Twipped / joi-to-swagger

A library to convert Joi schema objects into Swagger schema definitions
Other
164 stars 63 forks source link

[Snyk] Upgrade joi from 17.7.0 to 17.7.1 #103

Open Mairu opened 1 year ago

Mairu commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade joi from 17.7.0 to 17.7.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **1 version** ahead of your current version. - The recommended version was released **22 days ago**, on 2023-02-10. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-SIDEWAYFORMULA-3317169](https://snyk.io/vuln/SNYK-JS-SIDEWAYFORMULA-3317169) | **275/1000**
**Why?** CVSS 5.5 | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: joi
  • 17.7.1 - 2023-02-10

    17.7.1

      </li>
      <li>
        <b>17.7.0</b> - <a href="https://snyk.io/redirect/github/hapijs/joi/releases/tag/v17.7.0">2022-11-01</a></br><p>17.7.0</p>
      </li>
    </ul>
    from <a href="https://snyk.io/redirect/github/hapijs/joi/releases">joi GitHub release notes</a>

Commit messages
Package name: joi
  • 8fc7273 17.7.1
  • 660f9a7 Merge pull request #2905 from bnussman/bump-sideway-formula-version
  • 162e1dd upgrade `@ sideway/formula` to `3.0.1` for `CVE-2023-25166`
  • ec9a319 Merge pull request #2888 from sashashura/patch-1
  • c09a2e4 Merge pull request #2892 from krymen/support-null-in-falsy-truthy-types
  • 5688913 Allow null values in BooleanSchema methods
  • 492499f build: harden ci-module.yml permissions
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs