SwitchbladeBot / switchblade

The open source Discord bot that solves all of your problems.
https://switchblade.xyz/
BSD 4-Clause "Original" or "Old" License
426 stars 220 forks source link

[Snyk] Security upgrade google-play-scraper from 8.0.4 to 10.0.0 #1408

Closed jaxxibae closed 1 year ago

jaxxibae commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **490/1000**
**Why?** Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-RAMDA-1582370](https://snyk.io/vuln/SNYK-JS-RAMDA-1582370) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: google-play-scraper The new version differs by 57 commits.
  • 8920284 10.0.0
  • 96e5462 Bump dependencies (#653)
  • b0ffa3e Esm migration (#651)
  • 86af2cd 9.2.0
  • 639d0ee update package lock
  • 0761984 Add preregister, earlyAccessEnabled, androidMaxVersion, originalPrice and discountEndDate properties (#648)
  • 1405a43 Updated search assertions on some search tests / throttle tests (mocks and assertions) (#649)
  • 90cb467 Add isAvailableInPlayPass field to app (#638)
  • b9df4e0 Fixed code and unit tests (#645)
  • 4e49a6a Add genres / categories list to App details result (#622)
  • 705b9ee revert to got 11 to prevent ESM errors
  • f84057a fix: app description mapping always localized; (#624)
  • 447fce2 Add previewVideo (#630)
  • 6aecf08 Change app in reviews example (#593)
  • ae93948 Bump cacheable-request and got (#618)
  • 4dc42b2 Bump http-cache-semantics from 4.1.0 to 4.1.1 (#617)
  • c1e2050 Fix README links (#605)
  • ff20462 Workflow: Update GitHub actions and add node 18.x (#615)
  • c4225bf Bump debug from 2.6.9 to 3.1.0 (#614)
  • b7669f7 Bump json5 from 1.0.1 to 1.0.2 (#612)
  • be3e464 - Specifies the return type depending on the options flag. (#610)
  • e7d9dec 9.1.1
  • 3f09459 Fix throttling for list with fullDetail=true (#588)
  • d76766f Fix mapping issue #582 (#583)
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/bolsomito/project/f5bb72cd-e9ce-42c7-aa51-23a556b9db71?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/bolsomito/project/f5bb72cd-e9ce-42c7-aa51-23a556b9db71?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"bc0b03c6-f6d6-4991-b8ff-aad6899a4016","prPublicId":"bc0b03c6-f6d6-4991-b8ff-aad6899a4016","dependencies":[{"name":"google-play-scraper","from":"8.0.4","to":"10.0.0"}],"packageManager":"npm","projectPublicId":"f5bb72cd-e9ce-42c7-aa51-23a556b9db71","projectUrl":"https://app.snyk.io/org/bolsomito/project/f5bb72cd-e9ce-42c7-aa51-23a556b9db71?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-RAMDA-1582370"],"upgrade":["SNYK-JS-RAMDA-1582370"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[490],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Regular Expression Denial of Service (ReDoS)](https://learn.snyk.io/lesson/redos/?loc=fix-pr)