Open snyk-bot opened 2 years ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Recently disclosed, Has a fix available, CVSS 3.7
SNYK-JS-TAR-1536758
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gulp-sass
The new version differs by 8 commits.- 5775044 Update CHANGELOG.md
- 978b8f6 Update to major version 5 (#802)
- 10eae93 Update changelog for 4.1.1
- 947b26c Upgrade lodash to fix a security issue (#776)
- 8d6ac29 Update changelog
- 43c0547 4.1.0
- ebe3ec6 Set appropriate file stat times (#763)
- 7ab018e Migrate to the lodash package
See the full diffPackage name: node-gyp
The new version differs by 28 commits.- 33affe2 v7.0.0: bump version and update changelog
- ba4f34b doc: update catalina xcode clt download link
- f7bfce9 doc: update acid test and introduce curl|bash test script
- 4937722 deps: replace mkdirp with {recursive} mkdir
- a6b76a8 gyp: update gyp to 0.2.1
- e529f33 doc: update README to reflect upgrade to gyp-next
- ebc34ec gyp: update gyp to 0.2.0
- 9aed628 doc: give more attention to Catalina issues doc
- 963f2a7 doc: improve cataline discoverability for search engines
- d45438a deps: update deps, match to npm@7
- 5f47b7a v5.1.1: bump version and update changelog
- c255ffb lib: drop "-2" flag for "py.exe" launcher
- 741ab09 test: remove support for EOL versions of Node.js
- 6356117 doc, bin: stop suggesting opening node-gyp issues
- 7b75af3 doc: add macOS Catalina software update info
- 4f23c7b doc: update link to the code of conduct (#2073)
- 473cfa2 doc: note in README that Python 3.8 is supported (#2072)
- e18a61a build: shrink bloated addon binaries on windows
- ca86ef2 test: bump actions/checkout from v1 to v2
- e7402b4 doc: update catalina xcode cli tools download link (#2044)
- 972780b gyp: sync code base with nodejs repo (#1975)
- dab0305 v5.1.0: bump version and update changelog
- 35de459 doc: update catalina xcode cli tools download link; formatting
- 4864219 doc: add download link for Command Line Tools for Xcode
See the full diffPackage name: node-sass
The new version differs by 43 commits.- 7105b0a 5.0.0 (#3015)
- 0648b5a chore: Add Node 15 support (#2983)
- e2391c2 Add a deprecation message to the readme (#3011)
- 6a33e53 chore: Don't upload artifacts on PRs
- d763506 chore: Only run coverage on main repo
- d4ebe72 build(deps): update actions/setup-node requirement to v2.1.2
- 2bebe05 build(deps-dev): bump rimraf from 2.7.1 to 3.0.2
- f877689 chore: Don't double build DependaBot PRs
- b48fac4 chore: Add weekly DependaBot updates
- 91c40a0 Remove deprecated process.sass API
- 1f6df86 Replace lodash/assign in favor of the native Object.assign
- 522828a Remove workarounds for old Node.js versions
- 40e0f00 chore: Remove second NPM badge
- ab91bf6 chore: Remove Slack badge
- 6853a80 chore: Cleanup status badges
- fb1109c chore: Bump minimum engine version to v10
- d185440 chore: Add basic Node version support policy
- db25736 chore: Bump node-gyp to 7.1.0
- 2c5b110 chore: Bump cross-spawn to v7.0.3
- 38b9633 chore: Update Istanbul to NYC
- d63b5bf chore: Bump mocha to v8.1.3
- d0d8865 chore: Skip constructor tests on v14.6+
- ee3984d chore: Hoist test ESLint config
- feee448 chore: Remove disabled and recommended rules
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic