firespring / givesource

Other
13 stars 2 forks source link

[Snyk] Security upgrade copy-webpack-plugin from 5.1.2 to 6.0.0 #84

Closed snyk-bot closed 1 year ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: copy-webpack-plugin The new version differs by 31 commits.
  • 64e60c2 chore(release): 6.0.0
  • dd9ce50 test: coverage
  • 29254e3 feat: implement the `directory` option for the `cacheTransform` option
  • bebafcf refactor: code
  • e3803ce feat: implement the `noErrorOnMissing` option (#475)
  • 8e5bc1b chore(deps): update (#474)
  • 6b85c86 docs: improve (#473)
  • 3ef3f25 refactor: drop test option in favor transformPath (#472)
  • 045f629 refactor: code (#471)
  • 20c9ae5 docs: import documentation for the `from` option (#468)
  • bfb4f0e docs: improve the description for the `toType` option (#467)
  • c0c9fa7 test: transform && transformPath (#470)
  • 197b0d8 fix: asset size
  • c176d7d feat: concurrency option (#466)
  • e5e410a refactor: code (#465)
  • 0be6470 refactor: remove the `ignore` option in favor globOptions.ignore (#463)
  • 6b07a63 refactor: code
  • 42194f3 refactor: code (#459)
  • 1e2f3a1 test: refactor (#458)
  • a728675 chore: update globby
  • 64b2e1a refactor: remove the global `context` option (#453)
  • f6da280 refactor: rename the `cache` option to `cacheTransform` (#452)
  • aedd2bd refactor: plugin options (#451)
  • 383ff9d refactor: 'from' option (#450)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic