This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade nock from 13.1.1 to 13.2.7.
![merge advice](https://app.snyk.io/badges/merge-advice/?package_manager=npm&package_name=nock&from_version=13.1.1&to_version=13.2.7&pr_id=66d6a918-2346-48f1-b69b-047d4350c74f&visibility=true&has_feature_flag=false)
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **11 versions** ahead of your current version.
- The recommended version was released **22 days ago**, on 2022-06-15.
The recommended version fixes:
Severity | Issue | PriorityScore (*) | Exploit Maturity |
:-------------------------:|:-------------------------|-------------------------|:-------------------------
| Prototype Pollution [SNYK-JS-LODASHSET-1320032](https://snyk.io/vuln/SNYK-JS-LODASHSET-1320032) | **472/1000** **Why?** Proof of Concept exploit, CVSS 7.3 | Proof of Concept
(*) Note that the real score may have changed since the PR was raised.
Release notes Package name: nock
e37bf02 chore(deps-dev): bump semantic-release from 19.0.2 to 19.0.3
aadb776 chore(deps): bump semver-regex from 3.1.3 to 3.1.4
043aa70 chore(deps-dev): bump eslint-config-standard from 17.0.0-1 to 17.0.0 (#2363)
461414d chore(deps): bump npm from 8.6.0 to 8.12.1 (#2367)
f46b808 Revert "chore(deps-dev): bump got from 11.8.3 to 12.1.0" (#2366)
e4b0331 fix(dep): migrate from lodash.set to lodash. (#2306)
8a82b50 chore(deps-dev): bump got from 11.8.3 to 12.1.0
342e8dc chore(deps-dev): bump eslint-plugin-mocha from 10.0.4 to 10.0.5
0a9fc3e chore(deps-dev): bump eslint from 8.14.0 to 8.16.0
82e8028 chore(deps-dev): bump typescript from 4.6.4 to 4.7.2
3d534f8 chore(deps-dev): bump eslint from 8.12.0 to 8.14.0
5f9ebaa chore(deps-dev): bump @ definitelytyped/dtslint from 0.0.111 to 0.0.112
502182a chore(deps-dev): bump typescript from 4.6.3 to 4.6.4
0d30bee chore(deps-dev): bump @ sinonjs/fake-timers from 9.1.1 to 9.1.2
7452368 chore(deps-dev): bump sinon from 13.0.1 to 13.0.2
a7056ef chore(deps-dev): bump eslint-plugin-mocha from 10.0.3 to 10.0.4
bcb0dc7 chore(deps-dev): bump prettier from 2.6.1 to 2.6.2
c4ba7d1 chore(deps-dev): bump eslint-config-prettier from 8.4.0 to 8.5.0 (#2326)
8e56fbd chore(deps-dev): bump @ sinonjs/fake-timers from 9.1.0 to 9.1.1
8789084 chore(deps-dev): bump prettier from 2.5.1 to 2.6.1
be07d83 chore(deps-dev): bump mocha from 9.2.1 to 9.2.2
b4e839d chore(deps-dev): bump @ definitelytyped/dtslint from 0.0.110 to 0.0.111
14e7e87 chore(deps-dev): bump mocha from 9.2.0 to 9.2.1
Compare
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.*
For more information:
š§ [View latest project report](https://app.snyk.io/org/james.robins/project/9f18b49f-699c-4f68-963b-c9d5b765cfa4?utm_source=github&utm_medium=referral&page=upgrade-pr)
š [Adjust upgrade PR settings](https://app.snyk.io/org/james.robins/project/9f18b49f-699c-4f68-963b-c9d5b765cfa4/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
š [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/james.robins/project/9f18b49f-699c-4f68-963b-c9d5b765cfa4/settings/integration?pkg=nock&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade nock from 13.1.1 to 13.2.7.
![merge advice](https://app.snyk.io/badges/merge-advice/?package_manager=npm&package_name=nock&from_version=13.1.1&to_version=13.2.7&pr_id=66d6a918-2346-48f1-b69b-047d4350c74f&visibility=true&has_feature_flag=false) :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **11 versions** ahead of your current version. - The recommended version was released **22 days ago**, on 2022-06-15. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- | Prototype Pollution
[SNYK-JS-LODASHSET-1320032](https://snyk.io/vuln/SNYK-JS-LODASHSET-1320032) | **472/1000**
**Why?** Proof of Concept exploit, CVSS 7.3 | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: nock
13.2.7 (2022-06-15)
Bug Fixes
InterceptedRequestRouter.handleWrite
arity issue (#2371) (7f21d0c)13.2.6 (2022-06-03)
Reverts
13.2.5 (2022-06-03)
Bug Fixes
13.2.4 (2022-02-04)
Bug Fixes
13.2.3 (2022-02-03)
Bug Fixes
13.2.2 (2022-01-11)
Bug Fixes
allowUnocked
not working with regex host + request body match (#2277) (ac7b4fd)13.2.1 (2021-11-12)
Bug Fixes
update
type for record mode (#2250) (e8f23b1), closes #224113.2.0 (2021-11-08)
Features
update
mode (#2241) (1cb4880)13.1.4 (2021-10-19)
Bug Fixes
13.1.3 (2021-08-25)
Bug Fixes
Commit messages
Package name: nock
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: š§ [View latest project report](https://app.snyk.io/org/james.robins/project/9f18b49f-699c-4f68-963b-c9d5b765cfa4?utm_source=github&utm_medium=referral&page=upgrade-pr) š [Adjust upgrade PR settings](https://app.snyk.io/org/james.robins/project/9f18b49f-699c-4f68-963b-c9d5b765cfa4/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) š [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/james.robins/project/9f18b49f-699c-4f68-963b-c9d5b765cfa4/settings/integration?pkg=nock&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)