search

cds-snc / simplify-privacy-statements-V2

starter-app repo based version of privacy app.
https://simplify-privacy-statements.alpha.canada.ca
MIT License
5 stars 1 forks source link

[Snyk] Security upgrade tailwindcss from 1.2.0 to 2.2.0 #168

Closed snyk-bot closed 1 year ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: tailwindcss The new version differs by 250 commits.
  • 0bc3eeb 2.2.0
  • 729b09a Update CHANGELOG
  • 674d79d move cssnano to devDependencies
  • f63b453 Add `tailwindcss/nesting` plugin (#4673)
  • 243e881 Resolve purge paths relative to the current working directory (#4655)
  • 38a71d8 Use `tmp` file as a touch file (#4650)
  • af4a77a Remove unused import
  • 81816df Support arbitrary values for object-position
  • 0d47ffd Fix cloning issues (#4646)
  • 03eab31 Update prettier to version 2.3.1
  • 7f564d2 Update eslint to version 7.28.0
  • 546cff8 Allow quotes in arbitrary value blocks (#4625)
  • cb2598c Add support for transform, filter, backdrop-filter, box-shadow and ring to pseudo-elements (#4624)
  • d6da12f Update CHANGELOG
  • ff64417 Add `blur-none` with intent to deprecate `blur-0` (#4614)
  • 34d0551 Remove need for `filter` and `backdrop-filter` toggles (#4611)
  • f4799a3 add tests for the `--postcss` option in the new CLI (#4607)
  • b86aa5c Remove need for `transform` toggle (#4604)
  • 6f1d5f0 prefer local plugins (#4598)
  • 976acb4 Update changelog
  • 8518fee implement purge safelist (#4580)
  • 3569d49 fix cli purge option when using commas (#4578)
  • 40645d7 Rename `--files` option in CLI to `--purge`
  • 63a67cb improve integration tests (#4572)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

patheard commented 1 year ago

Closing in favour of Renovate.