[Snyk] Upgrade: , google-protobuf, long, postcss #82
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @protobuf-ts/protoc from 2.7.0 to 2.9.4.
See this package in npm: https://www.npmjs.com/package/@protobuf-ts/protoc
- google-protobuf from 3.19.0 to 3.21.4.
See this package in npm: https://www.npmjs.com/package/google-protobuf
- long from 5.2.1 to 5.2.3.
See this package in npm: https://www.npmjs.com/package/long
- postcss from 8.4.24 to 8.4.41.
See this package in npm: https://www.npmjs.com/package/postcss
See this project in Snyk:
https://app.snyk.io/org/sammytezzy/project/53a363e1-ba9e-4454-87bb-e9797fc82baa?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@protobuf-ts/protoc
from 2.7.0 to 2.9.4 | 9 versions ahead of your current version | 6 months ago
on 2024-03-13
google-protobuf
from 3.19.0 to 3.21.4 | 13 versions ahead of your current version | 2 months ago
on 2024-07-15
long
from 5.2.1 to 5.2.3 | 2 versions ahead of your current version | a year ago
on 2023-04-16
postcss
from 8.4.24 to 8.4.41 | 17 versions ahead of your current version | a month ago
on 2024-08-05
Issues fixed by the recommended upgrade:
SNYK-JS-POSTCSS-5926692
Release notes
Package name: @protobuf-ts/protoc
-
2.9.4 - 2024-03-13
- Extend Object prototype for message instances by @ erichiggins0 in #618
- Fix formatting typo by @ dimo414 in #630
- Update go version for twirp compat tests by @ timostamm in #636
- @ erichiggins0 made their first contribution in #618
-
2.9.3 - 2023-12-07
- Fix
-
2.9.2 - 2023-12-05
- Update MANUAL.md by @ QingfengLee in #575
- Swap "he" for "they" in example by @ dimo414 in #602
- ref Object from globalThis in speed-optimized code for serializing map fields by @ lesomnus in #611
- Improve from Binary/Json/Partial performance by roughly 30% by @ jcready in #582
- @ QingfengLee made their first contribution in #575
- @ dimo414 made their first contribution in #602
- @ lesomnus made their first contribution in #611
-
2.9.1 - 2023-07-31
- Make protobuf-ts as conformant as protobuf-es by @ jcready in #567
- Make FieldMask JSON read/write (snake_case <-> camelCase) conforming by @ jcready in #552
- Test pb-long without BI support and fix found issues by @ jcready in #573
- Remove Angular support by @ timostamm in #522
- Update from Node 14.5.0 to Node 16.20.0 by @ timostamm in #521
- CI update follow-ups by @ timostamm in #523
- Remove CHANGELOG.md in favor of GitHub release notes by @ timostamm in #524
- Thin out test fixtures by @ timostamm in #525
- Migrate reflectionCreate() tests by @ timostamm in #526
- Move conformance tests to own package by @ timostamm in #529
- Remove validate.proto by @ timostamm in #530
- Migrate reflectionEquals tests by @ smaye81 in #527
- Migrate ReflectionTypeCheck by @ smaye81 in #528
- Remove fixtures references by @ smaye81 in #532
- Fix CONTRIBUTING by @ smaye81 in #534
- Fix typo in gRPC client instructions by @ benmcmorran in #536
- Remove outdated documentation about RPC call cancel in MANUAL.md by @ timostamm in #546
- Improve IDE quality of life using tsconfig paths by @ jcready in #574
- @ benmcmorran made their first contribution in #536
-
2.9.0 - 2023-04-24
- feat: update arch for fetching binary by @ daboxu in #517
- Use conformance runner binary for conformance tests by @ smaye81 in #520
- @ daboxu made their first contribution in #517
- @ smaye81 made their first contribution in #520
-
2.8.3 - 2023-03-20
- plugin: fix generated fromJson for google.protobuf.Value #500
-
2.8.2 - 2022-11-16
- Avoid overwriting a set oneof field in target with an unset oneof field in source #395
-
2.8.1 - 2022-09-07
- fix for int64toString #367
-
2.8.0 - 2022-08-17
-
-
-
-
-
-
2.7.0 - 2022-06-16
- Added
-
-
-
from @protobuf-ts/protoc GitHub release notesWhat's Changed
New Contributors
Full Changelog: v2.9.3...v2.9.4
What's Changed
messagePrototypeforexactOptionalProperties: trueby @ jcready in #615Full Changelog: v2.9.2...v2.9.3
What's Changed
New Contributors
Full Changelog: v2.9.1...v2.9.2
What's Changed
Repository and documentation cleanup 🧹
New Contributors
Full Changelog: v2.9.0...v2.9.1
What's Changed
New Contributors
Full Changelog: v2.8.3...v2.9.0
Bug fixes:
Thanks to @ hugebdu for the contribution!
Bug fixes:
Thanks to @ jcready for the contribution!
This release is available on the BSR.
Bug fixes:
Thanks to @ tpcstld and @ ajpalkovic for the investigation and contributing a fix!
This release is available on the BSR.
Bug fixes:
grpcweb-transport: fix handling responses with empty body and status in headers #331
Thanks to @ eKazim for the contribution!
Make repeated field merging consistent #335
Thanks to @ jcready for the contribution!
New features and improvements:
Relax constraints on runtime-angular to include Angular 14 #358
Thanks to @ ColinLaws for the contribution!
Clarify mergePartial() behavior in the documentation #361
Do not strip byte-order mark when decoding text from binary #362
Thanks to @ kivancguckiran and @ jcready for the investigation!
This release is available on the BSR.
New Features:
force_disable_servicesoption to protobuf-ts/plugin for disabling service metadata generation, see #268Thanks to @ ColinLaws for the contribution!
Bug fixes:
Guard access of response.type to support Cloudflare Workers, see #321
Thanks to @ mikeylemmon for the fix!
find protoc in path also in windows, see #334
Thanks to @ tannera for the fix!
Update baseURL in example, see #333
Thanks to @ GRB3NW for the fix!
This release is available on the BSR.
Package name: google-protobuf
-
3.21.4 - 2024-07-15
-
3.21.2 - 2022-10-10
-
3.21.1 - 2022-10-07
- Enable Closure's advanced optimization mode by default. This should reduce code size (#124).
- Replace goog.testing.asserts in tests with Jasmine expectations (#136).
- Bring in the subset of the goog.asserts we use as jspb.asserts. This code retains an Apache 2.0 license.
- Fix decoding of signed varint32s (#31).
- Add license files to NPM package.
-
3.21.0 - 2022-07-28
-
3.20.1 - 2022-04-21
-
3.20.1-rc.1 - 2022-04-06
-
3.20.0 - 2022-04-01
-
3.20.0-rc.2 - 2022-03-17
-
3.20.0-rc.1 - 2022-03-04
-
3.19.4 - 2022-01-28
-
3.19.3 - 2022-01-11
-
3.19.2 - 2022-01-05
-
3.19.1 - 2021-10-29
-
3.19.0 - 2021-10-20
from google-protobuf GitHub release notesRelease to fix bazel build layering issue in 3.21.3.
This is a hotfix release for #141
This will also be our first release to have cross-compiled protoc-gen-js binaries. Please note that they use dynamic linking (similar to the protobuf protoc releases).
First release of protobuf-javascript as a standalone project.
This release mostly consists of BUILD and documentation fixes to account for new repository.
Various bug fixes.
Package name: long
-
5.2.3 - 2023-04-16
- Reorder module exports in package.json (#122) (cd84ddd)
-
5.2.2 - 2023-04-16
- Separate ESM/CJS TS definitions (#121) (453de51)
-
5.2.1 - 2022-11-03
- Add
from long GitHub release notesBug fixes
Bug fixes
Bug fixes
typestoexportsin package.json (#111) (3cea40d)Package name: postcss
-
8.4.41 - 2024-08-05
- Fixed types (by @ nex3 and @ querkmachine).
- Cleaned up RegExps (by @ bluwy).
-
8.4.40 - 2024-07-24
- Moved to getter/setter in nodes types to help Sass team (by @ nex3).
-
8.4.39 - 2024-06-29
- Fixed
-
8.4.38 - 2024-03-20
- Fixed
-
8.4.37 - 2024-03-19
- Fixed
-
8.4.36 - 2024-03-17
- Fixed
-
8.4.35 - 2024-02-07
-
8.4.34 - 2024-02-05
-
8.4.33 - 2024-01-04
-
8.4.32 - 2023-12-02
-
8.4.31 - 2023-09-28
-
8.4.30 - 2023-09-18
-
8.4.29 - 2023-08-29
-
8.4.28 - 2023-08-15
-
8.4.27 - 2023-07-21
-
8.4.26 - 2023-07-13
-
8.4.25 - 2023-07-06
-
8.4.24 - 2023-05-28
from postcss GitHub release notesCssSyntaxErrortypes (by @ romainmenke).endIndex: 0in errors and warnings (by @ romainmenke).original.column are not numberserror in another case.original.column are not numberserror on broken previous source map.Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: