[Snyk] Upgrade: ajv, bcrypt, body-parser, classnames, ejs, eslint, express, express-rate-limit, winston, fabric-ca-client, fabric-network, fast-stats, grpc, js-sha256, jsonwebtoken, log4js, multer, passport, pg, prettyjson, prop-types, save, sequelize, swagger-ui-express, ws #69
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- ajv from 6.12.3 to 6.12.6.
See this package in npm: https://www.npmjs.com/package/ajv
- bcrypt from 5.0.1 to 5.1.1.
See this package in npm: https://www.npmjs.com/package/bcrypt
- body-parser from 1.19.2 to 1.20.2.
See this package in npm: https://www.npmjs.com/package/body-parser
- classnames from 2.3.1 to 2.5.1.
See this package in npm: https://www.npmjs.com/package/classnames
- ejs from 3.1.7 to 3.1.10.
See this package in npm: https://www.npmjs.com/package/ejs
- eslint from 7.29.0 to 7.32.0.
See this package in npm: https://www.npmjs.com/package/eslint
- express from 4.17.3 to 4.19.2.
See this package in npm: https://www.npmjs.com/package/express
- express-rate-limit from 5.2.6 to 5.5.1.
See this package in npm: https://www.npmjs.com/package/express-rate-limit
- winston from 2.4.5 to 2.4.7.
See this package in npm: https://www.npmjs.com/package/winston
- fabric-ca-client from 2.2.15 to 2.2.20.
See this package in npm: https://www.npmjs.com/package/fabric-ca-client
- fabric-network from 2.2.15 to 2.2.20.
See this package in npm: https://www.npmjs.com/package/fabric-network
- fast-stats from 0.0.3 to 0.0.7.
See this package in npm: https://www.npmjs.com/package/fast-stats
- grpc from 1.24.10 to 1.24.11.
See this package in npm: https://www.npmjs.com/package/grpc
- js-sha256 from 0.9.0 to 0.11.0.
See this package in npm: https://www.npmjs.com/package/js-sha256
- jsonwebtoken from 9.0.0 to 9.0.2.
See this package in npm: https://www.npmjs.com/package/jsonwebtoken
- log4js from 6.4.0 to 6.9.1.
See this package in npm: https://www.npmjs.com/package/log4js
- multer from 1.4.2 to 1.4.4.
See this package in npm: https://www.npmjs.com/package/multer
- passport from 0.6.0 to 0.7.0.
See this package in npm: https://www.npmjs.com/package/passport
- pg from 8.4.0 to 8.12.0.
See this package in npm: https://www.npmjs.com/package/pg
- prettyjson from 1.2.1 to 1.2.5.
See this package in npm: https://www.npmjs.com/package/prettyjson
- prop-types from 15.7.2 to 15.8.1.
See this package in npm: https://www.npmjs.com/package/prop-types
- save from 2.4.0 to 2.9.0.
See this package in npm: https://www.npmjs.com/package/save
- sequelize from 6.29.0 to 6.37.3.
See this package in npm: https://www.npmjs.com/package/sequelize
- swagger-ui-express from 4.3.0 to 4.6.3.
See this package in npm: https://www.npmjs.com/package/swagger-ui-express
- ws from 7.5.0 to 7.5.10.
