Alek-S / pseudozen

Online pseudocoder that makes pseudocoding as easy as it should be
Apache License 2.0
0 stars 0 forks source link

[Snyk] Security upgrade snyk from 1.70.3 to 1.78.0 #21

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-UNDEFSAFE-548940
No Proof of Concept
Commit messages
Package name: snyk The new version differs by 20 commits.
  • adf9b7b feat: update deps
  • 6b9b538 feat: add payload size to analytics
  • 91893f6 feat: don't send `from` arrays in pkg trees
  • f5c99b2 chore: node4 compatible syntax in test
  • 4af5792 chore: drop babel
  • 439195c feat: use proxy-agent for proxying
  • 348ea15 chore: update .nvmrc to 4
  • ff777dd feat: better url-opening ability for `snyk auth` flow
  • c6f467e fix: code styling issues detected by lgtm
  • 9bc11d1 feat: bail out on unsupported nodejs runtime versions
  • aa6040e fix: pin snyk-policy version
  • 42796e7 feat: drop support for Node < 4
  • 933f3f1 feat: update snyk-resolve-deps to reduce size of dependencies
  • 042c476 feat: remove update notifier
  • 7e10aae feat: support yarn for protect scripts
  • 6b6ce94 fix: dont suggest reinstallation for yarn projects
  • 80e49fd fix: update test fixures expected version
  • 38f993f fix: compatability with new pip version (10.0.0)
  • db91114 feat: a seperate spinner for "Analyzing deps ..."
  • 6a77349 fix: update snyk-go-plugin 1.4.5 -> 1.4.6
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic