Snyk has created this PR to upgrade connected-react-router from 6.8.0 to 6.9.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 2 versions ahead of your current version.
The recommended version was released 21 days ago, on 2021-02-22.
Snyk has created this PR to upgrade connected-react-router from 6.8.0 to 6.9.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-IMMER-1019369
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-REACTDEVUTILS-1083268
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-NODENOTIFIER-1035794
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-COLORSTRING-1082939
Why? Proof of Concept exploit, CVSS 7.5
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: connected-react-router
-
6.9.1 - 2021-02-22
- Bundle lodash.isequalwith to fix missing module (@ ltnscp9028 in #481)
-
6.9.0 - 2021-02-22
- Add "omitRouter" option (@ blackarctic in #421)
- Add noTimeTravelDebugging prop (@ blackarctic in #455)
- Update react peer dependency to include React v17 (@ marekventur in #460)
- Deep compares location state objects (@ BlazPocrnja in #399)
- Add lodash.isequalwith to devDependencies (@ supasate in #408)
- Add query type definition for RouterState.location (@ TomIsion in #410)
- Export getRouter() (@ devrelm in #428)
- Fix connectRouter reducer type (@ yehuozhili in #431)
- Update createMatchSelector parameter typing (@ zaverden in #432)
- Move immutables to optional dependencies (@ supasate in #454)
- Add CodeQL Analysis for helping automatically detect common vulnerabilities and coding errors (@ supasate)
- Several security fixes (@ dependabot)
-
6.8.0 - 2020-03-15
- Make initial location POP optional (@ dr3 in #398)
- lastMatch should depend on isExact (@ syadykin in #402)
- Do not override query if one already exists (@ dr3 in #396)
- Bump acorn to fix a vulnerability (@ dependabot in #402, #403)
from connected-react-router GitHub release notesFix
Enhancement
Fix
Security
Enhancement
Fix
Security
Commit messages
Package name: connected-react-router
- c09873d Bump version to 6.9.1
- 66dce67 Bundle lodash.isequalwith
- d685516 Bump version to 6.9.0
- 7303a04 Create codeql-analysis.yml
- 008b575 Update react peer dependency to include v17 (#460)
- 3998a43 Bump ini from 1.3.5 to 1.3.7 in /examples/immutable (#471)
- cad4971 Bump ini from 1.3.5 to 1.3.7 in /examples/basic (#470)
- 001347b Bump ini from 1.3.5 to 1.3.7 in /examples/typescript (#469)
- 0553b40 Bump ini from 1.3.5 to 1.3.7 (#468)
- 97e0d50 Add noTimeTravelDebugging prop (#455)
- a105380 Move immutables to optional dependencies (#454)
- 68344d1 Bump lodash from 4.17.15 to 4.17.20 in /examples/basic (#451)
- 50b605f Bump lodash from 4.17.15 to 4.17.20 in /examples/immutable (#452)
- a034845 Bump lodash from 4.17.15 to 4.17.20 in /examples/typescript (#453)
- 53c7bf3 Bump elliptic from 6.5.1 to 6.5.3 in /examples/typescript (#441)
- cb905f4 Bump websocket-extensions from 0.1.3 to 0.1.4 in /examples/typescript (#426)
- 2f1c0ad Bump lodash from 4.17.15 to 4.17.19 (#433)
- ed71631 Bump lodash from 4.17.15 to 4.17.19 in /examples/react-native (#437)
- fc9c171 Bump elliptic from 6.5.2 to 6.5.3 (#439)
- c5c0036 Bump elliptic from 6.5.1 to 6.5.3 in /examples/basic (#440)
- 28b9b45 Bump elliptic from 6.5.1 to 6.5.3 in /examples/immutable (#442)
- 574fda3 Bump http-proxy from 1.18.0 to 1.18.1 in /examples/typescript (#448)
- f35cb37 Bump yargs-parser from 13.1.1 to 13.1.2 in /examples/immutable (#449)
- 79b92b1 Bump yargs-parser from 13.1.1 to 13.1.2 in /examples/basic (#450)
CompareNote: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs