search

atomantic / dotfiles

🖥️ Automated Configuration, Preferences and Software Installation for macOS
ISC License
1.33k stars 453 forks source link

[Snyk] Security upgrade inquirer from 6.2.2 to 7.0.5 #80

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: inquirer The new version differs by 64 commits.
  • 65a4d59 Publish
  • e2099ed Update dependencies
  • 8270551 Produce error on prompt in non-tty environment. (#891)
  • 6a883e6 Update lint-staged to the latest version 🚀 (#886)
  • 4b8b47f Publish
  • 833385b Workaround node.js bug with readline (#882)
  • ee55149 Add inquirer-table-prompt plugin (#884)
  • 942908f Publish
  • a70ee52 Revert "Workaround node.js bug that closes main input and output stream. (#879)" (#881)
  • 0bc1b01 Publish
  • 3d0ff8c Workaround node.js bug that closes main input and output stream. (#879)
  • 7ec6ea0 Publish
  • e2e07e3 Fix #862 - Do not throw when returning undefined from filter functions
  • af16d5b Fix #845 - Fix broken asynchronous validation
  • 904e473 fix multi rawList bug (#861) (#867)
  • 45af563 Bugfix: Choices.push() breaks index if a disabled item was already in the Choices (#869)
  • 8248ee5 Update Readme: Add FOSSA check and remove Node 6 support notice.
  • 05f34b6 Bump dependencies
  • f04c5cf Remove broken unit tests
  • 3ab4549 Add new editor prompt
  • 6a2aa06 Add screenshots to mono repo package readmes
  • d76c929 Refactor new expand prompt with the hooks
  • 7cf9d99 Fix input prompt final answer formatting
  • c172c75 Update new confirm prompt to use the hook API
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic