Open snyk-bot opened 2 years ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-ANSIREGEX-1583908
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: node-sass
The new version differs by 211 commits.- 99242d7 7.0.1
- 77049d1 build(deps): bump sass-graph from 2.2.5 to 4.0.0 (#3224)
- c929f25 build(deps): bump node-gyp from 7.1.2 to 8.4.1 (#3209)
- 918dcb3 Lint fix
- 0a21792 Set rejectUnauthorized to true by default (#3149)
- e80d4af chore: Drop EOL Node 15 (#3122)
- d753397 feat: Add Node 17 support (#3195)
- dcf2e75 build(deps-dev): bump eslint from 7.32.0 to 8.0.0
- bfa1a3c build(deps): bump actions/setup-node from 2.4.0 to 2.4.1
- 80d6c00 chore: Windows x86 on GitHub Actions (#3041)
- 566dc27 build(deps-dev): bump fs-extra from 0.30.0 to 10.0.0 (#3102)
- 7bb5157 build(deps): bump npmlog from 4.1.2 to 5.0.0 (#3156)
- 2efb38f build(deps): bump chalk from 1.1.3 to 4.1.2 (#3161)
- fca5257 build(deps): bump actions/setup-node from 2.3.0 to 2.4.0
- 6200b21 docs: Double word "support" (#3159)
- eaf791a build(deps): bump actions/setup-node from 2.1.5 to 2.3.0
- 16b8d4b build(deps): bump coverallsapp/github-action from 1.1.2 to 1.1.3
- c167004 6.0.1
- 911d4db remove mkdirp dep (#3108)
- 30a52f7 build(deps): bump meow from 3.7.0 to 9.0.0
- 7e08463 build(deps-dev): bump mocha from 8.4.0 to 9.0.1
- cfcbb2c chore: Use default Apline version from docker-node (#3121)
- 886319b chore: Drop Node 10 support
- c908f4f fix: Bump OSX minimum to 10.11
See the full diffPackage name: nunjucks
The new version differs by 113 commits.- 53d1223 Release v3.2.1
- 93129bf Replace yargs with commander
- 17691da Chokidar bump
- 40dfdf0 Remove dead link
- cefb1cf Prevent optional dependency Chokidar from loading when not watching
- 1485a44 Add badges in README.md
- 2246457 Add Mozilla Code of Conduct file
- ff5571c Release v3.2.0
- f997a52 Add NodeResolveLoader
- 34b0a26 Fix syntax typos in CONTRIBUTING.md
- 55e0b7a Set dash as joiner element
- c99154e Update faq.md
- 1338712 Emit 'load' events on Loader and Environment instances
- 057e7b3 Add test for line/column info in user-function exception
- bcf38f3 Emit line and column info for functions
- fbddcd5 lexer more accurately tracks token line and column information
- 889ef80 Add nodejs versions 10 and 11 to CI, remove 6 and 9
- b828158 Fix documentation typo
- 1370361 v3.1.7
- 0a65e1f Fixes for replace example
- 2946fb4 Removed postinstall-build in favor of npm prepare script
- 9fd5bdb Add link to Plugin syntax highlighting for VSCode
- 68ba15c Fix bug where exceptions were silently swallowed with synchronous render
- 7c187ac tests: fix issue running tests on node 10.x
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.