Open snyk-bot opened 2 years ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-ANSIREGEX-1583908
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-BROWSERSLIST-1090194
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gulp
The new version differs by 134 commits.- 55eb23a Release: 4.0.0
- 173a532 Docs: Fix the installation instructions
- ec54d09 Docs: Improve note about out-of-date docs
- 03b7c98 Docs: Update recipes to install gulp@next
- 2eba29e Docs: Remove run-sequence from recipes
- 76eb4d6 Docs: Add installation instructions & update badges
- fbc162f Docs: Remove references to gulp-util
- 3011cf9 Scaffold: Normalize repository
- f27be05 Update: Remove graceful-fs from test suite
- 361ab63 Upgrade: Update glob-watcher
- 064d100 Build: Avoid broken node 9
- 057df59 Release: 4.0.0-alpha.3
- c1ba80c Breaking: Upgrade major versions of glob-watcher, gulp-cli & vinyl-fs
- 89acc5c Docs: Improve ES2015 task exporting examples (#1999)
- 0ac9e04 Docs: Add "Project structure" section to CONTRIBUTING.md (#1859)
- 723cbc4 Docs: Fix syntax in recipe example (#1715)
- d420a6a Docs: Have gulp.lastRun take a function to avoid task registration (#1828)
- 29ece6f Upgrade: Update undertaker
- e931cb0 Docs: Fix changelog typos (#1696)
- 477db84 Docs: Add a "BrowserSync with Gulp 4" recipe (#1659)
- d4ed3c7 Docs: Add options.cwd for gulp.src API (#1645)
- 5dc3b07 Docs: Update gulp.watch API to align with glob-watcher
- 0c66069 Breaking: Replace chokidar as gulp.watch with glob-watcher wrapper
- c3dbc10 Docs: Clarify incremental builds example (#1609)
See the full diffPackage name: gulp-autoprefixer
The new version differs by 17 commits.- dfe3919 6.0.0
- c225cbd Upgrade `autoprefixer` and `postcss`
- ea0b7f8 Require Node.js 6
- 18a27be 5.0.0
- e526a78 Meta tweaks
- e954e6e Update sourcemap paths to be relative to `file.base` (#92)
- 7828646 Upgrade to Autoprefixer 8 (#96)
- d008588 4.1.0
- 27816c3 Meta tweaks
- 94f3447 Drop dependency on deprecated gulp-util (#94)
- 60aead3 Test against Node.js v8 (#90)
- 5188604 4.0.0
- 04814b7 Rewrite tests to use AVA
- 7df69ba ES2015ify, bump postcss, require Node.js 4
- 0a92d79 Update to Autoprefixer 7 (#80)
- cd022c8 Fix tests
- 90f8f7c Improve the tip (#75)
See the full diffPackage name: transliteration
The new version differs by 95 commits.- 2c33fde Update dependencies
- f2bfb2a Update dependency rollup-plugin-hashbang to v2
- 2d6e380 2.1.2
- 76286c3 Update README.md
- e45aa7f Update README.md
- eae2688 update README.md
- 1c07358 Bump to 2.1.1
- 387b9d8 Update README.md
- 90e33b5 Update README.md
- 9ee6cab Merge branch 'master' of https://github.com/dzcpy/transliteration
- 8b17b81 Use the same name for the transliterate function
- e734662 Update README.md
- 7c02ee0 Update README.md
- eb67dca Update dependency rollup-plugin-typescript2 to ^0.19.0
- 8fa4407 Update README.md
- 724cbeb fix a few issues and bump to 2.0.4
- befddfa fix a few issues and bump to 2.0.4
- 97834a3 update README.md
- 843454b bump
- 5def5ce update ie support
- c823e1d bump to 2.0.2
- da3707a fix badge
- c6488a4 Fix coverage badge
- 168fd03 fix coverage
See the full diffPackage name: yargs
The new version differs by 211 commits.- a6e67f1 chore(release): 13.2.4
- fc13476 chore: update standard-verison dependency
- bf46813 fix(i18n): rename unclear 'implication failed' to 'missing dependent arguments' (#1317)
- a3a5d05 docs: fix a broken link to MS Terminology Search (#1341)
- b4f8018 build: add .versionrc that hides test/build
- 0c39183 chore(release): 13.2.3
- 08e0746 chore: update deps (#1340)
- 843e939 docs: make `--no-` boolean prefix easier to find in the docs (#1338)
- 84cac07 docs: restore removed changelog of v13.2.0 (#1337)
- b20db65 fix(deps): upgrade cliui for compatibility with latest chalk. (#1330)
- c294d1b test: accept differently formatted output (#1327)
- ac3f10c chore: move .hbs templates into .js to facilitate webpacking (#1320)
- 0295132 fix: address issues with dutch translation (#1316)
- 9f2468e doc: clarify parserConfiguration object structure (#1309)
- e7f2937 chore(release): 13.2.2
- edd0bb5 test: correct test description
- 03a9523 chore: forgoing dropping Node 6 until yargs@14 (#1308)
- 14920d1 docs: remove --save option as it isn't required anymore (#1301)
- 545c7f1 test: slightly reworded one test
- 4375680 chore(release): 13.2.1
- dfcaa68 test: slight edit to test wording
- 3180224 fix: add zsh script to files array
- 0a96394 fix: support options/sub-commands in zsh completion
- 48249a2 chore(release): 13.2.0
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.