ExtensionEngine / tailor

Content authoring platform
MIT License
31 stars 10 forks source link

[Snyk] Fix for 1 vulnerabilities #795

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
No Proof of Concept
Commit messages
Package name: snyk The new version differs by 230 commits.
  • 3f52bdc Merge pull request #1669 from snyk/fix/dont-fail-on-request-big-payload
  • 47e106e fix: don't fail on request's big payload
  • 1228b55 Merge pull request #1624 from snyk/chore/cli-alert-improvement
  • fccd907 Merge pull request #1666 from snyk/chore/bump-cpp-test-timeout
  • 6772a3e Merge pull request #1649 from snyk/chore/deps-update
  • 89a7767 chore: update dependencies
  • eaf4915 test: wrap pagerduty await in try-catch, remove condition
  • 0576431 test: add pagerduty, check if test is running before attemmpting rerun
  • a08a938 chore: bump flaky cpp test timeout
  • ebb8dd7 Merge pull request #1656 from snyk/feat/protect-prime-time
  • 69cd590 test: fix flakey json output test
  • 3021bb2 Merge pull request #1663 from snyk/fix/upgrade-snyk-gradle-plugin
  • a988600 Merge pull request #1654 from snyk/feat/iac-experimental-terraform-support
  • b455497 feat: iac experimental tf support
  • 4848b7e chore: run tests in packages in CI
  • 3e7e99e feat: implement snyk protect
  • bb233f1 chore: enable prettier formatting in packages
  • fe0183d test: enable jest testing in snyk-protect workspace
  • 40ec817 test: test fixture for snyk protect
  • 7dfd3ea Merge pull request #1661 from snyk/test/fix-flake-with-dev-count-analysis
  • 02c99b8 test: remove tests previously migrated to jest
  • e203fd1 test: set timeout in beforeAll
  • d42f6d9 fix: update snyk-gradle-plugin to 3.13.2
  • 8cd9fbf Merge pull request #1662 from snyk/test/add-longer-timeouts
See the full diff
Package name: stylelint The new version differs by 45 commits.
  • 1b75f38 13.8.0
  • c84362f Prepare 13.8.0
  • 00c7d73 Update deps (#5041)
  • a1c8225 Bump jest from 26.6.1 to 26.6.3 (#5036)
  • da381ee Fix `disableRanges.test.js` that uses callbacks (#4991)
  • 2db70e9 Fix `isStandardSyntaxTypeSelector.test.js` that use callbacks (#4990)
  • bb19b6c Update CHANGELOG.md
  • c36b8d0 Add selector-attribute-name-disallowed-list (#4992)
  • d42f8da Update CHANGELOG.md
  • 1e6f944 Fix false negatives for dollar variables in *-notation (#5031)
  • d347a29 Bump jest-circus from 26.6.1 to 26.6.3 (#5034)
  • 4695069 Bump file-entry-cache from 5.0.1 to 6.0.0 (#5038)
  • bd207fa Bump np from 6.5.0 to 7.0.0 (#5037)
  • 467c4f9 Bump meow from 7.1.1 to 8.0.0 (#5015)
  • 4f0225a Bump v8-compile-cache from 2.1.1 to 2.2.0 (#5028)
  • 42f6c73 Bump eslint from 7.12.1 to 7.13.0 (#5029)
  • f0b5aa8 refactor documentation config (#5025)
  • 5a84657 Update CHANGELOG.md
  • 785b59d Add ignoreAtRules to property-no-unknown (#4965)
  • 60eb7b6 Bump eslint from 7.11.0 to 7.12.1 (#5017)
  • e2ea569 Bump typescript from 4.0.3 to 4.0.5 (#5016)
  • 078e9a6 Bump lint-staged from 10.4.0 to 10.5.1 (#5014)
  • d7db502 Bump remark-cli from 8.0.1 to 9.0.0 (#4996)
  • 2cddb6e Bump jest-circus from 26.5.3 to 26.6.1 (#5009)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic