[Snyk] Upgrade: lodash, jsonpath, , , chalk, dockerode, fs-extra, generate-password, open, ora, puppeteer, tar, tslib #85
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- lodash from 4.17.19 to 4.17.21.
See this package in npm: https://www.npmjs.com/package/lodash
- jsonpath from 1.0.2 to 1.1.1.
See this package in npm: https://www.npmjs.com/package/jsonpath
- @ibmgaragecloud/cloud-native-toolkit-cli from 0.5.10 to 0.5.11.
See this package in npm: https://www.npmjs.com/package/@ibmgaragecloud/cloud-native-toolkit-cli
- @types/jest from 26.0.7 to 26.0.24.
See this package in npm: https://www.npmjs.com/package/@types/jest
- chalk from 4.1.0 to 4.1.2.
See this package in npm: https://www.npmjs.com/package/chalk
- dockerode from 3.2.1 to 3.3.5.
See this package in npm: https://www.npmjs.com/package/dockerode
- fs-extra from 9.0.1 to 9.1.0.
See this package in npm: https://www.npmjs.com/package/fs-extra
- generate-password from 1.5.1 to 1.7.1.
See this package in npm: https://www.npmjs.com/package/generate-password
- open from 7.1.0 to 7.4.2.
See this package in npm: https://www.npmjs.com/package/open
- ora from 4.0.5 to 4.1.1.
See this package in npm: https://www.npmjs.com/package/ora
- puppeteer from 5.2.1 to 5.5.0.
See this package in npm: https://www.npmjs.com/package/puppeteer
- tar from 6.0.2 to 6.2.1.
See this package in npm: https://www.npmjs.com/package/tar
- tslib from 2.0.0 to 2.7.0.
See this package in npm: https://www.npmjs.com/package/tslib
See this project in Snyk:
https://app.snyk.io/org/seansund/project/53aa0d30-7bbe-44c2-a951-730b0775f54e?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
lodash
from 4.17.19 to 4.17.21 | 2 versions ahead of your current version | 4 years ago
on 2021-02-20
jsonpath
from 1.0.2 to 1.1.1 | 2 versions ahead of your current version | 3 years ago
on 2021-04-01
@ibmgaragecloud/cloud-native-toolkit-cli
from 0.5.10 to 0.5.11 | 1 version ahead of your current version | 4 years ago
on 2020-08-05
@types/jest
from 26.0.7 to 26.0.24 | 17 versions ahead of your current version | 3 years ago
on 2021-07-06
chalk
from 4.1.0 to 4.1.2 | 2 versions ahead of your current version | 3 years ago
on 2021-07-30
dockerode
from 3.2.1 to 3.3.5 | 6 versions ahead of your current version | 2 years ago
on 2023-03-12
fs-extra
from 9.0.1 to 9.1.0 | 1 version ahead of your current version | 4 years ago
on 2021-01-19
generate-password
from 1.5.1 to 1.7.1 | 4 versions ahead of your current version | a year ago
on 2023-10-18
open
from 7.1.0 to 7.4.2 | 7 versions ahead of your current version | 4 years ago
on 2021-02-16
ora
from 4.0.5 to 4.1.1 | 2 versions ahead of your current version | 4 years ago
on 2020-08-07
puppeteer
from 5.2.1 to 5.5.0 | 5 versions ahead of your current version | 4 years ago
on 2020-11-16
tar
from 6.0.2 to 6.2.1 | 21 versions ahead of your current version | 6 months ago
on 2024-03-21
tslib
from 2.0.0 to 2.7.0 | 18 versions ahead of your current version | 21 days ago
on 2024-08-23
Issues fixed by the recommended upgrade:
SNYK-JS-LODASH-567746
SNYK-JS-SSH2-1656673
SNYK-JS-LODASH-1040724
SNYK-JS-UNDERSCORE-1080984
SNYK-JS-UNDERSCORE-1080984
SNYK-JS-LODASH-1018905
Release notes
Package name: lodash
-
4.17.21 - 2021-02-20
-
4.17.20 - 2020-08-13
-
4.17.19 - 2020-07-08
from lodash GitHub release notesBump to v4.17.21
Bump to v4.17.20.
