vow icon indicating copy to clipboard operation
vow copied to clipboard

[Snyk] Upgrade globby from 8.0.2 to 12.2.0

Open snyk-bot opened this issue 4 years ago • 0 comments

Snyk has created this PR to upgrade globby from 8.0.2 to 12.2.0.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 17 versions ahead of your current version.
  • The recommended version was released 21 days ago, on 2022-01-17.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: globby from globby GitHub release notes
Commit messages
Package name: globby
  • fc653c7 12.2.0
  • 2e57ffa Fix readme
  • 1224230 Work around TypeScript type problem with `URL` global (#206)
  • a9fc794 Accept `URL` in function returned by `isGitIgnored` (#207)
  • 1be9d02 12.1.0
  • 73c0aca Support `URL` as `cwd` (#201)
  • de4082b DRY a little bit (#203)
  • 60b7116 Use `fs.promises.readFile` instead of `promisify(fs.readFile)` (#204)
  • 79765fb Upgrade dev dependencies
  • 6e09986 12.0.2
  • e167725 Ensure async method is completely async
  • c69526f 12.0.1
  • 5a64253 Meta tweaks
  • 24453e6 12.0.0
  • 662cafc Minor tweaks
  • 5c32b4a Require Node.js 12.20 and move to ESM (#181)
  • 94e192c 11.0.4
  • a08264f Support `objectMode` option in the TypeScript types (#178)
  • c1a3b32 11.0.3
  • f67edfe Fix Windows compatibility for gitignore option (#171)
  • 20bb8ae Rename `master` branch to `main`
  • 4bb7f4a 11.0.2
  • f9fc476 Fix `gitignore` option compatibility with `objectMode` option (#157)
  • 7807d29 Move to GitHub Actions (#159)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

snyk-bot avatar Feb 07 '22 16:02 snyk-bot