Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk(Unlimited)] Upgrade dustjs-linkedin from 2.5.0 to 2.7.5 #4865

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Jan 4, 2020

Snyk has created this PR to upgrade dustjs-linkedin from 2.5.0 to 2.7.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 11 versions ahead of your current version.
  • The recommended version was released 3 years ago, on 2016-12-09.

The recommended version fixes:

Severity Issue Exploit Maturity
Code Injection
npm:dustjs-linkedin:20160819
No Known Exploit
Arbitrary Code Injection
SNYK-JS-MORGAN-72579
Proof of Concept
Release notes
Package name: dustjs-linkedin
  • 2.7.5 - 2016-12-09

    Version 2.7.5

  • 2.7.4 - 2016-09-13
    No content.
  • 2.7.3 - 2016-07-27
    No content.
  • 2.7.2 - 2015-06-08

    Notable Changes

    Filters

    Dust filter functions previously took one argument, the string to filter. They now accept a second argument, which is the current context.

    Helpers

    Dust helpers can now return primitives.

    Helpers act like references or sections depending on if they have a body. When they have no body, they act like a reference and look in params.filters for filters to use. When they have a body, they act like a section. You can return thenables and streams normally.

    {@return value="" filters="|s" /} 
    {@return value=""}{.} World{/return}
    
  • 2.7.1 - 2015-04-30

    Notable Changes

    dust.config.cache

    In previous versions, setting dust.config.cache to false would blow away the entire cache on every render. Now, setting it to false just prevents new templates from being added and cached templates from being used. Setting it back to true means that previously-cached templates will be ready to use.

    dust.onLoad

    We have added a callback(null, compiledTemplate) signature to dust.onLoad.

    Calling the onLoad callback with a compiled template function will use this template to satisfy the load request. The template is not automatically registered under any name when passed to the callback, so the onLoad function should handle registration as it needs.

    You can still call the callback with uncompiled template source and Dust will compile and store it, while respecting your dust.config.cache setting.

    dust.makeBase

    dust.makeBase is now aliased to dust.context.

    Errata

    Dust 2.7.0 broke backwards compatibility with older Dust compilers. This regression has been fixed so templates compiled with older versions of Dust will continue to work with Dust 2.7.1; you can use an older compiler if needed.

  • 2.7.0 - 2015-04-17

    Supported Runtimes

    With this release we are dropping official support for:

    • Internet Explorer 7
    • Node.js 0.8

    No explicit changes have been made to break Dust in these environments, but we will no longer run tests and may break them going forward.

    Notable Changes

    More flexible rendering

    You can pass Dust body functions directly to dust.render and dust.stream, instead of the template name.

    require(['lib/dust-core', 'views/index'], function(dust, index) {
      dust.render(index, context, function(err, out) { ... });
    });
    

    This means that you can also compile templates without having to name them-- just pass the compiled function directly to dust.render. You can decide if a function is eligible to be passed as a renderable by calling dust.isTemplateFn().

    CommonJS templates

    Dust can now compile templates into CommonJS modules. Set dust.config.cjs to true, or use the --cjs flag with dustc.

    var dust = require('dustjs-linkedin'),
        index = require('views/index.js')(dust);
    

    index.template; // contains the compiled template
    index({ name: "Dust" }, function(err, out) { ... }); // use index to render or stream

    Streams in context

    You can include a ReadableStream directly in your Dust context and Dust will iterate over it like an array.

    var resultStream = db.query("SELECT * FROM people").stream();
    

    dust.renderSource("{#people}{firstName} {lastName}{/people}", { people: resultStream })
    .pipe(res);

    As long as you stream the results instead of rendering, Dust will flush data from the Stream as it is output.

    Caching

    You can disable caching of templates (useful for development) by setting dust.config.cache = false. If caching is disabled, you must write a dust.onLoad function to tell Dust how to load partials, since it wouldn't be possible to load them in advance and cache them.

    Errata

    The exposed compiler options such as dust.optimizers are deprecated. They are now exposed under, e.g. dust.compiler.optimizers. In Dust 2.8.0 the old options will be removed.

    dust.load, an undocumented but public function, has been made private. Consider using dust.onLoad to define special behavior to load a template.

    Templates compiled with earlier Dust versions should be recompiled before using 2.7.0.

  • 2.6.3 - 2016-07-27
    No content.
  • 2.6.2 - 2015-03-27

    Notable Changes

  • 2.6.1 - 2015-03-11

    This release fixes two small issues:

    • Compiling templates with empty blocks such as {<foo}{/foo} leaked compiler data into the template.
    • Negative numbers can be passed as parameters, e.g. {#foo a=-1 b=-2.3 /}
  • 2.6.0 - 2015-03-05
  • 2.5.1 - 2014-11-20
  • 2.5.0 - 2014-11-04
from dustjs-linkedin GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant