New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

[Snyk] Upgrade pacote from 13.0.3 to 13.1.1 #2

Open

kevinjm39 wants to merge 1 commit into latest from snyk-upgrade-1ea33e3966d5205302933b0db7788736

Owner

kevinjm39 commented May 1, 2022

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade pacote from 13.0.3 to 13.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 5 versions ahead of your current version.
The recommended version was released 25 days ago, on 2022-04-06.

Release notes

Package name: pacote

13.1.1 - 2022-04-06
13.1.1 (2022-04-06)

Dependencies
- bump npm-packlist from 4.0.0 to 5.0.0 (#159) (d7f07d6)
13.1.0 - 2022-04-05
13.1.0 (2022-04-05)

Features
- add option to not replace magic registry host (#143) (f519cf4)
13.0.6 - 2022-04-05
13.0.6 (2022-04-05)

Bug Fixes
- replace deprecated String.prototype.substr() (e307e17)
Dependencies
- bump @ npmcli/promise-spawn from 1.3.2 to 3.0.0 (#154) (9a0ec63)
- bump ssri from 8.0.1 to 9.0.0 (#157) (0993b18)
13.0.5 - 2022-03-15
Dependencies
- bump read-package-json from 4.1.2 to 5.0.0 (#138) (f28c891)
13.0.4 - 2022-03-14
Dependencies
- bump cacache from 15.3.0 to 16.0.0 (#136) (ed3a069)
- bump npm-packlist from 3.0.0 to 4.0.0 (#132) (1634e9d)
- update @ npmcli/run-script requirement from ^3.0.0 to ^3.0.1 (#130) (7c84792)
- update npm-registry-fetch requirement from ^13.0.0 to ^13.0.1 (#129) (d639ed6)
- update read-package-json requirement from ^4.1.1 to ^4.1.2 (#134) (31093a1)
13.0.3 - 2022-02-24
Bug Fixes
- ignore integrity values for git dependencies (#123) (3417714)
Dependencies
- bump @ npmcli/run-script from 2.0.0 to 3.0.0 (#124) (6026b73)

from pacote GitHub release notes

Commit messages

Package name: pacote

923bd2f chore(main): release 13.1.1 (doc: add npm add as alias to npm install npm/cli#160)
d7f07d6 deps: bump npm-packlist from 4.0.0 to 5.0.0 (doc: add --audit-level param npm/cli#159)
9951dd6 chore(main): release 13.1.0 (stars: Fix typo in error message npm/cli#158)
f519cf4 feat: add option to not replace magic registry host (doc: add preferDev and update preferGlobal npm/cli#143)
c11dce6 chore(main): release 13.0.6 (Dependencies updated by Dependabot npm/cli#155)
0993b18 deps: bump ssri from 8.0.1 to 9.0.0 (package-lock.json no longer created when there is no package.json npm/cli#157)
686e7ab chore: update snapshot
e307e17 fix: replace deprecated String.prototype.substr()
9a0ec63 deps: bump @ npmcli/promise-spawn from 1.3.2 to 3.0.0 (Print out tar version when the flag is supported npm/cli#154)
2cd5612 chore: bump @ npmcli/template-oss from 3.2.0 to 3.2.2 (Revert "install/dedupe: fix hoisting of packages with peerDeps (#147)" npm/cli#152)
7d4fb43 chore: bump tap from 15.2.3 to 16.0.1 (access: ls-collaborators is ok with non-scoped npm/cli#151)
837221d chore: bump @ npmcli/template-oss from 2.9.2 to 3.2.0 (6.8.0 npm/cli#150)
794e0f0 chore: fix tests for hosted-git-info (doc: update package.json docs to include repository.directory details npm/cli#140)
e104610 chore: release 13.0.5 (Check run script existence with undefined npm/cli#139)
f28c891 deps: bump read-package-json from 4.1.2 to 5.0.0 (Reduce work to test if executable ends with a 'g'. npm/cli#138)
414d8e2 chore: release 13.0.4 (profile: update profile to support new npm-profile API npm/cli#131)
31093a1 deps: update read-package-json requirement from ^4.1.1 to ^4.1.2 (docs: scoped names can begin with '.' & '_' npm/cli#134)
ed3a069 deps: bump cacache from 15.3.0 to 16.0.0 (feat: new npm-cli feature to install missing dependencies npm/cli#136)
1634e9d deps: bump npm-packlist from 3.0.0 to 4.0.0 (error-message: strip version info from pkg on E404 npm/cli#132)
df660d1 chore: update @ npmcli/template-oss requirement from ^2.8.1 to ^2.9.2 (audit: report any errors above 400 as potentially not supporting audit npm/cli#128)
d639ed6 deps: update npm-registry-fetch requirement from ^13.0.0 to ^13.0.1 (deps: remove tink experiments npm/cli#129)
7c84792 deps: update @ npmcli/run-script requirement from ^3.0.0 to ^3.0.1 (refactor: for readability npm/cli#130)
17d45f0 chore: update @ npmcli/template-oss requirement from ^2.7.1 to ^2.8.1 (misc: replace ronn with marked-man npm/cli#126)

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


          fix: upgrade pacote from 13.0.3 to 13.1.1

421314f

Snyk has created this PR to upgrade pacote from 13.0.3 to 13.1.1.

See this package in npm:
https://www.npmjs.com/package/pacote

See this project in Snyk:
https://app.snyk.io/org/kevinmoultry38/project/5d5572a0-fa6c-4540-80aa-d2400bbd165a?utm_source=github&utm_medium=referral&page=upgrade-pr

# for free to join this conversation on GitHub. Already have an account? # to comment

Labels

None yet