search

SharonKoch / skf-labs

Repo for all the OWASP-SKF Docker lab examples
Apache License 2.0
0 stars 1 forks source link

Update dependency sqlite3 to v5.1.5 #68

Open mend-for-github-com[bot] opened 11 months ago

mend-for-github-com[bot] commented 11 months ago

This PR contains the following updates:

Package Type Update Change
sqlite3 dependencies minor 5.0.2 -> 5.1.5
sqlite3 dependencies patch 5.0.2 -> 5.0.3

By merging this PR, the issue #37 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2021-3918
High High 8.1 CVE-2022-43441
High High 7.5 CVE-2022-21227

By merging this PR, the issue #37 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 8.2 CVE-2021-32803
High High 8.2 CVE-2021-32804
High High 8.2 CVE-2021-37701
High High 8.2 CVE-2021-37712
High High 8.2 CVE-2021-37713

Release Notes

TryGhost/node-sqlite3 (sqlite3) ### [`v5.1.5`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.1.5) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.1.4...v5.1.5) #### What's Changed - 🔒 Fixed code execution vulnerability due to Object coercion by [@​daniellockyer](https://redirect.github.com/daniellockyer) - Updated bundled SQLite to v3.41.1 by [@​daniellockyer](https://redirect.github.com/daniellockyer) - Fixed rpath linker option when using a custom sqlite by [@​jeromew](https://redirect.github.com/jeromew) in [https://github.com/TryGhost/node-sqlite3/pull/1654](https://redirect.github.com/TryGhost/node-sqlite3/pull/1654) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.4...v5.1.5 ### [`v5.1.4`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.1.4) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.1.3...v5.1.4) #### What's Changed - Fixed glibc compatibility by downgrading CI to Ubuntu 20 by [@​daniellockyer](https://redirect.github.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1664](https://redirect.github.com/TryGhost/node-sqlite3/pull/1664) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.3...v5.1.4 ### [`v5.1.3`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.1.3) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.1.2...v5.1.3) #### What's Changed - Updated bundled SQLite to v3.40.0 by [@​daniellockyer](https://redirect.github.com/daniellockyer) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.2...v5.1.3 ### [`v5.1.2`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.1.2) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.1.1...v5.1.2) #### What's Changed - Updated bundled SQLite to v3.39.4 by [@​daniellockyer](https://redirect.github.com/daniellockyer) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.1...v5.1.2 ### [`v5.1.1`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.1.1) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.1.0...v5.1.1) #### What's Changed - Added Darwin ARM64 binaries by [@​daniellockyer](https://redirect.github.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1594](https://redirect.github.com/TryGhost/node-sqlite3/pull/1594) A huge thanks to [MacStadium](https://www.macstadium.com/) for providing an M1 Mac Mini so we can offer ARM64 binaries. **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.0...v5.1.1 ### [`v5.1.0`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.1.0) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.0.11...v5.1.0) ✨ We're very excited to announce node-sqlite3's first minor release of v5, packed with features and improvements. If you encounter any problems, please open a detailed issue using the [templates](https://redirect.github.com/TryGhost/node-sqlite3/issues/new/choose). #### What's Changed - Updated bundled SQLite to v3.39.3 by [@​daniellockyer](https://redirect.github.com/daniellockyer) - Added ability to receive updates from `sqlite3_update_hook` by [@​soukand](https://redirect.github.com/soukand) in [https://github.com/TryGhost/node-sqlite3/pull/1267](https://redirect.github.com/TryGhost/node-sqlite3/pull/1267) - Added support for setting SQLite limits by [@​paulfitz](https://redirect.github.com/paulfitz) in [https://github.com/TryGhost/node-sqlite3/pull/1548](https://redirect.github.com/TryGhost/node-sqlite3/pull/1548) - Added library types file by [@​bpasero](https://redirect.github.com/bpasero) in [https://github.com/TryGhost/node-sqlite3/pull/1527](https://redirect.github.com/TryGhost/node-sqlite3/pull/1527) - Added `package-lock.json` to `.gitignore` by [@​JoelEinbinder](https://redirect.github.com/JoelEinbinder) in [https://github.com/TryGhost/node-sqlite3/pull/1628](https://redirect.github.com/TryGhost/node-sqlite3/pull/1628) - Fixed remaining method declarations by [@​alexanderfloh](https://redirect.github.com/alexanderfloh) in [https://github.com/TryGhost/node-sqlite3/pull/1633](https://redirect.github.com/TryGhost/node-sqlite3/pull/1633) - Fixed importing `sqlite3#verbose` using destructuring syntax by [@​mahdi-farnia](https://redirect.github.com/mahdi-farnia) in [https://github.com/TryGhost/node-sqlite3/pull/1632](https://redirect.github.com/TryGhost/node-sqlite3/pull/1632) #### New Contributors - [@​JoelEinbinder](https://redirect.github.com/JoelEinbinder) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1628](https://redirect.github.com/TryGhost/node-sqlite3/pull/1628) - [@​mahdi-farnia](https://redirect.github.com/mahdi-farnia) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1632](https://redirect.github.com/TryGhost/node-sqlite3/pull/1632) - [@​soukand](https://redirect.github.com/soukand) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1267](https://redirect.github.com/TryGhost/node-sqlite3/pull/1267) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.11...v5.1.0 ### [`v5.0.11`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.0.11) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.0.10...v5.0.11) #### What's Changed - Restored compatibility for Alpine 3.15 by [@​daniellockyer](https://redirect.github.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1626](https://redirect.github.com/TryGhost/node-sqlite3/pull/1626) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.10...v5.0.11 ### [`v5.0.10`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.0.10) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.0.9...v5.0.10) #### What's Changed - Updated bundled SQLite to v3.39.2 by [@​daniellockyer](https://redirect.github.com/daniellockyer) - Addressed CodeQL warnings by [@​bpasero](https://redirect.github.com/bpasero) in [https://github.com/TryGhost/node-sqlite3/pull/1614](https://redirect.github.com/TryGhost/node-sqlite3/pull/1614) #### New Contributors - [@​bpasero](https://redirect.github.com/bpasero) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1614](https://redirect.github.com/TryGhost/node-sqlite3/pull/1614) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.9...v5.0.10 ### [`v5.0.9`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.0.9) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.0.8...v5.0.9) #### What's Changed - Updated bundled SQLite to v3.39.1 by [@​daniellockyer](https://redirect.github.com/daniellockyer) - Fixed method declarations to conform with napi default for methods by [@​alexanderfloh](https://redirect.github.com/alexanderfloh) in [https://github.com/TryGhost/node-sqlite3/pull/1510](https://redirect.github.com/TryGhost/node-sqlite3/pull/1510) - Fixed propagation of async hook ids through callbacks by [@​alexanderfloh](https://redirect.github.com/alexanderfloh) in [https://github.com/TryGhost/node-sqlite3/pull/1511](https://redirect.github.com/TryGhost/node-sqlite3/pull/1511) - Updated sqlcipher homebrew CPPFLAGS location by [@​frovere](https://redirect.github.com/frovere) in [https://github.com/TryGhost/node-sqlite3/pull/1613](https://redirect.github.com/TryGhost/node-sqlite3/pull/1613) #### New Contributors - [@​alexanderfloh](https://redirect.github.com/alexanderfloh) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1510](https://redirect.github.com/TryGhost/node-sqlite3/pull/1510) - [@​frovere](https://redirect.github.com/frovere) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1613](https://redirect.github.com/TryGhost/node-sqlite3/pull/1613) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.8...v5.0.9 ### [`v5.0.8`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.0.8) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.0.7...v5.0.8) #### What's Changed - Reverted https://github.com/TryGhost/node-sqlite3/commit/5063367567fd1abe47bafc2095fb4f9090a260e3, which was causing a segfault with certain queries ([https://github.com/TryGhost/node-sqlite3/issues/1605](https://redirect.github.com/TryGhost/node-sqlite3/issues/1605) and [https://github.com/TryGhost/node-sqlite3/issues/1606](https://redirect.github.com/TryGhost/node-sqlite3/issues/1606)) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.7...v5.0.8 ### [`v5.0.7`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.0.7) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.0.6...v5.0.7) #### What's Changed - Updated bundled SQLite to v3.38.4 by [@​daniellockyer](https://redirect.github.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1604](https://redirect.github.com/TryGhost/node-sqlite3/pull/1604) - Improved performance by fetching column names once by [@​daniellockyer](https://redirect.github.com/daniellockyer) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.6...v5.0.7 ### [`v5.0.6`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.0.6) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.0.5...v5.0.6) #### What's Changed - Updated bundled SQLite to v3.38.3 by [@​daniellockyer](https://redirect.github.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1593](https://redirect.github.com/TryGhost/node-sqlite3/pull/1593). This fixes an upstream bug in SQLite that was reported here: [https://github.com/TryGhost/node-sqlite3/issues/1589](https://redirect.github.com/TryGhost/node-sqlite3/issues/1589) - Added Node 18 to CI by [@​daniellockyer](https://redirect.github.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1587](https://redirect.github.com/TryGhost/node-sqlite3/pull/1587) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.5...v5.0.6 ### [`v5.0.5`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.0.5) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.0.4...v5.0.5) #### What's Changed - Fixed building on certain systems ([https://github.com/TryGhost/node-sqlite3/issues/1584](https://redirect.github.com/TryGhost/node-sqlite3/issues/1584)) by [@​daniellockyer](https://redirect.github.com/daniellockyer) - General repository maintenance by [@​daniellockyer](https://redirect.github.com/daniellockyer) Thank you to everyone reporting issues with building `sqlite3` or the prebuilt binaries 🙂 If you encounter an problem, please search open and closed issues for existing reports or open a new issue with as much system information as possible. **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.4...v5.0.5 ### [`v5.0.4`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.0.4) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.0.3...v5.0.4) #### What's Changed - Added prebuilt Linux musl binaries - [@​daniellockyer](https://redirect.github.com/daniellockyer) - Added prebuilt Linux ARM64 binaries - [@​daniellockyer](https://redirect.github.com/daniellockyer) - Fixed older glibc compatibility - [@​daniellockyer](https://redirect.github.com/daniellockyer) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.3...v5.0.4 ### [`v5.0.3`](https://redirect.github.com/TryGhost/node-sqlite3/releases/tag/v5.0.3) [Compare Source](https://redirect.github.com/TryGhost/node-sqlite3/compare/v5.0.2...v5.0.3) #### What's Changed - Updated bundled SQLite to v3.38.2 - [@​daniellockyer](https://redirect.github.com/daniellockyer) - Enabled math functions in compiler options - [@​kewde](https://redirect.github.com/kewde) - Updated `node-gyp` to v8.x - [@​daniellockyer](https://redirect.github.com/daniellockyer) - Re-enabled Node-API v6 builds - [@​daniellockyer](https://redirect.github.com/daniellockyer) - Fixed segfault of invalid toString() object by [@​kewde](https://redirect.github.com/kewde) in [https://github.com/TryGhost/node-sqlite3/pull/1450](https://redirect.github.com/TryGhost/node-sqlite3/pull/1450) - Fixed building on MacOS Monterey 12.3 - [@​daniellockyer](https://redirect.github.com/daniellockyer) - Replaced Python extraction script with JS by [@​xPaw](https://redirect.github.com/xPaw) in [https://github.com/TryGhost/node-sqlite3/pull/1570](https://redirect.github.com/TryGhost/node-sqlite3/pull/1570) - Switched prebuilt binary hosting to GitHub Releases - [@​daniellockyer](https://redirect.github.com/daniellockyer) #### Known Problems - [https://github.com/TryGhost/node-sqlite3/issues/1578](https://redirect.github.com/TryGhost/node-sqlite3/issues/1578) - the minimum glibc version for prebuilt binaries was bumped to 2.29. We hope to bring this back down within the next few releases but you will need to compile from source if your system ships with a lower version. - Prebuilt binaries for Linux do not work on musl systems. This should be fixed with https://github.com/TryGhost/node-sqlite3/commit/8b2cdd948a382b58162cb491f745ba9167dc7b0f but you will need to compile from source to use v5.0.3. **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.2...v5.0.3
mend-for-github-com[bot] commented 11 months ago

