Open snyk-bot opened 3 years ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
SNYK-JS-ANSIREGEX-1583908
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: concurrently
The new version differs by 16 commits.- 343d1ab 6.0.0
- 986bc3d Add cwd option to programmatic API (#246)
- 6fcbf19 Support for hex colors in prefixColor (#261)
- 2e1ad01 Upgrade all packages to drop support for Node 8
- e17f693 Bump minimum Node.js version to 10
- b62a2a1 npm: update some packages through major versions
- 7700363 npm: update some packages
- 81aa338 npm: upgrade yargs, jest and eslint, drop Node 6 support (#244)
- 7f1bd27 build(deps): bump yargs-parser from 13.1.1 to 13.1.2 (#243)
- 943219c 5.3.0
- 7c8d7c1 npm: bump lodash from 4.17.15 to 4.17.19 (#235)
- d832b58 ci: run on Node.js windows 14
- 903049a ci: run on Node.js 14
- 42526e7 api: include command info and index in completion listener Promise value (#228)
- fc2817a Add support for pnpm (#225)
- e837544 logger: do not trim prefix (#231)
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic