flaviuse / mern-authentication

MERN stack authentication boilerplate: password reset, email verification, server sessions, redux, typescript, hooks and docker for dev and prod.
https://mern-auth-client.herokuapp.com/login
MIT License
439 stars 95 forks source link

[Snyk] Upgrade redux from 4.1.1 to 4.1.2 #120

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade redux from 4.1.1 to 4.1.2.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: redux
  • 4.1.2 - 2021-10-28

    This release fixes a small specific TS types issue where state types that had a nested unknown field inside would cause compilation failures when used as the preloadedState argument.

    What's Changed

    Full Changelog: v4.1.1...v4.1.2

  • 4.1.1 - 2021-08-03

    Just a small fix for Safari users in development mode.

    Changes

    • Move miniKindOf out of if scope to fix ES5 compatibility issue (#4090 by @ embeddedt)
from redux GitHub release notes
Commit messages
Package name: redux
  • 795a11c 4.1.2
  • a03a79b Merge commit '4d0730e9df2b23e88a588ba7f82f45ee7a642817' into 4.x
  • ef5e57e Merge pull request #4078 from phryneas/fix-preloadedState
  • cf2f265 Apply kindOf fix from #4160
  • 9ab0a70 Update test/typescript/store.ts
  • 83af794 small fix to PreloadedState
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs