adonisjs / vow

Test Runner For AdonisJs
MIT License
56 stars 18 forks source link

[Snyk] Upgrade globby from 8.0.2 to 13.1.1 #81

Open snyk-bot opened 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade globby from 8.0.2 to 13.1.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-UNSETVALUE-2400660
446/1000
Why? Recently disclosed, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
446/1000
Why? Recently disclosed, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: globby from globby GitHub release notes
Commit messages
Package name: globby
  • f7dc7d2 13.1.1
  • f9d35ae Fix duplicated result when using globstar (#231)
  • 9f53ca5 Improve ignore test coverage (#229)
  • 1906cff 13.1.0
  • 895d6ec Add `ignoreFiles` option (#228)
  • bd30cfb Minor tweak (#226)
  • 9a2209c Style tweak (#227)
  • 43eccf4 13.0.0
  • b3a9531 Meta tweaks
  • 2e43cc4 Remove `ignore` option for `isGitIgnored` and `isGitIgnoredSync` (#225)
  • 04fbd5b Improve performance with mutiple patterns (#222)
  • f816156 Don't pass `options.ignore` to `isGitIgnored` (#223)
  • 51c8f68 Expose new `generateGlobTasks` and `generateGlobTasksSync` (#221)
  • 93f83f3 Fix `bench` script (#220)
  • 09171d9 Improve task expansion (#219)
  • 65af64f Simplify `expandDirectories` option handling (#218)
  • 128772a Simplify task expansion (#215)
  • e5d6d00 Minor refactoring (#217)
  • c20c630 Improve test coverage (#216)
  • 6cb81ca Apply arguments check logic to `isDynamicPattern` (#214)
  • ffd6b22 Simplify result filter and unique (#213)
  • de3b6fe Remove `array-union` (#211)
  • ac50a7a Fix `generateGlobTasks` call without options (#212)
  • 1852fc5 Fix bug with `objectMode` option (#210)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs