search

finos / plexus-interop

Plexus Interop open source project hosted by the Fintech Open Source Foundation
https://plexus.finos.org
Apache License 2.0
252 stars 55 forks source link

Update dependency nyc to v15 - autoclosed #391

Closed mend-for-github-com[bot] closed 2 years ago

mend-for-github-com[bot] commented 2 years ago

This PR contains the following updates:

Package Type Update Change
nyc (source) devDependencies major ^11.2.1 -> ^15.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 7.3 WS-2019-0064
Medium Medium 5.3 CVE-2021-23362
Medium Medium 5.3 CVE-2020-7608
Medium Medium 5.3 CVE-2020-7608
Medium Medium 5.6 WS-2019-0103
High High 7.5 CVE-2021-3807
Medium Medium 5.1 WS-2019-0307
High High 8.1 CVE-2019-20920
High High 7.5 CVE-2019-20922
High High 7.5 CVE-2021-23343
High High 9.8 CVE-2021-23383
High High 7.3 CVE-2020-7774
High High 9.8 CVE-2019-10746
High High 9.8 CVE-2019-10747
High High 9.8 CVE-2019-10747
High High 9.8 CVE-2019-19919
High High 7.5 CVE-2019-20149
High High 9.8 CVE-2021-23369

Release Notes

istanbuljs/nyc ### [`v15.0.0`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1500-httpsgithubcomistanbuljsnyccomparev1411v1500-2019-12-20) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v14.1.1...v15.0.0) ##### ⚠ BREAKING CHANGES - The `flow` and `jsx` parser plugins are no longer enabled by default. - Node.js 8 is now required to run nyc - Remove NYC_ROOT_ID and NYC_INSTRUMENTER environmental variables. - The `root` field has been removed from processinfo files. ##### Features - Add `--use-spawn-wrap=true` option ([#​1169](https://togithub.com/istanbuljs/nyc/issues/1169)) ([df4de4d](https://togithub.com/istanbuljs/nyc/commit/df4de4d490f8cd32204fba66a810ed0444c26d0d)) - Add `.cjs`, `.mjs`, `.ts`, `.tsx`, `.jsx` to default extensions ([#​1110](https://togithub.com/istanbuljs/nyc/issues/1110)) ([914b776](https://togithub.com/istanbuljs/nyc/commit/914b776215ad3ea54f0e46b4ba2904a8a9d4dfdd)), closes [#​1103](https://togithub.com/istanbuljs/nyc/issues/1103) - Allow `nyc instrument` to instrument code in place ([#​1149](https://togithub.com/istanbuljs/nyc/issues/1149)) ([7783284](https://togithub.com/istanbuljs/nyc/commit/77832845b85134d21eca3a23c812c4f21f36713f)) - Drop node.js 6, upgrade dependencies ([#​1134](https://togithub.com/istanbuljs/nyc/issues/1134)) ([00c3b34](https://togithub.com/istanbuljs/nyc/commit/00c3b3440a5b2ffe11b9c19ae4e08ad2f5b70e33)) - Filenames relative to project cwd in coverage reports ([#​1212](https://togithub.com/istanbuljs/nyc/issues/1212)) ([5258e9f](https://togithub.com/istanbuljs/nyc/commit/5258e9fdb1d9e3d4abd4cc9768bc09cd8040a6be)) - Use [@​istanbuljs/schema](https://togithub.com/istanbuljs/schema) for yargs setup ([#​1194](https://togithub.com/istanbuljs/nyc/issues/1194)) ([fd40d49](https://togithub.com/istanbuljs/nyc/commit/fd40d49331665d936b86f30e9a873ba80071b770)) - Use istanbul-lib-processinfo ([#​1145](https://togithub.com/istanbuljs/nyc/issues/1145)) ([7943413](https://togithub.com/istanbuljs/nyc/commit/7943413dc032f8f98a164fdde88d7344e817bb5e)) - Use source base name to prefix cache files ([#​1144](https://togithub.com/istanbuljs/nyc/issues/1144)) ([5c1b7a9](https://togithub.com/istanbuljs/nyc/commit/5c1b7a9c43771f3439af44a1104e5426519e1123)) ##### Bug Fixes - Avoid `source-map` module during `signal-exit` handler ([#​1191](https://togithub.com/istanbuljs/nyc/issues/1191)) ([83eb629](https://togithub.com/istanbuljs/nyc/commit/83eb6294f9492bf98405ee9fdf6281c3bc199a3d)) - Better error handling for main execution, reporting ([#​1229](https://togithub.com/istanbuljs/nyc/issues/1229)) ([dfd629d](https://togithub.com/istanbuljs/nyc/commit/dfd629d95716e6159aa7216c03e28a7fbbb161e7)) - Correct handling of source-maps for pre-instrumented files ([#​1216](https://togithub.com/istanbuljs/nyc/issues/1216)) ([8411a26](https://togithub.com/istanbuljs/nyc/commit/8411a26c9e520c66251cc8044cde2c81f33f1c5f)), closes [#​1208](https://togithub.com/istanbuljs/nyc/issues/1208) - Drop coverage produced by `nyc --all` for files that were tested ([#​1155](https://togithub.com/istanbuljs/nyc/issues/1155)) ([fc1bbbf](https://togithub.com/istanbuljs/nyc/commit/fc1bbbf490f6ab0272359ce10ceb4987d1716256)), closes [#​1113](https://togithub.com/istanbuljs/nyc/issues/1113) [#​1124](https://togithub.com/istanbuljs/nyc/issues/1124) [#​1148](https://togithub.com/istanbuljs/nyc/issues/1148) - Honor eager setting (false by default) ([#​1179](https://togithub.com/istanbuljs/nyc/issues/1179)) ([c18fb0a](https://togithub.com/istanbuljs/nyc/commit/c18fb0a9a8eae5904298d87c62d9934243de8674)) - Remove vestigial environment variables ([#​1078](https://togithub.com/istanbuljs/nyc/issues/1078)) ([cfd3da0](https://togithub.com/istanbuljs/nyc/commit/cfd3da05156b98952f03f7be2dd3d23ba328073f)) ### [`v14.1.1`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1411-httpsgithubcomistanbuljsnyccomparev1410v1411-2019-05-09) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v14.1.0...v14.1.1) ##### Bug Fixes - **check-coverage:** make the --temp-dir option visible ([#​1101](https://togithub.com/istanbuljs/nyc/issues/1101)) ([b5b67de](https://togithub.com/istanbuljs/nyc/commit/b5b67de)) - **cli:** Report error if unwanted positional arguments are received ([#​1100](https://togithub.com/istanbuljs/nyc/issues/1100)) ([57debc1](https://togithub.com/istanbuljs/nyc/commit/57debc1)), closes [#​401](https://togithub.com/istanbuljs/nyc/issues/401) ### [`v14.1.0`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1410-httpsgithubcomistanbuljsnyccomparev1400v1410-2019-04-24) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v14.0.0...v14.1.0) ##### Bug Fixes - Do not crash when nyc is run inside itself. ([#​1068](https://togithub.com/istanbuljs/nyc/issues/1068)) ([c4fcf5e](https://togithub.com/istanbuljs/nyc/commit/c4fcf5e)), closes [#​1067](https://togithub.com/istanbuljs/nyc/issues/1067) - Exit with code 1 when nyc doesn't know what to do. ([#​1070](https://togithub.com/istanbuljs/nyc/issues/1070)) ([21fb2c8](https://togithub.com/istanbuljs/nyc/commit/21fb2c8)) - Purge source-map cache before reporting if cache is disabled. ([#​1080](https://togithub.com/istanbuljs/nyc/issues/1080)) ([3d9eaa4](https://togithub.com/istanbuljs/nyc/commit/3d9eaa4)) - Use correct config property for parser plugins ([#​1082](https://togithub.com/istanbuljs/nyc/issues/1082)) ([a7bc7ae](https://togithub.com/istanbuljs/nyc/commit/a7bc7ae)) ##### Features - add support for yaml configuration file ([#​1054](https://togithub.com/istanbuljs/nyc/issues/1054)) ([ca37ffa](https://togithub.com/istanbuljs/nyc/commit/ca37ffa)) ### [`v14.0.0`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1400-httpsgithubcomistanbuljsnyccomparev1330v1400-2019-04-15) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v13.3.0...v14.0.0) ##### Bug Fixes - Add `cwd` option to instrument command ([#​1024](https://togithub.com/istanbuljs/nyc/issues/1024)) ([051d95a](https://togithub.com/istanbuljs/nyc/commit/051d95a)) - Add config values to hash salt ([#​988](https://togithub.com/istanbuljs/nyc/issues/988)) ([7ac325d](https://togithub.com/istanbuljs/nyc/commit/7ac325d)), closes [#​522](https://togithub.com/istanbuljs/nyc/issues/522) - Exclude negated not working with '--all' switch ([#​977](https://togithub.com/istanbuljs/nyc/issues/977)) ([91de23c](https://togithub.com/istanbuljs/nyc/commit/91de23c)) - Make --all work for transpiled code ([#​1047](https://togithub.com/istanbuljs/nyc/issues/1047)) ([18e04ba](https://togithub.com/istanbuljs/nyc/commit/18e04ba)) - Resolve absolute paths in nyc instrument ([#​1012](https://togithub.com/istanbuljs/nyc/issues/1012)) ([3cb1861](https://togithub.com/istanbuljs/nyc/commit/3cb1861)), closes [#​1014](https://togithub.com/istanbuljs/nyc/issues/1014) - Set processinfo pid/ppid to actual numbers ([#​1057](https://togithub.com/istanbuljs/nyc/issues/1057)) ([32f75b0](https://togithub.com/istanbuljs/nyc/commit/32f75b0)) - Use a single instance of nyc for all actions of main command. ([#​1059](https://togithub.com/istanbuljs/nyc/issues/1059)) ([b909575](https://togithub.com/istanbuljs/nyc/commit/b909575)) ##### Features - Add `delete` option to instrument command ([#​1005](https://togithub.com/istanbuljs/nyc/issues/1005)) ([d6db551](https://togithub.com/istanbuljs/nyc/commit/d6db551)) - Add `include` and `exclude` options to instrument command ([#​1007](https://togithub.com/istanbuljs/nyc/issues/1007)) ([8da097e](https://togithub.com/istanbuljs/nyc/commit/8da097e)) - Add processinfo index, add externalId ([#​1055](https://togithub.com/istanbuljs/nyc/issues/1055)) ([8dcf180](https://togithub.com/istanbuljs/nyc/commit/8dcf180)) - Add support for nyc.config.js ([#​1019](https://togithub.com/istanbuljs/nyc/issues/1019)) ([3b203c7](https://togithub.com/istanbuljs/nyc/commit/3b203c7)) - Add support to exclude files on coverage report generation ([#​982](https://togithub.com/istanbuljs/nyc/issues/982)) ([509c6aa](https://togithub.com/istanbuljs/nyc/commit/509c6aa)) - Add test-exclude args to check-coverage and report subcommands. ([0fc217e](https://togithub.com/istanbuljs/nyc/commit/0fc217e)) - Always build the processinfo temp dir ([#​1061](https://togithub.com/istanbuljs/nyc/issues/1061)) ([c213469](https://togithub.com/istanbuljs/nyc/commit/c213469)) - Enable `es-modules` option for nyc instrument command ([#​1006](https://togithub.com/istanbuljs/nyc/issues/1006)) ([596b120](https://togithub.com/istanbuljs/nyc/commit/596b120)) - Fix excludeAfterRemap functionality. ([36bcc0b](https://togithub.com/istanbuljs/nyc/commit/36bcc0b)) - Implement `nyc instrument --complete-copy` ([#​1056](https://togithub.com/istanbuljs/nyc/issues/1056)) ([2eb13c6](https://togithub.com/istanbuljs/nyc/commit/2eb13c6)) - Remove bundling ([#​1017](https://togithub.com/istanbuljs/nyc/issues/1017)) ([b25492a](https://togithub.com/istanbuljs/nyc/commit/b25492a)) - Support turning off node_modules default exclude via `exclude-node-modules` option ([#​912](https://togithub.com/istanbuljs/nyc/issues/912)) ([b7e16cd](https://togithub.com/istanbuljs/nyc/commit/b7e16cd)) - Add support for `--exclude-node-modules` to subcommands. ([#​1053](https://togithub.com/istanbuljs/nyc/issues/1053)) ([e597c46](https://togithub.com/istanbuljs/nyc/commit/e597c46)) ##### BREAKING CHANGES - The `--exclude-after-remap` option is now functional and enabled by default. This causes the `include`, `exclude` and `extension` lists to be processed after using source maps to determine the original filename of sources. - Add a file named 'index.json' to the .nyc_output/processinfo directory, which has a different format from the other files in this dir. - Change the data type of the pid/ppid fields in processinfo files - `nyc instrument` now honors `include` and `exclude` settings, potentially resulting in some files that were previously instrumented being ignored. - The `plugins` option has been renamed to `parser-plugins`. - The logic involving include/exclude processing has changed. Results should be verified to