MValle21 / conduktor

A simple URL shortener that uses GSuite authentication
MIT License
0 stars 0 forks source link

Update dependency ajv to v6.12.3 - autoclosed #48

Closed mend-for-github-com[bot] closed 2 years ago

mend-for-github-com[bot] commented 2 years ago

This PR contains the following updates:

Package Type Update Change
ajv (source) dependencies minor 6.5.2 -> 6.12.3

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Medium Medium 5.6 CVE-2020-15366

Release Notes

ajv-validator/ajv ### [`v6.12.3`](https://togithub.com/ajv-validator/ajv/releases/v6.12.3) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.12.2...v6.12.3) Pass schema object to processCode function Option for strictNumbers ([@​issacgerges](https://togithub.com/issacgerges), [#​1128](https://togithub.com/ajv-validator/ajv/issues/1128)) Fixed vulnerability related to untrusted schemas ([CVE-2020-15366](https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE-2020-15366)) ### [`v6.12.2`](https://togithub.com/ajv-validator/ajv/releases/v6.12.2) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.12.1...v6.12.2) Removed post-install script ### [`v6.12.1`](https://togithub.com/ajv-validator/ajv/releases/v6.12.1) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.12.0...v6.12.1) Docs and dependency updates ### [`v6.12.0`](https://togithub.com/ajv-validator/ajv/releases/v6.12.0) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.11.0...v6.12.0) Improved hostname validation ([@​sambauers](https://togithub.com/sambauers), [#​1143](https://togithub.com/ajv-validator/ajv/issues/1143)) Option `keywords` to add custom keywords ([@​franciscomorais](https://togithub.com/franciscomorais), [#​1137](https://togithub.com/ajv-validator/ajv/issues/1137)) Types fixes ([@​boenrobot](https://togithub.com/boenrobot), [@​MattiAstedrone](https://togithub.com/MattiAstedrone)) Docs: - [error logging](https://togithub.com/epoberezkin/ajv#error-logging) example ([@​RadiationSickness](https://togithub.com/RadiationSickness)) - TypeScript usage notes ([@​thetric](https://togithub.com/thetric)) ### [`v6.11.0`](https://togithub.com/ajv-validator/ajv/releases/v6.11.0) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.10.2...v6.11.0) Time formats support two digit and colon-less variants of timezone offset ([#​1061](https://togithub.com/ajv-validator/ajv/issues/1061) , [@​cjpillsbury](https://togithub.com/cjpillsbury)) Docs: RegExp related security considerations Tests: Disabled failing typescript test ### [`v6.10.2`](https://togithub.com/ajv-validator/ajv/releases/v6.10.2) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.10.1...v6.10.2) Fix: the unknown keywords were ignored with the option `strictKeywords: true` (instead of failing compilation) in some sub-schemas (e.g. anyOf), when the sub-schema didn't have known keywords. ### [`v6.10.1`](https://togithub.com/ajv-validator/ajv/releases/v6.10.1) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.10.0...v6.10.1) Fix types Fix addSchema ([#​1001](https://togithub.com/ajv-validator/ajv/issues/1001)) Update dependencies ### [`v6.10.0`](https://togithub.com/ajv-validator/ajv/releases/v6.10.0) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.9.2...v6.10.0) Option `strictDefaults` to report ignored defaults ([#​957](https://togithub.com/ajv-validator/ajv/issues/957), [@​not-an-aardvark](https://togithub.com/not-an-aardvark)) Option `strictKeywords` to report unknown keywords ([#​781](https://togithub.com/ajv-validator/ajv/issues/781)) ### [`v6.9.2`](https://togithub.com/ajv-validator/ajv/compare/v6.9.1...v6.9.2) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.9.1...v6.9.2) ### [`v6.9.1`](https://togithub.com/ajv-validator/ajv/compare/v6.9.0...v6.9.1) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.9.0...v6.9.1) ### [`v6.9.0`](https://togithub.com/ajv-validator/ajv/releases/v6.9.0) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.8.1...v6.9.0) OpenAPI keyword `nullable` can be any boolean (and not only `true`). Custom keyword definition changes: - `dependencies` option in to require the presence of keywords in the same schema. - more strict validation of the definition using JSON Schema. ### [`v6.8.1`](https://togithub.com/ajv-validator/ajv/compare/v6.8.0...v6.8.1) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.8.0...v6.8.1) ### [`v6.8.0`](https://togithub.com/ajv-validator/ajv/releases/v6.8.0) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.7.0...v6.8.0) Docs: [security considerations](https://togithub.com/epoberezkin/ajv#security-considerations). [Meta-schema](https://togithub.com/epoberezkin/ajv/blob/master/lib/refs/json-schema-secure.json) for the security assessment of JSON Schemas. ### [`v6.7.0`](https://togithub.com/ajv-validator/ajv/releases/v6.7.0) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.6.2...v6.7.0) Option `useDefaults: "empty"` to replace `null` and `""` (empty strings) with default values (in addition to assigning defaults to missing and undefined properties). Update draft-04 meta-schema to remove incorrect usage of "uri" format. ### [`v6.6.2`](https://togithub.com/ajv-validator/ajv/compare/v6.6.1...v6.6.2) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.6.1...v6.6.2) ### [`v6.6.1`](https://togithub.com/ajv-validator/ajv/compare/v6.6.0...v6.6.1) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.6.0...v6.6.1) ### [`v6.6.0`](https://togithub.com/ajv-validator/ajv/releases/v6.6.0) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.5.5...v6.6.0) Keyword "nullable" from OpenAPI spec Replaced phantomjs with headless chrome ### [`v6.5.5`](https://togithub.com/ajv-validator/ajv/compare/v6.5.4...v6.5.5) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.5.4...v6.5.5) ### [`v6.5.4`](https://togithub.com/ajv-validator/ajv/compare/v6.5.3...v6.5.4) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.5.3...v6.5.4) ### [`v6.5.3`](https://togithub.com/ajv-validator/ajv/compare/v6.5.2...v6.5.3) [Compare Source](https://togithub.com/ajv-validator/ajv/compare/v6.5.2...v6.5.3)