SecurityBrewery / catalyst

⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes
https://catalyst.security-brewery.com/
GNU Affero General Public License v3.0
350 stars 37 forks source link

Update dependency yaml to v2.2.2 [SECURITY] #1039

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
yaml (source) 2.0.1 -> 2.2.2 age adoption passing confidence

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

GitHub Vulnerability Alerts

CVE-2023-2251

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2.


Release Notes

eemeli/yaml (yaml) ### [`v2.2.2`](https://togithub.com/eemeli/yaml/releases/tag/v2.2.2) [Compare Source](https://togithub.com/eemeli/yaml/compare/v2.2.1...v2.2.2) This patch release includes a fix for an error that could be thrown in `parseDocument` for degenerate input. Otherwise, it's a patch release uplifting a few fixes from the ongoing v2.3 work to v2.2: - Corner case failure in error pretty-printer ([CVE-2023-2251](https://togithub.com/advisories/GHSA-f9xv-q969-pqx4)) - Use correct argument order when stringifying flow collection comments ([#​443](https://togithub.com/eemeli/yaml/issues/443)) - First-line folding for block scalars ([#​422](https://togithub.com/eemeli/yaml/issues/422)) ### [`v2.2.1`](https://togithub.com/eemeli/yaml/releases/tag/v2.2.1) [Compare Source](https://togithub.com/eemeli/yaml/compare/v2.2.0...v2.2.1) - Quote top-level map keys containing document markers ([#​431](https://togithub.com/eemeli/yaml/issues/431)) ### [`v2.2.0`](https://togithub.com/eemeli/yaml/releases/tag/v2.2.0) [Compare Source](https://togithub.com/eemeli/yaml/compare/v2.1.3...v2.2.0) ##### New Features - Add `flowCollectionPadding` toString option ([#​420](https://togithub.com/eemeli/yaml/issues/420)) - Use indicator line for props on block collection values of mappings ([#​425](https://togithub.com/eemeli/yaml/issues/425)) ##### Bugfixes - Minor relaxation of types for custom tags ([#​429](https://togithub.com/eemeli/yaml/issues/429)) ### [`v2.1.3`](https://togithub.com/eemeli/yaml/releases/tag/v2.1.3) [Compare Source](https://togithub.com/eemeli/yaml/compare/v2.1.2...v2.1.3) - Set correct node-end position for block collections with comments ([#​413](https://togithub.com/eemeli/yaml/issues/413)) ### [`v2.1.2`](https://togithub.com/eemeli/yaml/releases/tag/v2.1.2) [Compare Source](https://togithub.com/eemeli/yaml/compare/v2.1.1...v2.1.2) - Set correct node-end position for empty values with comments ([#​413](https://togithub.com/eemeli/yaml/issues/413)) ### [`v2.1.1`](https://togithub.com/eemeli/yaml/releases/tag/v2.1.1) [Compare Source](https://togithub.com/eemeli/yaml/compare/v2.1.0...v2.1.1) No changes in executable code, only TS types. - Revert "Use TS named tuple for range ([#​385](https://togithub.com/eemeli/yaml/issues/385))" -- see [#​393](https://togithub.com/eemeli/yaml/issues/393) - Fix types for compatibility with TS 4.2 and 4.7 - Add CI workflow for testing published type in a range of TS versions ### [`v2.1.0`](https://togithub.com/eemeli/yaml/releases/tag/v2.1.0) [Compare Source](https://togithub.com/eemeli/yaml/compare/v2.0.1...v2.1.0) Fixes for TypeScript users. Arguably this could've been a patch release as well. - Improve/specify/fix TS types for Document & collection access methods ([#​383](https://togithub.com/eemeli/yaml/issues/383)) - Use TS named tuple for range ([#​385](https://togithub.com/eemeli/yaml/issues/385)) - Rename internal Document option as `_directives` to resolve type conflict with ToString options ([#​389](https://togithub.com/eemeli/yaml/issues/389)) - Update tsc target to ES2020 to match Node.js support - Update dev dependencies, including jest 28

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.