egnyte / egnyte-js-sdk

Javascript SDK to work with Egnyte Public APIs
15 stars 16 forks source link

[Snyk] Upgrade grunt-contrib-uglify from 0.9.2 to 0.11.1 #30

Open snyk-bot opened 1 year ago

snyk-bot commented 1 year ago

Snyk has created this PR to upgrade grunt-contrib-uglify from 0.9.2 to 0.11.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Denial of Service (DoS)
SNYK-JS-TRIMNEWLINES-1298042
589/1000
Why? Has a fix available, CVSS 7.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: grunt-contrib-uglify from grunt-contrib-uglify GitHub release notes
Commit messages
Package name: grunt-contrib-uglify
  • d7704c4 v0.11.1
  • c129bf6 Merge pull request #377 from avdg/fix-screw-ie8-option-crash
  • d74556f Merge pull request #387 from joeldenning/patch-1
  • 758b7d5 Merge branch 'master' of github.com:gruntjs/grunt-contrib-uglify
  • 92c84c8 Point main to task
  • 0b00c0b Remove peerDeps. Ref gruntjs/grunt#1116
  • 52cc6ae Merge pull request #388 from swarajgiri/bump-dependencies
  • 2ff0283 Update lodash, maxmin and dev dependencies
  • 6352022 Improve documentation for conditional compilation
  • a6dd1cb Merge pull request #386 from ramswaroop/master
  • f3c4592 Update README.md
  • ea77dde Merge pull request #375 from jrhite/master
  • 63279df Update copyright to 2016
  • 71bf6f5 Merge branch 'master' of https://github.com/vibornoff/grunt-contrib-uglify into fix-screw-ie8-option-crash
  • be7de43 CI: Remove node.js '0.12' and add '5'.
  • 8578547 add handling of mangle_properties regex option in uglifyjs
  • 1deb3be v0.11.0
  • 13e95a2 Bump uglify-js to v2.6.0.
  • 17ee505 Revert "Do not use "^" versions, ever, use ~"
  • 2562bb2 v0.10.1
  • 326f932 Merge pull request #369 from Rialgar/patch-1
  • 7276245 Do not use "^" versions, ever, use ~
  • b8bd228 v0.10.0
  • e47d9e1 Merge pull request #361 from UltCombo/patch-1
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs