ForgeRock / node-openam-agent

OpenAM Policy Agent for Node.js / Express
MIT License
13 stars 12 forks source link

Update dependency cookie to v1 #74

Open mend-for-github-com[bot] opened 3 days ago

mend-for-github-com[bot] commented 3 days ago

This PR contains the following updates:

Package Type Update Change
cookie dependencies major ^0.5.0 -> ^1.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Medium Medium 5.3 CVE-2024-47764

Release Notes

jshttp/cookie (cookie) ### [`v1.0.1`](https://redirect.github.com/jshttp/cookie/releases/tag/v1.0.1) [Compare Source](https://redirect.github.com/jshttp/cookie/compare/v1.0.0...v1.0.1) **Added** - Allow case insensitive options ([#​194](https://redirect.github.com/jshttp/cookie/issues/194)) [`3bed080`](https://redirect.github.com/jshttp/cookie/commit/3bed080) ### [`v1.0.0`](https://redirect.github.com/jshttp/cookie/releases/tag/v1.0.0) [Compare Source](https://redirect.github.com/jshttp/cookie/compare/v0.7.2...v1.0.0) **Breaking changes** - Use modern JS features, ship TypeScript definition ([#​175](https://redirect.github.com/jshttp/cookie/issues/175)) [`1cc64ff`](https://redirect.github.com/jshttp/cookie/commit/1cc64ff) - Adds `__esModule` marker, imports need to use `import { parse, serialize }` or `import * as cookie` - Minimum node.js v18 - Uses null prototype object for `parse` return value - Changes `strict` and `priority` to match the lower case strings (i.e. `low`, not `LOW` or `Low`) - Require `maxAge` to be an integer using `Number.isInteger` check - Delegates decode implementation details to `decode` option (i.e. error handling and quote parsing is defined by `decode`) - Delegate quote parsing to `decode` ([#​180](https://redirect.github.com/jshttp/cookie/issues/180)) [`c4a2597`](https://redirect.github.com/jshttp/cookie/commit/c4a2597) - Shift try/catch to decode ([#​179](https://redirect.github.com/jshttp/cookie/issues/179)) [`93a5b97`](https://redirect.github.com/jshttp/cookie/commit/93a5b97) - Improve arg/option error messages ([#​162](https://redirect.github.com/jshttp/cookie/issues/162)) [`e206fd5`](https://redirect.github.com/jshttp/cookie/commit/e206fd5) [@​MaoShizhong](https://redirect.github.com/MaoShizhong) **Other** - Remove `hasOwnProperty`, use `undefined` check for performance ([#​183](https://redirect.github.com/jshttp/cookie/issues/183)) [`8f3ee9e`](https://redirect.github.com/jshttp/cookie/commit/8f3ee9e) [@​gurgunday](https://redirect.github.com/gurgunday) ### [`v0.7.2`](https://redirect.github.com/jshttp/cookie/releases/tag/v0.7.2) [Compare Source](https://redirect.github.com/jshttp/cookie/compare/v0.7.1...v0.7.2) **Fixed** - Fix object assignment of `hasOwnProperty` ([#​177](https://redirect.github.com/jshttp/cookie/issues/177)) [`bc38ffd`](https://redirect.github.com/jshttp/cookie/commit/bc38ffd) ### [`v0.7.1`](https://redirect.github.com/jshttp/cookie/releases/tag/v0.7.1): 0.7.1 [Compare Source](https://redirect.github.com/jshttp/cookie/compare/v0.7.0...v0.7.1) **Fixed** - Allow leading dot for domain ([#​174](https://redirect.github.com/jshttp/cookie/issues/174)) - Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec - Add fast path for `serialize` without options, use `obj.hasOwnProperty` when parsing ([#​172](https://redirect.github.com/jshttp/cookie/issues/172)) ### [`v0.7.0`](https://redirect.github.com/jshttp/cookie/releases/tag/v0.7.0): 0.7.0 [Compare Source](https://redirect.github.com/jshttp/cookie/compare/v0.6.0...v0.7.0) - perf: parse cookies ~10% faster ([#​144](https://redirect.github.com/jshttp/cookie/issues/144) by [@​kurtextrem](https://redirect.github.com/kurtextrem) and [#​170](https://redirect.github.com/jshttp/cookie/issues/170)) - fix: narrow the validation of cookies to match RFC6265 ([#​167](https://redirect.github.com/jshttp/cookie/issues/167) by [@​bewinsnw](https://redirect.github.com/bewinsnw)) - fix: add `main` to `package.json` for rspack ([#​166](https://redirect.github.com/jshttp/cookie/issues/166) by [@​proudparrot2](https://redirect.github.com/proudparrot2)) ### [`v0.6.0`](https://redirect.github.com/jshttp/cookie/releases/tag/v0.6.0): 0.6.0 [Compare Source](https://redirect.github.com/jshttp/cookie/compare/v0.5.0...v0.6.0) - Add `partitioned` option

mend-for-github-com[bot] commented 3 days ago

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: package-lock.json
npm WARN ERESOLVE overriding peer dependency
npm WARN While resolving: @fimbul/bifrost@0.21.0
npm WARN Found: tslint@6.1.3
npm WARN node_modules/tslint
npm WARN   dev tslint@"^6.1.3" from the root project
npm WARN 
npm WARN Could not resolve dependency:
npm WARN peer tslint@"^5.0.0" from @fimbul/bifrost@0.21.0
npm WARN node_modules/@fimbul/bifrost
npm WARN   @fimbul/bifrost@"^0.21.0" from tslint-consistent-codestyle@1.16.0
npm WARN   node_modules/tslint-consistent-codestyle
npm WARN 
npm WARN Conflicting peer dependency: tslint@5.20.1
npm WARN node_modules/tslint
npm WARN   peer tslint@"^5.0.0" from @fimbul/bifrost@0.21.0
npm WARN   node_modules/@fimbul/bifrost
npm WARN     @fimbul/bifrost@"^0.21.0" from tslint-consistent-codestyle@1.16.0
npm WARN     node_modules/tslint-consistent-codestyle
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: tslint-consistent-codestyle@1.16.0
npm ERR! Found: tslint@6.1.3
npm ERR! node_modules/tslint
npm ERR!   dev tslint@"^6.1.3" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer tslint@"^5.0.0" from tslint-consistent-codestyle@1.16.0
npm ERR! node_modules/tslint-consistent-codestyle
npm ERR!   dev tslint-consistent-codestyle@"^1.16.0" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: tslint@5.20.1
npm ERR! node_modules/tslint
npm ERR!   peer tslint@"^5.0.0" from tslint-consistent-codestyle@1.16.0
npm ERR!   node_modules/tslint-consistent-codestyle
npm ERR!     dev tslint-consistent-codestyle@"^1.16.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-11-02T08_43_51_496Z-debug-0.log