adobe / aem-core-cif-components

A set of configurations and components to get you started with AEM Commerce development
Apache License 2.0
103 stars 80 forks source link

Update dependency validator to 13.7.0 [SECURITY] - autoclosed #812

Closed renovate[bot] closed 2 years ago

renovate[bot] commented 2 years ago

WhiteSource Renovate

This PR contains the following updates:

Package Change
validator 13.5.2 -> 13.7.0

GitHub Vulnerability Alerts

CVE-2021-3765

validator.js prior to 13.7.0 is vulnerable to Inefficient Regular Expression Complexity

GHSA-xx4c-jj58-r7x6

Impact

Versions of validator prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the rtrim and trim sanitizers.

Patches

The problem has been patched in validator 13.7.0


Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by WhiteSource Renovate. View repository job log here.

codecov[bot] commented 2 years ago

Codecov Report

Merging #812 (590877a) into master (1f9bf97) will increase coverage by 0.02%. The diff coverage is n/a.

@@             Coverage Diff              @@
##             master     #812      +/-   ##
============================================
+ Coverage     69.51%   69.53%   +0.02%     
  Complexity     1160     1160              
============================================
  Files           320      320              
  Lines          8475     8475              
  Branches       1269     1269              
============================================
+ Hits           5891     5893       +2     
+ Misses         2172     2168       -4     
- Partials        412      414       +2     
Flag Coverage Δ
integration 55.09% <ø> (+0.04%) :arrow_up:
jest 86.40% <ø> (ø)
karma 95.44% <ø> (ø)
unittests 90.86% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
...onents/internal/models/v1/product/ProductImpl.java 73.14% <0.00%> (+0.57%) :arrow_up:
...nternal/models/v1/productlist/ProductListImpl.java 77.52% <0.00%> (+1.12%) :arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 1f9bf97...590877a. Read the comment docs.