npm-updater
npm-updater copied to clipboard
[Snyk] Fix for 1 vulnerabilities
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
| 461/1000 Why? Recently disclosed, Has a fix available, CVSS 3.5 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: debug
The new version differs by 43 commits.- f073e05 Release 3.1.0
- 2c0df9b rename `DEBUG_HIDE_TTY_DATE` to `DEBUG_HIDE_DATE`
- dcb37b2 Merge branch '2.x'
- 56a3853 Add `DEBUG_HIDE_TTY_DATE` env var (#486)
- bdb7e01 remove "component" from package.json
- c38a016 remove ReDoS regexp in %o formatter (#504)
- 47747f3 remove `component.json`
- a0601e5 fix
- e7e568a ignore package-lock.json
- fdfa0f5 Fix browser detection
- 7cd9e53 examples: fix colors printout
- 8d76196 Merge pull request #496 from EdwardBetts/spelling
- daf1a7c correct spelling mistake
- 3e1849d Release 3.0.1
- b3ea123 Disable colors in Edge and Internet Explorer (#489)
- 13e1d06 remove v3 discussion note for now
- 52b894c Release 3.0.0
- d2dd80a component: update "ms" to v2.0.0
- 6752953 fix browser test 😵
- f6f6213 remove `make coveralls` from travis
- f178d86 attempt to separate the Node and Browser tests in Travis
- d73c4ae fix `make test`
- 402c856 fix lint
- 87e7399 readme++
Package name: urllib
The new version differs by 22 commits.- 53a32c3 Release 3.0.0
- 20944ee 📦 NEW: Support request and response events
- f01c264 📦 NEW: Support HttpClient with rejectUnauthorized
- 61a915c 📦 NEW: Support options.auth
- cb084d9 📦 NEW: Support custom lookup and checkAddress
- cc1c854 📦 NEW: Support options.opaque = object
- f07c9f8 📦 NEW: Support options.timing = true
- 70a75c6 📦 NEW: Support options.compressed instead of gzip
- 936bc01 👌 IMPROVE: Support Node.js 14
- eb6c319 📦 NEW: Support auto retry like HttpClient2
- b07a45e 👌 IMPROVE: Use brotli instead of deflate
- a8876f2 🤖 TEST: Big stream timeout
- 6b5a4f1 📦 NEW: Use request instead of fetch
- c1218c5 🐛 FIX: Try to use Readable first
- a67d9d1 🐛 FIX: Dont parse empty data to json
- 2882f0e 🤖 TEST: Error cases for stream and writeStream
- 57ccc7e 📦 NEW: Support options.streaming = true
- f2ca7eb 📦 NEW: Support fixJSONCtlChars
- f5390f2 📦 NEW: TS compiler both Commonjs and ESM support
- c3cc765 📦 NEW: Support upload file by args.files
- 70a238d 🤖 TEST: Use jest and ts
- 26c44b7 📦 NEW: [BREAKING] Refactor impl base on undici
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons: