Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Upgrade ajv from 5.5.2 to 8.11.0 #36

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade ajv from 5.5.2 to 8.11.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 97 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2022-03-22.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-AJV-584908
619/1000
Why? Has a fix available, CVSS 8.1
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: ajv
  • 8.11.0 - 2022-03-22

    Use root schemaEnv when resolving references in oneOf (#1901, @ asprouse)

    Only use equal function in generated code when it is used (#1922, @ bhvngt)

  • 8.10.0 - 2022-02-04

    uriResolver option (@ zekth, #1862)

  • 8.9.0 - 2022-01-15

    Option code.esm to generate ESM exports for standalone validation functions (@ rehanvdm, #1861)
    Support discriminator keyword with $ref in oneOf subschemas (@ dfeufel, #1815)

  • 8.8.2 - 2021-11-21

    Use full RegExp string (with flags) as cache key, related to ajv-validator/ajv-keywords#220

  • 8.8.1 - 2021-11-16

    Fix minContains: 0 (#1819)

  • 8.8.0 - 2021-11-13

    Fix browser bundles in cdnjs
    regExp option allowing to specify alternative RegExp engine, e.g. re2 (@ efebarlas)

  • 8.7.1 - 2021-11-08

    Publish Ajv bundle for JSON Schema 2020-12 to cdnjs.com

  • 8.7.0 - 2021-11-08

    Update JSON Schema Test Suite.
    Change minContains: 0 now correctly allows empty array.

  • 8.6.3 - 2021-09-12

    Fix $ref resolution for schemas without $id (@ rbuckton, #1725)
    Support standalone module import from ESM modules without using .default property (@ bhvngt, #1757)
    Update code for breaking TS change - error in catch has type unknown (#1760)

  • 8.6.2 - 2021-07-15

    Fix JTD serialiser (#1691)

  • 8.6.1 - 2021-07-04
  • 8.6.0 - 2021-06-06
  • 8.5.0 - 2021-05-20
  • 8.4.0 - 2021-05-14
  • 8.3.0 - 2021-05-09
  • 8.2.0 - 2021-04-27
  • 8.1.0 - 2021-04-11
  • 8.0.5 - 2021-04-02
  • 8.0.4 - 2021-04-02
  • 8.0.3 - 2021-04-01
  • 8.0.2 - 2021-03-31
  • 8.0.1 - 2021-03-27
  • 8.0.0 - 2021-03-27
  • 8.0.0-beta.4 - 2021-03-23
  • 8.0.0-beta.3 - 2021-03-21
  • 8.0.0-beta.2 - 2021-03-16
  • 8.0.0-beta.1 - 2021-03-15
  • 8.0.0-beta.0 - 2021-03-13
  • 7.2.4 - 2021-03-26
  • 7.2.3 - 2021-03-20
  • 7.2.2 - 2021-03-20
  • 7.2.1 - 2021-03-07
  • 7.2.0 - 2021-03-07
  • 7.1.1 - 2021-02-17
  • 7.1.0 - 2021-02-11
  • 7.0.4 - 2021-02-01
  • 7.0.3 - 2021-01-02
  • 7.0.2 - 2020-12-19
  • 7.0.1 - 2020-12-16
  • 7.0.0 - 2020-12-15
  • 7.0.0-rc.5 - 2020-12-14
  • 7.0.0-rc.4 - 2020-12-14
  • 7.0.0-rc.3 - 2020-12-14
  • 7.0.0-rc.2 - 2020-12-13
  • 7.0.0-rc.1 - 2020-12-09
  • 7.0.0-rc.0 - 2020-12-06
  • 7.0.0-beta.9 - 2020-12-02
  • 7.0.0-beta.8 - 2020-11-29
  • 7.0.0-beta.7 - 2020-11-22
  • 7.0.0-beta.6 - 2020-11-16
  • 7.0.0-beta.5 - 2020-11-15
  • 7.0.0-beta.4 - 2020-11-10
  • 7.0.0-beta.3 - 2020-11-05
  • 7.0.0-beta.2 - 2020-10-24
  • 7.0.0-beta.1 - 2020-10-10
  • 7.0.0-beta.0 - 2020-09-23
  • 7.0.0-alpha.1 - 2020-09-16
  • 7.0.0-alpha.0 - 2020-09-15
  • 6.12.6 - 2020-10-10
  • 6.12.5 - 2020-09-13
  • 6.12.4 - 2020-08-15
  • 6.12.3 - 2020-07-04
  • 6.12.2 - 2020-04-19
  • 6.12.1 - 2020-04-18
  • 6.12.0 - 2020-02-22
  • 6.11.0 - 2020-01-18
  • 6.10.2 - 2019-07-14
  • 6.10.1 - 2019-07-06
  • 6.10.0 - 2019-03-03
  • 6.9.2 - 2019-02-22
  • 6.9.1 - 2019-02-10
  • 6.9.0 - 2019-02-09
  • 6.8.1 - 2019-02-02
  • 6.8.0 - 2019-02-02
  • 6.7.0 - 2019-01-13
  • 6.6.2 - 2018-12-16
  • 6.6.1 - 2018-11-29
  • 6.6.0 - 2018-11-29
  • 6.5.5 - 2018-11-04
  • 6.5.4 - 2018-09-23
  • 6.5.3 - 2018-08-17
  • 6.5.2 - 2018-06-30
  • 6.5.1 - 2018-06-10
  • 6.5.0 - 2018-05-08
  • 6.4.0 - 2018-03-25
  • 6.3.0 - 2018-03-17
  • 6.2.1 - 2018-03-03
  • 6.2.0 - 2018-02-26
  • 6.1.1 - 2018-01-30
  • 6.1.0 - 2018-01-26
  • 6.0.1 - 2018-01-11
  • 6.0.0 - 2018-01-07
  • 6.0.0-rc.1 - 2017-12-03
  • 6.0.0-rc.0 - 2017-11-26
  • 6.0.0-beta.2 - 2017-11-12
  • 6.0.0-beta.1 - 2017-11-06
  • 6.0.0-beta.0 - 2017-11-06
  • 5.5.2 - 2017-12-16
from ajv GitHub release notes
Commit messages
Package name: ajv
  • c067d6d 8.11.0
  • a5119ef Update limitProperties.ts (#1918)
  • 3ec588b Fix some relative links (#1900)
  • 09f67f2 fix: emit equal when needed - alternative to #1853 (#1922)
  • bd7cf15 Fix KeywordCxt links (#1931)
  • 95b15b6 Use root schemaEnv when resolving references in oneOf (#1901)
  • 6e53e43 doc: add uriResolver (#1896)
  • a27f782 8.10.0
  • d0be809 docs: fix typo in discriminator documentation (#1885)
  • b3e0cb1 docs: Fix typo (#1890)
  • 0e47ab4 feat: add uriresolver option (#1862)
  • 8b993dc add badge
  • 979d46b 8.9.0
  • e7bc009 resolve references before validating the discriminator (#1815)
  • ec96c87 Updated standalone documentation and add new examples (#1866)
  • f2e590a Fix broken named anchor link (#1870)
  • d632539 Update getting-started.md (#1871)
  • 418cd0f Add option to generate ESM exports instead of CJS (#1523) (#1861)
  • d21fa70 build(deps-dev): bump @ types/node from 16.11.14 to 17.0.0 (#1851)
  • c3e203c Update ReDoS section of security.md to accommodate #1683 (#1828)
  • 43ed019 add logo
  • 84d0a57 Fix minor typo in json-schema.md (#1843)
  • e9df4c1 doc: fix typo (#1847)
  • c7bf889 fix prettier, add logo (#1848)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant