node-restify
node-restify copied to clipboard
[Snyk] Security upgrade restify from 8.6.1 to 9.0.0
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- examples/todoapp/package.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
| 661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5 |
Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: restify
The new version differs by 23 commits.- caba351 updated package.json [ci skip]
- bf2e42a updated CHANGELOG.md [ci skip]
- c15111f chore: drop support for EOL Node.js versions
- d052b7c feat: deprecate req.closed
- 839fb4a chore: bump version of http-signature to ^1.3.6 (#1889)
- cc483e0 chore: remove travis and update github ci (#1878)
- 195cf13 fix: Correct typo in assertion message (#1904)
- 0a8cf83 chore!: remove deprecated usage of pino.child (#1902)
- 97b6f93 fix: make arity error message actionable (#1901)
- 05f12a6 fix: Re-add support for clientError listeners (#1897)
- ddc1042 fix: don't create empty clientError listener for http.Server (#1895)
- 5c7eb95 fix: use close event on response instead of socket (#1892)
- 4d404d4 docs: fix handleUncaughtExceptions docs typos (#1885)
- 71c7f49 chore: Actions CI for 16
- 6aac376 chore: fix flaky test
- 36318ae fix: use more reliable close event
- 3002182 fix: format falsy constants properly in json formatter (#1792)
- 19b8662 docs(jsdocs): fix jsdoc for response.sendRaw (#1858)
- 9153587 feat: remove re-routing from handler (#1847)
- 71ac3a0 chore: upgrade send from 0.16.2 to 0.17.1 (#1846)
- 2f5bf87 Prefer Pino logger over Bunyan (#1841)
- 12be9e2 feat: async/await support
- bd34988 chore: drop support for node 8
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.