ensure all desired sources have coverage data. - `nyc instrument` now enables the `--es-module` option by default. This can cause failures to instrument scripts which violate `'use strict'` rules. ### [`v13.3.0`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1330-httpsgithubcomistanbuljsnyccomparev1320v1330-2019-02-14) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v13.2.0...v13.3.0) ##### Bug Fixes - update dependencies due to vulnerabilities ([#​992](https://togithub.com/istanbuljs/nyc/issues/992)) ([e8cc59b](https://togithub.com/istanbuljs/nyc/commit/e8cc59b)), closes [#​991](https://togithub.com/istanbuljs/nyc/issues/991) ##### Features - Support nyc report --check-coverage ([#​984](https://togithub.com/istanbuljs/nyc/issues/984)) ([dd48410](https://togithub.com/istanbuljs/nyc/commit/dd48410)) ### [`v13.2.0`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1320-httpsgithubcomistanbuljsnyccomparev1310v1320-2019-01-27) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v13.1.0...v13.2.0) ##### Bug Fixes - Create directory for merge destination. ([#​979](https://togithub.com/istanbuljs/nyc/issues/979)) ([921d386](https://togithub.com/istanbuljs/nyc/commit/921d386)), closes [#​976](https://togithub.com/istanbuljs/nyc/issues/976) - missing command temp-directory ([#​928](https://togithub.com/istanbuljs/nyc/issues/928)) ([28b6d09](https://togithub.com/istanbuljs/nyc/commit/28b6d09)), closes [#​927](https://togithub.com/istanbuljs/nyc/issues/927) - nyc processing files not covered by include when `all` is enabled. ([#​914](https://togithub.com/istanbuljs/nyc/issues/914)) ([40afc5f](https://togithub.com/istanbuljs/nyc/commit/40afc5f)), closes [#​913](https://togithub.com/istanbuljs/nyc/issues/913) [#​782](https://togithub.com/istanbuljs/nyc/issues/782) ##### Features - avoid hardcoded HOME for spawn-wrap working dir ([#​957](https://togithub.com/istanbuljs/nyc/issues/957)) ([ff834aa](https://togithub.com/istanbuljs/nyc/commit/ff834aa)), closes [#​951](https://togithub.com/istanbuljs/nyc/issues/951) - document the fact that cacheDir is configurable ([#​968](https://togithub.com/istanbuljs/nyc/issues/968)) ([35cd49a](https://togithub.com/istanbuljs/nyc/commit/35cd49a)) - Option Plugins ([#​948](https://togithub.com/istanbuljs/nyc/issues/948)) ([df2730d](https://togithub.com/istanbuljs/nyc/commit/df2730d)) ### [`v13.1.0`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1310-httpsgithubcomistanbuljsnyccomparev1301v1310-2018-09-06) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v13.0.1...v13.1.0) ##### Features - Bump dependencies. ([#​915](https://togithub.com/istanbuljs/nyc/issues/915)) ([0b3d2cf](https://togithub.com/istanbuljs/nyc/commit/0b3d2cf)) - Rename --temp-directory option to --temp-dir ([#​897](https://togithub.com/istanbuljs/nyc/issues/897)) ([ccf42df](https://togithub.com/istanbuljs/nyc/commit/ccf42df)) #### [13.0.1](https://togithub.com/istanbuljs/nyc/compare/v13.0.0...v13.0.1) (2018-07-24) ##### Bug Fixes - add flag to allow control of instrumenter esModules option, default to looser parsing ([#​863](https://togithub.com/istanbuljs/nyc/issues/863)) ([6b6cd5e](https://togithub.com/istanbuljs/nyc/commit/6b6cd5e)) - Enable es-modules by default. ([#​889](https://togithub.com/istanbuljs/nyc/issues/889)) ([d0b76e2](https://togithub.com/istanbuljs/nyc/commit/d0b76e2)), closes [#​796](https://togithub.com/istanbuljs/nyc/issues/796) - Update caching-transform options. ([#​873](https://togithub.com/istanbuljs/nyc/issues/873)) ([52b69ef](https://togithub.com/istanbuljs/nyc/commit/52b69ef)) - use uuid/v4 to generate unique