Financial-Times / ebi

šŸ¦ Ebi: GitHub repositories contents search
MIT License
9 stars 2 forks source link

[Snyk] Upgrade nock from 13.1.1 to 13.2.7 #169

Closed jamesr101 closed 1 year ago

jamesr101 commented 2 years ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade nock from 13.1.1 to 13.2.7.

![merge advice](https://app.snyk.io/badges/merge-advice/?package_manager=npm&package_name=nock&from_version=13.1.1&to_version=13.2.7&pr_id=66d6a918-2346-48f1-b69b-047d4350c74f&visibility=true&has_feature_flag=false) :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **11 versions** ahead of your current version. - The recommended version was released **22 days ago**, on 2022-06-15. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- | Prototype Pollution
[SNYK-JS-LODASHSET-1320032](https://snyk.io/vuln/SNYK-JS-LODASHSET-1320032) | **472/1000**
**Why?** Proof of Concept exploit, CVSS 7.3 | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: nock from nock GitHub release notes
Commit messages
Package name: nock
  • 7f21d0c fix: `InterceptedRequestRouter.handleWrite` arity issue (#2371)
  • e37bf02 chore(deps-dev): bump semantic-release from 19.0.2 to 19.0.3
  • aadb776 chore(deps): bump semver-regex from 3.1.3 to 3.1.4
  • 043aa70 chore(deps-dev): bump eslint-config-standard from 17.0.0-1 to 17.0.0 (#2363)
  • 461414d chore(deps): bump npm from 8.6.0 to 8.12.1 (#2367)
  • f46b808 Revert "chore(deps-dev): bump got from 11.8.3 to 12.1.0" (#2366)
  • e4b0331 fix(dep): migrate from lodash.set to lodash. (#2306)
  • 8a82b50 chore(deps-dev): bump got from 11.8.3 to 12.1.0
  • 342e8dc chore(deps-dev): bump eslint-plugin-mocha from 10.0.4 to 10.0.5
  • 0a9fc3e chore(deps-dev): bump eslint from 8.14.0 to 8.16.0
  • 82e8028 chore(deps-dev): bump typescript from 4.6.4 to 4.7.2
  • 3d534f8 chore(deps-dev): bump eslint from 8.12.0 to 8.14.0
  • 5f9ebaa chore(deps-dev): bump @ definitelytyped/dtslint from 0.0.111 to 0.0.112
  • 502182a chore(deps-dev): bump typescript from 4.6.3 to 4.6.4
  • 0d30bee chore(deps-dev): bump @ sinonjs/fake-timers from 9.1.1 to 9.1.2
  • 7452368 chore(deps-dev): bump sinon from 13.0.1 to 13.0.2
  • a7056ef chore(deps-dev): bump eslint-plugin-mocha from 10.0.3 to 10.0.4
  • bcb0dc7 chore(deps-dev): bump prettier from 2.6.1 to 2.6.2
  • c4ba7d1 chore(deps-dev): bump eslint-config-prettier from 8.4.0 to 8.5.0 (#2326)
  • 8e56fbd chore(deps-dev): bump @ sinonjs/fake-timers from 9.1.0 to 9.1.1
  • 8789084 chore(deps-dev): bump prettier from 2.5.1 to 2.6.1
  • be07d83 chore(deps-dev): bump mocha from 9.2.1 to 9.2.2
  • b4e839d chore(deps-dev): bump @ definitelytyped/dtslint from 0.0.110 to 0.0.111
  • 14e7e87 chore(deps-dev): bump mocha from 9.2.0 to 9.2.1
Compare

**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: šŸ§ [View latest project report](https://app.snyk.io/org/james.robins/project/9f18b49f-699c-4f68-963b-c9d5b765cfa4?utm_source=github&utm_medium=referral&page=upgrade-pr) šŸ›  [Adjust upgrade PR settings](https://app.snyk.io/org/james.robins/project/9f18b49f-699c-4f68-963b-c9d5b765cfa4/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) šŸ”• [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/james.robins/project/9f18b49f-699c-4f68-963b-c9d5b765cfa4/settings/integration?pkg=nock&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
stale[bot] commented 1 year ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.