search

Leko / IDDFS

iterative deepening depth-first search (IDDFS) for JavaScript
MIT License
2 stars 0 forks source link

[Snyk] Security upgrade snyk from 1.119.0 to 1.290.1 #120

Open Leko opened 2 years ago

Leko commented 2 years ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

![merge advice](https://app.snyk.io/badges/merge-advice/?package_manager=npm&package_name=snyk&from_version=1.119.0&to_version=1.290.1&pr_id=f2287fc4-40d9-4fd3-998a-132abe9ce097&visibility=true&has_feature_flag=false) #### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **556/1000**
**Why?** Recently disclosed, Has a fix available, CVSS 5.4 | Open Redirect
[SNYK-JS-GOT-2932019](https://snyk.io/vuln/SNYK-JS-GOT-2932019) | No | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: snyk The new version differs by 250 commits.
  • bc4074a Merge pull request #990 from snyk/fix/dot-prop-vuln-update
  • b74bbe2 fix: use @ snyk/update-notifier instead of update-notifier
  • 93845d9 fix: use @ snyk/configstore instead of configstore
  • 2c21f03 Merge pull request #984 from snyk/feat/bump-python-plugin
  • 3c06cb6 feat: use latest python plugin
  • 899482f Merge pull request #987 from snyk/robpickerill-master
  • 08cf57d Merge pull request #989 from snyk/feat/report-java-and-mvn-version
  • 98a7031 fix: correct object path to mvn and java version
  • 42fa08c Merge pull request #988 from snyk/feat/report-java-and-mvn-version
  • 23cbd4c feat: add java and maven version to analytics
  • 456696d chore: fix small typo gradle => docker in the README
  • eea5146 Merge pull request #983 from snyk/chore/add-targetfile-to-test-logs
  • e08bc8f Merge pull request #964 from snyk/feat/add-python-to-auto-detect
  • e1651dd feat: add python to auto manifest discovery
  • c25a142 feat: push `targetFileRelativePath` to registry payload
  • c52e45a Merge pull request #982 from snyk/fix/auto-detect-help-text
  • 1f1fd72 fix: move --all-projects help text
  • a295643 Merge pull request #978 from snyk/feat/add-paket-to-all-projects
  • b169bd7 Merge pull request #981 from snyk/chore/update-readme-links
  • db34336 feat: enable paket to be autodetected with --all-projects
  • ff2ee39 Merge pull request #977 from snyk/feat/auto-detect-golang
  • 263fc72 chore: update docs for Python Docker
  • 0bbeda5 Merge pull request #979 from snyk/fix/add-jar-scanning-flag
  • d282b35 Merge pull request #980 from snyk/fix/move-docker-json-before-lang-args
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/leko/project/2f5ec0ea-475a-4509-9c0b-7b1bc17b94c1?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/leko/project/2f5ec0ea-475a-4509-9c0b-7b1bc17b94c1?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"f2287fc4-40d9-4fd3-998a-132abe9ce097","prPublicId":"f2287fc4-40d9-4fd3-998a-132abe9ce097","dependencies":[{"name":"snyk","from":"1.119.0","to":"1.290.1"}],"packageManager":"npm","projectPublicId":"2f5ec0ea-475a-4509-9c0b-7b1bc17b94c1","projectUrl":"https://app.snyk.io/org/leko/project/2f5ec0ea-475a-4509-9c0b-7b1bc17b94c1?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-GOT-2932019"],"upgrade":["SNYK-JS-GOT-2932019"],"isBreakingChange":false,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore","merge-advice-badge-shown"],"priorityScoreList":[556]}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Open Redirect](https://learn.snyk.io/lessons/open-redirect/javascript?loc=fix-pr)
codecov[bot] commented 2 years ago

Codecov Report

Merging #120 (dc5342b) into master (6131353) will increase coverage by 1.61%. The diff coverage is n/a.

@@            Coverage Diff             @@
##           master     #120      +/-   ##
==========================================
+ Coverage   92.00%   93.61%   +1.61%     
==========================================
  Files           2        2              
  Lines          50       47       -3     
==========================================
- Hits           46       44       -2     
+ Misses          4        3       -1
Impacted Files Coverage Δ
src/index.js 93.54% <0.00%> (-0.40%) :arrow_down:
src/Strategy.js 93.75% <0.00%> (+5.51%) :arrow_up:

:mega: Codecov can now indicate which changes are the most critical in Pull Requests. Learn more