Bump to v4.17.19
Package name: jsonpath
-
1.1.1 - 2021-04-01
-
1.1.0 - 2021-01-14
-
1.0.2 - 2019-06-03
from jsonpath GitHub release notesversion 1.1.0
version 1.0.2
Package name: @ibmgaragecloud/cloud-native-toolkit-cli
-
0.5.11 - 2020-08-05
-
0.5.10 - 2020-07-29
from @ibmgaragecloud/cloud-native-toolkit-cli GitHub release notesPackage name: @types/jest
-
26.0.24 - 2021-07-06
-
26.0.23 - 2021-04-26
-
26.0.22 - 2021-03-25
-
26.0.21 - 2021-03-17
-
26.0.20 - 2021-01-07
-
26.0.19 - 2020-12-10
-
26.0.18 - 2020-12-08
-
26.0.17 - 2020-12-08
-
26.0.16 - 2020-12-01
-
26.0.15 - 2020-10-20
-
26.0.14 - 2020-09-16
-
26.0.13 - 2020-09-02
-
26.0.12 - 2020-08-31
-
26.0.11 - 2020-08-31
-
26.0.10 - 2020-08-14
-
26.0.9 - 2020-08-05
-
26.0.8 - 2020-07-31
-
26.0.7 - 2020-07-23
from @types/jest GitHub release notesPackage name: chalk
-
4.1.2 - 2021-07-30
- Readme updates
-
4.1.1 - 2021-04-21
- Readme updates 89e9e3a
-
4.1.0 - 2020-06-09
- Support template literals for nested calls (#392) 09ddbad
from chalk GitHub release notesv4.0.0...v4.1.0
Package name: dockerode
-
3.3.5 - 2023-03-12
-
3.3.4 - 2022-08-19
-
3.3.3 - 2022-08-01
-
3.3.2 - 2022-06-06
-
3.3.1 - 2021-09-07
-
3.3.0 - 2021-04-25
-
3.2.1 - 2020-07-21
from dockerode GitHub release notesv3.3.5
No content.
No content.
No content.
Merge pull request #630 from pimterry/abort
Allow aborting all API requests by passing an abortSignal
No content.
No content.
Package name: fs-extra
-
9.1.0 - 2021-01-19
-
9.0.1 - 2020-06-04
from fs-extra GitHub release notes9.1.0
9.0.1
Package name: generate-password
-
1.7.1 - 2023-10-18
-
1.7.0 - 2021-11-09
-
1.6.1 - 2021-07-21
-
1.6.0 - 2021-01-14
-
1.5.1 - 2020-02-11
from generate-password GitHub release notesrelease 1.6.1
publish 1.6.0
publish 1.5.1
Package name: open
-
7.4.2 - 2021-02-16
- WSL: Fix mount point issue (#224) f4df68a
-
7.4.1 - 2021-02-14
- Windows: Fix error with forward slashes in path (#220) db8eb8f
- WSL: Get drives mount point from wsl.conf (#219) 36e9964
-
7.4.0 - 2021-02-01
- Remove usage of
-
7.3.1 - 2021-01-07
- Fix support for WSL when Windows isn't mounted in
-
7.3.0 - 2020-09-29
- Support WSL configuration where Windows paths are not in PATH (#195) be0f794
-
7.2.1 - 2020-08-28
- Fix
-
7.2.0 - 2020-08-21
- Use PowerShell on Windows for improved reliability (#188) f7ca0d3
-
7.1.0 - 2020-07-20
- Add
from open GitHub release notesv7.4.1...v7.4.2
v7.4.0...v7.4.1
wslu(#217) 315a480v7.3.1...v7.4.0
/mnt/(#210) a3bbadcv7.3.0...v7.3.1
v7.2.1...v7.3.0
appoption on Windows (#191) 9bcd285v7.2.0...v7.2.1
v7.1.0...v7.2.0
allowNonzeroExitCodeoption (#176) e009765v7.0.4...v7.1.0
Package name: ora
-
4.1.1 - 2020-08-07
-
4.1.0 - 2020-08-06
-
4.0.5 - 2020-07-17
- Silence Jest warning when Ora is required in a test (#150) 594865f
from ora GitHub release notesv4.0.4...v4.0.5
Package name: puppeteer
v5.5.0 (2020-11-16)
Features
Bug Fixes
_isClosedPromise(#6579) (122f074)Bug fixes
fs.promiseswould throw an error. See #6548 for the bug report and #6550 for the fix. We now run a CI build on Node 10.15 to ensure we don't cause similar regressions in the future.Raw notes
520cd90 - chore: mark version 5.4.1
8f4a79e - docs(troubleshooting): update Alpine Chromium version (#6529)
e45acce - chore: run unit tests on node 10.15 + fix fs.promises access (#6550)
a2175c6 - docs(queryhandler): fix link (#6543)
d787865 - chore: bump version to v5.4.0-post (#6544)
Feature changes
Custom query handler API
The custom query handler support is no longer marked as experimental. The API has been updated to:
New built-in query handlers
Puppeteer now ships with two built-in handlers:
ariaandpierce:ariahandler (#6307) allows querying elements based on the accessibility tree.piercehandler (#6509) pierces shadow roots while querying for a CSS selector.Roll Chromium 87.0.4272.0 (r809590)
Behind the scenes
Raw notes
5e5fed1 - fix: ignore spurious bindingCalled events (#6538)
e6b8c77 - chore: fix travis config (#6537)
c756fb4 - fix(utils): typo fix (#6522)
f63a123 - chore(agnostification): agnostify web socket connections (#6520)
c2c2bb7 - chore(agnostification): common/helper.ts (#6515)
637a1f7 - chore: gitignore new-docs (#6511)
e655bb6 - chore(agnostification): split up root Puppeteer class (#6504)
f3086d7 - fix(launcher): support relative userDataDir on headless Windows (#6506)
8fabe32 - feat(queryhandler): add built-in pierce handler (#6509)
f04bec5 - chore: update eslint & eslint plugins (#6487)
4846b87 - chore(agnostification): split up launcher class (#6484)
1ed38af - chore(node): move install.ts into node/ (#6490)
e94a1e8 - chore: bump misc dependencies (#6488)
936ccdc - chore: enforce Conventional Commits through commitlint (#6483)
502ed8c - chore(agnostify): Create Node and Web initializer. (#6477)
3afe193 - feat(a11y-query): extend aria handler with waitFor (#6472)
cc7f1fd - docs(queryhandler): add custom query handler docs (#6476)
70ed875 - fix(queryhandler) only expose custom handlers (#6475)
950ae33 - feat(a11y-query): aria query handler sans waitfor (#6459)
41ef3ee - fix: update preferences in default Firefox profile (#6465)
9275653 - docs(examples): update selector for search example (#6471)
49f25e2 - feat(chromium) roll Chromium to r809590 (#6458)
4cdbebe - chore: disable firefox windows launcher test until Nov (#6451)
75e3fb0 - docs(api): fix some outdated links (#6450)
caa9a1c - chore(agnostic): Remove use of util.promisify (#6446)
96f3d43 - feat(console): expose stack trace for console messages (#6445)
322cc96 - chore: remove npm run test-types call (#6447)
72fe86f - feat(a11y-query): introduce internal handlers (#6437)
1396c9d - chore: bump version to v5.3.1-post (#6440)
11ab402 - fix: add mime dependency back to fix build (#6441)
Highlights
page.emulateIdleState(...)(#6410)Raw notes
c7d32cb - chore: mark version v5.3.1 (#6439)
8f3171a - feat(permissions): Add idle-detection permission (#6438)
083ea41 - test(frame): correct terminology in URL fragment test (#6416)
bb1c521 - chore: remove mime dependency (#6415)
17960e5 - feat(page): emulate idle state (#6410)
03e41da - chore: bump version to v5.3.0-post (#6413)
Highlights
PUPPETEER_DOWNLOAD_PATH(#6014)page.waitForTimeoutand subsequently,frame.waitForTimeout(#6268)page.waitForandframe.waitFor(#6268)Raw notes
030fcaa - chore: mark version v5.3.0 (#6412)
4ce600a - chore: Remove target debug-unit and add unit-debug (#6411)
62ac167 - feat(chromium): roll Chromium to r800071 (#6407)
35cfbe1 - docs(troubleshooting.md): updated commands (#6296)
ce6ae35 - doc(contributing): add info on bisecting upstream changes (#6402)
e22ca4c - chore: extend Firefox launch test deadline by a month (#6403)
2470d1e - chore: update documentation on rolling chromium (#6399)
b6bbfd0 - fix: ensure frame.url() includes the query string (#6398)
7b24e54 - fix: revise interesting classification for AXNodes (#6334)
13ea347 - feat: support configuring the browser download path (#6014)
615cd37 - chore: use https URL for license info (