doronnahum / feathers-mongoose-casl

Easily create a Mongoose Service for Feathersjs with casl to handle what resources a given user is allowed to access
MIT License
7 stars 6 forks source link

[Snyk] Fix for 1 vulnerabilities #21

Closed snyk-bot closed 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-HAPIHOEK-548452
Yes No Known Exploit
Commit messages
Package name: joigoose The new version differs by 21 commits.
  • 0a2e0ea chore(release): 6.1.1 [skip ci]
  • e8d656c fix: change order of plugins to try and publish changelog.md
  • 8245a02 style: reformat according to standard vs code prettier rules
  • efb56ab chore: update hoek to latest version
  • fcd8fbd chore(release): 6.1.0 [skip ci]
  • 92af6d5 chore: update package-lock.json
  • 8e3cbdf feat: not really a feature, but hopefully this will update git upon release
  • 1834fe4 ci: remove explicit cache option
  • 069b45e ci: setup ci to automatically release
  • 829031b refactor: use ES6 array destructuring
  • 7fad7b2 refactor: get the values using Object.entries() instead of Object.keys() as index
  • ed2838d refactor: use ES6 for loops and let/const declarations
  • f4dbb43 fix: remove unreachable line
  • d791c3a test: add test to validate other values than ObjectId for type
  • e44e655 test: add test using other meta keys beside _mongoose
  • 7d89358 feat: wrap the API under the _mongoose key, e.g. .meta({ _mongoose: { type: 'ObjectId' } })
  • 4223c7d chore: remove support for node 8 and add support for node 12 and 13
  • 4e5410d chore: version bump 5.0.0
  • 1e3b2bb chore: update dependencies
  • 077caf1 docs: update readme
  • 8fbf8d6 chore: update to joi 16.x.x (#29)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

šŸ§ View latest project report

šŸ›  Adjust project settings

šŸ“š Read more about Snyk's upgrade and patch logic