Update status field in us_app_to_person api to campaign_status (breaking change)
Verify
- Improve documentation regarding push factor and include extra information about totp factor.
Docs
3.61.0 - 2021-04-21
Release Notes

Library - Fix
- PR #667: remove type definition from peerDeps. Thanks to @ ktalebian!
Api
- Revert Update the conference participant create from and to param to be endpoint type for supporting client identifier and sip address
- Update the conference participant create from and to param to be endpoint type for supporting client identifier and sip address
Bulkexports
- moving enum to doc root for auto generating documentation
- adding status enum and default output properties
Events
- Change schema_versions prop and key to versions (breaking change)
Messaging
- Add use_inbound_webhook_on_number field in Service API for fetch, create, update, read
Taskrouter
- Add If-Match Header based on ETag for Task Delete
Verify
- Add AuthPayload parameter to support verifying a Challenge upon creation. This is only supported for totp factors.
- Add support to resend the notifications of a Challenge. This is only supported for push factors.
Twiml
- Add Polly Neural voices.
Docs
3.60.0 - 2021-04-07
Release Notes

Library - Chore
- PR #668: expose internal RequestClient to users at top level. Thanks to @ stern-shawn!
Api
- Added announcement event to conference status callback events
- Removed optional property time_limit in the call create request. (breaking change)
Messaging
- Add rate_limits field to Messaging Services US App To Person API
- Add usecase field in Service API for fetch, create, update, read
- Add us app to person api and us app to person usecase api as dependents in service
- Add us_app_to_person_registered field in service api for fetch, read, create, update
- Add us app to person api
- Add us app to person usecase api
- Add A2P external campaign api
- Add Usecases API
Supersim
- Add Create endpoint to Sims resource
Verify
- The Binding field is now returned when creating a Factor. This value won't be returned for other endpoints.
Video
- [Rooms] max_concurrent_published_tracks has got GA maturity
Twiml
- Add announcement event to statusCallbackEvent for <Conference>.
Docs
3.59.0 - 2021-03-24
3.58.0 - 2021-03-15
3.57.0 - 2021-02-24
3.56.0 - 2021-02-10
3.55.1 - 2021-01-27