identifiers. ([#​883](https://togithub.com/istanbuljs/nyc/issues/883)) ([7483ed9](https://togithub.com/istanbuljs/nyc/commit/7483ed9)) ### [`v13.0.1`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1301-httpsgithubcomistanbuljsnyccomparev1300v1301-2018-07-24) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v13.0.0...v13.0.1) ##### Bug Fixes - add flag to allow control of instrumenter esModules option, default to looser parsing ([#​863](https://togithub.com/istanbuljs/nyc/issues/863)) ([6b6cd5e](https://togithub.com/istanbuljs/nyc/commit/6b6cd5e)) - Enable es-modules by default. ([#​889](https://togithub.com/istanbuljs/nyc/issues/889)) ([d0b76e2](https://togithub.com/istanbuljs/nyc/commit/d0b76e2)), closes [#​796](https://togithub.com/istanbuljs/nyc/issues/796) - Update caching-transform options. ([#​873](https://togithub.com/istanbuljs/nyc/issues/873)) ([52b69ef](https://togithub.com/istanbuljs/nyc/commit/52b69ef)) - use uuid/v4 to generate unique identifiers. ([#​883](https://togithub.com/istanbuljs/nyc/issues/883)) ([7483ed9](https://togithub.com/istanbuljs/nyc/commit/7483ed9)) ### [`v13.0.0`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1300-httpsgithubcomistanbuljsnyccomparev1202v1300-2018-06-08) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v12.0.2...v13.0.0) ##### Bug Fixes - source was being instrumented twice, due to upstream fix in ista… ([#​853](https://togithub.com/istanbuljs/nyc/issues/853)) ([d0f654c](https://togithub.com/istanbuljs/nyc/commit/d0f654c)) ##### Features - allow rows with 100% statement, branch, and function coverage to be skipped in text report ([#​859](https://togithub.com/istanbuljs/nyc/issues/859)) ([893345a](https://togithub.com/istanbuljs/nyc/commit/893345a)) ##### BREAKING CHANGES - \--hook-run-in-context, and --hook-run-in-this-context are no longer true by default (they should be enabled if you're using a library like requirejs). #### [12.0.2](https://togithub.com/istanbuljs/nyc/compare/v12.0.1...v12.0.2) (2018-06-03) ##### Bug Fixes - don't bundle istanbul-lib-instrument due to Node 6 issues ([b4c325b](https://togithub.com/istanbuljs/nyc/commit/b4c325b)) - stop bundling istanbul-lib-instrument due to npm issue on Node 6 ([#​854](https://togithub.com/istanbuljs/nyc/issues/854)) ([ddc9331](https://togithub.com/istanbuljs/nyc/commit/ddc9331)) #### [12.0.1](https://togithub.com/istanbuljs/nyc/compare/v12.0.0...v12.0.1) (2018-05-31) ### [`v12.0.2`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1202-httpsgithubcomistanbuljsnyccomparev1201v1202-2018-06-03) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v12.0.1...v12.0.2) ##### Bug Fixes - don't bundle istanbul-lib-instrument due to Node 6 issues ([b4c325b](https://togithub.com/istanbuljs/nyc/commit/b4c325b)) - stop bundling istanbul-lib-instrument due to npm issue on Node 6 ([#​854](https://togithub.com/istanbuljs/nyc/issues/854)) ([ddc9331](https://togithub.com/istanbuljs/nyc/commit/ddc9331)) ### [`v12.0.1`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1201-httpsgithubcomistanbuljsnyccomparev1200v1201-2018-05-31) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v12.0.0...v12.0.1) #### [12.0.1](https://togithub.com/istanbuljs/nyc/compare/v12.0.0...v12.0.1) (2018-05-31) ### [`v12.0.0`](https://togithub.com/istanbuljs/nyc/blob/master/CHANGELOG.md#​1200-httpsgithubcomistanbuljsnyccomparev1190v1200-2018-05-31) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v11.9.0...v12.0.0) ##### Chores - upgrade to newest version of istanbul codebase ([#​848](https://togithub.com/istanbuljs/nyc/issues/848)) ([19b7d21](https://togithub.com/istanbuljs/nyc/commit/19b7d21)) ##### BREAKING CHANGES - babel@7 drops Node.js 4 support
linux-foundation-easycla[bot] commented 2 years ago

CLA Not Signed