[Snyk] Upgrade dset from 2.0.1 to 2.1.0

[snyk-bot]

Snyk has created this PR to upgrade dset from 2.0.1 to 2.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 2 years ago, on 2021-01-27.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-DSET-1054939	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: dset

• 2.1.0 - 2021-01-27
  

  Features

  • Added TypeScript definitions (#18, #19): e3a48de, bcbe1c1
    Thank you @ maraisr~!

  Patches

  • Protect against prototype pollution: a4b8a93
    Skip assignments to keys named __proto__, constructor, or prototype.
    Versions between 1.0.0 and 2.0.1 (inclusive) are now marked as deprecated.
    Thank you @ arjunshibu~!

  Chores

  • Replace TravisCI with GitHub action: 2245341, 22827ac, 2a73d30
  • Replace tape with uvu for tests: 17476b9, fc1c385
  • Add benchmark w/ results: 5053399, 50a6ead, 10990bb
  • Golf/Reduce code size (198B -> 190B): 8065a48, 25a8749
  • Import bundt builder: d02290f
• 2.0.1 - 2018-09-08
  

  Patches

  • Prevent Array creation with Float-like keys (#11): 2b9ec49

  Chores

  • Add & update tests: 6168ee5, 0cbf2c6
  • Update README: 24d3ca7

from dset GitHub release notes

Commit messages

Package name: dset

• 113244b 2.1.0
• 10990bb chore: update benchmark & results
• 25a8749 chore: update module size
• 8065a48 chore: golf & tweak perf
• a62a6c6 chore: remove codecov badge (temp)
• a4b8a93 fix: protect against prototype pollution;
• 0209190 debug: coverage on dist dir?
• 2a73d30 chore: update CI badge (Document how to assign 1 set of creatives to all line items in DFP prebid/Prebid.js#21)
• 36fae6c revert: run tests in cjs mode
• 1dad504 chore: import from `src` for testing
• 22827ac chore(action): revert to `nyc` for coverage
• bcbe1c1 fix(types): allow readonly `keys` array via `ArrayLike` type (OpenX documentation confusing/different across docs prebid/Prebid.js#19)
• fc1c385 chore: split tests into suites
• 2245341 chore: replace travis with github action;
• 17476b9 chore: swap test runner
• e3a48de feat: adds typescript definitions (Validate bid request params for all the adapters prebid/Prebid.js#18)
• 50a6ead chore(bench): update `klona` version
• 5053399 chore: add bench w/ results
• d02290f chore: import builder

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs