Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 2 vulnerabilities #136

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 2 vulnerabilities #136

wants to merge 1 commit into from

Conversation

negue
Copy link
Owner

@negue negue commented May 15, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		 Uncontrolled resource consumption
SNYK-JS-BRACES-6838727		 Yes No Known Exploit
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		 Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @nx/angular The new version differs by 250 commits.
  • 3b182e4 fix(misc): fix optional branch tracking on ci pipeline (#22652)
  • 4fdf862 fix(webpack): support standard webpack config with @ nx/webpack:dev-server (#22660)
  • 92a2cc7 fix(nx-dev): Update urls that are 404 (#22653)
  • b0b424c docs(nx-dev): Add feedback CTA (#22455)
  • d9bb051 docs(nx-cloud): remove server api reference (#22654)
  • 7f00927 fix(testing): app generators should create correct e2e config at generation time (#22565)
  • 2149fa2 fix(vite): ensure cache is created correctly for separate vite and vitest config files #22244 (#22618)
  • 6db0563 chore(repo): enable dte v2 (#22651)
  • 270788e fix(webpack): bring back previous SVG and SVGR behavior for React projects (#22628)
  • 12afa20 fix(release): respect root .npmrc registry settings for publishing
  • 902da5d fix(js): update jest snapshot after vite-plugin-dts bump (#22621)
  • 1530965 fix(testing): fix playwright executor uiPort option schema (#22610)
  • 9419bad fix(core): do not assume workspace inputs cause all projects to be af… (#22573)
  • 5f255c5 docs(core): editor setup in getting started (#22416)
  • 9e13c85 feat(vite): migrate to latest vite-plugin-dts (#22614)
  • 50cf7e3 docs(misc): remove incorrect and not needed targetDefaults option from snippet (#22533)
  • 910491d docs(misc): add missing initial package.json content to monorepo migration recipe (#22541)
  • afc324d docs(angular): update ng add section in angular cli comparison (#22542)
  • de2df18 docs(testing): improve cypress plugin overview page (#22432)
  • 3e669f0 docs(core): plugin task splitting configuration (#22423)
  • 1a82dd2 docs(core): link related docs to inferred tasks (#22555)
  • 814d773 fix(angular): fix @ nx/angular/src/utils entry point (#22609)
  • 5d5e88d fix(angular): respect skipPackageJson correctly in library generator (#22608)
  • 2aed31f fix(angular): prevent false positive validation due to option default value in dev-server executor (#22606)

See the full diff

Package name: @nx/jest The new version differs by 159 commits.
  • e62f0b1 chore(repo): update nx to 16.9.0-rc.1 (#19302)
  • 2b84f10 bugfix(react-native): fix run-ios failed on 2nd run (#19287)
  • 295ec47 fix(core): do not attempt to publish private npm packages (#19299)
  • b0e48a6 chore(repo): update nx to 16.9.0-rc.0 (#19296)
  • d1fe398 docs(core): packages to api (#19281)
  • 94d8356 fix(vite): provide correct root directory when building a root project (#19298)
  • ca85d26 fix(core): unregister in-process ts transpilers when projectGraph is created (#19187)
  • 9f0e9c8 chore(core): nx plugin submission nx-gcp-cache (#18172)
  • e9eb10f chore(core): nx plugin submission @ jnxplus/nx-maven (#19081)
  • f2edb29 chore(core): remove deprecated plugins from approved-plugins.json file (#19082)
  • c18c0b2 feat(misc): prepend cwd to directory in project generators when using as-provided format (#19227)
  • 78f7f9f fix(nextjs): Add missing env to base Nx Env (#19201)
  • 903c4fe fix(js): update generated .swcrc file to align with @ swc/[email protected] (#19214)
  • 75890f5 chore(repo): remove dep from nx-dev-e2e -> devkit (#19288)
  • d8261b4 fix(repo): add native packages to the release group (#19289)
  • 91b1451 fix(core): ensure target-only argument is rewritten correctly to be forwarded (#17971)
  • 5545ffb feat(core): allow multiple targets in show projects commmand (#18506)
  • 57dc105 chore(core): prepare Angular specific error only before throwing it (#18904)
  • 82fb209 fix(nx-plugin): pass full context into parseTargetString (#19154)
  • 1aef24b chore(angular): move parseTargetString to pass executor context (#19133)
  • d4a6d32 feat(core): run createDependencies plugins concurrently (#19176)
  • 90c811a Revert "chore(repo): increate npm fetch retires count and timeout (✨ Emojis in Markdown + ⚡ multiple entry-points + 🔖 Markdown 0.2.0 #1… (#19283)
  • ed0456e chore(repo): increate npm fetch retires count and timeout (#19191)
  • 6327fab chore(repo): dogfood nx release commands (#19237)

See the full diff

Package name: @nx/workspace The new version differs by 159 commits.
  • e62f0b1 chore(repo): update nx to 16.9.0-rc.1 (#19302)
  • 2b84f10 bugfix(react-native): fix run-ios failed on 2nd run (#19287)
  • 295ec47 fix(core): do not attempt to publish private npm packages (#19299)
  • b0e48a6 chore(repo): update nx to 16.9.0-rc.0 (#19296)
  • d1fe398 docs(core): packages to api (#19281)
  • 94d8356 fix(vite): provide correct root directory when building a root project (#19298)
  • ca85d26 fix(core): unregister in-process ts transpilers when projectGraph is created (#19187)
  • 9f0e9c8 chore(core): nx plugin submission nx-gcp-cache (#18172)
  • e9eb10f chore(core): nx plugin submission @ jnxplus/nx-maven (#19081)
  • f2edb29 chore(core): remove deprecated plugins from approved-plugins.json file (#19082)
  • c18c0b2 feat(misc): prepend cwd to directory in project generators when using as-provided format (#19227)
  • 78f7f9f fix(nextjs): Add missing env to base Nx Env (#19201)
  • 903c4fe fix(js): update generated .swcrc file to align with @ swc/[email protected] (#19214)
  • 75890f5 chore(repo): remove dep from nx-dev-e2e -> devkit (#19288)
  • d8261b4 fix(repo): add native packages to the release group (#19289)
  • 91b1451 fix(core): ensure target-only argument is rewritten correctly to be forwarded (#17971)
  • 5545ffb feat(core): allow multiple targets in show projects commmand (#18506)
  • 57dc105 chore(core): prepare Angular specific error only before throwing it (#18904)
  • 82fb209 fix(nx-plugin): pass full context into parseTargetString (#19154)
  • 1aef24b chore(angular): move parseTargetString to pass executor context (#19133)
  • d4a6d32 feat(core): run createDependencies plugins concurrently (#19176)
  • 90c811a Revert "chore(repo): increate npm fetch retires count and timeout (✨ Emojis in Markdown + ⚡ multiple entry-points + 🔖 Markdown 0.2.0 #1… (#19283)
  • ed0456e chore(repo): increate npm fetch retires count and timeout (#19191)
  • 6327fab chore(repo): dogfood nx release commands (#19237)

See the full diff

Package name: nx The new version differs by 159 commits.
  • e62f0b1 chore(repo): update nx to 16.9.0-rc.1 (#19302)
  • 2b84f10 bugfix(react-native): fix run-ios failed on 2nd run (#19287)
  • 295ec47 fix(core): do not attempt to publish private npm packages (#19299)
  • b0e48a6 chore(repo): update nx to 16.9.0-rc.0 (#19296)
  • d1fe398 docs(core): packages to api (#19281)
  • 94d8356 fix(vite): provide correct root directory when building a root project (#19298)
  • ca85d26 fix(core): unregister in-process ts transpilers when projectGraph is created (#19187)
  • 9f0e9c8 chore(core): nx plugin submission nx-gcp-cache (#18172)
  • e9eb10f chore(core): nx plugin submission @ jnxplus/nx-maven (#19081)
  • f2edb29 chore(core): remove deprecated plugins from approved-plugins.json file (#19082)
  • c18c0b2 feat(misc): prepend cwd to directory in project generators when using as-provided format (#19227)
  • 78f7f9f fix(nextjs): Add missing env to base Nx Env (#19201)
  • 903c4fe fix(js): update generated .swcrc file to align with @ swc/[email protected] (#19214)
  • 75890f5 chore(repo): remove dep from nx-dev-e2e -> devkit (#19288)
  • d8261b4 fix(repo): add native packages to the release group (#19289)
  • 91b1451 fix(core): ensure target-only argument is rewritten correctly to be forwarded (#17971)
  • 5545ffb feat(core): allow multiple targets in show projects commmand (#18506)
  • 57dc105 chore(core): prepare Angular specific error only before throwing it (#18904)
  • 82fb209 fix(nx-plugin): pass full context into parseTargetString (#19154)
  • 1aef24b chore(angular): move parseTargetString to pass executor context (#19133)
  • d4a6d32 feat(core): run createDependencies plugins concurrently (#19176)
  • 90c811a Revert "chore(repo): increate npm fetch retires count and timeout (✨ Emojis in Markdown + ⚡ multiple entry-points + 🔖 Markdown 0.2.0 #1… (#19283)
  • ed0456e chore(repo): increate npm fetch retires count and timeout (#19191)
  • 6327fab chore(repo): dogfood nx release commands (#19237)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@negue @snyk-bot