search

ibm-watson-data-lab / simple-search-service

A faceted search engine and content API.
39 stars 27 forks source link

[Snyk] Upgrade couchimport from 0.6.2 to 1.6.1 #129

Open ukmadlz opened 1 year ago

ukmadlz commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade couchimport from 0.6.2 to 1.6.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
*Warning:* This is a major version upgrade, and may be a breaking change. - The recommended version is **22 versions** ahead of your current version. - The recommended version was released **a month ago**, on 2022-11-16. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- | Prototype Pollution
[SNYK-JS-MINIMIST-559764](https://snyk.io/vuln/SNYK-JS-MINIMIST-559764) | **601/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.6 | Proof of Concept | Prototype Pollution
[SNYK-JS-MINIMIST-2429795](https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795) | **601/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.6 | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: couchimport
  • 1.6.1 - 2022-11-16
  • 1.6.0 - 2022-11-16
  • 1.5.5 - 2022-04-29
  • 1.5.4 - 2022-03-24
  • 1.5.3 - 2021-08-23
  • 1.5.2 - 2021-01-14
  • 1.5.1 - 2020-10-19
  • 1.5.0 - 2020-05-19
    • add --retry/-r option to retry requests that yielded an HTTP 429 response
  • 1.4.6 - 2020-05-18
  • 1.4.5 - 2020-04-17

    Bug fix for overwrite mode

      </li>
  <li>
    <b>1.4.4</b> - <a href="https://snyk.io/redirect/github/glynnbird/couchimport/releases/tag/1.4.4">2020-04-09</a></br><p>Fix IAM bugs on import</p>
  </li>
  <li>
    <b>1.4.3</b> - <a href="https://snyk.io/redirect/github/glynnbird/couchimport/releases/tag/1.4.3">2020-04-07</a></br><p>Added <code>maxwps</code>/<code>COUCH_MAX_WPS</code> to allow rate limiting of writes during couchimport runs.</p>
  </li>
  <li>
    <b>1.4.2</b> - <a href="https://snyk.io/redirect/github/glynnbird/couchimport/releases/tag/1.4.2">2020-02-24</a></br><ul>
  • typescript defs
  • swap out request library for axios

  • 1.4.1 - 2019-10-31 
    •   <li>
    <b>1.4.0</b> - 2019-10-18
  </li>
  <li>
    <b>1.3.0</b> - 2019-10-08
  </li>
  <li>
    <b>1.2.0</b> - 2019-08-29
  </li>
  <li>
    <b>1.1.2</b> - 2018-10-16
  </li>
  <li>
    <b>1.1.1</b> - 2018-10-16
  </li>
  <li>
    <b>1.1.0</b> - 2018-10-16
  </li>
  <li>
    <b>1.0.0</b> - <a href="https://snyk.io/redirect/github/glynnbird/couchimport/releases/tag/1.0.0">2018-09-13</a></br><ul>
  • code refactor
  • remove un-needed dependencies
  • update dependencies
  • modernise code
  • tidy variable names
  • standard js linting

  • 0.7.0 - 2017-09-20
    • added support for transforms that produce multiple documents
    •   <li>
    <b>0.6.2</b> - <a href="https://snyk.io/redirect/github/glynnbird/couchimport/releases/tag/0.6.2">2017-07-12</a></br><p>0.6.2</p>
  </li>
</ul>
from <a href="https://snyk.io/redirect/github/glynnbird/couchimport/releases">couchimport GitHub release notes</a>

    Commit messages
    Package name: couchimport Compare

    Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

    For more information:

    šŸ§ View latest project report

    šŸ›  Adjust upgrade PR settings

    šŸ”• Ignore this dependency or unsubscribe from future upgrade PRs