search

LividaST / bot

Discord Bot
https://bot.livida.net
GNU General Public License v3.0
4 stars 3 forks source link

[Snyk] Security upgrade discord.js from 12.5.3 to 13.14.0 #400

Open MegaJoshy opened 11 months ago

MegaJoshy commented 11 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **539/1000**
**Why?** Has a fix available, CVSS 6.5 | Information Exposure
[SNYK-JS-NODEFETCH-2342118](https://snyk.io/vuln/SNYK-JS-NODEFETCH-2342118) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: discord.js The new version differs by 250 commits.
  • 81b358c chore(discord.js): release discord.js@13.14.0
  • af6a0e5 fix(ThreadChannel): fetch starter message properly (#9217)
  • e15b70f Fix a rare error regarding interactions (#9218)
  • df68520 fix(Actions): inject built data by using a symbol (#9204)
  • 4bc25c4 feat: add support for gif stickers (v13) (#9158)
  • 120270e feat: v13 support `SUPPRESS_NOTIFICATIONS` flag (#9184)
  • 9f7d1f3 chore(discord.js): release discord.js@13.13.1 (#9156)
  • 224f21c fix(Constants): enum creation error (#9155)
  • 7f1735d chore(discord.js): release discord.js@13.13.0 (#9154)
  • fd494a3 feat(GuildMemberManager): add `addRole` and `removeRole` methods (#9108)
  • b586df8 ci: create publish release workflow v13 (#9151)
  • 0188e36 feat(WebSocketShard): v13 add resume url (#9078)
  • 84d34dc feat: v13 `guildAuditLogEntryCreate` event (#9092)
  • 7737bbe ci: add pull request triage and Kodiak merge workflow (#9109)
  • 61fa6f4 feat(Constants): add auto moderation events to WSEvents (#9102)
  • 0afa405 feat: role subscriptions (#9040)
  • eed293f fix: minor forums cleanup (#9033)
  • 86329ad feat(GuildChannelManager): add `addFollower` (#9050)
  • 69d71e9 feat(Guild): add `INVITES_DISABLED` feature support (#9051)
  • a7dc40f feat(ClientApplication): add role connections (#9072)
  • 32cdaff feat(Webhook): add `channel` getter (#9074)
  • 123d0f1 fix(InteractionResponses): spell `messages` correctly (#9080)
  • d69529e feat(GuildMember): add `flags` (#9098)
  • c2968b5 feat: `applicationCommandPermissionsUpdate` event (#9121)
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/megajoshy/project/a6e2546e-f33f-44d4-a05c-f2259ba2719a?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/megajoshy/project/a6e2546e-f33f-44d4-a05c-f2259ba2719a?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"ea67dc7b-d7fc-4479-be33-09e6e5cf61c2","prPublicId":"ea67dc7b-d7fc-4479-be33-09e6e5cf61c2","dependencies":[{"name":"discord.js","from":"12.5.3","to":"13.14.0"}],"packageManager":"npm","projectPublicId":"a6e2546e-f33f-44d4-a05c-f2259ba2719a","projectUrl":"https://app.snyk.io/org/megajoshy/project/a6e2546e-f33f-44d4-a05c-f2259ba2719a?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-NODEFETCH-2342118"],"upgrade":["SNYK-JS-NODEFETCH-2342118"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[539],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Learn about vulnerability in an interactive lesson of Snyk Learn.](https://learn.snyk.io/?loc=fix-pr)