socket-security[bot]
commented
1 month ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/@babel/helper-compilation-targets@7.23.6, npm/@babel/helper-environment-visitor@7.22.20, npm/@babel/helper-function-name@7.23.0, npm/@babel/helper-hoist-variables@7.22.5, npm/@babel/helper-validator-option@7.23.5, npm/@babel/plugin-syntax-async-generators@7.8.4, npm/@babel/plugin-syntax-bigint@7.8.3, npm/@babel/plugin-syntax-class-properties@7.12.13, npm/@babel/plugin-syntax-import-meta@7.10.4, npm/@babel/plugin-syntax-json-strings@7.8.3, npm/@babel/plugin-syntax-logical-assignment-operators@7.10.4, npm/@babel/plugin-syntax-nullish-coalescing-operator@7.8.3, npm/@babel/plugin-syntax-numeric-separator@7.10.4, npm/@babel/plugin-syntax-object-rest-spread@7.8.3, npm/@babel/plugin-syntax-optional-catch-binding@7.8.3, npm/@babel/plugin-syntax-optional-chaining@7.8.3, npm/@babel/plugin-syntax-top-level-await@7.14.5, npm/@babel/template@7.24.0, npm/@bcoe/v8-coverage@0.2.3, npm/@istanbuljs/load-nyc-config@1.1.0, npm/@istanbuljs/schema@0.1.3, npm/@jest/console@29.7.0, npm/@jest/core@29.7.0, npm/@jest/environment@29.7.0, npm/@jest/expect@29.7.0, npm/@jest/fake-timers@29.7.0, npm/@jest/globals@29.7.0, npm/@jest/reporters@29.7.0, npm/@jest/source-map@29.6.3, npm/@jest/test-result@29.7.0, npm/@jest/test-sequencer@29.7.0, npm/@jest/transform@29.7.0, npm/@jridgewell/gen-mapping@0.3.5, npm/@jridgewell/resolve-uri@3.1.2, npm/@jridgewell/set-array@1.2.1, npm/@jridgewell/sourcemap-codec@1.4.15, npm/@jridgewell/trace-mapping@0.3.25, npm/@npmcli/installed-package-contents@2.1.0, npm/@npmcli/node-gyp@3.0.0, npm/@octokit/plugin-enterprise-rest@6.0.1, npm/@octokit/plugin-request-log@1.0.4, npm/@sinonjs/commons@3.0.1, npm/@sinonjs/fake-timers@10.3.0, npm/@types/babel__core@7.20.5, npm/@types/babel__generator@7.6.8, npm/@types/babel__template@7.4.4, npm/@types/graceful-fs@4.1.9, npm/acorn-jsx@5.3.2, npm/acorn@8.11.3, npm/agent-base@6.0.2, npm/aggregate-error@3.1.0, npm/ajv@6.12.6, npm/ansi-escapes@4.3.2, npm/anymatch@3.1.3, npm/aproba@2.0.0, npm/array-ify@1.0.0, npm/async@3.2.5, npm/babel-jest@29.7.0, npm/babel-plugin-istanbul@6.1.1, npm/babel-plugin-jest-hoist@29.6.3, npm/babel-preset-current-node-syntax@1.0.1, npm/babel-preset-jest@29.6.3, npm/before-after-hook@2.2.3, npm/browserslist@4.23.0, npm/bs-logger@0.2.6, npm/bser@2.1.1, npm/buffer-from@1.1.2, npm/builtins@1.0.3, npm/callsites@3.1.0, npm/camelcase@6.3.0, npm/char-regex@1.0.2, npm/chardet@0.7.0, npm/chownr@2.0.0, npm/clean-stack@2.2.0, npm/clone-deep@4.0.1, npm/co@4.6.0, npm/collect-v8-coverage@1.0.2, npm/color-support@1.1.3, npm/compare-func@2.0.0, npm/convert-source-map@2.0.0, npm/create-jest@29.7.0, npm/cross-spawn@7.0.3, npm/dateformat@3.0.3, npm/deep-is@0.1.4, npm/deepmerge@4.3.1, npm/deprecation@2.3.1, npm/detect-newline@3.1.0, npm/doctrine@3.0.0, npm/dot-prop@5.3.0, npm/ejs@3.1.10, npm/emittery@0.13.1, npm/encoding@0.1.13, npm/env-paths@2.2.1, npm/envinfo@7.8.1, npm/err-code@2.0.3, npm/error-ex@1.3.2, npm/esutils@2.0.3, npm/execa@5.1.1, npm/exit@0.1.2, npm/exponential-backoff@3.1.1, npm/external-editor@3.1.0, npm/fast-deep-equal@3.1.3, npm/fast-json-stable-stringify@2.1.0, npm/fast-levenshtein@2.0.6, npm/fb-watchman@2.0.2, npm/file-entry-cache@6.0.1, npm/filelist@1.0.4, npm/find-up@5.0.0, npm/flatted@3.3.1, npm/fs-minipass@3.0.3, npm/fsevents@2.3.3, npm/function-bind@1.1.2, npm/gensync@1.0.0-beta.2, npm/get-package-type@0.1.0, npm/get-stream@6.0.1, npm/handlebars@4.7.8, npm/hard-rejection@2.1.0, npm/hasown@2.0.2, npm/html-escaper@2.0.2, npm/http-cache-semantics@4.1.1, npm/https-proxy-agent@5.0.1, npm/human-signals@2.1.0, npm/iconv-lite@0.4.24, npm/import-fresh@3.3.0, npm/import-local@3.1.0, npm/imurmurhash@0.1.4, npm/indent-string@4.0.0, npm/ini@1.3.8, npm/ip-address@9.0.5, npm/is-core-module@2.13.1, npm/is-generator-fn@2.1.0, npm/is-interactive@1.0.0, npm/is-lambda@1.0.1, npm/is-obj@2.0.0, npm/is-path-inside@3.0.3, npm/is-plain-obj@1.1.0, npm/is-plain-object@2.0.4, npm/is-ssh@1.4.0, npm/is-stream@2.0.1, npm/is-unicode-supported@0.1.0, npm/isexe@2.0.0, npm/istanbul-lib-coverage@3.2.2, npm/istanbul-lib-instrument@6.0.2, npm/istanbul-lib-report@3.0.1, npm/istanbul-lib-source-maps@4.0.1, npm/istanbul-reports@3.1.7, npm/jake@10.9.1, npm/jest-changed-files@29.7.0, npm/jest-circus@29.7.0, npm/jest-cli@29.7.0, npm/jest-docblock@29.7.0, npm/jest-each@29.7.0, npm/jest-environment-node@29.7.0, npm/jest-haste-map@29.7.0, npm/jest-leak-detector@29.7.0, npm/jest-mock@29.7.0, npm/jest-pnp-resolver@1.2.3, npm/jest-regex-util@29.6.3, npm/jest-resolve-dependencies@29.7.0, npm/jest-resolve@29.7.0, npm/jest-runner@29.7.0, npm/jest-runtime@29.7.0, npm/jest-snapshot@29.7.0, npm/jest-validate@29.7.0, npm/jest-watcher@29.7.0, npm/jest-worker@29.7.0, npm/jest@29.7.0, npm/jsbn@1.1.0, npm/jsesc@2.5.2, npm/json-buffer@3.0.1, npm/json-parse-even-better-errors@2.3.1, npm/json-schema-traverse@0.4.1, npm/json-stable-stringify-without-jsonify@1.0.1, npm/jsonparse@1.3.1, npm/keyv@4.5.4, npm/kind-of@6.0.3, npm/kleur@3.0.3, npm/leven@3.1.0, npm/levn@0.4.1, npm/locate-path@6.0.0, npm/lodash.memoize@4.1.2, npm/lodash.merge@4.6.2, npm/log-symbols@4.1.0, npm/make-dir@4.0.0, npm/make-error@1.3.6, npm/makeerror@1.0.12, npm/merge-stream@2.0.0, npm/min-indent@1.0.1, npm/minipass-fetch@3.0.5, npm/minipass-flush@1.0.5, npm/minipass-json-stream@1.0.1, npm/minipass-pipeline@1.2.4, npm/minipass-sized@1.0.3, npm/minizlib@2.1.2, npm/mkdirp@1.0.4, npm/modify-values@1.0.1, npm/mute-stream@1.0.0, npm/natural-compare@1.4.0, npm/negotiator@0.6.3, npm/neo-async@2.6.2, npm/node-fetch@2.6.7, npm/node-int64@0.4.0, npm/node-releases@2.0.14, npm/normalize-path@3.0.0, npm/npm-bundled@1.1.2, npm/npm-install-checks@6.3.0, npm/npm-normalize-package-bin@1.0.1, npm/ora@5.4.1, npm/p-limit@3.1.0, npm/p-locate@5.0.0, npm/p-map@4.0.0, npm/p-queue@6.6.2, npm/p-reduce@2.1.0, npm/p-timeout@3.2.0, npm/parent-module@1.0.1, npm/path-exists@4.0.0, npm/path-parse@1.0.7, npm/pify@5.0.0, npm/pirates@4.0.6, npm/pkg-dir@4.2.0, npm/prelude-ls@1.2.1, npm/promise-inflight@1.0.1, npm/promise-retry@2.0.1, npm/prompts@2.4.2, npm/promzard@1.0.2, npm/punycode@2.3.1, npm/read-cmd-shim@4.0.0, npm/read-package-json-fast@3.0.2, npm/read@3.0.1, npm/resolve-cwd@3.0.0, npm/resolve-from@4.0.0, npm/resolve.exports@2.0.2, npm/resolve@1.22.8, npm/retry@0.12.0, npm/run-async@2.4.1, npm/rxjs@7.8.1, npm/safer-buffer@2.1.2, npm/shallow-clone@3.0.1, npm/shebang-command@2.0.0, npm/shebang-regex@3.0.0, npm/sisteransi@1.0.5, npm/smart-buffer@4.2.0, npm/socks@2.8.3, npm/source-map-support@0.5.13, npm/source-map@0.6.1, npm/spdx-correct@3.2.0, npm/spdx-exceptions@2.5.0, npm/spdx-expression-parse@3.0.1, npm/spdx-license-ids@3.0.17, npm/split@1.0.1, npm/ssri@10.0.6, npm/string-length@4.0.2, npm/strip-final-newline@2.0.0, npm/supports-preserve-symlinks-flag@1.0.0, npm/tar@6.2.1, npm/test-exclude@6.0.0, npm/text-extensions@1.9.0, npm/text-table@0.2.0, npm/through2@2.0.5, npm/tmpl@1.0.5, npm/to-fast-properties@2.0.0, npm/type-check@0.4.0, npm/type-detect@4.0.8, npm/uglify-js@3.17.4, npm/unique-filename@3.0.0, npm/unique-slug@4.0.0, npm/uri-js@4.4.1, npm/v8-to-istanbul@9.2.0, npm/validate-npm-package-license@3.0.4, npm/walker@1.0.8, npm/which@2.0.2, npm/wide-align@1.1.5, npm/word-wrap@1.2.5, npm/wordwrap@1.0.0, npm/write-json-file@3.2.0, npm/xtend@4.0.2, npm/yocto-queue@0.1.0
Snyk has created this PR to fix 1 vulnerabilities in the yarn dependencies of this project.
Snyk changed the following file(s):
packages/autotask-client/package.jsonNote for zero-installs users
If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the
.yarn/cache/directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to runyarnto update the contents of the./yarn/cachedirectory. If you are not using zero-install you can ignore this as your flow should likely be unchanged.⚠️ Warning
``` Failed to update the yarn.lock, please update manually before merging. ```Vulnerabilities that will be fixed with an upgrade:
SNYK-JS-AXIOS-7361793
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Server-side Request Forgery (SSRF)