See this package in npm: https://www.npmjs.com/package/ws
See this project in Snyk:
https://app.snyk.io/org/sammytezzy/project/f192416d-8f9a-4c05-afcd-a21e7da8ca22?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
ajv
from 6.12.3 to 6.12.6 | 3 versions ahead of your current version | 4 years ago
on 2020-10-10
bcrypt
from 5.0.1 to 5.1.1 | 2 versions ahead of your current version | a year ago
on 2023-08-16
body-parser
from 1.19.2 to 1.20.2 | 3 versions ahead of your current version | 2 years ago
on 2023-02-22
classnames
from 2.3.1 to 2.5.1 | 5 versions ahead of your current version | 9 months ago
on 2023-12-29
ejs
from 3.1.7 to 3.1.10 | 3 versions ahead of your current version | 5 months ago
on 2024-04-12
eslint
from 7.29.0 to 7.32.0 | 3 versions ahead of your current version | 3 years ago
on 2021-07-30
express
from 4.17.3 to 4.19.2 | 7 versions ahead of your current version | 6 months ago
on 2024-03-25
express-rate-limit
from 5.2.6 to 5.5.1 | 5 versions ahead of your current version | 3 years ago
on 2021-11-06
winston
from 2.4.5 to 2.4.7 | 2 versions ahead of your current version | 2 years ago
on 2022-11-15
fabric-ca-client
from 2.2.15 to 2.2.20 | 25 versions ahead of your current version | 10 months ago
on 2023-11-13
fabric-network
from 2.2.15 to 2.2.20 | 25 versions ahead of your current version | 10 months ago
on 2023-11-13
fast-stats
from 0.0.3 to 0.0.7 | 4 versions ahead of your current version | a month ago
on 2024-08-06
grpc
from 1.24.10 to 1.24.11 | 1 version ahead of your current version | 3 years ago
on 2021-07-23
js-sha256
from 0.9.0 to 0.11.0 | 3 versions ahead of your current version | 8 months ago
on 2024-01-24
jsonwebtoken
from 9.0.0 to 9.0.2 | 2 versions ahead of your current version | a year ago
on 2023-08-30
log4js
from 6.4.0 to 6.9.1 | 17 versions ahead of your current version | 2 years ago
on 2023-03-08
multer
from 1.4.2 to 1.4.4 | 3 versions ahead of your current version | 3 years ago
on 2021-12-07
passport
from 0.6.0 to 0.7.0 | 1 version ahead of your current version | 10 months ago
on 2023-11-27
pg
from 8.4.0 to 8.12.0 | 19 versions ahead of your current version | 3 months ago
on 2024-06-04
prettyjson
from 1.2.1 to 1.2.5 | 4 versions ahead of your current version | 3 years ago
on 2022-01-11
prop-types
from 15.7.2 to 15.8.1 | 2 versions ahead of your current version | 3 years ago
on 2022-01-05
save
from 2.4.0 to 2.9.0 | 2 versions ahead of your current version | 2 years ago
on 2022-09-23
sequelize
from 6.29.0 to 6.37.3 | 18 versions ahead of your current version | 5 months ago
on 2024-04-13
swagger-ui-express
from 4.3.0 to 4.6.3 | 6 versions ahead of your current version | a year ago
on 2023-05-05
ws
from 7.5.0 to 7.5.10 | 10 versions ahead of your current version | 3 months ago
on 2024-06-16
Issues fixed by the recommended upgrade:
SNYK-JS-EJS-6689533
SNYK-JS-ELLIPTIC-7577916
SNYK-JS-ELLIPTIC-7577917
SNYK-JS-ELLIPTIC-7577918
SNYK-JS-ASYNC-2441827
SNYK-JS-EXPRESS-6474509
SNYK-JS-GRPCGRPCJS-7242922
SNYK-JS-NODEFETCH-2342118
Release notes
Package name: ajv
-
6.12.6 - 2020-10-10
-
6.12.5 - 2020-09-13
-
6.12.4 - 2020-08-15
-
6.12.3 - 2020-07-04
from ajv GitHub release notesFix performance issue of "url" format.
Fix uri scheme validation (@ ChALkeR).
Fix boolean schemas with strictKeywords option (#1270)
Fix: coercion of one-item arrays to scalar that should fail validation (failing example).
Pass schema object to processCode function
Option for strictNumbers (@ issacgerges, #1128)
Fixed vulnerability related to untrusted schemas (CVE-2020-15366)
Package name: bcrypt
-
5.1.1 - 2023-08-16
- Refactored example with async await by @ lpizzinidev in #894
- Fixed z/OS build issue by @ laijonathan in #968
- Update dependencies by @ recrsn in #993
- @ lpizzinidev made their first contribution in #894
- @ laijonathan made their first contribution in #968
-
5.1.0 - 2022-10-06
- Update node-pre-gyp to 1.0.2 by @ feuxfollets1013 in #865
- Update README for inclusion of musl by @ arbourd in #883
- Version bump, security updates to sub dep npmlog by @ adaniels-parabol in #905
- document ESM usage (#892) by @ mariusa in #899
- fix: update travis CI Docker image repository by @ cokia in #930
- Update node versions in appveyor test matrix by @ p-kuen in #936
- chore(appveyor): not use latest npm by @ cokia in #932
- chore: update Appveyor readme badge by @ cokia in #933
- Use Github actions for CI by @ recrsn in #858
- Update dependencies by @ recrsn in #953
- Migrate tests to use Jest by @ recrsn in #958
- Pin NAPI to v3 by @ recrsn in #959
- @ feuxfollets1013 made their first contribution in #865
- @ arbourd made their first contribution in #883
- @ adaniels-parabol made their first contribution in #905
- @ mariusa made their first contribution in #899
- @ cokia made their first contribution in #930
- @ p-kuen made their first contribution in #936
-
5.0.1 - 2021-02-26
from bcrypt GitHub release notesWhat's Changed
New Contributors
Full Changelog: v5.1.0...v5.1.1
What's Changed
New Contributors
Full Changelog: v5.0.1...v5.1.0
Update
node-pre-gypto 1.0.0Package name: body-parser
-
1.20.2 - 2023-02-22
- Fix strict json error message on Node.js 19+
- deps: content-type@~1.0.5
- perf: skip value escaping when unnecessary
- deps: [email protected]
-
1.20.1 - 2022-10-06
- deps: [email protected]
- perf: remove unnecessary object clone
-
1.20.0 - 2022-04-03
- Fix error message for json parse whitespace in
- Fix internal error when inflated body exceeds limit
- Prevent loss of async hooks context
- Prevent hanging when request already read
- deps: [email protected]
- Replace internal
- Use instance methods on
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
-
1.19.2 - 2022-02-16
- deps: [email protected]
- deps: [email protected]
- Fix handling of
- deps: [email protected]
- deps: [email protected]
from body-parser GitHub release notesstrictevalusage withFunctionconstructorprocessto check for listeners__proto__keysPackage name: classnames
-
2.5.1 - 2023-12-29
-
2.5.0 - 2023-12-28
-
2.4.0 - 2023-12-26
-
2.3.3 - 2023-12-25
-
2.3.2 - 2022-09-13
-
2.3.1 - 2021-04-02
from classnames GitHub release notesPrepare for release of version 2.5.1 (#351)
Prepare for release of version 2.5.0 (#344)
Prepare for release of version 2.4.0 (#338)
Prepare for release of version 2.3.3 (#308)
add missing registry for npm publish (#283)
2.3.1
Package name: ejs
-
3.1.10 - 2024-04-12
-
3.1.9 - 2023-03-12
-
3.1.8 - 2022-05-11
-
3.1.7 - 2022-04-20
from ejs GitHub release notesVersion 3.1.10
Version 3.1.9
Version 3.1.8
Version 3.1.7
Package name: eslint
-
7.32.0 - 2021-07-30
-
7.31.0 - 2021-07-17
-
7.30.0 - 2021-07-02
-
7.29.0 - 2021-06-18
from eslint GitHub release notes3c78a7bChore: Adopteslint-plugin/prefer-message-idsrule internally (#14841) (Bryan Mishkin)faecf56Update: change reporting location forcurlyrule (refs #12334) (#14766) (Nitin Kumar)d7dc07aFix: ignore lines with empty elements (fixes #12756) (#14837) (Soufiane Boutahlil)1bfbefdNew: Exit on fatal error (fixes #13711) (#14730) (Antonios Katopodis)ed007c8Chore: Simplify internalno-invalid-metarule (#14842) (Bryan Mishkin)d53d906Docs: Prepare data for website to indicate rules with suggestions (#14830) (Bryan Mishkin)d28f2ffDocs: Reference eslint-config-eslint to avoid potential for staleness (#14805) (Brett Zamir)8be8a36Chore: Adopteslint-plugin/require-meta-docs-urlrule internally (#14823) (Bryan Mishkin)f9c164fDocs: New syntax issue template (#14826) (Nicholas C. Zakas)eba0c45Chore: assertions on reporting loc inunicode-bom(refs #12334) (#14809) (Nitin Kumar)ed945bdDocs: fix multiple broken links (#14833) (Sam Chen)60df44cChore: useactions/setup-node@v2(#14816) (Nitin Kumar)6641d88Docs: Update README team and sponsors (ESLint Jenkins)efdbb12Upgrade: @ eslint/eslintrc to v0.4.3 (#14808) (Brandon Mills)a96b05fUpdate: add end location to report inconsistent-return(refs #12334) (#14798) (Nitin Kumar)e0e8e30Docs: update BUG_REPORT template (#14787) (Nitin Kumar)39115c8Docs: provide more context to no-eq-null (#14801) (gfyoung)9a3c73cDocs: fix a broken link (#14790) (Sam Chen)ddffa8aUpdate: Indicating the operator in question (#14764) (Paul Smith)bba714cUpdate: Clarifying what changes need to be made in no-mixed-operators (#14765) (Paul Smith)b0d22e3Docs: Mention benefit of providingmeta.docs.url(#14774) (Bryan Mishkin)000cc79Sponsors: Sync README with website (ESLint Jenkins)a6a7438Chore: pin [email protected] (#14771) (Milos Djermanovic)5f74642Chore: don't check Program.start in SourceCode#getComments (refs #14744) (#14748) (Milos Djermanovic)19a871aDocs: Suggest linting plugins for ESLint plugin developers (#14754) (Bryan Mishkin)aa87329Docs: fix broken links (#14756) (Sam Chen)278813aDocs: fix and add more examples for new-cap rule (fixes #12874) (#14725) (Nitin Kumar)ed1da5dUpdate: ecmaVersion allows "latest" (#14720) (薛定谔的猫)104c0b5Update: improve use-isnan rule to detectNumber.NaN(fixes #14715) (#14718) (Nitin Kumar)b08170bUpdate: Implement FlatConfigArray (refs #13481) (#14321) (Nicholas C. Zakas)f113cddChore: upgrade eslint-plugin-eslint-plugin (#14738) (薛定谔的猫)1b8997aDocs: Fix getRulesMetaForResults link syntax (#14723) (Brandon Mills)aada733Docs: fix two broken links (#14726) (Sam Chen)8972529Docs: Update README team and sponsors (ESLint Jenkins)bfbfe5cNew: Add only to RuleTester (refs eslint/rfcs#73) (#14677) (Brandon Mills)c2cd7b4New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716) (Nicholas C. Zakas)eea7e0dChore: remove duplicate code (#14719) (Nitin Kumar)6a1c7a0Fix: allow fallthrough comment inside block (fixes #14701) (#14702) (Kevin Gibbons)a47e5e3Docs: Add Mega-Linter to the list of integrations (#14707) (Nicolas Vuillamy)353ddf9Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699) (薛定谔的猫)757c495Chore: add some rules to eslint-config-eslint (#14692) (薛定谔的猫)c93a222Docs: fix a broken link (#14697) (Sam Chen)655c118Sponsors: Sync README with website (ESLint Jenkins)e2bed2eSponsors: Sync README with website (ESLint Jenkins)8490fb4Sponsors: Sync README with website (ESLint Jenkins)ddbe877Sponsors: Sync README with website (ESLint Jenkins)Package name: express
What's Changed
Full Changelog: 4.19.0...4.19.1
What's Changed
New Contributors
Full Changelog: 4.18.3...4.19.0
Main Changes
Other Changes