search

YuriGor / deepdash.io

Site for deepdash
https://deepdash.io/
0 stars 0 forks source link

[Snyk] Security upgrade next from 9.5.2 to 10.0.6 #43

Open YuriGor opened 3 years ago

YuriGor commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1085630		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: next The new version differs by 250 commits.
  • 5201cdb v10.0.6
  • f8f2a17 v10.0.6-canary.12
  • 232209b Remove note about Yarn 2 support. (#21665)
  • 5be31f5 Update CI publish step to trigger after build (#21661)
  • 5582892 v10.0.6-canary.11
  • 843252b Add note about Yarn 2 support. (#21657)
  • 8f21c28 Experimental feature changes (#21646)
  • 08846cf v10.0.6-canary.10
  • 652a1e8 Improvements to webpack tracing, including hot-reload (#21652)
  • 5a73859 Update docs and Create Next App to use API Middlewares by default. (#21639)
  • 8f0c155 Grammatical fixes (#21644)
  • e75f611 v10.0.6-canary.9
  • 87ed37d Ensure prerender-manifest contains all i18n revalidate values (#21404)
  • b785fbc chore: upgrade webpack5 (#21563)
  • 35efe8d Remove branches filter from actions cancel workflow (#21564)
  • cca2000 Update CI docs change diff check (#21558)
  • e1fe28c Fix and add test filterModuleRules for next-plugin-storybook (#17306)
  • 0370c03 Update links that go to vercel.com/now (#21556)
  • dc2de37 Font optimization - Pass nonce to inlined font definition (#21346)
  • 004ad62 Allow `undefined` body sent to `sendData()` (#20981)
  • 07d4af9 suppressing eslint warning (#21163)
  • 7aa397f Add Kontent example to preview section (#21542)
  • a47d47e Change type of GetServerSidePropsContext.req.cookies the be the same as NextApiRequest.cookies (#21336)
  • f6cc0de Remove mkdirp (#21365)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

vercel[bot] commented 3 years ago

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/yurigor/deepdash.io/CYvP4EFrNYCo7u88bgUVd2XgpKG7
✅ Preview: https://deepdashio-git-snyk-fix-99b4bbfa8a7cbde62c4f200f0263-aaef40.vercel.app