⚠ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: nodeJs/Graphql-Mutations/package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: express-graphql@0.12.0
npm ERR! Found: graphql@16.2.0
npm ERR! node_modules/graphql
npm ERR!   graphql@"^16.2.0" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer graphql@"^14.7.0 || ^15.3.0" from express-graphql@0.12.0
npm ERR! node_modules/express-graphql
npm ERR!   express-graphql@"^0.12.0" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: graphql@15.8.0
npm ERR! node_modules/graphql
npm ERR!   peer graphql@"^14.7.0 || ^15.3.0" from express-graphql@0.12.0
npm ERR!   node_modules/express-graphql
npm ERR!     express-graphql@"^0.12.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-05-16T07_42_16_975Z-debug-0.log
File name: nodeJs/Graphql-Introspection/package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: express-graphql@0.12.0
npm ERR! Found: graphql@16.2.0
npm ERR! node_modules/graphql
npm ERR!   graphql@"^16.2.0" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer graphql@"^14.7.0 || ^15.3.0" from express-graphql@0.12.0
npm ERR! node_modules/express-graphql
npm ERR!   express-graphql@"^0.12.0" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: graphql@15.8.0
npm ERR! node_modules/graphql
npm ERR!   peer graphql@"^14.7.0 || ^15.3.0" from express-graphql@0.12.0
npm ERR!   node_modules/express-graphql
npm ERR!     express-graphql@"^0.12.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-05-16T07_42_18_896Z-debug-0.log
mend-for-github-com[bot] commented 6 months ago

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: nodeJs/Graphql-Mutations/package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: express-graphql@0.12.0
npm ERR! Found: graphql@16.2.0
npm ERR! node_modules/graphql
npm ERR!   graphql@"^16.2.0" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer graphql@"^14.7.0 || ^15.3.0" from express-graphql@0.12.0
npm ERR! node_modules/express-graphql
npm ERR!   express-graphql@"^0.12.0" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: graphql@15.9.0
npm ERR! node_modules/graphql
npm ERR!   peer graphql@"^14.7.0 || ^15.3.0" from express-graphql@0.12.0
npm ERR!   node_modules/express-graphql
npm ERR!     express-graphql@"^0.12.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-10-31T06_25_40_764Z-debug-0.log
File name: nodeJs/Graphql-Introspection/package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: express-graphql@0.12.0
npm ERR! Found: graphql@16.2.0
npm ERR! node_modules/graphql
npm ERR!   graphql@"^16.2.0" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer graphql@"^14.7.0 || ^15.3.0" from express-graphql@0.12.0
npm ERR! node_modules/express-graphql
npm ERR!   express-graphql@"^0.12.0" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: graphql@15.9.0
npm ERR! node_modules/graphql
npm ERR!   peer graphql@"^14.7.0 || ^15.3.0" from express-graphql@0.12.0
npm ERR!   node_modules/express-graphql
npm ERR!     express-graphql@"^0.12.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-10-31T06_25_42_550Z-debug-0.log