Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Security upgrade marked from 0.3.19 to 1.1.1 #14

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Regular Expression Denial of Service (ReDoS )
SNYK-JS-MARKED-584281
Yes No Known Exploit
Commit messages
Package name: marked The new version differs by 250 commits.
  • 1ad8e69 Merge pull request #1731 from UziTech/release-1.1.1
  • 7e17526 1.1.1
  • 7fbee6e Merge pull request #1730 from UziTech/update-deps
  • 6f7522f Merge pull request #1729 from UziTech/quick-ref
  • f8024eb remove ending slash
  • 524ae66 remove ending slash
  • 0d6e056 build
  • 04ac593 update dev deps
  • f36f676 🗜️ build [skip ci]
  • dddf9ae Merge pull request #1686 from calculuschild/EmphasisFixes
  • 6b729ed Merge branch 'EmphasisFixes' of https://github.com/calculuschild/marked into EmphasisFixes
  • e27e6f9 Sorted strong and em into sub-objects
  • a761316 Merge pull request #1726 from UziTech/show-rules
  • f8193ed add npm run rules
  • ad720c1 Make emEnd const
  • 1fb141d Make strEnd const
  • 226bbe7 Lint
  • cc778ad Removed redundancy in "startEM" check
  • 211b9f9 Removed Lookbehinds
  • 982b57e Merge pull request #1720 from vassudanagunta/docs-patch-1
  • 2a847e6 clarify level of support for Markdown flavors
  • bd4f8c4 Fix unrestricted "any character" for REDOS
  • 4e7902e Gaaaah lint
  • 4db32dc Links are masked only once per inline string

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MARKED-584281
@codecov
Copy link

codecov bot commented Jul 28, 2020

Codecov Report

Merging #14 into master will decrease coverage by 1.42%.
The diff coverage is n/a.

Impacted file tree graph

@@             Coverage Diff              @@
##             master      #14      +/-   ##
============================================
- Coverage     62.16%   60.73%   -1.43%     
  Complexity      315      315              
============================================
  Files            32       32              
  Lines          1221     1006     -215     
============================================
- Hits            759      611     -148     
+ Misses          462      395      -67     
Impacted Files Coverage Δ Complexity Δ
app/Policies/CategoryPolicy.php 47.82% <0.00%> (-15.14%) 11.00% <0.00%> (ø%)
app/Policies/UserPolicy.php 61.53% <0.00%> (-13.47%) 14.00% <0.00%> (ø%)
app/Policies/ArticlePolicy.php 47.82% <0.00%> (-9.32%) 13.00% <0.00%> (ø%)
app/Http/Response/MessagePackResponse.php 79.16% <0.00%> (-9.30%) 9.00% <0.00%> (ø%)
app/Exceptions/Handler.php 83.33% <0.00%> (-4.17%) 4.00% <0.00%> (ø%)
app/Http/Controllers/Api/ArticleController.php 61.26% <0.00%> (-4.10%) 35.00% <0.00%> (ø%)
app/Providers/AuthServiceProvider.php 87.50% <0.00%> (-2.50%) 2.00% <0.00%> (ø%)
app/Http/Controllers/Api/CategoryController.php 64.00% <0.00%> (-1.17%) 28.00% <0.00%> (ø%)
app/Http/Controllers/Api/AuthController.php 76.00% <0.00%> (-1.05%) 9.00% <0.00%> (ø%)
app/Http/Controllers/Api/RoleController.php 76.47% <0.00%> (-0.81%) 7.00% <0.00%> (ø%)
... and 18 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5a7356f...de85feb. Read the comment docs.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant