Skip to content
This repository has been archived by the owner on Nov 16, 2020. It is now read-only.

[Snyk] Security upgrade i18next from 19.4.2 to 19.6.0 #283

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-I18NEXT-585930
No Proof of Concept
Commit messages
Package name: i18next The new version differs by 56 commits.
  • 8c63160 19.6.0
  • 2a6d7e7 changelog
  • 26d5719 introduce new option skipOnVariables to fix #1479 (#1483)
  • 44c2e76 fix prototype pollution (#1482)
  • 8a3b93b 19.5.6
  • 1b32fc1 fix local usage of nsSeparator option
  • c9be7ad 19.5.5
  • 41431ba changelog
  • 360c8a9 fix nesting recursion #1479 (#1480)
  • 2108da8 additional interpolation with nesting test case
  • 457768b 19.5.4
  • 93f17d9 changelog
  • 9be2ed6 fix type declarion of exposed EventEmitter#off methods (#1460)
  • c883ddb fix: getDataByLanguage typings & test (#1472)
  • 4bfa7a3 19.5.3
  • 39b09ed changelog
  • e3ad1ad fix: Macedonian plural formula - *11 (11, 111, 211, 311, 58711...) is plural (#1476)
  • 72c5009 19.5.2
  • 6dc82bb changelog
  • 1b78398 fix nesting interpolation with prepended namespace, fixes #1474 (#1475)
  • 67e2569 19.5.1
  • 0e1ba26 rebuild
  • 80a3810 Merge pull request #1471 from i18next/fix-getBestMatchFromCodes
  • ba5c120 getBestMatchFromCodes: use fallbackLng if nothing found, fixes #1470

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

# for free to subscribe to this conversation on GitHub. Already have an account? #.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant