Leko / IDDFS

iterative deepening depth-first search (IDDFS) for JavaScript
MIT License
2 stars 0 forks source link

[Snyk] Fix for 1 vulnerabilities #119

Open Leko opened 2 years ago

Leko commented 2 years ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-ANSIREGEX-1583908](https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908) | Yes | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: mocha The new version differs by 106 commits.
  • ef6c820 Release v6.2.1
  • 9524978 updated CHANGELOG for v6.2.1 [ci skip]
  • dfdb8b3 Update yargs to v13.3.0 (#3986)
  • 18ad1c1 treat '--require esm' as Node option (#3983)
  • fcffd5a Update yargs-unparser to v1.6.0 (#3984)
  • ad4860e Remove extraGlobals() (#3970)
  • b269ad0 Clarify effect of .skip() (#3947)
  • 1e6cf3b Add Matomo to website (#3765)
  • 91b3a54 fix style on mochajs.org (#3886)
  • 0e9d8ad tty.getWindowSize is not a function inside a "worker_threads" worker (#3955)
  • 48da42e Remove jsdoc index.html placeholder from eleventy file structure and fix broken link in jsdoc tutorial (#3966)
  • bd47776 Release v6.2.0
  • cc595af update CHANGELOG.md for v6.2.0 [ci skip]
  • 59d70ee fix: remove duplicate line-height property (#3957)
  • f77cac4 fix: do not redeclare variable (#3956)
  • 6201e42 Hide stacktrace when cli args are missing (#3963)
  • 88f45d5 Don't re-initialize grep option on watch re-run (#3960)
  • 5d4dd98 Fix No Files error when file is passed via --files (#3942)
  • 15b96af Collect test files later (#3953)
  • ccee5f1 Base reporter store ref to console.log (#3725)
  • 47318a7 update @ mocha/contributors to v1.0.4 (#3944)
  • c903147 More, improved integration tests for watching (#3929)
  • e341ea4 Update CI config files to use Node-12.x (#3919)
  • 3064d25 update @ mocha/docdash to v2.1.1 (#3945)
See the full diff
Package name: nyc The new version differs by 87 commits.
  • e21721a chore(release): 14.0.0
  • 8cf8a89 docs: update issue template [skip ci] (#1008)
  • d7a9d6a chore: Update package-lock.json
  • 189bae8 chore: Update dependencies for 14.0.0-rc.1
  • 2eb13c6 feat: instrument `--complete-copy` implementation (#1056)
  • c88a852 docs: `nyc instrument` and `--exclude-node-modules` (#1039)
  • c213469 feat: always build the processinfo temp dir (#1061)
  • e597c46 feat: Add support for --exclude-node-modules to subcommands. (#1053)
  • 8dcf180 feat: add processinfo index, add externalId (#1055)
  • 32f75b0 fix: set processinfo pid/ppid to actual numbers (#1057)
  • 16d4315 chore: Stop excluding `bin` from coverage results. (#1060)
  • b909575 fix: Use a single instance of nyc for all actions of main command. (#1059)
  • 997ed29 chore: Remove arrify dependency. (#1058)
  • 68d6333 docs: move setup docs out of the readme [skip ci] (#1052)
  • 8da097e feat: add `include` and `exclude` options to instrument command (#1007)
  • 31817de chore: Update dependencies (#1050)
  • 18e04ba fix: make --all work for transpiled code (#1047)
  • b7e16cd feat: Support turning off node_modules default exclude via flag (#912)
  • 3eb0e37 docs: A bunch of docs fix-ups (#1038)
  • 5c1eb38 test(instrument): should return unmodified source if no transform found (#1036)
  • 1f6c3d4 docs: project root directory and `--cwd` doc (#1032)
  • 051d95a fix: Add `cwd` option to instrument command (#1024)
  • 91e02c6 chore: A few code cleanups (#1033)
  • 2867538 feat: Rename `plugins` option to `parser-plugins`. (#1031)
See the full diff
Package name: snyk The new version differs by 250 commits.
  • 3f52bdc Merge pull request #1669 from snyk/fix/dont-fail-on-request-big-payload
  • 47e106e fix: don't fail on request's big payload
  • 1228b55 Merge pull request #1624 from snyk/chore/cli-alert-improvement
  • fccd907 Merge pull request #1666 from snyk/chore/bump-cpp-test-timeout
  • 6772a3e Merge pull request #1649 from snyk/chore/deps-update
  • 89a7767 chore: update dependencies
  • eaf4915 test: wrap pagerduty await in try-catch, remove condition
  • 0576431 test: add pagerduty, check if test is running before attemmpting rerun
  • a08a938 chore: bump flaky cpp test timeout
  • ebb8dd7 Merge pull request #1656 from snyk/feat/protect-prime-time
  • 69cd590 test: fix flakey json output test
  • 3021bb2 Merge pull request #1663 from snyk/fix/upgrade-snyk-gradle-plugin
  • a988600 Merge pull request #1654 from snyk/feat/iac-experimental-terraform-support
  • b455497 feat: iac experimental tf support
  • 4848b7e chore: run tests in packages in CI
  • 3e7e99e feat: implement snyk protect
  • bb233f1 chore: enable prettier formatting in packages
  • fe0183d test: enable jest testing in snyk-protect workspace
  • 40ec817 test: test fixture for snyk protect
  • 7dfd3ea Merge pull request #1661 from snyk/test/fix-flake-with-dev-count-analysis
  • 02c99b8 test: remove tests previously migrated to jest
  • e203fd1 test: set timeout in beforeAll
  • d42f6d9 fix: update snyk-gradle-plugin to 3.13.2
  • 8cd9fbf Merge pull request #1662 from snyk/test/add-longer-timeouts
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/leko/project/2f5ec0ea-475a-4509-9c0b-7b1bc17b94c1?utm_source=github&utm_medium=referral&page=fix-pr) πŸ›  [Adjust project settings](https://app.snyk.io/org/leko/project/2f5ec0ea-475a-4509-9c0b-7b1bc17b94c1?utm_source=github&utm_medium=referral&page=fix-pr/settings) πŸ“š [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"40096bee-8e51-43f2-b587-2e649b3f349e","prPublicId":"40096bee-8e51-43f2-b587-2e649b3f349e","dependencies":[{"name":"mocha","from":"6.0.0","to":"6.2.1"},{"name":"nyc","from":"12.0.2","to":"14.0.0"},{"name":"snyk","from":"1.119.0","to":"1.465.0"}],"packageManager":"npm","projectPublicId":"2f5ec0ea-475a-4509-9c0b-7b1bc17b94c1","projectUrl":"https://app.snyk.io/org/leko/project/2f5ec0ea-475a-4509-9c0b-7b1bc17b94c1?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-ANSIREGEX-1583908"],"upgrade":["SNYK-JS-ANSIREGEX-1583908"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[696]}) --- **Learn how to fix vulnerabilities with free interactive lessons:** πŸ¦‰ [Learn about vulnerability in an interactive lesson of Snyk Learn.](https://learn.snyk.io?loc=fix-pr)
codecov[bot] commented 2 years ago

Codecov Report

Merging #119 (09c7f07) into master (6131353) will increase coverage by 0.30%. The diff coverage is n/a.

@@            Coverage Diff             @@
##           master     #119      +/-   ##
==========================================
+ Coverage   92.00%   92.30%   +0.30%     
==========================================
  Files           2        3       +1     
  Lines          50       52       +2     
==========================================
+ Hits           46       48       +2     
  Misses          4        4              
Impacted Files Coverage Ξ”
.eslintrc.js 0.00% <0.00%> (ΓΈ)
src/Strategy.js 94.44% <0.00%> (+6.20%) :arrow_up:

:mega: Codecov can now indicate which changes are the most critical in Pull Requests. Learn more