[Snyk] Upgrade: , , , axios, commander, consola, koa-body, koa-router, lru-cache, luxon, mysql2, node-sql-parser, octokit, p-queue, pinyin, prom-client, reflect-metadata, tiny-async-pool #881
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@koa/cors
⚠️ This is a major version upgrade, and may be a breaking change | 9 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 5 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 22 days ago
⚠️ This is a major version upgrade, and may be a breaking change | 4 months ago
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 years ago
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 4 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 9 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 years ago
from 3.4.3 to 5.0.0 | 2 versions ahead of your current version
on 2023-12-11
@octokit/core
from 4.2.4 to 6.1.2 | 21 versions ahead of your current version
on 2024-04-09
@octokit/plugin-throttling
from 4.3.2 to 9.3.1 | 29 versions ahead of your current version
on 2024-07-14
axios
from 0.27.2 to 1.7.7 | 46 versions ahead of your current version
on 2024-08-31
commander
from 9.5.0 to 12.1.0 | 8 versions ahead of your current version
on 2024-05-18
consola
from 2.15.3 to 3.2.3 | 13 versions ahead of your current version
on 2023-07-05
koa-body
from 5.0.0 to 6.0.1 | 2 versions ahead of your current version
on 2022-10-29
koa-router
from 10.1.1 to 12.0.1 | 5 versions ahead of your current version
on 2023-10-12
lru-cache
from 7.18.3 to 11.0.0 | 28 versions ahead of your current version
on 2024-07-08
luxon
from 2.5.2 to 3.5.0 | 16 versions ahead of your current version
on 2024-08-03
mysql2
from 2.3.3 to 3.11.0 | 50 versions ahead of your current version
on 2024-07-27
node-sql-parser
from 4.18.0 to 5.3.1 | 5 versions ahead of your current version
on 2024-08-07
octokit
from 1.8.1 to 4.0.2 | 39 versions ahead of your current version
on 2024-05-08
p-queue
from 7.4.1 to 8.0.1 | 2 versions ahead of your current version
on 2023-12-14
pinyin
from 3.0.0-alpha.5 to 3.1.0 | 3 versions ahead of your current version | 10 months ago
on 2023-11-22
prom-client
from 14.2.0 to 15.1.3 | 7 versions ahead of your current version
on 2024-06-27
reflect-metadata
from 0.1.14 to 0.2.2 | 4 versions ahead of your current version | 6 months ago
on 2024-03-29
tiny-async-pool
from 1.3.0 to 2.1.0 | 3 versions ahead of your current version
on 2022-05-10
Issues fixed by the recommended upgrade:
SNYK-JS-OCTOKIT-6129525
SNYK-JS-AXIOS-6032459
SNYK-JS-KOACORS-6117545
SNYK-JS-MYSQL2-6861580
SNYK-JS-AXIOS-6124857
SNYK-JS-MYSQL2-6591084
SNYK-JS-MYSQL2-6591085
SNYK-JS-MYSQL2-6591300
SNYK-JS-MYSQL2-6670046
Release notes
Package name: @koa/cors
Release 5.0.0
Release 4.0.0
Release 3.4.3
Package name: @octokit/core
6.1.2 (2024-04-09)
Bug Fixes
default
fallback andtypes
export (#673) (af3d390), closes #665 #6676.1.1 (2024-04-03)
Bug Fixes
6.1.0 (2024-04-03)
Features
6.0.1 (2024-02-26)
Bug Fixes
6.0.0 (2024-02-25)
Features
BREAKING CHANGES
6.0.0-beta.5 (2024-02-25)
Bug Fixes
6.0.0-beta.4 (2024-02-25)
Bug Fixes
6.0.0-beta.3 (2024-02-25)
Bug Fixes
5.2.0 (2024-04-05)
Features
5.1.1 (2024-04-05)
Bug Fixes
@ octokit/types
to v13 (260e360)Package name: @octokit/plugin-throttling
9.3.1 (2024-07-14)
Bug Fixes
9.3.0 (2024-04-29)
Features
9.2.1 (2024-04-23)
Bug Fixes
default
fallback export (#695) (0f404fb)9.2.0 (2024-04-15)
Features
9.1.0 (2024-04-03)
Features
9.0.4 (2024-04-03)
Bug Fixes
9.0.3 (2024-03-01)
Bug Fixes
main
field (#678) (f151af4)9.0.2 (2024-02-27)
Bug Fixes
9.0.1 (2024-02-26)
Bug Fixes
9.0.0 (2024-02-25)
Features
BREAKING CHANGES
Package name: axios
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
ReferenceError: navigator is not defined
for custom environments; (#6567) (fed1a4b)Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Features
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Install
Package name: commander
Added
node --eval
andnode --print
when call.parse()
with no arguments (#2164)Changed
node:
(#2170)Removed
Added
.addHelpOption()
as another way of configuring built-in help option (#2006).helpCommand()
for configuring built-in help command (#2087)Fixed
passThroughOptions
constraints when using.addCommand
and throw if parent command does not have.enablePositionalOptions()
enabled (#1937)Changed
.storeOptionsAsProperties()
after setting an option value (#1928)@ api private
with documented@ private
(#1949).addHelpCommand()
now takes a Command (passing string or boolean still works as before but deprecated) (#2087)Deprecated
.addHelpCommand()
passing string or boolean (use.helpCommand()
or pass a Command) (#2087)Removed
program
export instead) (#2017)Migration Tips
global program
If you are using the deprecated default import of the global Command object, you need to switch to using a named import (or create a new
Command
).option and command clashes
A couple of configuration problems now throw an error, which will pick up issues in existing programs:
Added
.addHelpOption()
as another way of configuring built-in help option (#2006).helpCommand()
for configuring built-in help command (#2087)Changed
.addHelpCommand()
now takes a Command (passing string or boolean still works as before but deprecated) (#2087)Deprecated
.addHelpCommand()
passing string or boolean (use.helpCommand()
or pass a Command) (#2087)Fixed
passThroughOptions
constraints when using.addCommand
and throw if parent command does not have.enablePositionalOptions()
enabled (#1937)Changed
.storeOptionsAsProperties()
after setting an option value (#1928)@ api private
with documented@ private
(#1949)Removed
program
export instead) (#2017)Migration Tips
global program
If you are using the deprecated default import of the global Command object, you need to switch to using a named import (or create a new
Command
).option and command clashes
A couple of configuration problems now throw an error, which will pick up issues in existing programs:
Fixed
OptionValueSource
to allow any string, to match supported use of custom sources (#1983)Command.version()
can also be used as getter (#1982)Commands.executableDir()
, for when not configured (#1965)Added
registeredArguments
property onCommand
with the array of definedArgument
(likeCommand.options
forOption
) (#2010)envVar
,presetArg
(#2019)argChoices
,defaultValue
,defaultValueDescription
(#2019)Changed
Deprecated
Command._args
was private anyway, but now available asregisteredArguments
(