search

e-square-io / nx-github-actions

A set of Github Actions for NX workspaces
MIT License
30 stars 6 forks source link

[Snyk] Upgrade @nrwl/devkit from 13.8.8 to 13.10.6 #66

Closed snyk-bot closed 1 year ago

snyk-bot commented 1 year ago

Snyk has created this PR to upgrade @nrwl/devkit from 13.8.8 to 13.10.6.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-MINIMIST-2429795		 292/1000
Why? Proof of Concept exploit, CVSS 3.7		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @nrwl/devkit
  • 13.10.6 - 2022-06-27
  • 13.10.5 - 2022-05-19
  • 13.10.4 - 2022-05-04
  • 13.10.3 - 2022-04-19
  • 13.10.2 - 2022-04-13
  • 13.10.1 - 2022-04-08
  • 13.10.0 - 2022-04-07
  • 13.10.0-rc.2 - 2022-04-05
  • 13.10.0-rc.1 - 2022-04-05
  • 13.10.0-rc.0 - 2022-04-04
  • 13.10.0-beta.9 - 2022-03-31
  • 13.10.0-beta.8 - 2022-03-29
  • 13.10.0-beta.7 - 2022-03-28
  • 13.10.0-beta.6 - 2022-03-24
  • 13.10.0-beta.5 - 2022-03-24
  • 13.10.0-beta.4 - 2022-03-24
  • 13.10.0-beta.3 - 2022-03-24
  • 13.10.0-beta.2 - 2022-03-24
  • 13.10.0-beta.1 - 2022-03-18
  • 13.9.7 - 2022-04-05
  • 13.9.6 - 2022-04-01
  • 13.9.5 - 2022-03-25
  • 13.9.4 - 2022-03-22
  • 13.9.3 - 2022-03-18
  • 13.9.2 - 2022-03-16
  • 13.9.1 - 2022-03-16
  • 13.9.0 - 2022-03-15
  • 13.9.0-beta.3 - 2022-03-15
  • 13.9.0-beta.2 - 2022-03-15
  • 13.9.0-beta.1 - 2022-03-14
  • 13.9.0-beta.0 - 2022-03-14
  • 13.8.8 - 2022-03-11
from @nrwl/devkit GitHub release notes
Commit messages
Package name: @nrwl/devkit
  • 46eb09a Release 13.10.6
  • 804cc26 fix(angular): export component generator (#10883)
  • c2fa618 Release 13.10.5
  • 1987251 fix(core): fix having multiple versions of nx/devkit (#9998)
  • c15a25e Release 13.10.4
  • 0f762cd chore(repo): tag releases as previous
  • 46ff3ad fix(core): fix migrating workspaces without any task runners configured (#10065)
  • 46ad6ad Release 13.10.3
  • 075ec01 bugfix(react-native): change the metro-resolver to run tsconfig path resolver first (#9876)
  • f3ae594 bugfix(detox): fix typo option for test to be reuse (#9874)
  • ae4fea6 fix(react): path normalize was in correct on windows #9861 (#9882)
  • 75c6722 fix(angular): path normalize was in correct on windows #9861 (#9881)
  • 0078e3f fix(core): make CNW preset property open for custom presets
  • 92737a6 fix(js): enable hidden files as assets (#9880)
  • 2ac7746 fix(storybook): remove hard-coded ci:true option (#9827)
  • d37379f fix(core): build-project-graph shouldn't fail when large number of workers are available (#9804)
  • 2b045e0 fix(core): allow parsing dot notation cli args (#9812)
  • 5811e85 Release 13.10.2
  • 8886f0f fix(react): migrate react-test-renderer correctly (#9811)
  • 7365438 feat(react): update @ types/react and other packages (#9767)
  • e49671f fix(testing): provide descriptive message when the project does not have targets defined. (#9795)
  • a5b9bba fix(core): fix migration for tasks runners (#9778)
  • 6da0c2b fix(core): init generators should not crash when trying to remove dependencies when package.json does not have dependencies (#9765)
  • ee4174c fix(angular): remove implicit deps creation from mfe (#9799)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

nx-cloud[bot] commented 1 year ago

☁️ Nx Cloud Report

CI is running/has finished running commands for commit 1d6015ac576dfc6074fc34dc956d1854d4b44ff4. As they complete they will appear below. Click to see the status, the terminal output, and the build insights.

📂 See all runs for this branch

🟥 Failed Commands
nx run-many --projects=nx-distributed-task,nx-affected-matrix --skip-nx-cache=false --target=build --parallel=3 --scan --with-deps
nx run-many --projects=utils,nx-distributed-task,nx-affected-matrix --skip-nx-cache=false --target=test --parallel=3 --scan --with-deps=false

Sent with 💌 from NxCloud.

rathpc commented 1 year ago

This was fixed by the recent PR merge