Closed snyk-bot closed 1 year ago
👍 No new dependency issues detected in pull request
Issue | Status |
---|---|
Install scripts | ✅ 0 issues |
Native code | ✅ 0 issues |
Bin script confusion | ✅ 0 issues |
Bin script shell injection | ✅ 0 issues |
Unresolved require | ✅ 0 issues |
Invalid package.json | ✅ 0 issues |
HTTP dependency | ✅ 0 issues |
Git dependency | ✅ 0 issues |
Potential typo squat | ✅ 0 issues |
Known Malware | ✅ 0 issues |
Telemetry | ✅ 0 issues |
Protestware/Troll package | ✅ 0 issues |
To ignore an alert, reply with a comment starting with @SocketSecurity ignore
followed by a space separated list of package-name@version
specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2
Powered by socket.dev
Totals | |
---|---|
Change from base Build 4207730256: | 0.0% |
Covered Lines: | 1174 |
Relevant Lines: | 1951 |
Kudos, SonarCloud Quality Gate passed!
:tada: This PR is included in version 1.22.5 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:
Snyk has created this PR to upgrade pg from 8.8.0 to 8.9.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: pg
pg@8.9.0
pg@8.8.0
Commit messages
Package name: pg
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:![](https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiIwMmMzYjAzNy03NGI2LTRiMWYtYTgzZi0zYWM5YmVhNTE4NDciLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjAyYzNiMDM3LTc0YjYtNGIxZi1hODNmLTNhYzliZWE1MTg0NyJ9fQ==)
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs