dylanb / gulp-coverage

Gulp coverage reporting for Node.js that is independent of the test runner
MIT License
60 stars 12 forks source link

[Snyk] Security upgrade gulp-util from 2.2.20 to 3.0.1 #56

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764
Yes Proof of Concept
Commit messages
Package name: gulp-util The new version differs by 23 commits.
  • f6336c8 3.0.1
  • 1a65071 update deps
  • c5e8da4 3.0.0
  • f7ee76e Merge pull request #58 from mtscout6/properties-message
  • 8ebecbc DRYed up some minor points
  • a2b47fb Added _stack to list of properties not output with details
  • 0e289e4 Removed unnecessary if check
  • bdfe1a6 Fixed tests that ensure the toString call is fast to showStack: true
  • 46f6a81 Fixed issue with "Details:undefined" getting printed if there are no properties to display, added test asserts that the stack is showing up when it should
  • ca5b076 Removed lodash.uniq dep and just using lodash instead
  • 348314e Minor cleanup
  • d18f613 Added additional tests to satisfy code coverage
  • 186e206 Changed tests to truly go off the toString method and fixed resulting failures
  • f88e30a Fixed issue with PluginError.stack property causing stack overflow errors
  • f4a895d Fixed error properties to be output when added after the error is created
  • f371ba7 Merge pull request #59 from saturation/patch-1
  • 33134eb Update README.md
  • 0f92393 Changed error name to be red in console output
  • 20712a9 Included documentation for showProperties flag on PluginError
  • 430b46d Added error properties output by default
  • 94761da Simplified error property copy logic
  • 45c55f4 Merge pull request #53 from mtscout6/plugin-error-properties
  • 2703722 Expose option to override properties included on Plugin Error, copy all properties from original error by default
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic