Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Upgrade: , , , , #20

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

X-oss-byte
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@crowdin/cli
from 3.13.0 to 3.19.4 | 11 versions ahead of your current version | 4 months ago
on 2024-05-16
@docusaurus/core
from 2.4.1 to 2.4.3 | 1 version ahead of your current version | a year ago
on 2023-09-20
@docusaurus/plugin-client-redirects
from 2.4.1 to 2.4.3 | 1 version ahead of your current version | a year ago
on 2023-09-20
@docusaurus/plugin-content-docs
from 2.4.1 to 2.4.3 | 1 version ahead of your current version | a year ago
on 2023-09-20
@docusaurus/preset-classic
from 2.4.1 to 2.4.3 | 1 version ahead of your current version | a year ago
on 2023-09-20

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909
432 Proof of Concept
Release notes
Package name: @crowdin/cli from @crowdin/cli GitHub release notes
Package name: @docusaurus/core
  • 2.4.3 - 2023-09-20
  • 2.4.1 - 2023-05-15
from @docusaurus/core GitHub release notes
Package name: @docusaurus/plugin-client-redirects
  • 2.4.3 - 2023-09-20
  • 2.4.1 - 2023-05-15
from @docusaurus/plugin-client-redirects GitHub release notes
Package name: @docusaurus/plugin-content-docs
  • 2.4.3 - 2023-09-20
  • 2.4.1 - 2023-05-15
from @docusaurus/plugin-content-docs GitHub release notes
Package name: @docusaurus/preset-classic
  • 2.4.3 - 2023-09-20
  • 2.4.1 - 2023-05-15
from @docusaurus/preset-classic GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"","from":"crowdin/cli","to":"crowdin/cli"},{"name":"","from":"docusaurus/core","to":"docusaurus/core"},{"name":"","from":"docusaurus/plugin-client-redirects","to":"docusaurus/plugin-client-redirects"},{"name":"","from":"docusaurus/plugin-content-docs","to":"docusaurus/plugin-content-docs"},{"name":"","from":"docusaurus/preset-classic","to":"docusaurus/preset-classic"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-TAR-6476909","issue_id":"SNYK-JS-TAR-6476909","priority_score":432,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"6.5","score":325},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Uncontrolled Resource Consumption ('Resource Exhaustion')"}],"prId":"9b841986-17e7-4733-a12a-0c73f7bc9341","prPublicId":"9b841986-17e7-4733-a12a-0c73f7bc9341","packageManager":"npm","priorityScoreList":[432],"projectPublicId":"cc016abe-11ad-4eb5-b3ac-749106498b4c","projectUrl":"https://app.snyk.io/org/sammytezzy/project/cc016abe-11ad-4eb5-b3ac-749106498b4c?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-TAR-6476909"],"upgradeInfo":{"versionsDiff":11,"publishedDate":"2024-05-16T09:06:29.503Z"},"vulns":["SNYK-JS-TAR-6476909"]}'

Snyk has created this PR to upgrade:
  - @crowdin/cli from 3.13.0 to 3.19.4.
    See this package in npm: https://www.npmjs.com/package/@crowdin/cli
  - @docusaurus/core from 2.4.1 to 2.4.3.
    See this package in npm: https://www.npmjs.com/package/@docusaurus/core
  - @docusaurus/plugin-client-redirects from 2.4.1 to 2.4.3.
    See this package in npm: https://www.npmjs.com/package/@docusaurus/plugin-client-redirects
  - @docusaurus/plugin-content-docs from 2.4.1 to 2.4.3.
    See this package in npm: https://www.npmjs.com/package/@docusaurus/plugin-content-docs
  - @docusaurus/preset-classic from 2.4.1 to 2.4.3.
    See this package in npm: https://www.npmjs.com/package/@docusaurus/preset-classic

See this project in Snyk:
https://app.snyk.io/org/sammytezzy/project/cc016abe-11ad-4eb5-b3ac-749106498b4c?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

stackblitz bot commented Sep 9, 2024

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

Copy link

changeset-bot bot commented Sep 9, 2024

⚠️ No Changeset found

Latest commit: 0317a59

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants