Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Fix for 1 vulnerabilities #9

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Mar 7, 2020

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
Yes No Known Exploit
Commit messages
Package name: eslint The new version differs by 250 commits.
  • a7985a6 6.0.0
  • be74dd9 Build: changelog update for 6.0.0
  • 81aa06b Upgrade: espree@6.0.0 (#11869)
  • 5f022bc Fix: no-else-return autofix produces name collisions (fixes #11069) (#11867)
  • ded9548 Fix: multiline-comment-style incorrect message (#11864)
  • cad074d Docs: Add JSHint W047 compat to no-floating-decimal (#11861)
  • 41f6304 Upgrade: sinon (#11855)
  • 167ce87 Chore: remove unuseable profile command (#11854)
  • c844c6f Fix: max-len properly ignore trailing comments (fixes #11838) (#11841)
  • 1b5661a Fix: no-var should not fix variables named 'let' (fixes #11830) (#11832)
  • 4d75956 Build: CI with Azure Pipelines (#11845)
  • 1db3462 Chore: rm superfluous argument & fix perf-multifiles-targets (#11834)
  • c57a4a4 Upgrade: @babel/polyfill => core-js v3 (#11833)
  • 65faa04 Docs: Clarify prefer-destructuring array/object difference (fixes #9970) (#11851)
  • 81c3823 Fix: require-atomic-updates reports parameters (fixes #11723) (#11774)
  • aef8ea1 Sponsors: Sync README with website
  • 4f48f5a 6.0.0-rc.0
  • 6bad650 Build: changelog update for 6.0.0-rc.0
  • f403b07 Update: introduce minKeys option to sort-keys rule (fixes #11624) (#11625)
  • 87451f4 Fix: no-octal should report NonOctalDecimalIntegerLiteral (fixes #11794) (#11805)
  • e4ab053 Update: support "bigint" in valid-typeof rule (#11802)
  • e0fafc8 Chore: removes unnecessary assignment in loop (#11780)
  • 20908a3 Docs: removed '>' prefix from from docs/working-with-rules (#11818)
  • 1c43eef Sponsors: Sync README with website

See the full diff

Package name: webpack The new version differs by 79 commits.
  • 25bccd4 4.29.0
  • 6389e41 Merge pull request #8642 from webpack/memory/future-emit-assets
  • 6e383cf make test for Source.buffer more strict
  • aaf85db add output.futureEmitAssets
  • 03ffa48 Merge pull request #8639 from webpack/memory/limit-parallelism
  • 2b2c17f Merge pull request #8598 from kiliancs/acorn6
  • fdb6b13 4.28.4
  • 80514cc Add ts declarations
  • 78abf04 Use eachLimit instead even though forEachLimit apears to be an alias...
  • 9cb4225 forEach to forEachLimit
  • ef67132 Upgrade acorn to v6
  • 3e147e6 Merge pull request #8588 from hulkish/faster-statement-type-check
  • 2a04dee added ExportAllDeclaration, fixed fn signature
  • baf0aa1 Merge pull request #8581 from DanielRuf/tests/increase-jest-timeout
  • 41b6887 use faster statement type check
  • af01643 Increase Jest timeout for profiling plugin test
  • ccc7db7 Merge pull request #8401 from shahkashani/fix-for-issue-8398
  • 2e3e2a0 Merge pull request #8544 from chuckdumont/work
  • 69dea22 Merge pull request #8573 from hulkish/fix-minimizer-fn
  • 983c261 4.28.3
  • 6240cf6 added config test case for optimization.minimizer
  • d8ab512 Merge pull request #8565 from NaviMarella/ProfilingPlugin_8503
  • 510abf7 Merge pull request #8565 from NaviMarella/ProfilingPlugin_8503
  • 0128118 Modified Tests as suggested.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant